(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe", 0xaf}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:30:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa1f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe960, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeadd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2148.932871] loop2: detected capacity change from 0 to 40 00:30:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeade, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa5ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:30:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe961, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c", 0xcc}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:30:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize}]}}) 00:30:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1901, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa2f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 43) [ 2162.182111] loop2: detected capacity change from 0 to 40 [ 2162.235118] kernel write not supported for file /10811/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:30:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa3f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa6ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:30:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe962, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeadf, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize}]}}) 00:30:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c", 0xcc}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:30:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 44) [ 2162.428518] loop2: detected capacity change from 0 to 40 00:30:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa4f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2162.506221] kernel write not supported for file /10840/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:30:58 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 45) 00:30:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa7ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:30:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe963, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c", 0xcc}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:30:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize}]}}) 00:30:58 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:30:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa5f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2174.705049] kernel write not supported for file /10870/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2174.711495] FAULT_INJECTION: forcing a failure. [ 2174.711495] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.712498] CPU: 1 PID: 10883 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2174.713046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.713599] Call Trace: [ 2174.713786] [ 2174.713948] dump_stack_lvl+0xc1/0xf0 [ 2174.714228] should_fail_ex+0x4b4/0x5b0 [ 2174.714534] ? __kmem_cache_create+0x25b/0x610 [ 2174.714866] should_failslab+0x9/0x20 [ 2174.715141] kmem_cache_alloc_node+0x5d/0x3a0 [ 2174.715468] __kmem_cache_create+0x25b/0x610 [ 2174.715786] kmem_cache_create_usercopy+0x218/0x340 [ 2174.716141] p9_client_create+0xd0b/0x1260 00:30:58 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2174.716437] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.716939] ? __pfx_p9_client_create+0x10/0x10 [ 2174.717266] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2174.717616] ? lockdep_init_map_type+0x21e/0x7e0 [ 2174.717945] ? __kasan_kmalloc+0x7f/0x90 [ 2174.718239] ? __raw_spin_lock_init+0x3a/0x110 [ 2174.718579] v9fs_session_init+0x1e0/0x17b0 [ 2174.718890] ? lock_release+0x1e3/0x680 [ 2174.719166] ? __pfx_lock_release+0x10/0x10 [ 2174.719468] ? __pfx_v9fs_session_init+0x10/0x10 [ 2174.719804] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.720169] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2174.720519] ? v9fs_mount+0x9e/0xbd0 [ 2174.720802] v9fs_mount+0xbd/0xbd0 [ 2174.721061] ? legacy_init_fs_context+0x44/0xe0 [ 2174.721399] ? __pfx_v9fs_mount+0x10/0x10 [ 2174.721690] ? cap_capable+0x1be/0x220 [ 2174.721972] ? __pfx_v9fs_mount+0x10/0x10 [ 2174.722270] legacy_get_tree+0x109/0x220 [ 2174.722580] vfs_get_tree+0x92/0x360 [ 2174.722849] path_mount+0x133c/0x1e50 [ 2174.723133] ? kasan_quarantine_put+0x81/0x1d0 [ 2174.723464] ? __pfx_path_mount+0x10/0x10 [ 2174.723755] ? putname+0x102/0x140 [ 2174.724012] ? kmem_cache_free+0xff/0x4a0 [ 2174.724311] ? putname+0x102/0x140 [ 2174.724570] __x64_sys_mount+0x286/0x310 [ 2174.724859] ? __pfx___x64_sys_mount+0x10/0x10 [ 2174.725184] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.725542] do_syscall_64+0x3f/0x90 [ 2174.725813] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2174.726172] RIP: 0033:0x7f8273cb8b19 [ 2174.726444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.727636] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2174.728149] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2174.728625] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2174.729100] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2174.729584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.730066] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2174.730584] [ 2174.732038] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 2174.732545] CPU: 1 PID: 10883 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2174.733101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2174.733663] Call Trace: [ 2174.733847] [ 2174.734007] dump_stack_lvl+0xc1/0xf0 [ 2174.734286] kmem_cache_create_usercopy+0x12b/0x340 [ 2174.734656] p9_client_create+0xd0b/0x1260 [ 2174.734957] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.735326] ? __pfx_p9_client_create+0x10/0x10 [ 2174.735663] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2174.736021] ? lockdep_init_map_type+0x21e/0x7e0 [ 2174.736361] ? __kasan_kmalloc+0x7f/0x90 [ 2174.736657] ? __raw_spin_lock_init+0x3a/0x110 [ 2174.736993] v9fs_session_init+0x1e0/0x17b0 [ 2174.737307] ? lock_release+0x1e3/0x680 [ 2174.737581] ? __pfx_lock_release+0x10/0x10 [ 2174.737894] ? __pfx_v9fs_session_init+0x10/0x10 [ 2174.738231] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.738625] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2174.738975] ? v9fs_mount+0x9e/0xbd0 [ 2174.739257] v9fs_mount+0xbd/0xbd0 [ 2174.739519] ? legacy_init_fs_context+0x44/0xe0 [ 2174.739835] ? __pfx_v9fs_mount+0x10/0x10 [ 2174.740143] ? cap_capable+0x1be/0x220 [ 2174.740436] ? __pfx_v9fs_mount+0x10/0x10 [ 2174.740755] legacy_get_tree+0x109/0x220 [ 2174.741049] vfs_get_tree+0x92/0x360 [ 2174.741329] path_mount+0x133c/0x1e50 [ 2174.741627] ? kasan_quarantine_put+0x81/0x1d0 [ 2174.741956] ? __pfx_path_mount+0x10/0x10 [ 2174.742260] ? putname+0x102/0x140 [ 2174.742525] ? kmem_cache_free+0xff/0x4a0 [ 2174.742833] ? putname+0x102/0x140 [ 2174.743102] __x64_sys_mount+0x286/0x310 [ 2174.743405] ? __pfx___x64_sys_mount+0x10/0x10 [ 2174.743722] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2174.744112] do_syscall_64+0x3f/0x90 [ 2174.744386] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2174.744771] RIP: 0033:0x7f8273cb8b19 [ 2174.745028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2174.746296] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2174.746839] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2174.747342] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2174.747845] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2174.748356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2174.748867] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2174.749391] [ 2174.752149] loop2: detected capacity change from 0 to 40 00:31:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa6f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 46) 00:31:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa9191", 0xdb}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r2 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe964, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa8ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4701, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2185.994801] loop2: detected capacity change from 0 to 40 00:31:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa7f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe965, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1f", 0xcd}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa9ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2186.111426] kernel write not supported for file /10898/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2186.119660] loop2: detected capacity change from 0 to 40 [ 2186.123833] 9pnet_fd: Insufficient options for proto=fd 00:31:10 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1f", 0xcd}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r2 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) [ 2186.242313] loop2: detected capacity change from 0 to 40 00:31:10 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe966, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 47) 00:31:10 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa8f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaaed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:10 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:10 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2186.367956] kernel write not supported for file /10946/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:31:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 48) 00:31:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1f", 0xcd}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa9f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe967, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xabed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5400, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2200.004291] loop2: detected capacity change from 0 to 40 [ 2200.047861] kernel write not supported for file /10968/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2211.597166] loop2: detected capacity change from 0 to 40 00:31:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 1) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 49) 00:31:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaaf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe968, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaced, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca", 0xd4}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2211.606261] FAULT_INJECTION: forcing a failure. [ 2211.606261] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.607004] CPU: 0 PID: 11002 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2211.607502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.607999] Call Trace: [ 2211.608169] [ 2211.608322] dump_stack_lvl+0xc1/0xf0 [ 2211.608580] should_fail_ex+0x4b4/0x5b0 [ 2211.608858] ? __kernfs_new_node+0xd4/0x870 [ 2211.609137] should_failslab+0x9/0x20 [ 2211.609391] kmem_cache_alloc+0x5a/0x390 [ 2211.609660] ? __lock_acquire+0x19b1/0x6340 [ 2211.609941] __kernfs_new_node+0xd4/0x870 [ 2211.610212] ? __pfx___kernfs_new_node+0x10/0x10 [ 2211.610514] ? __lock_acquire+0x19b1/0x6340 [ 2211.610847] kernfs_create_dir_ns+0xa0/0x230 [ 2211.611151] sysfs_create_dir_ns+0x12b/0x2a0 [ 2211.611445] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2211.611760] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2211.612067] ? do_raw_spin_unlock+0x53/0x220 [ 2211.612354] kobject_add_internal+0x24c/0x9b0 [ 2211.612647] kobject_init_and_add+0x101/0x170 [ 2211.612936] ? __pfx_kobject_init_and_add+0x10/0x10 [ 2211.613259] ? up_write+0x196/0x510 [ 2211.613500] ? kernfs_find_ns+0x2d9/0x3e0 [ 2211.613806] sysfs_slab_add+0x178/0x220 [ 2211.614072] __kmem_cache_create+0x1fe/0x610 [ 2211.614365] kmem_cache_create_usercopy+0x218/0x340 [ 2211.614694] p9_client_create+0xd0b/0x1260 [ 2211.615004] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.615369] ? __pfx_p9_client_create+0x10/0x10 [ 2211.615670] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2211.615989] ? lockdep_init_map_type+0x21e/0x7e0 [ 2211.616294] ? __kasan_kmalloc+0x7f/0x90 [ 2211.616566] ? __raw_spin_lock_init+0x3a/0x110 [ 2211.616896] v9fs_session_init+0x1e0/0x17b0 [ 2211.617187] ? lock_release+0x1e3/0x680 [ 2211.617471] ? __pfx_lock_release+0x10/0x10 [ 2211.617754] ? __pfx_v9fs_session_init+0x10/0x10 [ 2211.618099] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.618437] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2211.618792] ? v9fs_mount+0x9e/0xbd0 [ 2211.619074] v9fs_mount+0xbd/0xbd0 [ 2211.619316] ? legacy_init_fs_context+0x44/0xe0 [ 2211.619620] ? __pfx_v9fs_mount+0x10/0x10 [ 2211.619895] ? cap_capable+0x1be/0x220 [ 2211.620166] ? __pfx_v9fs_mount+0x10/0x10 [ 2211.620443] legacy_get_tree+0x109/0x220 [ 2211.620714] vfs_get_tree+0x92/0x360 [ 2211.620972] path_mount+0x133c/0x1e50 [ 2211.621235] ? kasan_quarantine_put+0x81/0x1d0 [ 2211.621537] ? __pfx_path_mount+0x10/0x10 [ 2211.621815] ? putname+0x102/0x140 [ 2211.622056] ? kmem_cache_free+0xff/0x4a0 [ 2211.622355] ? putname+0x102/0x140 [ 2211.622600] __x64_sys_mount+0x286/0x310 [ 2211.622892] ? __pfx___x64_sys_mount+0x10/0x10 [ 2211.623201] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.623534] do_syscall_64+0x3f/0x90 [ 2211.623789] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2211.624124] RIP: 0033:0x7f8273cb8b19 [ 2211.624362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2211.625454] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2211.625921] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2211.626360] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2211.626798] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2211.627258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2211.627696] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2211.628141] [ 2211.628345] kobject: kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) [ 2211.628918] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2211.629355] CPU: 0 PID: 11002 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2211.629854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.630353] Call Trace: [ 2211.630519] [ 2211.630668] dump_stack_lvl+0xc1/0xf0 [ 2211.630921] kmem_cache_create_usercopy+0x12b/0x340 [ 2211.631256] p9_client_create+0xd0b/0x1260 [ 2211.631529] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.631863] ? __pfx_p9_client_create+0x10/0x10 [ 2211.632163] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2211.632481] ? lockdep_init_map_type+0x21e/0x7e0 [ 2211.632786] ? __kasan_kmalloc+0x7f/0x90 [ 2211.633056] ? __raw_spin_lock_init+0x3a/0x110 [ 2211.633357] v9fs_session_init+0x1e0/0x17b0 [ 2211.633638] ? lock_release+0x1e3/0x680 [ 2211.633916] ? __pfx_lock_release+0x10/0x10 [ 2211.634194] ? __pfx_v9fs_session_init+0x10/0x10 [ 2211.634501] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.634837] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2211.635184] ? v9fs_mount+0x9e/0xbd0 [ 2211.635445] v9fs_mount+0xbd/0xbd0 [ 2211.635681] ? legacy_init_fs_context+0x44/0xe0 [ 2211.635977] ? __pfx_v9fs_mount+0x10/0x10 [ 2211.636253] ? cap_capable+0x1be/0x220 [ 2211.636519] ? __pfx_v9fs_mount+0x10/0x10 [ 2211.636792] legacy_get_tree+0x109/0x220 [ 2211.637081] vfs_get_tree+0x92/0x360 [ 2211.637336] path_mount+0x133c/0x1e50 [ 2211.637611] ? kasan_quarantine_put+0x81/0x1d0 [ 2211.637911] ? __pfx_path_mount+0x10/0x10 [ 2211.638203] ? putname+0x102/0x140 [ 2211.638443] ? kmem_cache_free+0xff/0x4a0 [ 2211.638741] ? putname+0x102/0x140 [ 2211.638999] __x64_sys_mount+0x286/0x310 [ 2211.639260] ? __pfx___x64_sys_mount+0x10/0x10 [ 2211.639554] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.639887] do_syscall_64+0x3f/0x90 [ 2211.640132] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2211.640463] RIP: 0033:0x7f8273cb8b19 [ 2211.640715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2211.641796] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2211.642296] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2211.642736] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2211.643181] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2211.643614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2211.644047] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2211.644492] 00:31:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaded, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca", 0xd4}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2211.684115] FAULT_INJECTION: forcing a failure. [ 2211.684115] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.684922] CPU: 0 PID: 11015 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2211.685464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2211.686052] Call Trace: [ 2211.686235] [ 2211.686398] dump_stack_lvl+0xc1/0xf0 [ 2211.686698] should_fail_ex+0x4b4/0x5b0 [ 2211.687010] ? getname_flags.part.0+0x50/0x4f0 [ 2211.687316] should_failslab+0x9/0x20 [ 2211.687584] kmem_cache_alloc+0x5a/0x390 [ 2211.687870] ? __pfx_lock_release+0x10/0x10 [ 2211.688173] getname_flags.part.0+0x50/0x4f0 [ 2211.688484] ? rcu_read_lock_any_held+0x79/0xa0 [ 2211.688817] getname+0x92/0xe0 [ 2211.689045] do_sys_openat2+0xf9/0x4c0 [ 2211.689328] ? __pfx_do_sys_openat2+0x10/0x10 [ 2211.689662] __x64_sys_openat+0x143/0x200 [ 2211.689957] ? __pfx___x64_sys_openat+0x10/0x10 [ 2211.690267] ? ksys_write+0x1a7/0x260 [ 2211.690538] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2211.690880] do_syscall_64+0x3f/0x90 [ 2211.691157] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2211.691514] RIP: 0033:0x7fecdd4cda04 [ 2211.691771] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2211.692963] RSP: 002b:00007fecdaa6f060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2211.693465] RAX: ffffffffffffffda RBX: 00007fecdd62e020 RCX: 00007fecdd4cda04 [ 2211.693943] RDX: 0000000000000002 RSI: 00007fecdaa6f0f0 RDI: 00000000ffffff9c [ 2211.694466] RBP: 00007fecdaa6f0f0 R08: 0000000000000000 R09: 00007fecdaa6ef70 [ 2211.694980] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2211.695479] R13: 00007fff097a018f R14: 00007fecdaa6f300 R15: 0000000000022000 [ 2211.696006] [ 2211.720530] loop2: detected capacity change from 0 to 40 00:31:35 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xabf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe969, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2211.737424] 9pnet_fd: Insufficient options for proto=fd 00:31:35 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaeed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:35 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca", 0xd4}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2211.833452] loop2: detected capacity change from 0 to 40 00:31:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91ea", 0xd8}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 2) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xacf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 50) 00:31:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xafed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeae9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xadf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2223.890351] loop2: detected capacity change from 0 to 40 00:31:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 51) 00:31:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb0ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:31:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91ea", 0xd8}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:31:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaef8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:31:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2224.009284] loop2: detected capacity change from 0 to 40 [ 2224.016534] kernel write not supported for file /11057/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:31:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaeb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaff8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 3) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaec, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb1ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 52) 00:32:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91ea", 0xd8}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2237.536330] loop2: detected capacity change from 0 to 40 00:32:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb0f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9d00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2237.633410] FAULT_INJECTION: forcing a failure. [ 2237.633410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.634984] CPU: 0 PID: 11117 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2237.636061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.637099] Call Trace: [ 2237.637446] [ 2237.637755] dump_stack_lvl+0xc1/0xf0 [ 2237.638276] should_fail_ex+0x4b4/0x5b0 [ 2237.638823] strncpy_from_user+0x38/0x340 [ 2237.639400] getname_flags.part.0+0x95/0x4f0 [ 2237.640001] ? rcu_read_lock_any_held+0x79/0xa0 [ 2237.640624] getname+0x92/0xe0 [ 2237.641066] do_sys_openat2+0xf9/0x4c0 [ 2237.641600] ? __pfx_do_sys_openat2+0x10/0x10 [ 2237.642228] __x64_sys_openat+0x143/0x200 [ 2237.642792] ? __pfx___x64_sys_openat+0x10/0x10 [ 2237.643431] ? ksys_write+0x1a7/0x260 [ 2237.643956] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.644645] do_syscall_64+0x3f/0x90 [ 2237.645167] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2237.645887] RIP: 0033:0x7fecdd4cda04 [ 2237.646406] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2237.648743] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2237.649745] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2237.650690] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2237.651653] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2237.652592] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2237.653523] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2237.654496] 00:32:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb1f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd502, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb2ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2237.682840] 9pnet_fd: Insufficient options for proto=fd 00:32:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 53) [ 2237.775412] loop2: detected capacity change from 0 to 40 [ 2237.824856] FAULT_INJECTION: forcing a failure. [ 2237.824856] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.825684] CPU: 1 PID: 11148 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2237.826226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.826765] Call Trace: [ 2237.826946] [ 2237.827109] dump_stack_lvl+0xc1/0xf0 [ 2237.827393] should_fail_ex+0x4b4/0x5b0 [ 2237.827680] ? __kernfs_new_node+0xd4/0x870 [ 2237.827981] should_failslab+0x9/0x20 [ 2237.828254] kmem_cache_alloc+0x5a/0x390 [ 2237.828537] ? __pfx_lock_release+0x10/0x10 [ 2237.828852] __kernfs_new_node+0xd4/0x870 [ 2237.829156] ? __pfx___kernfs_new_node+0x10/0x10 [ 2237.829484] ? kernfs_add_one+0x17f/0x530 [ 2237.829787] kernfs_new_node+0x97/0x120 [ 2237.830070] __kernfs_create_file+0x55/0x350 [ 2237.830388] sysfs_add_file_mode_ns+0x21c/0x440 [ 2237.830709] ? __pfx_slab_attr_store+0x10/0x10 [ 2237.831041] internal_create_group+0x322/0xb90 [ 2237.831377] ? __pfx_internal_create_group+0x10/0x10 [ 2237.831731] ? up_write+0x196/0x510 [ 2237.831996] sysfs_slab_add+0x18e/0x220 [ 2237.832268] __kmem_cache_create+0x1fe/0x610 [ 2237.832586] kmem_cache_create_usercopy+0x218/0x340 [ 2237.832933] p9_client_create+0xd0b/0x1260 [ 2237.833228] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.833578] ? __pfx_p9_client_create+0x10/0x10 [ 2237.833900] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2237.834241] ? lockdep_init_map_type+0x21e/0x7e0 [ 2237.834595] ? __kasan_kmalloc+0x7f/0x90 [ 2237.834876] ? __raw_spin_lock_init+0x3a/0x110 [ 2237.835220] v9fs_session_init+0x1e0/0x17b0 [ 2237.835536] ? lock_release+0x1e3/0x680 [ 2237.835831] ? __pfx_lock_release+0x10/0x10 [ 2237.836132] ? __pfx_v9fs_session_init+0x10/0x10 [ 2237.836496] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.836854] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2237.837222] ? v9fs_mount+0x9e/0xbd0 [ 2237.837500] v9fs_mount+0xbd/0xbd0 [ 2237.837772] ? legacy_init_fs_context+0x44/0xe0 [ 2237.838082] ? __pfx_v9fs_mount+0x10/0x10 [ 2237.838399] ? cap_capable+0x1be/0x220 [ 2237.838678] ? __pfx_v9fs_mount+0x10/0x10 [ 2237.838991] legacy_get_tree+0x109/0x220 [ 2237.839280] vfs_get_tree+0x92/0x360 [ 2237.839579] path_mount+0x133c/0x1e50 [ 2237.839855] ? kasan_quarantine_put+0x81/0x1d0 [ 2237.840204] ? __pfx_path_mount+0x10/0x10 [ 2237.840491] ? putname+0x102/0x140 [ 2237.840768] ? kmem_cache_free+0xff/0x4a0 [ 2237.841053] ? putname+0x102/0x140 [ 2237.841330] __x64_sys_mount+0x286/0x310 [ 2237.841624] ? __pfx___x64_sys_mount+0x10/0x10 [ 2237.841960] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.842344] do_syscall_64+0x3f/0x90 [ 2237.842634] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2237.842984] RIP: 0033:0x7f8273cb8b19 [ 2237.843265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.844511] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2237.845055] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2237.845571] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2237.846084] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2237.846608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.847116] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2237.847646] [ 2237.867893] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2237.868887] CPU: 0 PID: 11148 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2237.869946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2237.870980] Call Trace: [ 2237.871352] [ 2237.871665] dump_stack_lvl+0xc1/0xf0 [ 2237.872195] kmem_cache_create_usercopy+0x12b/0x340 [ 2237.872904] p9_client_create+0xd0b/0x1260 [ 2237.873500] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.874218] ? __pfx_p9_client_create+0x10/0x10 [ 2237.874869] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2237.875566] ? lockdep_init_map_type+0x21e/0x7e0 [ 2237.876231] ? __kasan_kmalloc+0x7f/0x90 [ 2237.876821] ? __raw_spin_lock_init+0x3a/0x110 [ 2237.877466] v9fs_session_init+0x1e0/0x17b0 [ 2237.878080] ? lock_release+0x1e3/0x680 [ 2237.878646] ? __pfx_lock_release+0x10/0x10 [ 2237.879255] ? __pfx_v9fs_session_init+0x10/0x10 [ 2237.879946] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.880673] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2237.881371] ? v9fs_mount+0x9e/0xbd0 [ 2237.881927] v9fs_mount+0xbd/0xbd0 [ 2237.882450] ? legacy_init_fs_context+0x44/0xe0 [ 2237.883101] ? __pfx_v9fs_mount+0x10/0x10 [ 2237.883717] ? cap_capable+0x1be/0x220 [ 2237.884282] ? __pfx_v9fs_mount+0x10/0x10 [ 2237.884877] legacy_get_tree+0x109/0x220 [ 2237.885470] vfs_get_tree+0x92/0x360 [ 2237.886019] path_mount+0x133c/0x1e50 [ 2237.886577] ? kasan_quarantine_put+0x81/0x1d0 [ 2237.887229] ? __pfx_path_mount+0x10/0x10 [ 2237.887839] ? putname+0x102/0x140 [ 2237.888364] ? kmem_cache_free+0xff/0x4a0 [ 2237.888961] ? putname+0x102/0x140 [ 2237.889486] __x64_sys_mount+0x286/0x310 [ 2237.890053] ? __pfx___x64_sys_mount+0x10/0x10 [ 2237.890664] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2237.891363] do_syscall_64+0x3f/0x90 [ 2237.891876] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2237.892567] RIP: 0033:0x7f8273cb8b19 [ 2237.893056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2237.895330] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2237.896302] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2237.897221] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2237.898149] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2237.899080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2237.900017] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2237.900954] 00:32:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 4) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed81, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd602, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 54) 00:32:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe96f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb2f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa", 0xd9}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaee, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2249.453710] loop2: detected capacity change from 0 to 40 [ 2249.466473] FAULT_INJECTION: forcing a failure. [ 2249.466473] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.467294] CPU: 1 PID: 11160 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2249.467826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.468363] Call Trace: [ 2249.468541] [ 2249.468699] dump_stack_lvl+0xc1/0xf0 [ 2249.468970] should_fail_ex+0x4b4/0x5b0 [ 2249.469256] ? __alloc_file+0x21/0x240 [ 2249.469537] should_failslab+0x9/0x20 [ 2249.469805] kmem_cache_alloc+0x5a/0x390 [ 2249.470105] __alloc_file+0x21/0x240 [ 2249.470370] alloc_empty_file+0x71/0x190 [ 2249.470651] path_openat+0xd8/0x2750 [ 2249.470915] ? __pfx_path_openat+0x10/0x10 [ 2249.471201] ? __create_object+0x3ee/0xc90 [ 2249.471504] do_filp_open+0x1ba/0x410 [ 2249.471765] ? __pfx_do_filp_open+0x10/0x10 [ 2249.472060] ? expand_files+0x446/0x8e0 [ 2249.472341] ? find_held_lock+0x2c/0x110 [ 2249.472623] ? alloc_fd+0x2eb/0x760 [ 2249.472885] ? lock_release+0x1e3/0x680 [ 2249.473170] ? do_raw_spin_lock+0x125/0x270 [ 2249.473464] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2249.473786] ? _raw_spin_unlock+0x1e/0x40 [ 2249.474072] ? alloc_fd+0x2eb/0x760 [ 2249.474337] do_sys_openat2+0x171/0x4c0 [ 2249.474622] ? __pfx_do_sys_openat2+0x10/0x10 [ 2249.474941] __x64_sys_openat+0x143/0x200 [ 2249.475233] ? __pfx___x64_sys_openat+0x10/0x10 [ 2249.475574] ? ksys_write+0x1a7/0x260 [ 2249.475840] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.476207] do_syscall_64+0x3f/0x90 [ 2249.476487] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2249.476862] RIP: 0033:0x7fecdd4cda04 [ 2249.477128] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2249.478314] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2249.478833] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2249.479320] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2249.479815] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2249.480295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2249.480773] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2249.481271] [ 2249.497496] FAULT_INJECTION: forcing a failure. [ 2249.497496] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.498359] CPU: 1 PID: 11169 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2249.498895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.499442] Call Trace: [ 2249.499631] [ 2249.499803] dump_stack_lvl+0xc1/0xf0 [ 2249.500079] should_fail_ex+0x4b4/0x5b0 [ 2249.500361] ? __kernfs_new_node+0xd4/0x870 [ 2249.500665] should_failslab+0x9/0x20 [ 2249.500937] kmem_cache_alloc+0x5a/0x390 [ 2249.501230] __kernfs_new_node+0xd4/0x870 [ 2249.501523] ? __pfx___kernfs_new_node+0x10/0x10 [ 2249.501860] ? down_write+0x11a/0x1f0 [ 2249.502138] ? up_write+0x196/0x510 [ 2249.502414] kernfs_new_node+0x97/0x120 [ 2249.502703] __kernfs_create_file+0x55/0x350 [ 2249.503023] sysfs_add_file_mode_ns+0x21c/0x440 [ 2249.503360] ? __pfx_slab_attr_store+0x10/0x10 [ 2249.503694] internal_create_group+0x322/0xb90 [ 2249.504019] ? __pfx_internal_create_group+0x10/0x10 [ 2249.504363] ? up_write+0x196/0x510 [ 2249.504632] sysfs_slab_add+0x18e/0x220 [ 2249.504914] __kmem_cache_create+0x1fe/0x610 [ 2249.505232] kmem_cache_create_usercopy+0x218/0x340 [ 2249.505581] p9_client_create+0xd0b/0x1260 [ 2249.505880] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.506237] ? __pfx_p9_client_create+0x10/0x10 [ 2249.506572] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2249.506931] ? lockdep_init_map_type+0x21e/0x7e0 [ 2249.507267] ? __kasan_kmalloc+0x7f/0x90 [ 2249.507586] ? __raw_spin_lock_init+0x3a/0x110 [ 2249.507926] v9fs_session_init+0x1e0/0x17b0 [ 2249.508240] ? lock_release+0x1e3/0x680 [ 2249.508527] ? __pfx_lock_release+0x10/0x10 [ 2249.508839] ? __pfx_v9fs_session_init+0x10/0x10 [ 2249.509183] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.509553] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2249.509907] ? v9fs_mount+0x9e/0xbd0 [ 2249.510191] v9fs_mount+0xbd/0xbd0 [ 2249.510457] ? legacy_init_fs_context+0x44/0xe0 [ 2249.510783] ? __pfx_v9fs_mount+0x10/0x10 [ 2249.511090] ? cap_capable+0x1be/0x220 [ 2249.511378] ? __pfx_v9fs_mount+0x10/0x10 [ 2249.511690] legacy_get_tree+0x109/0x220 [ 2249.511990] vfs_get_tree+0x92/0x360 [ 2249.512267] path_mount+0x133c/0x1e50 [ 2249.512554] ? kasan_quarantine_put+0x81/0x1d0 [ 2249.512889] ? __pfx_path_mount+0x10/0x10 [ 2249.513195] ? putname+0x102/0x140 [ 2249.513460] ? kmem_cache_free+0xff/0x4a0 [ 2249.513759] ? putname+0x102/0x140 [ 2249.514027] __x64_sys_mount+0x286/0x310 [ 2249.514317] ? __pfx___x64_sys_mount+0x10/0x10 [ 2249.514645] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.515019] do_syscall_64+0x3f/0x90 [ 2249.515295] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2249.515679] RIP: 0033:0x7f8273cb8b19 [ 2249.515944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.517173] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2249.517699] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2249.518189] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2249.518676] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2249.519166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2249.519664] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2249.520168] 00:32:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb3f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd8f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe970, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb4f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed82, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2249.598959] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2249.600428] CPU: 0 PID: 11169 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2249.601471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2249.602494] Call Trace: [ 2249.602842] [ 2249.603147] dump_stack_lvl+0xc1/0xf0 [ 2249.603681] kmem_cache_create_usercopy+0x12b/0x340 [ 2249.604353] p9_client_create+0xd0b/0x1260 [ 2249.604924] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.605621] ? __pfx_p9_client_create+0x10/0x10 [ 2249.606256] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2249.606917] ? lockdep_init_map_type+0x21e/0x7e0 [ 2249.607583] ? __kasan_kmalloc+0x7f/0x90 [ 2249.608140] ? __raw_spin_lock_init+0x3a/0x110 [ 2249.608761] v9fs_session_init+0x1e0/0x17b0 00:32:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaef, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2249.609341] ? lock_release+0x1e3/0x680 [ 2249.609935] ? __pfx_lock_release+0x10/0x10 [ 2249.610507] ? __pfx_v9fs_session_init+0x10/0x10 [ 2249.611148] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.611856] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2249.612507] ? v9fs_mount+0x9e/0xbd0 [ 2249.613040] v9fs_mount+0xbd/0xbd0 [ 2249.613537] ? legacy_init_fs_context+0x44/0xe0 [ 2249.614153] ? __pfx_v9fs_mount+0x10/0x10 [ 2249.614728] ? cap_capable+0x1be/0x220 [ 2249.615282] ? __pfx_v9fs_mount+0x10/0x10 [ 2249.615862] legacy_get_tree+0x109/0x220 [ 2249.616429] vfs_get_tree+0x92/0x360 [ 2249.616951] path_mount+0x133c/0x1e50 [ 2249.617491] ? kasan_quarantine_put+0x81/0x1d0 [ 2249.618112] ? __pfx_path_mount+0x10/0x10 [ 2249.618682] ? putname+0x102/0x140 [ 2249.619168] ? kmem_cache_free+0xff/0x4a0 [ 2249.619736] ? putname+0x102/0x140 [ 2249.620230] __x64_sys_mount+0x286/0x310 [ 2249.620771] ? __pfx___x64_sys_mount+0x10/0x10 [ 2249.621384] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2249.622079] do_syscall_64+0x3f/0x90 [ 2249.622597] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2249.623288] RIP: 0033:0x7f8273cb8b19 [ 2249.623801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2249.626056] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2249.627033] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2249.627955] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2249.628858] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2249.629759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2249.630665] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2249.631594] 00:32:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa", 0xd9}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2249.673941] loop2: detected capacity change from 0 to 40 00:32:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 5) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb5f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa", 0xd9}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2249.822574] kernel write not supported for file /11206/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:32:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 55) 00:32:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed83, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdaf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe971, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb6f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 6) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2261.848296] loop2: detected capacity change from 0 to 40 [ 2261.913002] FAULT_INJECTION: forcing a failure. [ 2261.913002] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.914392] CPU: 1 PID: 11226 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2261.915397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2261.916400] Call Trace: [ 2261.916737] [ 2261.917049] dump_stack_lvl+0xc1/0xf0 [ 2261.917552] should_fail_ex+0x4b4/0x5b0 [ 2261.918110] ? __kernfs_new_node+0xd4/0x870 [ 2261.918680] should_failslab+0x9/0x20 [ 2261.919198] kmem_cache_alloc+0x5a/0x390 [ 2261.919775] __kernfs_new_node+0xd4/0x870 [ 2261.920319] ? __pfx___kernfs_new_node+0x10/0x10 [ 2261.920955] ? down_write+0x11a/0x1f0 [ 2261.921475] ? up_write+0x196/0x510 [ 2261.921990] kernfs_new_node+0x97/0x120 [ 2261.922537] __kernfs_create_file+0x55/0x350 [ 2261.923133] sysfs_add_file_mode_ns+0x21c/0x440 [ 2261.923759] ? __pfx_slab_attr_store+0x10/0x10 [ 2261.924388] internal_create_group+0x322/0xb90 [ 2261.925000] ? __pfx_internal_create_group+0x10/0x10 [ 2261.925673] ? up_write+0x196/0x510 [ 2261.926173] sysfs_slab_add+0x18e/0x220 [ 2261.926723] __kmem_cache_create+0x1fe/0x610 [ 2261.927337] kmem_cache_create_usercopy+0x218/0x340 [ 2261.928018] p9_client_create+0xd0b/0x1260 [ 2261.928576] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2261.929261] ? __pfx_p9_client_create+0x10/0x10 [ 2261.929873] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2261.930525] ? lockdep_init_map_type+0x21e/0x7e0 [ 2261.931159] ? __kasan_kmalloc+0x7f/0x90 [ 2261.931707] ? __raw_spin_lock_init+0x3a/0x110 [ 2261.932323] v9fs_session_init+0x1e0/0x17b0 [ 2261.932483] FAULT_INJECTION: forcing a failure. [ 2261.932483] name failslab, interval 1, probability 0, space 0, times 0 [ 2261.932864] ? lock_release+0x1e3/0x680 [ 2261.932901] ? __pfx_lock_release+0x10/0x10 [ 2261.935693] ? __pfx_v9fs_session_init+0x10/0x10 [ 2261.936318] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2261.937007] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2261.937658] ? v9fs_mount+0x9e/0xbd0 [ 2261.938181] v9fs_mount+0xbd/0xbd0 [ 2261.938674] ? legacy_init_fs_context+0x44/0xe0 [ 2261.939283] ? __pfx_v9fs_mount+0x10/0x10 [ 2261.939858] ? cap_capable+0x1be/0x220 [ 2261.940406] ? __pfx_v9fs_mount+0x10/0x10 [ 2261.940978] legacy_get_tree+0x109/0x220 [ 2261.941540] vfs_get_tree+0x92/0x360 [ 2261.942058] path_mount+0x133c/0x1e50 [ 2261.942591] ? kasan_quarantine_put+0x81/0x1d0 [ 2261.943209] ? __pfx_path_mount+0x10/0x10 [ 2261.943784] ? putname+0x102/0x140 [ 2261.944272] ? kmem_cache_free+0xff/0x4a0 [ 2261.944835] ? putname+0x102/0x140 [ 2261.945326] __x64_sys_mount+0x286/0x310 [ 2261.945855] ? __pfx___x64_sys_mount+0x10/0x10 [ 2261.946456] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2261.947148] do_syscall_64+0x3f/0x90 [ 2261.947668] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2261.948355] RIP: 0033:0x7f8273cb8b19 [ 2261.948844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2261.951091] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2261.952056] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2261.952939] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2261.953831] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2261.954714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2261.955603] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2261.956555] [ 2261.956866] CPU: 0 PID: 11228 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2261.957951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 00:32:26 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2261.958988] Call Trace: [ 2261.959464] [ 2261.959793] dump_stack_lvl+0xc1/0xf0 [ 2261.960316] should_fail_ex+0x4b4/0x5b0 [ 2261.960866] ? security_file_alloc+0x38/0x170 [ 2261.961457] should_failslab+0x9/0x20 [ 2261.961972] kmem_cache_alloc+0x5a/0x390 [ 2261.962522] security_file_alloc+0x38/0x170 [ 2261.963094] __alloc_file+0xb6/0x240 [ 2261.963626] alloc_empty_file+0x71/0x190 [ 2261.964158] path_openat+0xd8/0x2750 [ 2261.964667] ? __pfx_path_openat+0x10/0x10 [ 2261.965193] ? __create_object+0x3ee/0xc90 [ 2261.965758] do_filp_open+0x1ba/0x410 [ 2261.966239] ? __pfx_do_filp_open+0x10/0x10 [ 2261.966802] ? expand_files+0x446/0x8e0 [ 2261.967314] ? find_held_lock+0x2c/0x110 [ 2261.967846] ? alloc_fd+0x2eb/0x760 [ 2261.968322] ? lock_release+0x1e3/0x680 [ 2261.968830] ? do_raw_spin_lock+0x125/0x270 [ 2261.969399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2261.970029] ? _raw_spin_unlock+0x1e/0x40 [ 2261.970565] ? alloc_fd+0x2eb/0x760 [ 2261.971075] do_sys_openat2+0x171/0x4c0 [ 2261.971632] ? __pfx_do_sys_openat2+0x10/0x10 [ 2261.972251] __x64_sys_openat+0x143/0x200 [ 2261.972806] ? __pfx___x64_sys_openat+0x10/0x10 [ 2261.973420] ? ksys_write+0x1a7/0x260 [ 2261.973934] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2261.974594] do_syscall_64+0x3f/0x90 [ 2261.975100] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2261.975755] RIP: 0033:0x7fecdd4cda04 [ 2261.976239] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2261.978412] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2261.979333] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2261.980212] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2261.981087] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2261.981953] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 00:32:26 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdbf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe972, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2261.982850] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2261.983785] 00:32:26 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb7f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2262.021590] 9pnet_fd: Insufficient options for proto=fd 00:32:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed84, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:26 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2262.095811] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2262.096791] CPU: 1 PID: 11226 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2262.097823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2262.098846] Call Trace: [ 2262.099190] [ 2262.099493] dump_stack_lvl+0xc1/0xf0 [ 2262.100031] kmem_cache_create_usercopy+0x12b/0x340 [ 2262.100696] p9_client_create+0xd0b/0x1260 [ 2262.101265] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2262.101945] ? __pfx_p9_client_create+0x10/0x10 [ 2262.102569] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2262.103228] ? lockdep_init_map_type+0x21e/0x7e0 [ 2262.103871] ? __kasan_kmalloc+0x7f/0x90 [ 2262.104421] ? __raw_spin_lock_init+0x3a/0x110 [ 2262.105029] v9fs_session_init+0x1e0/0x17b0 [ 2262.105608] ? lock_release+0x1e3/0x680 [ 2262.106139] ? __pfx_lock_release+0x10/0x10 [ 2262.106711] ? __pfx_v9fs_session_init+0x10/0x10 [ 2262.107346] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2262.108038] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2262.108685] ? v9fs_mount+0x9e/0xbd0 [ 2262.109209] v9fs_mount+0xbd/0xbd0 [ 2262.109654] ? legacy_init_fs_context+0x44/0xe0 [ 2262.110259] ? __pfx_v9fs_mount+0x10/0x10 [ 2262.110810] ? cap_capable+0x1be/0x220 [ 2262.111352] ? __pfx_v9fs_mount+0x10/0x10 [ 2262.111928] legacy_get_tree+0x109/0x220 [ 2262.112481] vfs_get_tree+0x92/0x360 [ 2262.112999] path_mount+0x133c/0x1e50 [ 2262.113519] ? kasan_quarantine_put+0x81/0x1d0 [ 2262.114136] ? __pfx_path_mount+0x10/0x10 [ 2262.114700] ? putname+0x102/0x140 [ 2262.115183] ? kmem_cache_free+0xff/0x4a0 [ 2262.115755] ? putname+0x102/0x140 [ 2262.116251] __x64_sys_mount+0x286/0x310 [ 2262.116782] ? __pfx___x64_sys_mount+0x10/0x10 [ 2262.117375] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2262.118056] do_syscall_64+0x3f/0x90 [ 2262.118561] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2262.119241] RIP: 0033:0x7f8273cb8b19 [ 2262.119741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2262.121975] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2262.122898] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2262.123727] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2262.124532] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2262.125337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2262.126139] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2262.126965] 00:32:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe973, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2262.179577] loop2: detected capacity change from 0 to 40 00:32:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 56) 00:32:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed85, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe974, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb8f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 7) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdcf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2275.579886] loop2: detected capacity change from 0 to 40 00:32:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe975, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xddf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb9f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed86, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2275.676370] kernel write not supported for file /11263/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:32:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 57) 00:32:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {0x0}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe976, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdef9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed87, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2275.805151] loop2: detected capacity change from 0 to 40 00:32:39 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 8) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2275.823945] FAULT_INJECTION: forcing a failure. [ 2275.823945] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.824956] CPU: 0 PID: 11302 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2275.825646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.826339] Call Trace: [ 2275.826570] [ 2275.826776] dump_stack_lvl+0xc1/0xf0 [ 2275.827131] should_fail_ex+0x4b4/0x5b0 [ 2275.827506] ? __kernfs_new_node+0xd4/0x870 [ 2275.827903] should_failslab+0x9/0x20 [ 2275.828262] kmem_cache_alloc+0x5a/0x390 [ 2275.828643] __kernfs_new_node+0xd4/0x870 [ 2275.829023] ? __pfx___kernfs_new_node+0x10/0x10 [ 2275.829458] ? down_write+0x11a/0x1f0 [ 2275.829821] ? up_write+0x196/0x510 [ 2275.830175] kernfs_new_node+0x97/0x120 [ 2275.830560] __kernfs_create_file+0x55/0x350 [ 2275.830978] sysfs_add_file_mode_ns+0x21c/0x440 [ 2275.831394] ? __pfx_slab_attr_store+0x10/0x10 [ 2275.831837] internal_create_group+0x322/0xb90 [ 2275.832254] ? __pfx_internal_create_group+0x10/0x10 [ 2275.832713] ? up_write+0x196/0x510 [ 2275.833054] sysfs_slab_add+0x18e/0x220 [ 2275.833369] __kmem_cache_create+0x1fe/0x610 00:32:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe977, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2275.833740] kmem_cache_create_usercopy+0x218/0x340 [ 2275.834479] p9_client_create+0xd0b/0x1260 [ 2275.835115] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.835949] ? __pfx_p9_client_create+0x10/0x10 [ 2275.836665] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2275.837421] ? lockdep_init_map_type+0x21e/0x7e0 [ 2275.838137] ? __kasan_kmalloc+0x7f/0x90 [ 2275.838813] ? __raw_spin_lock_init+0x3a/0x110 [ 2275.839536] v9fs_session_init+0x1e0/0x17b0 [ 2275.840284] ? lock_release+0x1e3/0x680 [ 2275.840902] ? __pfx_lock_release+0x10/0x10 [ 2275.841560] ? __pfx_v9fs_session_init+0x10/0x10 [ 2275.842284] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.843079] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2275.843848] ? v9fs_mount+0x9e/0xbd0 [ 2275.844469] v9fs_mount+0xbd/0xbd0 [ 2275.845041] ? legacy_init_fs_context+0x44/0xe0 [ 2275.845764] ? __pfx_v9fs_mount+0x10/0x10 [ 2275.846427] ? cap_capable+0x1be/0x220 [ 2275.847066] ? __pfx_v9fs_mount+0x10/0x10 [ 2275.847724] legacy_get_tree+0x109/0x220 [ 2275.848398] vfs_get_tree+0x92/0x360 [ 2275.848979] path_mount+0x133c/0x1e50 [ 2275.849538] ? kasan_quarantine_put+0x81/0x1d0 [ 2275.850178] ? __pfx_path_mount+0x10/0x10 [ 2275.850767] ? putname+0x102/0x140 [ 2275.851276] ? kmem_cache_free+0xff/0x4a0 [ 2275.851865] ? putname+0x102/0x140 [ 2275.852379] __x64_sys_mount+0x286/0x310 [ 2275.852941] ? __pfx___x64_sys_mount+0x10/0x10 [ 2275.853577] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.854279] do_syscall_64+0x3f/0x90 [ 2275.854810] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2275.855524] RIP: 0033:0x7f8273cb8b19 [ 2275.856041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.858369] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2275.859370] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2275.860320] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2275.861253] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2275.862201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.863137] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2275.864104] 00:32:40 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdff9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed88, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2275.934300] FAULT_INJECTION: forcing a failure. [ 2275.934300] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.935379] CPU: 1 PID: 11314 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2275.935934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.936479] Call Trace: [ 2275.936660] [ 2275.936824] dump_stack_lvl+0xc1/0xf0 [ 2275.937102] should_fail_ex+0x4b4/0x5b0 [ 2275.937392] should_failslab+0x9/0x20 [ 2275.937669] __kmem_cache_alloc_node+0x5b/0x310 [ 2275.938006] ? proc_self_get_link+0x18f/0x200 [ 2275.938322] ? lock_is_held_type+0x9f/0x120 [ 2275.938622] kmalloc_trace+0x26/0xc0 [ 2275.938890] proc_self_get_link+0x18f/0x200 [ 2275.939196] ? __pfx_proc_self_get_link+0x10/0x10 [ 2275.939530] step_into+0x185a/0x2000 [ 2275.939800] ? selinux_inode_permission+0x3de/0x5e0 [ 2275.940151] ? lock_is_held_type+0x9f/0x120 [ 2275.940450] ? __pfx_step_into+0x10/0x10 [ 2275.940739] walk_component+0xf5/0x5b0 [ 2275.941013] link_path_walk.part.0+0x76e/0xd90 [ 2275.941340] ? __pfx_link_path_walk.part.0+0x10/0x10 [ 2275.941701] path_openat+0x24e/0x2750 [ 2275.941978] ? __pfx_path_openat+0x10/0x10 [ 2275.942269] ? __create_object+0x3ee/0xc90 [ 2275.942574] do_filp_open+0x1ba/0x410 [ 2275.942838] ? __pfx_do_filp_open+0x10/0x10 [ 2275.943131] ? expand_files+0x446/0x8e0 [ 2275.943418] ? find_held_lock+0x2c/0x110 [ 2275.943725] ? _raw_spin_unlock+0x1e/0x40 [ 2275.944030] ? alloc_fd+0x2eb/0x760 [ 2275.944319] do_sys_openat2+0x171/0x4c0 [ 2275.944618] ? __pfx_do_sys_openat2+0x10/0x10 [ 2275.944962] __x64_sys_openat+0x143/0x200 [ 2275.945279] ? __pfx___x64_sys_openat+0x10/0x10 [ 2275.945630] ? ksys_write+0x1a7/0x260 [ 2275.945916] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.946294] do_syscall_64+0x3f/0x90 [ 2275.946569] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2275.946946] RIP: 0033:0x7fecdd4cda04 [ 2275.947222] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2275.948407] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2275.948942] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2275.949457] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2275.949963] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2275.950457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2275.950965] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2275.951486] [ 2275.983569] kernel write not supported for file /11312/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2275.984970] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2275.985995] CPU: 0 PID: 11302 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2275.987045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.988115] Call Trace: [ 2275.988470] [ 2275.988780] dump_stack_lvl+0xc1/0xf0 [ 2275.989314] kmem_cache_create_usercopy+0x12b/0x340 [ 2275.990004] p9_client_create+0xd0b/0x1260 [ 2275.990579] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.991279] ? __pfx_p9_client_create+0x10/0x10 [ 2275.991920] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2275.992599] ? lockdep_init_map_type+0x21e/0x7e0 [ 2275.993252] ? __kasan_kmalloc+0x7f/0x90 [ 2275.993828] ? __raw_spin_lock_init+0x3a/0x110 [ 2275.994466] v9fs_session_init+0x1e0/0x17b0 [ 2275.995068] ? lock_release+0x1e3/0x680 [ 2275.995627] ? __pfx_lock_release+0x10/0x10 [ 2275.996232] ? __pfx_v9fs_session_init+0x10/0x10 [ 2275.996898] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2275.997611] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2275.998291] ? v9fs_mount+0x9e/0xbd0 [ 2275.998843] v9fs_mount+0xbd/0xbd0 [ 2275.999360] ? legacy_init_fs_context+0x44/0xe0 [ 2276.000009] ? __pfx_v9fs_mount+0x10/0x10 [ 2276.000599] ? cap_capable+0x1be/0x220 [ 2276.001169] ? __pfx_v9fs_mount+0x10/0x10 [ 2276.001763] legacy_get_tree+0x109/0x220 [ 2276.002353] vfs_get_tree+0x92/0x360 [ 2276.002891] path_mount+0x133c/0x1e50 [ 2276.003445] ? kasan_quarantine_put+0x81/0x1d0 [ 2276.004101] ? __pfx_path_mount+0x10/0x10 [ 2276.004691] ? putname+0x102/0x140 [ 2276.005202] ? kmem_cache_free+0xff/0x4a0 [ 2276.005776] ? putname+0x102/0x140 [ 2276.006290] __x64_sys_mount+0x286/0x310 [ 2276.006849] ? __pfx___x64_sys_mount+0x10/0x10 [ 2276.007475] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2276.008216] do_syscall_64+0x3f/0x90 [ 2276.008752] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2276.009471] RIP: 0033:0x7f8273cb8b19 [ 2276.009988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2276.012341] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2276.013342] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2276.014275] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2276.015220] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2276.016179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2276.017118] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2276.018083] [ 2287.625179] loop2: detected capacity change from 0 to 40 00:32:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 58) 00:32:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbaf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 9) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed89, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:32:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {0x0}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:32:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe978, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe0f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:32:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2287.672145] kernel write not supported for file /11335/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:33:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 59) 00:33:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 10) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe1f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {0x0}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe979, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbbf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbcf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2301.297245] loop2: detected capacity change from 0 to 40 00:33:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe2f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2301.353139] FAULT_INJECTION: forcing a failure. [ 2301.353139] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.354777] CPU: 1 PID: 11381 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2301.355857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.356922] Call Trace: [ 2301.357275] [ 2301.357589] dump_stack_lvl+0xc1/0xf0 [ 2301.358130] should_fail_ex+0x4b4/0x5b0 [ 2301.358691] ? __kernfs_new_node+0xd4/0x870 [ 2301.359272] should_failslab+0x9/0x20 [ 2301.359809] kmem_cache_alloc+0x5a/0x390 [ 2301.360386] __kernfs_new_node+0xd4/0x870 [ 2301.360959] ? __pfx___kernfs_new_node+0x10/0x10 [ 2301.361605] ? down_write+0x11a/0x1f0 [ 2301.362140] ? up_write+0x196/0x510 [ 2301.362664] kernfs_new_node+0x97/0x120 [ 2301.363216] __kernfs_create_file+0x55/0x350 [ 2301.363839] sysfs_add_file_mode_ns+0x21c/0x440 [ 2301.364498] ? __pfx_slab_attr_store+0x10/0x10 [ 2301.365132] internal_create_group+0x322/0xb90 [ 2301.365754] ? __pfx_internal_create_group+0x10/0x10 [ 2301.366429] ? up_write+0x196/0x510 [ 2301.366950] sysfs_slab_add+0x18e/0x220 [ 2301.367492] __kmem_cache_create+0x1fe/0x610 [ 2301.368098] kmem_cache_create_usercopy+0x218/0x340 [ 2301.368787] p9_client_create+0xd0b/0x1260 [ 2301.369365] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.370064] ? __pfx_p9_client_create+0x10/0x10 00:33:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2301.370722] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2301.371560] ? lockdep_init_map_type+0x21e/0x7e0 [ 2301.372244] ? __kasan_kmalloc+0x7f/0x90 [ 2301.372842] ? __raw_spin_lock_init+0x3a/0x110 [ 2301.373504] v9fs_session_init+0x1e0/0x17b0 [ 2301.374128] ? lock_release+0x1e3/0x680 [ 2301.374695] ? __pfx_lock_release+0x10/0x10 [ 2301.375303] ? __pfx_v9fs_session_init+0x10/0x10 [ 2301.375981] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.376732] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2301.377425] ? v9fs_mount+0x9e/0xbd0 [ 2301.377969] v9fs_mount+0xbd/0xbd0 [ 2301.378496] ? legacy_init_fs_context+0x44/0xe0 [ 2301.379151] ? __pfx_v9fs_mount+0x10/0x10 [ 2301.379753] ? cap_capable+0x1be/0x220 [ 2301.380343] ? __pfx_v9fs_mount+0x10/0x10 [ 2301.380944] legacy_get_tree+0x109/0x220 [ 2301.381539] vfs_get_tree+0x92/0x360 [ 2301.382097] path_mount+0x133c/0x1e50 [ 2301.382663] ? kasan_quarantine_put+0x81/0x1d0 [ 2301.383324] ? __pfx_path_mount+0x10/0x10 [ 2301.383923] ? putname+0x102/0x140 [ 2301.384445] ? kmem_cache_free+0xff/0x4a0 [ 2301.385044] ? putname+0x102/0x140 00:33:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2301.385555] __x64_sys_mount+0x286/0x310 [ 2301.386246] ? __pfx___x64_sys_mount+0x10/0x10 [ 2301.386865] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.387596] do_syscall_64+0x3f/0x90 [ 2301.388123] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2301.388859] RIP: 0033:0x7f8273cb8b19 [ 2301.389378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.391788] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2301.392839] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2301.393801] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2301.394762] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2301.395720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.396679] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2301.397671] 00:33:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbdf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2301.430958] FAULT_INJECTION: forcing a failure. [ 2301.430958] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.433061] CPU: 1 PID: 11385 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2301.434207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.435328] Call Trace: [ 2301.435682] [ 2301.436012] dump_stack_lvl+0xc1/0xf0 [ 2301.436601] should_fail_ex+0x4b4/0x5b0 [ 2301.437212] should_failslab+0x9/0x20 [ 2301.437784] kmem_cache_alloc_lru+0x6b/0x600 [ 2301.438404] ? __d_alloc+0x31/0x9c0 [ 2301.438957] __d_alloc+0x31/0x9c0 [ 2301.439440] ? __lock_acquire+0x19b1/0x6340 [ 2301.440078] d_alloc_parallel+0x10e/0x1640 [ 2301.440692] ? __pfx___lock_acquire+0x10/0x10 [ 2301.441326] ? find_held_lock+0x2c/0x110 [ 2301.441898] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2301.442581] ? lockdep_init_map_type+0x21e/0x7e0 [ 2301.443253] ? lock_acquire+0x19a/0x4c0 [ 2301.443813] ? lockdep_init_map_type+0x21e/0x7e0 [ 2301.444502] __lookup_slow+0x193/0x470 [ 2301.445077] ? __pfx___lookup_slow+0x10/0x10 [ 2301.445718] ? lookup_fast+0x14e/0x530 [ 2301.446286] walk_component+0x345/0x5b0 [ 2301.446864] link_path_walk.part.0+0x76e/0xd90 [ 2301.447521] ? __pfx_link_path_walk.part.0+0x10/0x10 [ 2301.448271] path_openat+0x24e/0x2750 [ 2301.448844] ? __pfx_path_openat+0x10/0x10 [ 2301.449436] ? __create_object+0x3ee/0xc90 [ 2301.450062] do_filp_open+0x1ba/0x410 [ 2301.450603] ? __pfx_do_filp_open+0x10/0x10 [ 2301.451232] ? expand_files+0x446/0x8e0 [ 2301.451789] ? find_held_lock+0x2c/0x110 [ 2301.452410] ? __pfx_kfree_link+0x10/0x10 [ 2301.453026] ? _raw_spin_unlock+0x1e/0x40 [ 2301.453623] ? alloc_fd+0x2eb/0x760 [ 2301.454172] do_sys_openat2+0x171/0x4c0 [ 2301.454759] ? __pfx_do_sys_openat2+0x10/0x10 [ 2301.455433] __x64_sys_openat+0x143/0x200 [ 2301.456033] ? __pfx___x64_sys_openat+0x10/0x10 [ 2301.456722] ? ksys_write+0x1a7/0x260 [ 2301.457289] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.458031] do_syscall_64+0x3f/0x90 [ 2301.458581] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2301.459321] RIP: 0033:0x7fecdd4cda04 [ 2301.459846] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2301.462251] RSP: 002b:00007fecdaa6f060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2301.463308] RAX: ffffffffffffffda RBX: 00007fecdd62e020 RCX: 00007fecdd4cda04 [ 2301.464280] RDX: 0000000000000002 RSI: 00007fecdaa6f0f0 RDI: 00000000ffffff9c [ 2301.465263] RBP: 00007fecdaa6f0f0 R08: 0000000000000000 R09: 00007fecdaa6ef70 [ 2301.466235] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2301.467185] R13: 00007fff097a018f R14: 00007fecdaa6f300 R15: 0000000000022000 [ 2301.468201] 00:33:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2301.500085] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2301.501135] CPU: 0 PID: 11381 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2301.502174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.503225] Call Trace: [ 2301.503570] [ 2301.503881] dump_stack_lvl+0xc1/0xf0 [ 2301.504433] kmem_cache_create_usercopy+0x12b/0x340 [ 2301.505125] p9_client_create+0xd0b/0x1260 [ 2301.505709] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.506406] ? __pfx_p9_client_create+0x10/0x10 [ 2301.507026] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2301.507686] ? lockdep_init_map_type+0x21e/0x7e0 [ 2301.508334] ? __kasan_kmalloc+0x7f/0x90 [ 2301.508903] ? __raw_spin_lock_init+0x3a/0x110 [ 2301.509527] v9fs_session_init+0x1e0/0x17b0 [ 2301.510088] ? lock_release+0x1e3/0x680 [ 2301.510630] ? __pfx_lock_release+0x10/0x10 [ 2301.511214] ? __pfx_v9fs_session_init+0x10/0x10 [ 2301.511856] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.512581] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2301.513219] ? v9fs_mount+0x9e/0xbd0 [ 2301.513747] v9fs_mount+0xbd/0xbd0 [ 2301.514231] ? legacy_init_fs_context+0x44/0xe0 [ 2301.514868] ? __pfx_v9fs_mount+0x10/0x10 [ 2301.515416] ? cap_capable+0x1be/0x220 [ 2301.515962] ? __pfx_v9fs_mount+0x10/0x10 [ 2301.516506] legacy_get_tree+0x109/0x220 [ 2301.517069] vfs_get_tree+0x92/0x360 [ 2301.517596] path_mount+0x133c/0x1e50 [ 2301.518115] ? kasan_quarantine_put+0x81/0x1d0 [ 2301.518737] ? __pfx_path_mount+0x10/0x10 [ 2301.519275] ? putname+0x102/0x140 [ 2301.519772] ? kmem_cache_free+0xff/0x4a0 [ 2301.520352] ? putname+0x102/0x140 [ 2301.520859] __x64_sys_mount+0x286/0x310 [ 2301.521403] ? __pfx___x64_sys_mount+0x10/0x10 [ 2301.521980] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2301.522679] do_syscall_64+0x3f/0x90 [ 2301.523164] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2301.523874] RIP: 0033:0x7f8273cb8b19 [ 2301.524376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.526837] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2301.527883] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2301.528881] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2301.529868] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2301.530856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.531840] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2301.532890] 00:33:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe3f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2301.553040] loop2: detected capacity change from 0 to 40 [ 2301.580443] 9pnet_fd: Insufficient options for proto=fd 00:33:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 60) 00:33:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 11) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbef8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2315.407027] kernel write not supported for file /11414/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:33:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2315.416865] loop2: detected capacity change from 0 to 40 00:33:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 61) 00:33:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbff8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe5f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2315.559247] loop2: detected capacity change from 0 to 40 00:33:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 12) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2315.585135] FAULT_INJECTION: forcing a failure. [ 2315.585135] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.586742] CPU: 0 PID: 11446 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2315.587788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.588838] Call Trace: [ 2315.589182] [ 2315.589490] dump_stack_lvl+0xc1/0xf0 [ 2315.590020] should_fail_ex+0x4b4/0x5b0 [ 2315.590580] ? __kernfs_new_node+0xd4/0x870 [ 2315.591155] should_failslab+0x9/0x20 [ 2315.591687] kmem_cache_alloc+0x5a/0x390 [ 2315.592250] __kernfs_new_node+0xd4/0x870 [ 2315.592831] ? __pfx___kernfs_new_node+0x10/0x10 [ 2315.593479] ? down_write+0x11a/0x1f0 [ 2315.594011] ? up_write+0x196/0x510 [ 2315.594528] kernfs_new_node+0x97/0x120 [ 2315.595076] __kernfs_create_file+0x55/0x350 [ 2315.595696] sysfs_add_file_mode_ns+0x21c/0x440 [ 2315.596338] ? __pfx_slab_attr_store+0x10/0x10 [ 2315.596986] internal_create_group+0x322/0xb90 [ 2315.597611] ? __pfx_internal_create_group+0x10/0x10 [ 2315.598290] ? up_write+0x196/0x510 [ 2315.598806] sysfs_slab_add+0x18e/0x220 [ 2315.599349] __kmem_cache_create+0x1fe/0x610 [ 2315.599954] kmem_cache_create_usercopy+0x218/0x340 [ 2315.600645] p9_client_create+0xd0b/0x1260 [ 2315.601220] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.601915] ? __pfx_p9_client_create+0x10/0x10 [ 2315.602536] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2315.603198] ? lockdep_init_map_type+0x21e/0x7e0 [ 2315.603833] ? __kasan_kmalloc+0x7f/0x90 [ 2315.604401] ? __raw_spin_lock_init+0x3a/0x110 [ 2315.605025] v9fs_session_init+0x1e0/0x17b0 [ 2315.605615] ? lock_release+0x1e3/0x680 [ 2315.606154] ? __pfx_lock_release+0x10/0x10 [ 2315.606730] ? __pfx_v9fs_session_init+0x10/0x10 [ 2315.607374] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.608069] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2315.608746] ? v9fs_mount+0x9e/0xbd0 [ 2315.609283] v9fs_mount+0xbd/0xbd0 [ 2315.609783] ? legacy_init_fs_context+0x44/0xe0 [ 2315.610402] ? __pfx_v9fs_mount+0x10/0x10 [ 2315.610973] ? cap_capable+0x1be/0x220 [ 2315.611524] ? __pfx_v9fs_mount+0x10/0x10 [ 2315.612093] legacy_get_tree+0x109/0x220 [ 2315.612663] vfs_get_tree+0x92/0x360 [ 2315.613189] path_mount+0x133c/0x1e50 [ 2315.613727] ? kasan_quarantine_put+0x81/0x1d0 [ 2315.614352] ? __pfx_path_mount+0x10/0x10 [ 2315.614917] ? putname+0x102/0x140 [ 2315.615415] ? kmem_cache_free+0xff/0x4a0 [ 2315.615979] ? putname+0x102/0x140 [ 2315.616496] __x64_sys_mount+0x286/0x310 [ 2315.617054] ? __pfx___x64_sys_mount+0x10/0x10 [ 2315.617708] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.618412] do_syscall_64+0x3f/0x90 [ 2315.618930] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2315.619629] RIP: 0033:0x7f8273cb8b19 [ 2315.620121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.622402] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2315.623371] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2315.624287] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2315.625344] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2315.626360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2315.627364] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2315.628333] [ 2315.670644] FAULT_INJECTION: forcing a failure. [ 2315.670644] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.671468] CPU: 1 PID: 11457 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2315.672016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.672567] Call Trace: [ 2315.672761] [ 2315.672921] dump_stack_lvl+0xc1/0xf0 [ 2315.673194] should_fail_ex+0x4b4/0x5b0 [ 2315.673484] should_failslab+0x9/0x20 [ 2315.673755] kmem_cache_alloc_lru+0x6b/0x600 [ 2315.674069] ? proc_alloc_inode+0x27/0x210 [ 2315.674364] ? find_held_lock+0x2c/0x110 [ 2315.674663] proc_alloc_inode+0x27/0x210 [ 2315.674947] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2315.675269] alloc_inode+0x63/0x240 [ 2315.675527] new_inode+0x25/0x1f0 [ 2315.675771] proc_pid_make_inode+0x26/0x230 [ 2315.676075] proc_pident_instantiate+0x85/0x320 [ 2315.676417] proc_pident_lookup+0x1da/0x270 [ 2315.676716] __lookup_slow+0x252/0x470 [ 2315.677006] ? __pfx___lookup_slow+0x10/0x10 [ 2315.677335] ? lookup_fast+0x14e/0x530 [ 2315.677604] walk_component+0x345/0x5b0 [ 2315.677885] link_path_walk.part.0+0x76e/0xd90 [ 2315.678212] ? __pfx_link_path_walk.part.0+0x10/0x10 [ 2315.678570] path_openat+0x24e/0x2750 [ 2315.678847] ? __pfx_path_openat+0x10/0x10 [ 2315.679135] ? __create_object+0x3ee/0xc90 [ 2315.679424] do_filp_open+0x1ba/0x410 [ 2315.679691] ? __pfx_do_filp_open+0x10/0x10 [ 2315.679988] ? expand_files+0x446/0x8e0 [ 2315.680282] ? find_held_lock+0x2c/0x110 [ 2315.680600] ? __pfx_kfree_link+0x10/0x10 [ 2315.680909] ? _raw_spin_unlock+0x1e/0x40 [ 2315.681205] ? alloc_fd+0x2eb/0x760 [ 2315.681485] do_sys_openat2+0x171/0x4c0 [ 2315.681790] ? __pfx_do_sys_openat2+0x10/0x10 [ 2315.682135] __x64_sys_openat+0x143/0x200 [ 2315.682442] ? __pfx___x64_sys_openat+0x10/0x10 [ 2315.682783] ? ksys_write+0x1a7/0x260 [ 2315.683067] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.683442] do_syscall_64+0x3f/0x90 [ 2315.683721] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2315.684090] RIP: 0033:0x7fecdd4cda04 [ 2315.684368] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2315.685596] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2315.686117] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2315.686610] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2315.687096] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2315.687582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2315.688071] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2315.688581] [ 2315.700821] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2315.701444] CPU: 1 PID: 11446 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2315.702207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.702978] Call Trace: [ 2315.703231] [ 2315.703455] dump_stack_lvl+0xc1/0xf0 [ 2315.703843] kmem_cache_create_usercopy+0x12b/0x340 [ 2315.704342] p9_client_create+0xd0b/0x1260 [ 2315.704764] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.705267] ? __pfx_p9_client_create+0x10/0x10 [ 2315.705726] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2315.706210] ? lockdep_init_map_type+0x21e/0x7e0 [ 2315.706669] ? __kasan_kmalloc+0x7f/0x90 [ 2315.707078] ? __raw_spin_lock_init+0x3a/0x110 [ 2315.707539] v9fs_session_init+0x1e0/0x17b0 [ 2315.707985] ? lock_release+0x1e3/0x680 [ 2315.708385] ? __pfx_lock_release+0x10/0x10 [ 2315.708812] ? __pfx_v9fs_session_init+0x10/0x10 [ 2315.709285] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.709792] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2315.710279] ? v9fs_mount+0x9e/0xbd0 [ 2315.710669] v9fs_mount+0xbd/0xbd0 [ 2315.711041] ? legacy_init_fs_context+0x44/0xe0 [ 2315.711489] ? __pfx_v9fs_mount+0x10/0x10 [ 2315.711904] ? cap_capable+0x1be/0x220 [ 2315.712349] ? __pfx_v9fs_mount+0x10/0x10 [ 2315.712774] legacy_get_tree+0x109/0x220 [ 2315.713187] vfs_get_tree+0x92/0x360 [ 2315.713469] path_mount+0x133c/0x1e50 [ 2315.713756] ? kasan_quarantine_put+0x81/0x1d0 [ 2315.714093] ? __pfx_path_mount+0x10/0x10 [ 2315.714399] ? putname+0x102/0x140 [ 2315.714664] ? kmem_cache_free+0xff/0x4a0 [ 2315.714974] ? putname+0x102/0x140 [ 2315.715245] __x64_sys_mount+0x286/0x310 [ 2315.715540] ? __pfx___x64_sys_mount+0x10/0x10 [ 2315.715871] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2315.716253] do_syscall_64+0x3f/0x90 [ 2315.716537] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2315.716912] RIP: 0033:0x7f8273cb8b19 [ 2315.717180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.718431] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2315.718962] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2315.719456] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2315.719955] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2315.720459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2315.720956] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2315.721469] 00:33:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 62) 00:33:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2328.359235] loop2: detected capacity change from 0 to 40 00:33:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeafa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1", 0x3e}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed8f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe6f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 13) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe7f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 63) 00:33:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe8f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2328.428364] kernel write not supported for file /11478/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:33:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1", 0x3e}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeafb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc1f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed90, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2328.532506] FAULT_INJECTION: forcing a failure. [ 2328.532506] name failslab, interval 1, probability 0, space 0, times 0 [ 2328.536219] CPU: 1 PID: 11490 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2328.537315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.538415] Call Trace: [ 2328.538786] [ 2328.539115] dump_stack_lvl+0xc1/0xf0 [ 2328.539673] should_fail_ex+0x4b4/0x5b0 [ 2328.540262] ? __kernfs_new_node+0xd4/0x870 [ 2328.540881] should_failslab+0x9/0x20 [ 2328.541437] kmem_cache_alloc+0x5a/0x390 [ 2328.542028] __kernfs_new_node+0xd4/0x870 [ 2328.542612] ? __pfx___kernfs_new_node+0x10/0x10 [ 2328.543299] ? down_write+0x11a/0x1f0 [ 2328.543859] ? up_write+0x196/0x510 [ 2328.544400] kernfs_new_node+0x97/0x120 [ 2328.545002] __kernfs_create_file+0x55/0x350 [ 2328.545665] sysfs_add_file_mode_ns+0x21c/0x440 [ 2328.546342] ? __pfx_slab_attr_store+0x10/0x10 [ 2328.547029] internal_create_group+0x322/0xb90 [ 2328.547701] ? __pfx_internal_create_group+0x10/0x10 [ 2328.548442] ? up_write+0x207/0x510 [ 2328.549019] sysfs_slab_add+0x18e/0x220 [ 2328.549608] __kmem_cache_create+0x1fe/0x610 [ 2328.550270] kmem_cache_create_usercopy+0x218/0x340 [ 2328.551012] p9_client_create+0xd0b/0x1260 [ 2328.551635] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.552385] ? __pfx_p9_client_create+0x10/0x10 [ 2328.553070] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2328.553783] ? lockdep_init_map_type+0x21e/0x7e0 [ 2328.554468] ? __kasan_kmalloc+0x7f/0x90 [ 2328.555088] ? __raw_spin_lock_init+0x3a/0x110 [ 2328.555768] v9fs_session_init+0x1e0/0x17b0 [ 2328.556403] ? lock_release+0x1e3/0x680 [ 2328.556995] ? __pfx_lock_release+0x10/0x10 [ 2328.557618] ? __pfx_v9fs_session_init+0x10/0x10 [ 2328.558310] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.559063] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2328.559786] ? v9fs_mount+0x9e/0xbd0 [ 2328.560376] v9fs_mount+0xbd/0xbd0 [ 2328.560933] ? legacy_init_fs_context+0x44/0xe0 [ 2328.561602] ? __pfx_v9fs_mount+0x10/0x10 [ 2328.562223] ? cap_capable+0x1be/0x220 [ 2328.562823] ? __pfx_v9fs_mount+0x10/0x10 [ 2328.563446] legacy_get_tree+0x109/0x220 [ 2328.564060] vfs_get_tree+0x92/0x360 [ 2328.564636] path_mount+0x133c/0x1e50 [ 2328.565225] ? kasan_quarantine_put+0x81/0x1d0 [ 2328.565903] ? __pfx_path_mount+0x10/0x10 [ 2328.566523] ? putname+0x102/0x140 [ 2328.567054] ? kmem_cache_free+0xff/0x4a0 [ 2328.567670] ? putname+0x102/0x140 [ 2328.568218] __x64_sys_mount+0x286/0x310 [ 2328.568825] ? __pfx___x64_sys_mount+0x10/0x10 [ 2328.569483] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.570240] do_syscall_64+0x3f/0x90 [ 2328.570802] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2328.571511] RIP: 0033:0x7f8273cb8b19 [ 2328.571986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.574135] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2328.575064] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2328.575940] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2328.576807] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2328.577672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.578564] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2328.579454] [ 2328.605014] loop2: detected capacity change from 0 to 40 [ 2328.717122] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2328.718227] CPU: 0 PID: 11490 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2328.719230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2328.720194] Call Trace: [ 2328.720527] [ 2328.720823] dump_stack_lvl+0xc1/0xf0 [ 2328.721330] kmem_cache_create_usercopy+0x12b/0x340 [ 2328.721971] p9_client_create+0xd0b/0x1260 [ 2328.722513] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.723169] ? __pfx_p9_client_create+0x10/0x10 [ 2328.723762] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2328.724389] ? lockdep_init_map_type+0x21e/0x7e0 [ 2328.724995] ? __kasan_kmalloc+0x7f/0x90 [ 2328.725523] ? __raw_spin_lock_init+0x3a/0x110 [ 2328.726112] v9fs_session_init+0x1e0/0x17b0 [ 2328.726665] ? lock_release+0x1e3/0x680 [ 2328.727174] ? __pfx_lock_release+0x10/0x10 [ 2328.727728] ? __pfx_v9fs_session_init+0x10/0x10 [ 2328.728337] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.729026] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2328.729653] ? v9fs_mount+0x9e/0xbd0 [ 2328.730159] v9fs_mount+0xbd/0xbd0 [ 2328.730635] ? legacy_init_fs_context+0x44/0xe0 [ 2328.731219] ? __pfx_v9fs_mount+0x10/0x10 [ 2328.731759] ? cap_capable+0x1be/0x220 [ 2328.732278] ? __pfx_v9fs_mount+0x10/0x10 [ 2328.732823] legacy_get_tree+0x109/0x220 [ 2328.733354] vfs_get_tree+0x92/0x360 [ 2328.733851] path_mount+0x133c/0x1e50 [ 2328.734351] ? kasan_quarantine_put+0x81/0x1d0 [ 2328.734945] ? __pfx_path_mount+0x10/0x10 [ 2328.735481] ? putname+0x102/0x140 [ 2328.735949] ? kmem_cache_free+0xff/0x4a0 [ 2328.736511] ? putname+0x102/0x140 [ 2328.736996] __x64_sys_mount+0x286/0x310 [ 2328.737522] ? __pfx___x64_sys_mount+0x10/0x10 [ 2328.738099] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2328.738754] do_syscall_64+0x3f/0x90 [ 2328.739245] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2328.739901] RIP: 0033:0x7f8273cb8b19 [ 2328.740368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2328.742537] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2328.743450] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2328.744304] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2328.745164] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2328.746028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2328.746880] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2328.747755] 00:33:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 64) 00:33:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe9f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed91, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1", 0x3e}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:33:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe97f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 14) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc2f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeafc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2342.197521] loop2: detected capacity change from 0 to 40 [ 2342.241309] FAULT_INJECTION: forcing a failure. [ 2342.241309] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.242382] CPU: 0 PID: 11523 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2342.243075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.243766] Call Trace: [ 2342.244008] [ 2342.244228] dump_stack_lvl+0xc1/0xf0 [ 2342.244598] should_fail_ex+0x4b4/0x5b0 [ 2342.245003] ? security_inode_alloc+0x38/0x160 [ 2342.245439] should_failslab+0x9/0x20 [ 2342.245805] kmem_cache_alloc+0x5a/0x390 [ 2342.246204] security_inode_alloc+0x38/0x160 [ 2342.246624] inode_init_always+0xbb2/0xea0 [ 2342.247038] alloc_inode+0x84/0x240 [ 2342.247380] new_inode+0x25/0x1f0 [ 2342.247720] proc_pid_make_inode+0x26/0x230 [ 2342.248128] proc_pident_instantiate+0x85/0x320 [ 2342.248567] proc_pident_lookup+0x1da/0x270 [ 2342.248990] __lookup_slow+0x252/0x470 [ 2342.249370] ? __pfx___lookup_slow+0x10/0x10 [ 2342.249816] ? lookup_fast+0x14e/0x530 [ 2342.250189] walk_component+0x345/0x5b0 [ 2342.250561] link_path_walk.part.0+0x76e/0xd90 [ 2342.250992] ? __pfx_link_path_walk.part.0+0x10/0x10 [ 2342.251466] path_openat+0x24e/0x2750 [ 2342.251837] ? __pfx_path_openat+0x10/0x10 [ 2342.252222] ? __create_object+0x3ee/0xc90 [ 2342.252621] do_filp_open+0x1ba/0x410 [ 2342.253004] ? __pfx_do_filp_open+0x10/0x10 [ 2342.253399] ? expand_files+0x446/0x8e0 [ 2342.253781] ? find_held_lock+0x2c/0x110 [ 2342.254183] ? __pfx_kfree_link+0x10/0x10 [ 2342.254579] ? _raw_spin_unlock+0x1e/0x40 [ 2342.254962] ? alloc_fd+0x2eb/0x760 [ 2342.255320] do_sys_openat2+0x171/0x4c0 [ 2342.255711] ? __pfx_do_sys_openat2+0x10/0x10 [ 2342.256154] __x64_sys_openat+0x143/0x200 [ 2342.256554] ? __pfx___x64_sys_openat+0x10/0x10 [ 2342.257014] ? ksys_write+0x1a7/0x260 [ 2342.257386] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.257875] do_syscall_64+0x3f/0x90 [ 2342.258234] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2342.258716] RIP: 0033:0x7fecdd4cda04 [ 2342.259065] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2342.260621] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2342.261306] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2342.261938] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2342.262558] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2342.263182] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2342.263807] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2342.264454] 00:33:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe980, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc3f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeafd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed92, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:33:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c", 0x5d}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2342.349256] 9pnet_fd: Insufficient options for proto=fd 00:33:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xebf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:33:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 65) [ 2342.424205] loop2: detected capacity change from 0 to 40 [ 2342.521043] FAULT_INJECTION: forcing a failure. [ 2342.521043] name failslab, interval 1, probability 0, space 0, times 0 [ 2342.522522] CPU: 1 PID: 11558 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2342.523466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.524384] Call Trace: [ 2342.524702] [ 2342.524978] dump_stack_lvl+0xc1/0xf0 [ 2342.525454] should_fail_ex+0x4b4/0x5b0 [ 2342.525957] ? __kernfs_new_node+0xd4/0x870 [ 2342.526471] should_failslab+0x9/0x20 [ 2342.526938] kmem_cache_alloc+0x5a/0x390 [ 2342.527438] __kernfs_new_node+0xd4/0x870 [ 2342.527948] ? __pfx___kernfs_new_node+0x10/0x10 [ 2342.528540] ? down_write+0x11a/0x1f0 [ 2342.529046] ? up_write+0x196/0x510 [ 2342.529508] kernfs_new_node+0x97/0x120 [ 2342.530008] __kernfs_create_file+0x55/0x350 [ 2342.530565] sysfs_add_file_mode_ns+0x21c/0x440 [ 2342.531135] ? __pfx_slab_attr_store+0x10/0x10 [ 2342.531714] internal_create_group+0x322/0xb90 [ 2342.532279] ? __pfx_internal_create_group+0x10/0x10 [ 2342.532905] ? up_write+0x207/0x510 [ 2342.533362] sysfs_slab_add+0x18e/0x220 [ 2342.533845] __kmem_cache_create+0x1fe/0x610 [ 2342.534390] kmem_cache_create_usercopy+0x218/0x340 [ 2342.534990] p9_client_create+0xd0b/0x1260 [ 2342.535505] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.536124] ? __pfx_p9_client_create+0x10/0x10 [ 2342.536689] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2342.537280] ? lockdep_init_map_type+0x21e/0x7e0 [ 2342.537837] ? __kasan_kmalloc+0x7f/0x90 [ 2342.538338] ? __raw_spin_lock_init+0x3a/0x110 [ 2342.538897] v9fs_session_init+0x1e0/0x17b0 [ 2342.539427] ? lock_release+0x1e3/0x680 [ 2342.539896] ? __pfx_lock_release+0x10/0x10 [ 2342.540371] ? __pfx_v9fs_session_init+0x10/0x10 [ 2342.540905] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.541486] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2342.542026] ? v9fs_mount+0x9e/0xbd0 [ 2342.542467] v9fs_mount+0xbd/0xbd0 [ 2342.542871] ? legacy_init_fs_context+0x44/0xe0 [ 2342.543382] ? __pfx_v9fs_mount+0x10/0x10 [ 2342.543849] ? cap_capable+0x1be/0x220 [ 2342.544292] ? __pfx_v9fs_mount+0x10/0x10 [ 2342.544764] legacy_get_tree+0x109/0x220 [ 2342.545227] vfs_get_tree+0x92/0x360 [ 2342.545650] path_mount+0x133c/0x1e50 [ 2342.546087] ? kasan_quarantine_put+0x81/0x1d0 [ 2342.546593] ? __pfx_path_mount+0x10/0x10 [ 2342.547057] ? putname+0x102/0x140 [ 2342.547459] ? kmem_cache_free+0xff/0x4a0 [ 2342.547918] ? putname+0x102/0x140 [ 2342.548326] __x64_sys_mount+0x286/0x310 [ 2342.548780] ? __pfx___x64_sys_mount+0x10/0x10 [ 2342.549286] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.549877] do_syscall_64+0x3f/0x90 [ 2342.550334] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2342.550947] RIP: 0033:0x7f8273cb8b19 [ 2342.551383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.553458] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2342.554337] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2342.555146] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2342.555948] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2342.556766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.557565] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2342.558398] [ 2342.575918] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2342.576818] CPU: 1 PID: 11558 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2342.577737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2342.578671] Call Trace: [ 2342.578974] [ 2342.579252] dump_stack_lvl+0xc1/0xf0 [ 2342.579719] kmem_cache_create_usercopy+0x12b/0x340 [ 2342.580313] p9_client_create+0xd0b/0x1260 [ 2342.580842] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.581456] ? __pfx_p9_client_create+0x10/0x10 [ 2342.582008] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2342.582597] ? lockdep_init_map_type+0x21e/0x7e0 [ 2342.583153] ? __kasan_kmalloc+0x7f/0x90 [ 2342.583645] ? __raw_spin_lock_init+0x3a/0x110 [ 2342.584193] v9fs_session_init+0x1e0/0x17b0 [ 2342.584738] ? lock_release+0x1e3/0x680 [ 2342.585211] ? __pfx_lock_release+0x10/0x10 [ 2342.585716] ? __pfx_v9fs_session_init+0x10/0x10 [ 2342.586278] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.586888] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2342.587475] ? v9fs_mount+0x9e/0xbd0 [ 2342.587961] v9fs_mount+0xbd/0xbd0 [ 2342.588396] ? legacy_init_fs_context+0x44/0xe0 [ 2342.588961] ? __pfx_v9fs_mount+0x10/0x10 [ 2342.589459] ? cap_capable+0x1be/0x220 [ 2342.589952] ? __pfx_v9fs_mount+0x10/0x10 [ 2342.590462] legacy_get_tree+0x109/0x220 [ 2342.590975] vfs_get_tree+0x92/0x360 [ 2342.591436] path_mount+0x133c/0x1e50 [ 2342.591913] ? kasan_quarantine_put+0x81/0x1d0 [ 2342.592459] ? __pfx_path_mount+0x10/0x10 [ 2342.592980] ? putname+0x102/0x140 [ 2342.593415] ? kmem_cache_free+0xff/0x4a0 [ 2342.593919] ? putname+0x102/0x140 [ 2342.594369] __x64_sys_mount+0x286/0x310 [ 2342.594844] ? __pfx___x64_sys_mount+0x10/0x10 [ 2342.595383] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2342.595994] do_syscall_64+0x3f/0x90 [ 2342.596451] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2342.597070] RIP: 0033:0x7f8273cb8b19 [ 2342.597513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2342.599514] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2342.600366] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2342.601213] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2342.602014] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2342.602820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2342.603618] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2342.604451] 00:34:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 66) 00:34:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeafe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xecf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed93, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe981, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc4f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 15) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c", 0x5d}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2355.992130] loop2: detected capacity change from 0 to 40 00:34:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc5f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c", 0x5d}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed94, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe982, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2356.100268] kernel write not supported for file /11580/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:34:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 67) [ 2356.149875] loop2: detected capacity change from 0 to 40 00:34:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc6f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2356.212135] FAULT_INJECTION: forcing a failure. [ 2356.212135] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.212985] CPU: 1 PID: 11601 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2356.213555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.214112] Call Trace: [ 2356.214299] [ 2356.214466] dump_stack_lvl+0xc1/0xf0 [ 2356.214754] should_fail_ex+0x4b4/0x5b0 [ 2356.215045] ? __kernfs_new_node+0xd4/0x870 [ 2356.215360] should_failslab+0x9/0x20 [ 2356.215645] kmem_cache_alloc+0x5a/0x390 [ 2356.215957] __kernfs_new_node+0xd4/0x870 [ 2356.216263] ? __pfx___kernfs_new_node+0x10/0x10 [ 2356.216609] ? down_write+0x11a/0x1f0 [ 2356.216909] ? up_write+0x196/0x510 [ 2356.217180] kernfs_new_node+0x97/0x120 [ 2356.217461] __kernfs_create_file+0x55/0x350 [ 2356.217786] sysfs_add_file_mode_ns+0x21c/0x440 [ 2356.218117] ? __pfx_slab_attr_store+0x10/0x10 [ 2356.218460] internal_create_group+0x322/0xb90 [ 2356.218794] ? __pfx_internal_create_group+0x10/0x10 [ 2356.219157] ? up_write+0x196/0x510 [ 2356.219440] sysfs_slab_add+0x18e/0x220 [ 2356.219730] __kmem_cache_create+0x1fe/0x610 [ 2356.220058] kmem_cache_create_usercopy+0x218/0x340 [ 2356.220430] p9_client_create+0xd0b/0x1260 [ 2356.220732] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.221104] ? __pfx_p9_client_create+0x10/0x10 00:34:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed95, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2356.221439] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2356.221948] ? lockdep_init_map_type+0x21e/0x7e0 [ 2356.222298] ? __kasan_kmalloc+0x7f/0x90 [ 2356.222593] ? __raw_spin_lock_init+0x3a/0x110 [ 2356.222942] v9fs_session_init+0x1e0/0x17b0 [ 2356.223256] ? lock_release+0x1e3/0x680 [ 2356.223557] ? __pfx_lock_release+0x10/0x10 [ 2356.223861] ? __pfx_v9fs_session_init+0x10/0x10 [ 2356.224223] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.224589] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2356.224963] ? v9fs_mount+0x9e/0xbd0 [ 2356.225266] v9fs_mount+0xbd/0xbd0 [ 2356.225527] ? legacy_init_fs_context+0x44/0xe0 [ 2356.225878] ? __pfx_v9fs_mount+0x10/0x10 [ 2356.226179] ? cap_capable+0x1be/0x220 [ 2356.226489] ? __pfx_v9fs_mount+0x10/0x10 [ 2356.226801] legacy_get_tree+0x109/0x220 [ 2356.227118] vfs_get_tree+0x92/0x360 [ 2356.227398] path_mount+0x133c/0x1e50 [ 2356.227698] ? kasan_quarantine_put+0x81/0x1d0 [ 2356.228046] ? __pfx_path_mount+0x10/0x10 00:34:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2356.228345] ? putname+0x102/0x140 [ 2356.228754] ? kmem_cache_free+0xff/0x4a0 [ 2356.229435] ? putname+0x102/0x140 [ 2356.229968] __x64_sys_mount+0x286/0x310 [ 2356.230537] ? __pfx___x64_sys_mount+0x10/0x10 [ 2356.231179] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.231905] do_syscall_64+0x3f/0x90 [ 2356.232454] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2356.233220] RIP: 0033:0x7f8273cb8b19 [ 2356.233741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.236071] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2356.237076] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2356.238044] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2356.238954] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2356.239888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.240869] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2356.241826] 00:34:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc7f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2356.287122] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2356.288151] CPU: 0 PID: 11601 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2356.289142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.290143] Call Trace: [ 2356.290471] [ 2356.290773] dump_stack_lvl+0xc1/0xf0 [ 2356.291275] kmem_cache_create_usercopy+0x12b/0x340 [ 2356.291918] p9_client_create+0xd0b/0x1260 [ 2356.292450] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.293124] ? __pfx_p9_client_create+0x10/0x10 [ 2356.293712] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2356.294334] ? lockdep_init_map_type+0x21e/0x7e0 [ 2356.294923] ? __kasan_kmalloc+0x7f/0x90 [ 2356.295454] ? __raw_spin_lock_init+0x3a/0x110 [ 2356.296042] v9fs_session_init+0x1e0/0x17b0 [ 2356.296600] ? lock_release+0x1e3/0x680 [ 2356.297110] ? __pfx_lock_release+0x10/0x10 [ 2356.297649] ? __pfx_v9fs_session_init+0x10/0x10 [ 2356.298309] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.299137] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2356.299895] ? v9fs_mount+0x9e/0xbd0 [ 2356.300518] v9fs_mount+0xbd/0xbd0 [ 2356.301115] ? legacy_init_fs_context+0x44/0xe0 [ 2356.301847] ? __pfx_v9fs_mount+0x10/0x10 [ 2356.302506] ? cap_capable+0x1be/0x220 [ 2356.303158] ? __pfx_v9fs_mount+0x10/0x10 [ 2356.303825] legacy_get_tree+0x109/0x220 [ 2356.304492] vfs_get_tree+0x92/0x360 [ 2356.305117] path_mount+0x133c/0x1e50 [ 2356.305713] ? kasan_quarantine_put+0x81/0x1d0 [ 2356.306356] ? __pfx_path_mount+0x10/0x10 [ 2356.306887] ? putname+0x102/0x140 [ 2356.307392] ? kmem_cache_free+0xff/0x4a0 [ 2356.307926] ? putname+0x102/0x140 [ 2356.308442] __x64_sys_mount+0x286/0x310 [ 2356.308957] ? __pfx___x64_sys_mount+0x10/0x10 [ 2356.309583] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2356.310231] do_syscall_64+0x3f/0x90 [ 2356.310759] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2356.311406] RIP: 0033:0x7f8273cb8b19 [ 2356.311916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.314018] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2356.315070] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2356.316147] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2356.317241] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2356.318315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.319391] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2356.320484] 00:34:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 68) 00:34:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea88", 0x6c}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeef9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb01, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 16) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe983, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed96, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2367.953715] loop2: detected capacity change from 0 to 40 00:34:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc8f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb02, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea88", 0x6c}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2368.035955] FAULT_INJECTION: forcing a failure. [ 2368.035955] name failslab, interval 1, probability 0, space 0, times 0 [ 2368.037046] CPU: 1 PID: 11643 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2368.037594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2368.038153] Call Trace: [ 2368.038333] [ 2368.038497] dump_stack_lvl+0xc1/0xf0 [ 2368.038777] should_fail_ex+0x4b4/0x5b0 [ 2368.039071] should_failslab+0x9/0x20 [ 2368.039347] kmem_cache_alloc_lru+0x6b/0x600 [ 2368.039662] ? __d_alloc+0x31/0x9c0 [ 2368.039933] __d_alloc+0x31/0x9c0 [ 2368.040187] d_alloc_parallel+0x10e/0x1640 [ 2368.040487] ? __d_lookup+0x247/0x4a0 [ 2368.040764] ? lock_release+0x1e3/0x680 [ 2368.041054] ? lock_release+0x1e3/0x680 [ 2368.041341] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2368.041671] ? lock_is_held_type+0x9f/0x120 [ 2368.041985] ? __d_lookup+0x269/0x4a0 [ 2368.042262] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2368.042629] lookup_open.isra.0+0x912/0x1400 [ 2368.042942] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2368.043292] ? __mnt_want_write+0x1f4/0x2e0 [ 2368.043603] path_openat+0x97c/0x2750 [ 2368.043883] ? __pfx_path_openat+0x10/0x10 [ 2368.044176] ? __create_object+0x3ee/0xc90 [ 2368.044480] do_filp_open+0x1ba/0x410 [ 2368.044751] ? __pfx_do_filp_open+0x10/0x10 [ 2368.045054] ? expand_files+0x446/0x8e0 [ 2368.045340] ? find_held_lock+0x2c/0x110 [ 2368.045639] ? __pfx_kfree_link+0x10/0x10 [ 2368.045939] ? _raw_spin_unlock+0x1e/0x40 [ 2368.046228] ? alloc_fd+0x2eb/0x760 [ 2368.046503] do_sys_openat2+0x171/0x4c0 [ 2368.046793] ? __pfx_do_sys_openat2+0x10/0x10 [ 2368.047122] __x64_sys_openat+0x143/0x200 [ 2368.047421] ? __pfx___x64_sys_openat+0x10/0x10 [ 2368.047758] ? ksys_write+0x1a7/0x260 [ 2368.048036] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2368.048401] do_syscall_64+0x3f/0x90 [ 2368.048672] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2368.049050] RIP: 0033:0x7fecdd4cda04 [ 2368.049310] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2368.050507] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2368.051017] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2368.051491] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2368.051962] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2368.052441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2368.052915] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2368.053409] 00:34:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd403, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeff9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2368.090171] loop2: detected capacity change from 0 to 40 00:34:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf0f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea88", 0x6c}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe984, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 69) 00:34:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 17) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf1f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf897, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2380.053200] FAULT_INJECTION: forcing a failure. [ 2380.053200] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.054039] CPU: 0 PID: 11679 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2380.054620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.055219] Call Trace: [ 2380.055416] [ 2380.055591] dump_stack_lvl+0xc1/0xf0 [ 2380.055892] should_fail_ex+0x4b4/0x5b0 [ 2380.056207] ? __kernfs_new_node+0xd4/0x870 [ 2380.056538] should_failslab+0x9/0x20 [ 2380.056838] kmem_cache_alloc+0x5a/0x390 [ 2380.057164] __kernfs_new_node+0xd4/0x870 [ 2380.057483] ? __pfx___kernfs_new_node+0x10/0x10 [ 2380.057856] ? down_write+0x11a/0x1f0 [ 2380.058161] ? up_write+0x196/0x510 [ 2380.058452] kernfs_new_node+0x97/0x120 [ 2380.058744] __kernfs_create_file+0x55/0x350 [ 2380.059084] sysfs_add_file_mode_ns+0x21c/0x440 [ 2380.059429] ? __pfx_slab_attr_store+0x10/0x10 [ 2380.059797] internal_create_group+0x322/0xb90 [ 2380.060153] ? __pfx_internal_create_group+0x10/0x10 [ 2380.060548] ? up_write+0x196/0x510 [ 2380.060841] sysfs_slab_add+0x18e/0x220 [ 2380.061164] __kmem_cache_create+0x1fe/0x610 [ 2380.061512] kmem_cache_create_usercopy+0x218/0x340 [ 2380.061899] p9_client_create+0xd0b/0x1260 [ 2380.062197] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.062592] ? __pfx_p9_client_create+0x10/0x10 [ 2380.062919] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2380.063294] ? lockdep_init_map_type+0x21e/0x7e0 [ 2380.063650] ? __kasan_kmalloc+0x7f/0x90 [ 2380.063970] ? __raw_spin_lock_init+0x3a/0x110 [ 2380.064336] v9fs_session_init+0x1e0/0x17b0 [ 2380.064672] ? lock_release+0x1e3/0x680 [ 2380.064971] ? __pfx_lock_release+0x10/0x10 [ 2380.065306] ? __pfx_v9fs_session_init+0x10/0x10 [ 2380.065675] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.066072] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2380.066452] ? v9fs_mount+0x9e/0xbd0 [ 2380.066740] v9fs_mount+0xbd/0xbd0 [ 2380.067027] ? legacy_init_fs_context+0x44/0xe0 [ 2380.067378] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.067696] ? cap_capable+0x1be/0x220 [ 2380.068007] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.068335] legacy_get_tree+0x109/0x220 [ 2380.068650] vfs_get_tree+0x92/0x360 [ 2380.068948] path_mount+0x133c/0x1e50 [ 2380.069258] ? kasan_quarantine_put+0x81/0x1d0 [ 2380.069606] ? __pfx_path_mount+0x10/0x10 [ 2380.069926] ? putname+0x102/0x140 [ 2380.070207] ? kmem_cache_free+0xff/0x4a0 [ 2380.070529] ? putname+0x102/0x140 [ 2380.070820] __x64_sys_mount+0x286/0x310 [ 2380.071128] ? __pfx___x64_sys_mount+0x10/0x10 [ 2380.071474] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.071880] do_syscall_64+0x3f/0x90 [ 2380.072167] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2380.072567] RIP: 0033:0x7f8273cb8b19 [ 2380.072852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.074193] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2380.074744] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2380.075262] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2380.075791] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2380.076317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.076853] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2380.077409] [ 2380.090530] loop2: detected capacity change from 0 to 40 [ 2380.116168] kernel write not supported for file /11670/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:34:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed98, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:24 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe985, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb04, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf898, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2380.203636] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2380.204219] CPU: 0 PID: 11679 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2380.204814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.205426] Call Trace: [ 2380.205620] [ 2380.205791] dump_stack_lvl+0xc1/0xf0 [ 2380.206098] kmem_cache_create_usercopy+0x12b/0x340 [ 2380.206468] p9_client_create+0xd0b/0x1260 [ 2380.206792] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.207184] ? __pfx_p9_client_create+0x10/0x10 [ 2380.207531] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2380.207902] ? lockdep_init_map_type+0x21e/0x7e0 [ 2380.208263] ? __kasan_kmalloc+0x7f/0x90 [ 2380.208578] ? __raw_spin_lock_init+0x3a/0x110 [ 2380.208927] v9fs_session_init+0x1e0/0x17b0 [ 2380.209271] ? lock_release+0x1e3/0x680 [ 2380.209568] ? __pfx_lock_release+0x10/0x10 [ 2380.209890] ? __pfx_v9fs_session_init+0x10/0x10 [ 2380.210248] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.210639] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2380.211018] ? v9fs_mount+0x9e/0xbd0 [ 2380.211318] v9fs_mount+0xbd/0xbd0 [ 2380.211603] ? legacy_init_fs_context+0x44/0xe0 [ 2380.211962] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.212285] ? cap_capable+0x1be/0x220 [ 2380.212571] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.212884] legacy_get_tree+0x109/0x220 [ 2380.213218] vfs_get_tree+0x92/0x360 [ 2380.213516] path_mount+0x133c/0x1e50 [ 2380.213807] ? kasan_quarantine_put+0x81/0x1d0 [ 2380.214157] ? __pfx_path_mount+0x10/0x10 [ 2380.214469] ? putname+0x102/0x140 [ 2380.214749] ? kmem_cache_free+0xff/0x4a0 [ 2380.215068] ? putname+0x102/0x140 [ 2380.215352] __x64_sys_mount+0x286/0x310 [ 2380.215656] ? __pfx___x64_sys_mount+0x10/0x10 [ 2380.216009] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2380.216402] do_syscall_64+0x3f/0x90 [ 2380.216696] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2380.217097] RIP: 0033:0x7f8273cb8b19 [ 2380.217380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.218684] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2380.219251] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2380.219779] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2380.220298] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2380.220816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.221364] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2380.221895] 00:34:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe986, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed99, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf2f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf899, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918", 0x74}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb05, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 18) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 70) [ 2392.192206] loop2: detected capacity change from 0 to 40 [ 2392.207906] FAULT_INJECTION: forcing a failure. [ 2392.207906] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.208890] CPU: 0 PID: 11720 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2392.209586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.210273] Call Trace: [ 2392.210498] [ 2392.210699] dump_stack_lvl+0xc1/0xf0 [ 2392.211048] should_fail_ex+0x4b4/0x5b0 [ 2392.211413] should_failslab+0x9/0x20 [ 2392.211759] kmem_cache_alloc_lru+0x6b/0x600 [ 2392.212144] ? proc_alloc_inode+0x27/0x210 [ 2392.212512] proc_alloc_inode+0x27/0x210 [ 2392.212863] ? __pfx_proc_alloc_inode+0x10/0x10 [ 2392.213262] alloc_inode+0x63/0x240 [ 2392.213584] new_inode+0x25/0x1f0 [ 2392.213885] proc_get_inode+0x22/0x890 [ 2392.214224] proc_lookup_de+0x13e/0x220 [ 2392.214580] proc_tgid_net_lookup+0x77/0x110 [ 2392.214969] lookup_open.isra.0+0x74e/0x1400 [ 2392.215362] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2392.215787] ? __mnt_want_write+0x1f4/0x2e0 [ 2392.216160] path_openat+0x97c/0x2750 [ 2392.216493] ? __pfx_path_openat+0x10/0x10 [ 2392.216852] ? __create_object+0x3ee/0xc90 [ 2392.217218] do_filp_open+0x1ba/0x410 [ 2392.217550] ? __pfx_do_filp_open+0x10/0x10 [ 2392.217919] ? expand_files+0x446/0x8e0 [ 2392.218270] ? find_held_lock+0x2c/0x110 [ 2392.218631] ? __pfx_kfree_link+0x10/0x10 [ 2392.218987] ? _raw_spin_unlock+0x1e/0x40 [ 2392.219338] ? alloc_fd+0x2eb/0x760 [ 2392.219667] do_sys_openat2+0x171/0x4c0 [ 2392.220021] ? __pfx_do_sys_openat2+0x10/0x10 [ 2392.220428] __x64_sys_openat+0x143/0x200 [ 2392.220793] ? __pfx___x64_sys_openat+0x10/0x10 [ 2392.221202] ? ksys_write+0x1a7/0x260 [ 2392.221557] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.222009] do_syscall_64+0x3f/0x90 [ 2392.222340] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2392.222785] RIP: 0033:0x7fecdd4cda04 [ 2392.223098] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2392.224580] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2392.225197] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2392.225779] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2392.226365] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2392.226947] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2392.227532] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2392.228131] 00:34:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf3f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb06, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe987, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918", 0x74}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 71) 00:34:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf4f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2392.396039] FAULT_INJECTION: forcing a failure. [ 2392.396039] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.397098] CPU: 0 PID: 11748 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2392.397796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.398475] Call Trace: [ 2392.398694] [ 2392.398889] dump_stack_lvl+0xc1/0xf0 [ 2392.399239] should_fail_ex+0x4b4/0x5b0 [ 2392.399601] ? __kernfs_new_node+0xd4/0x870 [ 2392.399981] should_failslab+0x9/0x20 [ 2392.400323] kmem_cache_alloc+0x5a/0x390 [ 2392.400687] __kernfs_new_node+0xd4/0x870 [ 2392.401050] ? __pfx___kernfs_new_node+0x10/0x10 [ 2392.401474] ? down_write+0x11a/0x1f0 [ 2392.401816] ? up_write+0x196/0x510 [ 2392.402147] kernfs_new_node+0x97/0x120 [ 2392.402500] __kernfs_create_file+0x55/0x350 [ 2392.402896] sysfs_add_file_mode_ns+0x21c/0x440 [ 2392.403298] ? __pfx_slab_attr_store+0x10/0x10 [ 2392.403705] internal_create_group+0x322/0xb90 [ 2392.404101] ? __pfx_internal_create_group+0x10/0x10 [ 2392.404541] ? up_write+0x196/0x510 [ 2392.404865] sysfs_slab_add+0x18e/0x220 [ 2392.405217] __kmem_cache_create+0x1fe/0x610 [ 2392.405620] kmem_cache_create_usercopy+0x218/0x340 [ 2392.406066] p9_client_create+0xd0b/0x1260 [ 2392.406427] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.406876] ? __pfx_p9_client_create+0x10/0x10 [ 2392.407275] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2392.407701] ? lockdep_init_map_type+0x21e/0x7e0 [ 2392.408106] ? __kasan_kmalloc+0x7f/0x90 [ 2392.408466] ? __raw_spin_lock_init+0x3a/0x110 [ 2392.408865] v9fs_session_init+0x1e0/0x17b0 [ 2392.409247] ? lock_release+0x1e3/0x680 [ 2392.409602] ? __pfx_lock_release+0x10/0x10 [ 2392.409980] ? __pfx_v9fs_session_init+0x10/0x10 [ 2392.410392] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.410843] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2392.411261] ? v9fs_mount+0x9e/0xbd0 [ 2392.411612] v9fs_mount+0xbd/0xbd0 [ 2392.411929] ? legacy_init_fs_context+0x44/0xe0 [ 2392.412329] ? __pfx_v9fs_mount+0x10/0x10 [ 2392.412691] ? cap_capable+0x1be/0x220 [ 2392.412982] ? __pfx_v9fs_mount+0x10/0x10 [ 2392.413349] legacy_get_tree+0x109/0x220 [ 2392.413714] vfs_get_tree+0x92/0x360 [ 2392.414049] path_mount+0x133c/0x1e50 [ 2392.414396] ? kasan_quarantine_put+0x81/0x1d0 [ 2392.414792] ? __pfx_path_mount+0x10/0x10 [ 2392.415157] ? putname+0x102/0x140 [ 2392.415475] ? kmem_cache_free+0xff/0x4a0 [ 2392.415836] ? putname+0x102/0x140 [ 2392.416162] __x64_sys_mount+0x286/0x310 [ 2392.416511] ? __pfx___x64_sys_mount+0x10/0x10 [ 2392.416905] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.417271] do_syscall_64+0x3f/0x90 [ 2392.417629] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2392.418075] RIP: 0033:0x7f8273cb8b19 [ 2392.418394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.419862] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2392.420486] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2392.421056] loop2: detected capacity change from 0 to 40 [ 2392.421085] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2392.422399] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2392.422977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.423561] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2392.424160] 00:34:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb07, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 19) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2392.532145] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2392.532921] CPU: 0 PID: 11748 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2392.533629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2392.534314] Call Trace: [ 2392.534546] [ 2392.534748] dump_stack_lvl+0xc1/0xf0 [ 2392.535100] kmem_cache_create_usercopy+0x12b/0x340 [ 2392.535537] p9_client_create+0xd0b/0x1260 [ 2392.535916] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.536369] ? __pfx_p9_client_create+0x10/0x10 [ 2392.536774] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2392.537193] ? lockdep_init_map_type+0x21e/0x7e0 [ 2392.537597] ? __kasan_kmalloc+0x7f/0x90 [ 2392.537961] ? __raw_spin_lock_init+0x3a/0x110 [ 2392.538355] v9fs_session_init+0x1e0/0x17b0 [ 2392.538728] ? lock_release+0x1e3/0x680 [ 2392.539066] ? __pfx_lock_release+0x10/0x10 [ 2392.539435] ? __pfx_v9fs_session_init+0x10/0x10 [ 2392.539843] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.540284] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2392.540698] ? v9fs_mount+0x9e/0xbd0 [ 2392.541037] v9fs_mount+0xbd/0xbd0 [ 2392.541364] ? legacy_init_fs_context+0x44/0xe0 [ 2392.541753] ? __pfx_v9fs_mount+0x10/0x10 [ 2392.542116] ? cap_capable+0x1be/0x220 [ 2392.542466] ? __pfx_v9fs_mount+0x10/0x10 [ 2392.542831] legacy_get_tree+0x109/0x220 [ 2392.543191] vfs_get_tree+0x92/0x360 [ 2392.543522] path_mount+0x133c/0x1e50 [ 2392.543858] ? kasan_quarantine_put+0x81/0x1d0 [ 2392.544257] ? __pfx_path_mount+0x10/0x10 [ 2392.544611] ? putname+0x102/0x140 [ 2392.544927] ? kmem_cache_free+0xff/0x4a0 [ 2392.545294] ? putname+0x102/0x140 [ 2392.545613] __x64_sys_mount+0x286/0x310 [ 2392.545958] ? __pfx___x64_sys_mount+0x10/0x10 [ 2392.546351] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2392.546792] do_syscall_64+0x3f/0x90 [ 2392.547124] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2392.547559] RIP: 0033:0x7f8273cb8b19 [ 2392.547878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2392.549360] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2392.549978] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2392.550557] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2392.551141] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2392.551723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2392.552305] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2392.552901] [ 2392.598446] kernel write not supported for file /11770/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:34:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe988, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 20) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 72) 00:34:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:34:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xebea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:34:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918", 0x74}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:34:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2404.151869] loop2: detected capacity change from 0 to 40 00:34:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xecea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2404.262309] FAULT_INJECTION: forcing a failure. [ 2404.262309] name failslab, interval 1, probability 0, space 0, times 0 [ 2404.263805] CPU: 1 PID: 11794 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2404.264823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2404.265840] Call Trace: [ 2404.266171] [ 2404.266472] dump_stack_lvl+0xc1/0xf0 [ 2404.266988] should_fail_ex+0x4b4/0x5b0 [ 2404.267535] ? security_inode_alloc+0x38/0x160 [ 2404.268311] should_failslab+0x9/0x20 [ 2404.268997] kmem_cache_alloc+0x5a/0x390 [ 2404.269777] security_inode_alloc+0x38/0x160 [ 2404.270579] inode_init_always+0xbb2/0xea0 [ 2404.271340] alloc_inode+0x84/0x240 [ 2404.271999] new_inode+0x25/0x1f0 [ 2404.272640] proc_get_inode+0x22/0x890 [ 2404.273362] proc_lookup_de+0x13e/0x220 [ 2404.274120] proc_tgid_net_lookup+0x77/0x110 [ 2404.274930] lookup_open.isra.0+0x74e/0x1400 [ 2404.275679] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2404.276428] ? __mnt_want_write+0x1f4/0x2e0 [ 2404.277175] path_openat+0x97c/0x2750 [ 2404.277741] ? __pfx_path_openat+0x10/0x10 [ 2404.278359] ? __create_object+0x3ee/0xc90 [ 2404.279052] do_filp_open+0x1ba/0x410 [ 2404.279597] ? __pfx_do_filp_open+0x10/0x10 [ 2404.280182] ? expand_files+0x446/0x8e0 [ 2404.280767] ? find_held_lock+0x2c/0x110 [ 2404.281356] ? __pfx_kfree_link+0x10/0x10 [ 2404.281940] ? _raw_spin_unlock+0x1e/0x40 [ 2404.282492] ? alloc_fd+0x2eb/0x760 [ 2404.283011] do_sys_openat2+0x171/0x4c0 [ 2404.283559] ? __pfx_do_sys_openat2+0x10/0x10 [ 2404.284202] __x64_sys_openat+0x143/0x200 [ 2404.284776] ? __pfx___x64_sys_openat+0x10/0x10 [ 2404.285391] ? ksys_write+0x1a7/0x260 [ 2404.285902] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2404.286596] do_syscall_64+0x3f/0x90 [ 2404.287164] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2404.287864] RIP: 0033:0x7fecdd4cda04 [ 2404.288351] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2404.290648] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2404.291648] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2404.292579] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2404.293524] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2404.294447] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2404.295367] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2404.296313] [ 2404.326103] 9pnet_fd: Insufficient options for proto=fd 00:35:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 21) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea", 0x78}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf7f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 73) 00:35:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe989, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2416.861240] loop2: detected capacity change from 0 to 40 [ 2416.912939] FAULT_INJECTION: forcing a failure. 00:35:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe98a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2416.912939] name failslab, interval 1, probability 0, space 0, times 0 [ 2416.914760] CPU: 0 PID: 11826 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2416.915708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.915720] kernel write not supported for file /11809/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2416.916633] Call Trace: [ 2416.916644] [ 2416.916656] dump_stack_lvl+0xc1/0xf0 [ 2416.918810] should_fail_ex+0x4b4/0x5b0 [ 2416.919324] ? __kernfs_new_node+0xd4/0x870 [ 2416.919854] should_failslab+0x9/0x20 [ 2416.920332] kmem_cache_alloc+0x5a/0x390 [ 2416.920845] __kernfs_new_node+0xd4/0x870 [ 2416.921354] ? __pfx___kernfs_new_node+0x10/0x10 [ 2416.921960] ? down_write+0x11a/0x1f0 [ 2416.922470] ? up_write+0x196/0x510 [ 2416.922973] kernfs_new_node+0x97/0x120 [ 2416.923510] __kernfs_create_file+0x55/0x350 [ 2416.924112] sysfs_add_file_mode_ns+0x21c/0x440 [ 2416.924710] ? __pfx_slab_attr_store+0x10/0x10 [ 2416.925313] internal_create_group+0x322/0xb90 [ 2416.925948] ? __pfx_internal_create_group+0x10/0x10 [ 2416.926592] ? up_write+0x196/0x510 [ 2416.927102] sysfs_slab_add+0x18e/0x220 [ 2416.927627] __kmem_cache_create+0x1fe/0x610 [ 2416.928230] kmem_cache_create_usercopy+0x218/0x340 [ 2416.928892] p9_client_create+0xd0b/0x1260 [ 2416.929447] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2416.930138] ? __pfx_p9_client_create+0x10/0x10 [ 2416.930732] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2416.931376] ? lockdep_init_map_type+0x21e/0x7e0 [ 2416.931991] ? __kasan_kmalloc+0x7f/0x90 [ 2416.932544] ? __raw_spin_lock_init+0x3a/0x110 [ 2416.933156] v9fs_session_init+0x1e0/0x17b0 [ 2416.933738] ? lock_release+0x1e3/0x680 [ 2416.934259] ? __pfx_lock_release+0x10/0x10 [ 2416.934819] ? __pfx_v9fs_session_init+0x10/0x10 [ 2416.935447] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2416.936120] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2416.936768] ? v9fs_mount+0x9e/0xbd0 [ 2416.937296] v9fs_mount+0xbd/0xbd0 [ 2416.937804] ? legacy_init_fs_context+0x44/0xe0 [ 2416.938432] ? __pfx_v9fs_mount+0x10/0x10 [ 2416.938986] ? cap_capable+0x1be/0x220 [ 2416.939526] ? __pfx_v9fs_mount+0x10/0x10 [ 2416.940077] legacy_get_tree+0x109/0x220 [ 2416.940640] vfs_get_tree+0x92/0x360 [ 2416.941149] path_mount+0x133c/0x1e50 [ 2416.941697] ? kasan_quarantine_put+0x81/0x1d0 [ 2416.942301] ? __pfx_path_mount+0x10/0x10 [ 2416.942862] ? putname+0x102/0x140 [ 2416.943342] ? kmem_cache_free+0xff/0x4a0 [ 2416.943892] ? putname+0x102/0x140 [ 2416.944386] __x64_sys_mount+0x286/0x310 [ 2416.945020] ? __pfx___x64_sys_mount+0x10/0x10 [ 2416.945587] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2416.946358] do_syscall_64+0x3f/0x90 [ 2416.946825] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2416.947459] RIP: 0033:0x7f8273cb8b19 [ 2416.947929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2416.949988] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2416.950923] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2416.951811] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2416.952695] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2416.953575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2416.954486] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2416.955400] 00:35:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf89f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2416.979121] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2416.980196] CPU: 1 PID: 11826 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2416.981195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2416.982209] Call Trace: [ 2416.982541] [ 2416.982840] dump_stack_lvl+0xc1/0xf0 [ 2416.983351] kmem_cache_create_usercopy+0x12b/0x340 [ 2416.983992] p9_client_create+0xd0b/0x1260 [ 2416.984536] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2416.985194] ? __pfx_p9_client_create+0x10/0x10 [ 2416.985797] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2416.986432] ? lockdep_init_map_type+0x21e/0x7e0 [ 2416.987029] ? __kasan_kmalloc+0x7f/0x90 [ 2416.987568] ? __raw_spin_lock_init+0x3a/0x110 [ 2416.988165] v9fs_session_init+0x1e0/0x17b0 [ 2416.988729] ? lock_release+0x1e3/0x680 [ 2416.989226] ? __pfx_lock_release+0x10/0x10 [ 2416.989791] ? __pfx_v9fs_session_init+0x10/0x10 [ 2416.990397] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2416.991061] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2416.991667] ? v9fs_mount+0x9e/0xbd0 [ 2416.992179] v9fs_mount+0xbd/0xbd0 [ 2416.992648] ? legacy_init_fs_context+0x44/0xe0 [ 2416.993239] ? __pfx_v9fs_mount+0x10/0x10 [ 2416.993789] ? cap_capable+0x1be/0x220 [ 2416.994315] ? __pfx_v9fs_mount+0x10/0x10 [ 2416.994852] legacy_get_tree+0x109/0x220 [ 2416.995401] vfs_get_tree+0x92/0x360 [ 2416.995907] path_mount+0x133c/0x1e50 [ 2416.996422] ? kasan_quarantine_put+0x81/0x1d0 [ 2416.997022] ? __pfx_path_mount+0x10/0x10 [ 2416.997553] ? putname+0x102/0x140 [ 2416.998035] ? kmem_cache_free+0xff/0x4a0 [ 2416.998584] ? putname+0x102/0x140 [ 2416.999065] __x64_sys_mount+0x286/0x310 [ 2416.999584] ? __pfx___x64_sys_mount+0x10/0x10 [ 2417.000168] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2417.000836] do_syscall_64+0x3f/0x90 [ 2417.001334] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2417.002016] RIP: 0033:0x7f8273cb8b19 [ 2417.002486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2417.004671] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2417.005611] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2417.006484] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2417.007359] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2417.008240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2417.009112] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2417.010015] 00:35:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea", 0x78}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2417.122250] loop2: detected capacity change from 0 to 40 00:35:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeeea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 22) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xed9f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 74) 00:35:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2417.368226] FAULT_INJECTION: forcing a failure. [ 2417.368226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2417.369710] CPU: 0 PID: 11859 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2417.370648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2417.371570] Call Trace: [ 2417.371879] [ 2417.372155] dump_stack_lvl+0xc1/0xf0 [ 2417.372635] should_fail_ex+0x4b4/0x5b0 [ 2417.373137] __should_fail_alloc_page+0xe0/0x110 [ 2417.373730] prepare_alloc_pages+0x178/0x500 [ 2417.374278] __alloc_pages+0x149/0x480 [ 2417.374762] ? __pfx___alloc_pages+0x10/0x10 [ 2417.375303] ? find_held_lock+0x2c/0x110 [ 2417.375800] ? inode_doinit_with_dentry+0x864/0x1240 [ 2417.376410] ? __pfx_lock_release+0x10/0x10 [ 2417.376917] ? do_raw_spin_lock+0x125/0x270 [ 2417.377440] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2417.378017] alloc_pages+0x1a0/0x260 [ 2417.378502] __get_free_pages+0x10/0xb0 [ 2417.378985] inode_doinit_with_dentry+0x8ef/0x1240 [ 2417.379606] ? hrtimer_start_range_ns+0x990/0xbd0 [ 2417.380217] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 2417.380887] ? current_time+0x2d2/0x510 [ 2417.381370] selinux_d_instantiate+0x27/0x30 [ 2417.381963] security_d_instantiate+0x5a/0xf0 [ 2417.382557] d_splice_alias+0x90/0xe30 [ 2417.383062] ? set_nlink+0x86/0x180 [ 2417.383535] proc_lookup_de+0x181/0x220 [ 2417.384061] proc_tgid_net_lookup+0x77/0x110 [ 2417.384636] lookup_open.isra.0+0x74e/0x1400 [ 2417.385206] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2417.385847] ? __mnt_want_write+0x1f4/0x2e0 [ 2417.386407] path_openat+0x97c/0x2750 [ 2417.386914] ? __pfx_path_openat+0x10/0x10 [ 2417.387444] ? __create_object+0x3ee/0xc90 [ 2417.387984] do_filp_open+0x1ba/0x410 [ 2417.388471] ? __pfx_do_filp_open+0x10/0x10 [ 2417.389012] ? expand_files+0x446/0x8e0 [ 2417.389527] ? find_held_lock+0x2c/0x110 [ 2417.390054] ? __pfx_kfree_link+0x10/0x10 [ 2417.390599] ? _raw_spin_unlock+0x1e/0x40 [ 2417.391117] ? alloc_fd+0x2eb/0x760 [ 2417.391613] do_sys_openat2+0x171/0x4c0 [ 2417.392140] ? __pfx_do_sys_openat2+0x10/0x10 [ 2417.392742] __x64_sys_openat+0x143/0x200 [ 2417.393286] ? __pfx___x64_sys_openat+0x10/0x10 [ 2417.393893] ? ksys_write+0x1a7/0x260 [ 2417.394394] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2417.395050] do_syscall_64+0x3f/0x90 [ 2417.395536] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2417.396182] RIP: 0033:0x7fecdd4cda04 [ 2417.396644] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2417.398728] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2417.399637] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2417.400490] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2417.401350] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2417.402225] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2417.403085] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2417.403978] [ 2417.454383] kernel write not supported for file /11856/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:35:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9d8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 23) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:14 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 75) 00:35:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:14 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea", 0x78}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:14 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xefea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2430.815248] loop2: detected capacity change from 0 to 40 [ 2430.821861] FAULT_INJECTION: forcing a failure. [ 2430.821861] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.822611] CPU: 0 PID: 11877 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2430.823142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.823671] Call Trace: [ 2430.823849] [ 2430.824010] dump_stack_lvl+0xc1/0xf0 [ 2430.824283] should_fail_ex+0x4b4/0x5b0 [ 2430.824573] ? __kernfs_new_node+0xd4/0x870 [ 2430.824867] should_failslab+0x9/0x20 [ 2430.825137] kmem_cache_alloc+0x5a/0x390 [ 2430.825420] __kernfs_new_node+0xd4/0x870 [ 2430.825709] ? __pfx___kernfs_new_node+0x10/0x10 [ 2430.826059] ? down_write+0x11a/0x1f0 [ 2430.826332] ? up_write+0x196/0x510 [ 2430.826596] kernfs_new_node+0x97/0x120 [ 2430.826877] __kernfs_create_file+0x55/0x350 [ 2430.827191] sysfs_add_file_mode_ns+0x21c/0x440 [ 2430.827508] ? __pfx_slab_attr_store+0x10/0x10 [ 2430.827832] internal_create_group+0x322/0xb90 [ 2430.828150] ? __pfx_internal_create_group+0x10/0x10 [ 2430.828491] ? up_write+0x196/0x510 [ 2430.828758] sysfs_slab_add+0x18e/0x220 [ 2430.829033] __kmem_cache_create+0x1fe/0x610 [ 2430.829345] kmem_cache_create_usercopy+0x218/0x340 [ 2430.829693] p9_client_create+0xd0b/0x1260 [ 2430.829998] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.830350] ? __pfx_p9_client_create+0x10/0x10 [ 2430.830670] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2430.831008] ? lockdep_init_map_type+0x21e/0x7e0 [ 2430.831329] ? __kasan_kmalloc+0x7f/0x90 [ 2430.831617] ? __raw_spin_lock_init+0x3a/0x110 [ 2430.831936] v9fs_session_init+0x1e0/0x17b0 [ 2430.832236] ? lock_release+0x1e3/0x680 [ 2430.832511] ? __pfx_lock_release+0x10/0x10 [ 2430.832812] ? __pfx_v9fs_session_init+0x10/0x10 [ 2430.833142] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.833497] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2430.833860] ? v9fs_mount+0x9e/0xbd0 [ 2430.834136] v9fs_mount+0xbd/0xbd0 [ 2430.834392] ? legacy_init_fs_context+0x44/0xe0 [ 2430.834712] ? __pfx_v9fs_mount+0x10/0x10 [ 2430.835007] ? cap_capable+0x1be/0x220 [ 2430.835292] ? __pfx_v9fs_mount+0x10/0x10 [ 2430.835582] legacy_get_tree+0x109/0x220 [ 2430.835874] vfs_get_tree+0x92/0x360 [ 2430.836144] path_mount+0x133c/0x1e50 [ 2430.836422] ? kasan_quarantine_put+0x81/0x1d0 [ 2430.836741] ? __pfx_path_mount+0x10/0x10 [ 2430.837039] ? putname+0x102/0x140 [ 2430.837286] ? kmem_cache_free+0xff/0x4a0 [ 2430.837576] ? putname+0x102/0x140 [ 2430.837842] __x64_sys_mount+0x286/0x310 [ 2430.838123] ? __pfx___x64_sys_mount+0x10/0x10 [ 2430.838452] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.838831] do_syscall_64+0x3f/0x90 [ 2430.839089] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2430.839466] RIP: 0033:0x7f8273cb8b19 [ 2430.839730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.840878] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2430.841402] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2430.841915] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2430.842408] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2430.842896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2430.843384] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2430.843882] 00:35:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf0ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea9331", 0x7a}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2430.901310] FAULT_INJECTION: forcing a failure. [ 2430.901310] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.902234] CPU: 0 PID: 11885 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2430.902803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.903338] Call Trace: [ 2430.903524] [ 2430.903686] dump_stack_lvl+0xc1/0xf0 [ 2430.903975] should_fail_ex+0x4b4/0x5b0 [ 2430.904279] ? proc_reg_open+0x20f/0x5b0 [ 2430.904579] should_failslab+0x9/0x20 [ 2430.904864] kmem_cache_alloc+0x5a/0x390 [ 2430.905165] proc_reg_open+0x20f/0x5b0 [ 2430.905453] do_dentry_open+0x6ca/0x12b0 [ 2430.905750] ? __pfx_proc_reg_open+0x10/0x10 [ 2430.906081] ? may_open+0x1f3/0x420 [ 2430.906353] path_openat+0x18ad/0x2750 [ 2430.906640] ? __pfx_path_openat+0x10/0x10 [ 2430.906934] ? __create_object+0x3ee/0xc90 [ 2430.907247] do_filp_open+0x1ba/0x410 [ 2430.907521] ? __pfx_do_filp_open+0x10/0x10 [ 2430.907824] ? expand_files+0x446/0x8e0 [ 2430.908118] ? find_held_lock+0x2c/0x110 [ 2430.908428] ? __pfx_kfree_link+0x10/0x10 [ 2430.908729] ? _raw_spin_unlock+0x1e/0x40 [ 2430.909027] ? alloc_fd+0x2eb/0x760 [ 2430.909311] do_sys_openat2+0x171/0x4c0 [ 2430.909609] ? __pfx_do_sys_openat2+0x10/0x10 [ 2430.909953] __x64_sys_openat+0x143/0x200 [ 2430.910258] ? __pfx___x64_sys_openat+0x10/0x10 [ 2430.910596] ? ksys_write+0x1a7/0x260 [ 2430.910877] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.911252] do_syscall_64+0x3f/0x90 [ 2430.911531] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2430.911904] RIP: 0033:0x7fecdd4cda04 [ 2430.912172] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2430.913401] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2430.913940] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2430.914434] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2430.914927] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2430.915421] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2430.915910] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2430.916406] [ 2430.939243] loop2: detected capacity change from 0 to 40 [ 2430.942104] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2430.942578] CPU: 0 PID: 11877 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2430.943152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.943690] Call Trace: [ 2430.943876] [ 2430.944037] dump_stack_lvl+0xc1/0xf0 [ 2430.944304] kmem_cache_create_usercopy+0x12b/0x340 [ 2430.944672] p9_client_create+0xd0b/0x1260 [ 2430.944964] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.945339] ? __pfx_p9_client_create+0x10/0x10 [ 2430.945656] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2430.946015] ? lockdep_init_map_type+0x21e/0x7e0 [ 2430.946341] ? __kasan_kmalloc+0x7f/0x90 [ 2430.946644] ? __raw_spin_lock_init+0x3a/0x110 [ 2430.946962] v9fs_session_init+0x1e0/0x17b0 [ 2430.947287] ? lock_release+0x1e3/0x680 [ 2430.947560] ? __pfx_lock_release+0x10/0x10 [ 2430.947875] ? __pfx_v9fs_session_init+0x10/0x10 [ 2430.948202] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.948576] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2430.948913] ? v9fs_mount+0x9e/0xbd0 [ 2430.949194] v9fs_mount+0xbd/0xbd0 [ 2430.949446] ? legacy_init_fs_context+0x44/0xe0 [ 2430.949786] ? __pfx_v9fs_mount+0x10/0x10 [ 2430.950075] ? cap_capable+0x1be/0x220 [ 2430.950374] ? __pfx_v9fs_mount+0x10/0x10 [ 2430.950663] legacy_get_tree+0x109/0x220 [ 2430.950975] vfs_get_tree+0x92/0x360 [ 2430.951244] path_mount+0x133c/0x1e50 [ 2430.951538] ? kasan_quarantine_put+0x81/0x1d0 [ 2430.951857] ? __pfx_path_mount+0x10/0x10 [ 2430.952156] ? putname+0x102/0x140 [ 2430.952408] ? kmem_cache_free+0xff/0x4a0 [ 2430.952712] ? putname+0x102/0x140 [ 2430.952970] __x64_sys_mount+0x286/0x310 [ 2430.953260] ? __pfx___x64_sys_mount+0x10/0x10 [ 2430.953566] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.953959] do_syscall_64+0x3f/0x90 [ 2430.954220] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2430.954596] RIP: 0033:0x7f8273cb8b19 [ 2430.954863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.956110] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2430.956635] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 00:35:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2430.957132] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2430.957741] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2430.958243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2430.958725] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2430.959240] 00:35:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea9331", 0x7a}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 24) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9da, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf1ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 76) 00:35:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2443.392836] loop2: detected capacity change from 0 to 40 00:35:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9db, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea9331", 0x7a}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2443.482438] kernel write not supported for file /11914/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:35:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf2ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2443.525353] loop2: detected capacity change from 0 to 40 00:35:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9dc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:38 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 77) 00:35:38 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:38 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf3ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:38 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9dd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:38 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 25) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2454.821524] loop2: detected capacity change from 0 to 40 [ 2454.849612] FAULT_INJECTION: forcing a failure. [ 2454.849612] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.850734] CPU: 1 PID: 11984 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2454.851333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.851912] Call Trace: [ 2454.852099] [ 2454.852266] dump_stack_lvl+0xc1/0xf0 [ 2454.852559] should_fail_ex+0x4b4/0x5b0 [ 2454.852867] ? __kernfs_new_node+0xd4/0x870 [ 2454.853180] should_failslab+0x9/0x20 [ 2454.853470] kmem_cache_alloc+0x5a/0x390 [ 2454.853774] __kernfs_new_node+0xd4/0x870 [ 2454.854100] ? __pfx___kernfs_new_node+0x10/0x10 [ 2454.854459] ? down_write+0x11a/0x1f0 [ 2454.854758] ? up_write+0x196/0x510 [ 2454.855042] kernfs_new_node+0x97/0x120 [ 2454.855323] __kernfs_create_file+0x55/0x350 [ 2454.855661] sysfs_add_file_mode_ns+0x21c/0x440 [ 2454.856014] ? __pfx_slab_attr_store+0x10/0x10 [ 2454.856365] internal_create_group+0x322/0xb90 [ 2454.856699] ? __pfx_internal_create_group+0x10/0x10 [ 2454.857077] ? up_write+0x196/0x510 [ 2454.857363] sysfs_slab_add+0x18e/0x220 [ 2454.857660] __kmem_cache_create+0x1fe/0x610 [ 2454.857999] kmem_cache_create_usercopy+0x218/0x340 [ 2454.858377] p9_client_create+0xd0b/0x1260 [ 2454.858696] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.859073] ? __pfx_p9_client_create+0x10/0x10 [ 2454.859438] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2454.859806] ? lockdep_init_map_type+0x21e/0x7e0 [ 2454.860154] ? __kasan_kmalloc+0x7f/0x90 [ 2454.860464] ? __raw_spin_lock_init+0x3a/0x110 [ 2454.860809] v9fs_session_init+0x1e0/0x17b0 [ 2454.861137] ? lock_release+0x1e3/0x680 [ 2454.861416] ? __pfx_lock_release+0x10/0x10 [ 2454.861728] ? __pfx_v9fs_session_init+0x10/0x10 [ 2454.862092] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.862486] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2454.862843] ? v9fs_mount+0x9e/0xbd0 [ 2454.863136] v9fs_mount+0xbd/0xbd0 [ 2454.863416] ? legacy_init_fs_context+0x44/0xe0 [ 2454.863760] ? __pfx_v9fs_mount+0x10/0x10 [ 2454.864080] ? cap_capable+0x1be/0x220 [ 2454.864373] ? __pfx_v9fs_mount+0x10/0x10 [ 2454.864667] legacy_get_tree+0x109/0x220 [ 2454.864975] vfs_get_tree+0x92/0x360 [ 2454.865255] path_mount+0x133c/0x1e50 [ 2454.865552] ? kasan_quarantine_put+0x81/0x1d0 [ 2454.865873] ? __pfx_path_mount+0x10/0x10 [ 2454.866183] ? putname+0x102/0x140 [ 2454.866459] ? kmem_cache_free+0xff/0x4a0 [ 2454.866766] ? putname+0x102/0x140 [ 2454.867034] __x64_sys_mount+0x286/0x310 [ 2454.867310] ? __pfx___x64_sys_mount+0x10/0x10 [ 2454.867640] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.868010] do_syscall_64+0x3f/0x90 [ 2454.868280] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2454.868650] RIP: 0033:0x7f8273cb8b19 [ 2454.868912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.870074] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2454.870627] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2454.871112] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2454.871607] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2454.872106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.872592] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2454.873100] [ 2454.878349] FAULT_INJECTION: forcing a failure. [ 2454.878349] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.879252] CPU: 1 PID: 11975 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2454.879818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.880381] Call Trace: [ 2454.880567] [ 2454.880734] dump_stack_lvl+0xc1/0xf0 [ 2454.881017] should_fail_ex+0x4b4/0x5b0 [ 2454.881315] should_failslab+0x9/0x20 [ 2454.881591] __kmem_cache_alloc_node+0x5b/0x310 [ 2454.881917] ? single_open+0x4d/0x1f0 [ 2454.882205] kmalloc_trace+0x26/0xc0 [ 2454.882483] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 2454.882844] single_open+0x4d/0x1f0 [ 2454.883108] single_open_net+0x23c/0x390 [ 2454.883410] ? __pfx_single_open_net+0x10/0x10 [ 2454.883749] ? kmem_cache_alloc+0x307/0x390 [ 2454.884064] ? __pfx_single_open_net+0x10/0x10 [ 2454.884396] proc_reg_open+0x27b/0x5b0 [ 2454.884689] do_dentry_open+0x6ca/0x12b0 [ 2454.884986] ? __pfx_proc_reg_open+0x10/0x10 [ 2454.885293] ? may_open+0x1f3/0x420 [ 2454.885571] path_openat+0x18ad/0x2750 [ 2454.885846] ? __pfx_path_openat+0x10/0x10 [ 2454.886156] ? __create_object+0x3ee/0xc90 [ 2454.886461] do_filp_open+0x1ba/0x410 [ 2454.886740] ? __pfx_do_filp_open+0x10/0x10 [ 2454.887052] ? expand_files+0x446/0x8e0 [ 2454.887345] ? find_held_lock+0x2c/0x110 [ 2454.887653] ? __pfx_kfree_link+0x10/0x10 [ 2454.887959] ? _raw_spin_unlock+0x1e/0x40 [ 2454.888254] ? alloc_fd+0x2eb/0x760 [ 2454.888534] do_sys_openat2+0x171/0x4c0 [ 2454.888829] ? __pfx_do_sys_openat2+0x10/0x10 [ 2454.889151] __x64_sys_openat+0x143/0x200 [ 2454.889460] ? __pfx___x64_sys_openat+0x10/0x10 [ 2454.889805] ? ksys_write+0x1a7/0x260 [ 2454.890072] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.890467] do_syscall_64+0x3f/0x90 [ 2454.890743] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2454.891123] RIP: 0033:0x7fecdd4cda04 [ 2454.891393] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2454.892618] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2454.893149] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2454.893641] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2454.894147] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2454.894658] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2454.895157] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2454.895685] 00:35:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9de, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2454.925286] 9pnet_fd: Insufficient options for proto=fd 00:35:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf4ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:35:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9df, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2454.957776] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2454.958312] CPU: 1 PID: 11984 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2454.958890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2454.959470] Call Trace: [ 2454.959658] [ 2454.959825] dump_stack_lvl+0xc1/0xf0 [ 2454.960122] kmem_cache_create_usercopy+0x12b/0x340 [ 2454.960499] p9_client_create+0xd0b/0x1260 [ 2454.960815] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.961199] ? __pfx_p9_client_create+0x10/0x10 [ 2454.961537] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2454.961901] ? lockdep_init_map_type+0x21e/0x7e0 [ 2454.962265] ? __kasan_kmalloc+0x7f/0x90 [ 2454.962589] ? __raw_spin_lock_init+0x3a/0x110 [ 2454.962941] v9fs_session_init+0x1e0/0x17b0 [ 2454.963272] ? lock_release+0x1e3/0x680 [ 2454.963569] ? __pfx_lock_release+0x10/0x10 [ 2454.963896] ? __pfx_v9fs_session_init+0x10/0x10 [ 2454.964254] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.964642] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2454.965014] ? v9fs_mount+0x9e/0xbd0 [ 2454.965318] v9fs_mount+0xbd/0xbd0 [ 2454.965592] ? legacy_init_fs_context+0x44/0xe0 [ 2454.965950] ? __pfx_v9fs_mount+0x10/0x10 [ 2454.966272] ? cap_capable+0x1be/0x220 [ 2454.966582] ? __pfx_v9fs_mount+0x10/0x10 [ 2454.966903] legacy_get_tree+0x109/0x220 [ 2454.967217] vfs_get_tree+0x92/0x360 [ 2454.967510] path_mount+0x133c/0x1e50 [ 2454.967803] ? kasan_quarantine_put+0x81/0x1d0 [ 2454.968141] ? __pfx_path_mount+0x10/0x10 [ 2454.968453] ? putname+0x102/0x140 [ 2454.968729] ? kmem_cache_free+0xff/0x4a0 [ 2454.969039] ? putname+0x102/0x140 [ 2454.969310] __x64_sys_mount+0x286/0x310 [ 2454.969605] ? __pfx___x64_sys_mount+0x10/0x10 [ 2454.969939] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2454.970329] do_syscall_64+0x3f/0x90 [ 2454.970618] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2454.971000] RIP: 0033:0x7f8273cb8b19 [ 2454.971276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.972547] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2454.973089] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2454.973600] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2454.974129] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2454.974643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.975146] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2454.975632] [ 2455.045869] loop2: detected capacity change from 0 to 40 00:35:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 78) 00:35:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 26) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2467.435742] loop2: detected capacity change from 0 to 40 00:35:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {0x0}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2467.572173] kernel write not supported for file /12018/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:35:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2467.685574] loop2: detected capacity change from 0 to 40 00:35:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 79) 00:35:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8a9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:35:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {0x0}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:35:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2467.887143] loop2: detected capacity change from 0 to 40 00:36:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf7ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 80) 00:36:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {0x0}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:04 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 27) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8aa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2480.815155] FAULT_INJECTION: forcing a failure. [ 2480.815155] name failslab, interval 1, probability 0, space 0, times 0 [ 2480.815999] CPU: 0 PID: 12087 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2480.816531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2480.817088] Call Trace: [ 2480.817266] [ 2480.817425] dump_stack_lvl+0xc1/0xf0 [ 2480.817701] should_fail_ex+0x4b4/0x5b0 [ 2480.817991] ? seq_open+0x5b/0x180 [ 2480.818241] should_failslab+0x9/0x20 [ 2480.818526] kmem_cache_alloc+0x5a/0x390 [ 2480.818823] seq_open+0x5b/0x180 [ 2480.819064] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 2480.819408] single_open+0xfd/0x1f0 [ 2480.819665] single_open_net+0x23c/0x390 [ 2480.819958] ? __pfx_single_open_net+0x10/0x10 [ 2480.820278] ? kmem_cache_alloc+0x307/0x390 [ 2480.820584] ? __pfx_single_open_net+0x10/0x10 [ 2480.820910] proc_reg_open+0x27b/0x5b0 [ 2480.821192] do_dentry_open+0x6ca/0x12b0 [ 2480.821478] ? __pfx_proc_reg_open+0x10/0x10 [ 2480.821792] ? may_open+0x1f3/0x420 [ 2480.822059] path_openat+0x18ad/0x2750 [ 2480.822338] ? __pfx_path_openat+0x10/0x10 [ 2480.822630] ? __create_object+0x3ee/0xc90 [ 2480.822926] do_filp_open+0x1ba/0x410 [ 2480.823192] ? __pfx_do_filp_open+0x10/0x10 [ 2480.823492] ? expand_files+0x446/0x8e0 [ 2480.823773] ? find_held_lock+0x2c/0x110 [ 2480.824095] ? __pfx_kfree_link+0x10/0x10 [ 2480.824403] ? _raw_spin_unlock+0x1e/0x40 [ 2480.824684] ? alloc_fd+0x2eb/0x760 [ 2480.824953] do_sys_openat2+0x171/0x4c0 [ 2480.825239] ? __pfx_do_sys_openat2+0x10/0x10 [ 2480.825562] __x64_sys_openat+0x143/0x200 [ 2480.825854] ? __pfx___x64_sys_openat+0x10/0x10 [ 2480.826184] ? ksys_write+0x1a7/0x260 [ 2480.826475] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2480.826842] do_syscall_64+0x3f/0x90 [ 2480.827114] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2480.827473] RIP: 0033:0x7fecdd4cda04 [ 2480.827728] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2480.828897] RSP: 002b:00007fecdaa90060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2480.829407] RAX: ffffffffffffffda RBX: 00007fecdd62df60 RCX: 00007fecdd4cda04 [ 2480.829885] RDX: 0000000000000002 RSI: 00007fecdaa900f0 RDI: 00000000ffffff9c [ 2480.830351] RBP: 00007fecdaa900f0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2480.830828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2480.831296] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2480.831780] [ 2480.847879] loop2: detected capacity change from 0 to 40 00:36:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 28) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2481.023477] kernel write not supported for file /12100/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2493.516650] loop2: detected capacity change from 0 to 40 00:36:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') (fail_nth: 29) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ab, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeda9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 81) 00:36:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2493.560513] FAULT_INJECTION: forcing a failure. [ 2493.560513] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.561416] CPU: 1 PID: 12121 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2493.561975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.562534] Call Trace: [ 2493.562738] [ 2493.562903] dump_stack_lvl+0xc1/0xf0 [ 2493.563191] should_fail_ex+0x4b4/0x5b0 [ 2493.563497] ? __kernfs_new_node+0xd4/0x870 [ 2493.563800] should_failslab+0x9/0x20 [ 2493.564081] kmem_cache_alloc+0x5a/0x390 [ 2493.564373] __kernfs_new_node+0xd4/0x870 [ 2493.564687] ? __pfx___kernfs_new_node+0x10/0x10 [ 2493.565029] ? down_write+0x11a/0x1f0 [ 2493.565315] ? up_write+0x196/0x510 [ 2493.565590] kernfs_new_node+0x97/0x120 [ 2493.565885] __kernfs_create_file+0x55/0x350 [ 2493.566216] sysfs_add_file_mode_ns+0x21c/0x440 [ 2493.566543] ? __pfx_slab_attr_store+0x10/0x10 [ 2493.566893] internal_create_group+0x322/0xb90 [ 2493.567220] ? __pfx_internal_create_group+0x10/0x10 [ 2493.567568] ? up_write+0x196/0x510 [ 2493.567844] sysfs_slab_add+0x18e/0x220 [ 2493.568134] __kmem_cache_create+0x1fe/0x610 [ 2493.568466] kmem_cache_create_usercopy+0x218/0x340 [ 2493.568832] p9_client_create+0xd0b/0x1260 [ 2493.569141] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.569516] ? __pfx_p9_client_create+0x10/0x10 [ 2493.569871] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2493.570247] ? lockdep_init_map_type+0x21e/0x7e0 [ 2493.570618] ? __kasan_kmalloc+0x7f/0x90 [ 2493.570941] ? __raw_spin_lock_init+0x3a/0x110 [ 2493.571292] v9fs_session_init+0x1e0/0x17b0 [ 2493.571634] ? lock_release+0x1e3/0x680 [ 2493.571939] ? __pfx_lock_release+0x10/0x10 [ 2493.572258] ? __pfx_v9fs_session_init+0x10/0x10 [ 2493.572630] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.573033] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2493.573408] ? v9fs_mount+0x9e/0xbd0 [ 2493.573711] v9fs_mount+0xbd/0xbd0 [ 2493.573964] ? legacy_init_fs_context+0x44/0xe0 [ 2493.574314] ? __pfx_v9fs_mount+0x10/0x10 [ 2493.574609] ? cap_capable+0x1be/0x220 [ 2493.574922] ? __pfx_v9fs_mount+0x10/0x10 [ 2493.575213] legacy_get_tree+0x109/0x220 [ 2493.575535] vfs_get_tree+0x92/0x360 [ 2493.575805] path_mount+0x133c/0x1e50 [ 2493.576110] ? kasan_quarantine_put+0x81/0x1d0 [ 2493.576428] ? __pfx_path_mount+0x10/0x10 [ 2493.576754] ? putname+0x102/0x140 [ 2493.577002] ? kmem_cache_free+0xff/0x4a0 [ 2493.577327] ? putname+0x102/0x140 [ 2493.577587] __x64_sys_mount+0x286/0x310 [ 2493.577866] ? __pfx___x64_sys_mount+0x10/0x10 [ 2493.578210] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.578569] do_syscall_64+0x3f/0x90 [ 2493.578872] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2493.579220] RIP: 0033:0x7f8273cb8b19 [ 2493.579506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.580621] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2493.581178] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2493.581704] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2493.582208] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2493.582739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2493.583250] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2493.583782] 00:36:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ac, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2493.638963] FAULT_INJECTION: forcing a failure. [ 2493.638963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2493.640527] CPU: 0 PID: 12114 Comm: syz-executor.7 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2493.641572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.642614] Call Trace: [ 2493.642959] [ 2493.643272] dump_stack_lvl+0xc1/0xf0 [ 2493.643801] should_fail_ex+0x4b4/0x5b0 [ 2493.643882] loop2: detected capacity change from 0 to 40 [ 2493.644346] _copy_to_user+0x30/0xc0 [ 2493.645204] simple_read_from_buffer+0xd0/0x170 [ 2493.645839] proc_fail_nth_read+0x19c/0x230 [ 2493.646413] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2493.647091] ? security_file_permission+0xb5/0xe0 [ 2493.647747] vfs_read+0x1e4/0x8b0 [ 2493.648247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2493.648887] ? __pfx_vfs_read+0x10/0x10 [ 2493.649433] ? __fget_files+0x270/0x480 [ 2493.650010] ksys_read+0x12b/0x260 [ 2493.650497] ? __pfx_ksys_read+0x10/0x10 [ 2493.651060] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.651754] do_syscall_64+0x3f/0x90 [ 2493.652271] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2493.652967] RIP: 0033:0x7fecdd4cd69c [ 2493.653455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2493.655719] RSP: 002b:00007fecdaa90170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2493.656695] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fecdd4cd69c [ 2493.657626] RDX: 000000000000000f RSI: 00007fecdaa901e0 RDI: 0000000000000008 [ 2493.658558] RBP: 00007fecdaa901d0 R08: 0000000000000000 R09: 00007fecdaa8ff70 [ 2493.659517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2493.660444] R13: 00007fff097a018f R14: 00007fecdaa90300 R15: 0000000000022000 [ 2493.661401] 00:36:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ad, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedaa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfaea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2493.721036] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2493.721526] CPU: 1 PID: 12121 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2493.722055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2493.722563] Call Trace: [ 2493.722742] [ 2493.722894] dump_stack_lvl+0xc1/0xf0 [ 2493.723168] kmem_cache_create_usercopy+0x12b/0x340 [ 2493.723516] p9_client_create+0xd0b/0x1260 [ 2493.723812] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.724156] ? __pfx_p9_client_create+0x10/0x10 [ 2493.724475] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2493.724817] ? lockdep_init_map_type+0x21e/0x7e0 [ 2493.725139] ? __kasan_kmalloc+0x7f/0x90 [ 2493.725426] ? __raw_spin_lock_init+0x3a/0x110 [ 2493.725742] v9fs_session_init+0x1e0/0x17b0 [ 2493.726035] ? lock_release+0x1e3/0x680 [ 2493.726297] ? __pfx_lock_release+0x10/0x10 [ 2493.726596] ? __pfx_v9fs_session_init+0x10/0x10 [ 2493.726923] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.727275] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2493.727612] ? v9fs_mount+0x9e/0xbd0 [ 2493.727885] v9fs_mount+0xbd/0xbd0 [ 2493.728134] ? legacy_init_fs_context+0x44/0xe0 [ 2493.728438] ? __pfx_v9fs_mount+0x10/0x10 [ 2493.728719] ? cap_capable+0x1be/0x220 [ 2493.728990] ? __pfx_v9fs_mount+0x10/0x10 [ 2493.729279] legacy_get_tree+0x109/0x220 [ 2493.729559] vfs_get_tree+0x92/0x360 [ 2493.729823] path_mount+0x133c/0x1e50 [ 2493.730098] ? kasan_quarantine_put+0x81/0x1d0 [ 2493.730417] ? __pfx_path_mount+0x10/0x10 [ 2493.730702] ? putname+0x102/0x140 [ 2493.730944] ? kmem_cache_free+0xff/0x4a0 [ 2493.731224] ? putname+0x102/0x140 [ 2493.731475] __x64_sys_mount+0x286/0x310 [ 2493.731741] ? __pfx___x64_sys_mount+0x10/0x10 [ 2493.732040] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2493.732380] do_syscall_64+0x3f/0x90 [ 2493.732632] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2493.732979] RIP: 0033:0x7f8273cb8b19 [ 2493.733222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2493.734315] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2493.734799] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2493.735244] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2493.735693] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2493.736139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2493.736578] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2493.737038] [ 2493.740344] 9pnet_fd: Insufficient options for proto=fd [ 2493.765972] loop2: detected capacity change from 0 to 40 00:36:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedab, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976", 0x12}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfbea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 82) 00:36:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ae, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2504.989470] loop2: detected capacity change from 0 to 40 00:36:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedac, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976", 0x12}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfcea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedad, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2505.090228] loop2: detected capacity change from 0 to 40 00:36:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8af, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976", 0x12}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 83) 00:36:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedae, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2505.164337] kernel write not supported for file /12171/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:36:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2505.201837] loop2: detected capacity change from 0 to 40 00:36:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedaf, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e", 0x1b}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2505.257915] FAULT_INJECTION: forcing a failure. [ 2505.257915] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.258654] CPU: 0 PID: 12195 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2505.259167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.259662] Call Trace: [ 2505.259828] [ 2505.259981] dump_stack_lvl+0xc1/0xf0 [ 2505.260239] should_fail_ex+0x4b4/0x5b0 [ 2505.260506] ? __kernfs_new_node+0xd4/0x870 [ 2505.260782] should_failslab+0x9/0x20 [ 2505.261032] kmem_cache_alloc+0x5a/0x390 [ 2505.261302] __kernfs_new_node+0xd4/0x870 [ 2505.261569] ? __pfx___kernfs_new_node+0x10/0x10 [ 2505.261876] ? down_write+0x11a/0x1f0 [ 2505.262130] ? up_write+0x196/0x510 [ 2505.262377] kernfs_new_node+0x97/0x120 [ 2505.262640] __kernfs_create_file+0x55/0x350 [ 2505.262940] sysfs_add_file_mode_ns+0x21c/0x440 [ 2505.263237] ? __pfx_slab_attr_store+0x10/0x10 [ 2505.263538] internal_create_group+0x322/0xb90 [ 2505.263836] ? __pfx_internal_create_group+0x10/0x10 [ 2505.264159] ? up_write+0x196/0x510 [ 2505.264405] sysfs_slab_add+0x18e/0x220 [ 2505.264662] __kmem_cache_create+0x1fe/0x610 [ 2505.264952] kmem_cache_create_usercopy+0x218/0x340 [ 2505.265275] p9_client_create+0xd0b/0x1260 [ 2505.265550] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.265879] ? __pfx_p9_client_create+0x10/0x10 [ 2505.266175] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2505.266491] ? lockdep_init_map_type+0x21e/0x7e0 [ 2505.266797] ? __kasan_kmalloc+0x7f/0x90 [ 2505.267069] ? __raw_spin_lock_init+0x3a/0x110 [ 2505.267367] v9fs_session_init+0x1e0/0x17b0 [ 2505.267652] ? lock_release+0x1e3/0x680 [ 2505.267909] ? __pfx_lock_release+0x10/0x10 [ 2505.268186] ? __pfx_v9fs_session_init+0x10/0x10 [ 2505.268502] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.268839] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2505.269156] ? v9fs_mount+0x9e/0xbd0 [ 2505.269418] v9fs_mount+0xbd/0xbd0 [ 2505.269657] ? legacy_init_fs_context+0x44/0xe0 [ 2505.269953] ? __pfx_v9fs_mount+0x10/0x10 [ 2505.270225] ? cap_capable+0x1be/0x220 [ 2505.270489] ? __pfx_v9fs_mount+0x10/0x10 [ 2505.270776] legacy_get_tree+0x109/0x220 [ 2505.271046] vfs_get_tree+0x92/0x360 [ 2505.271297] path_mount+0x133c/0x1e50 [ 2505.271561] ? kasan_quarantine_put+0x81/0x1d0 [ 2505.271860] ? __pfx_path_mount+0x10/0x10 [ 2505.272132] ? putname+0x102/0x140 [ 2505.272371] ? kmem_cache_free+0xff/0x4a0 [ 2505.272642] ? putname+0x102/0x140 [ 2505.272884] __x64_sys_mount+0x286/0x310 [ 2505.273143] ? __pfx___x64_sys_mount+0x10/0x10 [ 2505.273434] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.273764] do_syscall_64+0x3f/0x90 [ 2505.274012] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2505.274343] RIP: 0033:0x7f8273cb8b19 [ 2505.274584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2505.275680] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2505.276146] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2505.276582] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2505.277014] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2505.277451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2505.277888] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2505.278338] [ 2505.293184] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2505.294171] CPU: 1 PID: 12195 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2505.295178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2505.296172] Call Trace: [ 2505.296509] [ 2505.296814] dump_stack_lvl+0xc1/0xf0 [ 2505.297338] kmem_cache_create_usercopy+0x12b/0x340 [ 2505.297984] p9_client_create+0xd0b/0x1260 [ 2505.298719] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.299422] ? __pfx_p9_client_create+0x10/0x10 [ 2505.300218] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2505.300879] ? lockdep_init_map_type+0x21e/0x7e0 [ 2505.301690] ? __kasan_kmalloc+0x7f/0x90 [ 2505.302241] ? __raw_spin_lock_init+0x3a/0x110 [ 2505.303037] v9fs_session_init+0x1e0/0x17b0 [ 2505.303617] ? lock_release+0x1e3/0x680 [ 2505.304289] ? __pfx_lock_release+0x10/0x10 [ 2505.304870] ? __pfx_v9fs_session_init+0x10/0x10 [ 2505.305692] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.306493] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2505.307259] ? v9fs_mount+0x9e/0xbd0 [ 2505.307867] v9fs_mount+0xbd/0xbd0 [ 2505.308433] ? legacy_init_fs_context+0x44/0xe0 [ 2505.309141] ? __pfx_v9fs_mount+0x10/0x10 [ 2505.309790] ? cap_capable+0x1be/0x220 [ 2505.310413] ? __pfx_v9fs_mount+0x10/0x10 [ 2505.311078] legacy_get_tree+0x109/0x220 [ 2505.311811] vfs_get_tree+0x92/0x360 [ 2505.312340] loop2: detected capacity change from 0 to 40 [ 2505.313074] path_mount+0x133c/0x1e50 [ 2505.313635] ? kasan_quarantine_put+0x81/0x1d0 [ 2505.314286] ? __pfx_path_mount+0x10/0x10 [ 2505.314891] ? putname+0x102/0x140 [ 2505.315406] ? kmem_cache_free+0xff/0x4a0 [ 2505.316000] ? putname+0x102/0x140 [ 2505.316526] __x64_sys_mount+0x286/0x310 [ 2505.317093] ? __pfx___x64_sys_mount+0x10/0x10 [ 2505.317732] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2505.318456] do_syscall_64+0x3f/0x90 [ 2505.319020] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2505.319751] RIP: 0033:0x7f8273cb8b19 [ 2505.320270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2505.322651] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2505.323680] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2505.324636] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2505.325592] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2505.326544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2505.327501] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2505.328474] 00:36:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e", 0x1b}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400), 0x3a20000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '-'}}, {@afid={'afid', 0x3d, 0x5}}, {@loose}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}}) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) recvmmsg$unix(r3, &(0x7f0000001800)=[{{&(0x7f0000000640), 0x6e, &(0x7f0000001700)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/20, 0x14}], 0x2, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x1, 0x12100, 0x0) r8 = syz_open_procfs(r7, &(0x7f00000005c0)='status\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@access_client}, {@access_user}, {@cache_loose}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000600)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2505.451601] loop2: detected capacity change from 0 to 40 00:36:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 84) 00:36:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f0000000440), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9e9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedb0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e", 0x1b}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2517.324399] kernel write not supported for file /12239/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2517.337032] loop2: detected capacity change from 0 to 40 00:36:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2517.423953] kernel write not supported for file /12239/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:36:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 85) 00:36:52 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:52 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedb1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:36:52 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003", 0x20}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101, 0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_L}, {@cache_loose}, {@version_L}], [{@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'version=9p2000.L'}}, {@seclabel}, {@appraise_type}, {@fowner_gt={'fowner>', r7}}, {@obj_user={'obj_user', 0x3d, 'msize'}}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9eb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2528.900124] loop2: detected capacity change from 0 to 40 [ 2528.907743] FAULT_INJECTION: forcing a failure. [ 2528.907743] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.908474] CPU: 1 PID: 12287 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2528.908993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.909507] Call Trace: [ 2528.909698] [ 2528.909854] dump_stack_lvl+0xc1/0xf0 [ 2528.910124] should_fail_ex+0x4b4/0x5b0 [ 2528.910404] ? __kernfs_new_node+0xd4/0x870 [ 2528.910692] should_failslab+0x9/0x20 [ 2528.910956] kmem_cache_alloc+0x5a/0x390 [ 2528.911252] __kernfs_new_node+0xd4/0x870 [ 2528.911535] ? __pfx___kernfs_new_node+0x10/0x10 [ 2528.911862] ? down_write+0x11a/0x1f0 [ 2528.912127] ? up_write+0x196/0x510 [ 2528.912382] kernfs_new_node+0x97/0x120 [ 2528.912658] __kernfs_create_file+0x55/0x350 [ 2528.912969] sysfs_add_file_mode_ns+0x21c/0x440 [ 2528.913279] ? __pfx_slab_attr_store+0x10/0x10 [ 2528.913593] internal_create_group+0x322/0xb90 [ 2528.913901] ? __pfx_internal_create_group+0x10/0x10 [ 2528.914236] ? up_write+0x196/0x510 [ 2528.914492] sysfs_slab_add+0x18e/0x220 [ 2528.914757] __kmem_cache_create+0x1fe/0x610 [ 2528.915070] kmem_cache_create_usercopy+0x218/0x340 [ 2528.915405] p9_client_create+0xd0b/0x1260 [ 2528.915697] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2528.916041] ? __pfx_p9_client_create+0x10/0x10 [ 2528.916346] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2528.916678] ? lockdep_init_map_type+0x21e/0x7e0 [ 2528.916989] ? __kasan_kmalloc+0x7f/0x90 [ 2528.917271] ? __raw_spin_lock_init+0x3a/0x110 [ 2528.917584] v9fs_session_init+0x1e0/0x17b0 [ 2528.917884] ? lock_release+0x1e3/0x680 [ 2528.918146] ? __pfx_lock_release+0x10/0x10 [ 2528.918442] ? __pfx_v9fs_session_init+0x10/0x10 [ 2528.918766] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2528.919127] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2528.919463] ? v9fs_mount+0x9e/0xbd0 [ 2528.919734] v9fs_mount+0xbd/0xbd0 [ 2528.919989] ? legacy_init_fs_context+0x44/0xe0 [ 2528.920302] ? __pfx_v9fs_mount+0x10/0x10 [ 2528.920590] ? cap_capable+0x1be/0x220 [ 2528.920878] ? __pfx_v9fs_mount+0x10/0x10 [ 2528.921166] legacy_get_tree+0x109/0x220 [ 2528.921464] vfs_get_tree+0x92/0x360 [ 2528.921729] path_mount+0x133c/0x1e50 [ 2528.922005] ? kasan_quarantine_put+0x81/0x1d0 [ 2528.922316] ? __pfx_path_mount+0x10/0x10 [ 2528.922595] ? putname+0x102/0x140 [ 2528.922844] ? kmem_cache_free+0xff/0x4a0 [ 2528.923144] ? putname+0x102/0x140 [ 2528.923404] __x64_sys_mount+0x286/0x310 [ 2528.923676] ? __pfx___x64_sys_mount+0x10/0x10 [ 2528.923978] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2528.924324] do_syscall_64+0x3f/0x90 [ 2528.924586] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2528.924936] RIP: 0033:0x7f8273cb8b19 [ 2528.925181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.926307] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2528.926785] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2528.927243] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2528.927699] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2528.928152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2528.928611] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2528.929083] 00:36:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedb2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2528.961436] SELinux: security_context_str_to_sid (root) failed with errno=-22 00:36:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:36:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ec, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2529.033567] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2529.034165] CPU: 1 PID: 12287 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2529.034832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.035531] Call Trace: [ 2529.035756] [ 2529.035955] dump_stack_lvl+0xc1/0xf0 [ 2529.036309] kmem_cache_create_usercopy+0x12b/0x340 [ 2529.036744] p9_client_create+0xd0b/0x1260 [ 2529.037121] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2529.037568] ? __pfx_p9_client_create+0x10/0x10 [ 2529.037971] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2529.038402] ? lockdep_init_map_type+0x21e/0x7e0 [ 2529.038817] ? __kasan_kmalloc+0x7f/0x90 [ 2529.039190] ? __raw_spin_lock_init+0x3a/0x110 [ 2529.039585] v9fs_session_init+0x1e0/0x17b0 [ 2529.039877] ? lock_release+0x1e3/0x680 [ 2529.040216] ? __pfx_lock_release+0x10/0x10 [ 2529.040590] ? __pfx_v9fs_session_init+0x10/0x10 [ 2529.040992] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2529.041451] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2529.041870] ? v9fs_mount+0x9e/0xbd0 [ 2529.042211] v9fs_mount+0xbd/0xbd0 [ 2529.042535] ? legacy_init_fs_context+0x44/0xe0 [ 2529.042941] ? __pfx_v9fs_mount+0x10/0x10 [ 2529.043321] ? cap_capable+0x1be/0x220 [ 2529.043666] ? __pfx_v9fs_mount+0x10/0x10 [ 2529.044031] legacy_get_tree+0x109/0x220 [ 2529.044404] vfs_get_tree+0x92/0x360 [ 2529.044740] path_mount+0x133c/0x1e50 [ 2529.045077] ? kasan_quarantine_put+0x81/0x1d0 [ 2529.045479] ? __pfx_path_mount+0x10/0x10 [ 2529.045843] ? putname+0x102/0x140 [ 2529.046164] ? kmem_cache_free+0xff/0x4a0 [ 2529.046531] ? putname+0x102/0x140 [ 2529.046778] __x64_sys_mount+0x286/0x310 [ 2529.047125] ? __pfx___x64_sys_mount+0x10/0x10 [ 2529.047520] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2529.047977] do_syscall_64+0x3f/0x90 [ 2529.048308] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2529.048743] RIP: 0033:0x7f8273cb8b19 [ 2529.049062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.050547] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2529.051196] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2529.051790] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2529.052385] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2529.052977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2529.053574] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2529.054186] 00:36:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003", 0x20}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:36:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ed, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2529.176376] loop2: detected capacity change from 0 to 40 00:37:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffea, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 86) 00:37:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x4, 0x2, 0x1d9}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r4, &(0x7f0000000040)=""/170, 0xaa, 0x0) syz_io_uring_setup(0x54e3, &(0x7f0000000480)={0x0, 0x893b, 0x0, 0x1, 0xab, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d736030302c332b7bc54e1953a9"]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x8, 0x2) io_uring_enter(0xffffffffffffffff, 0x4831, 0x6be0, 0x2, &(0x7f0000000640)={[0x5]}, 0x8) 00:37:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003", 0x20}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ee, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2541.190608] loop2: detected capacity change from 0 to 40 00:37:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973", 0x22}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:05 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ef, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2541.326536] kernel write not supported for file /12326/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:37:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2541.407424] loop2: detected capacity change from 0 to 40 00:37:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 87) 00:37:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:05 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2541.511290] kernel write not supported for file /12326/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2541.578447] FAULT_INJECTION: forcing a failure. [ 2541.578447] name failslab, interval 1, probability 0, space 0, times 0 [ 2541.580149] CPU: 1 PID: 12367 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2541.581409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.582348] Call Trace: [ 2541.582748] [ 2541.583031] dump_stack_lvl+0xc1/0xf0 [ 2541.583678] should_fail_ex+0x4b4/0x5b0 [ 2541.584188] ? __kernfs_new_node+0xd4/0x870 [ 2541.584882] should_failslab+0x9/0x20 [ 2541.585366] kmem_cache_alloc+0x5a/0x390 [ 2541.586022] __kernfs_new_node+0xd4/0x870 [ 2541.586536] ? __pfx___kernfs_new_node+0x10/0x10 [ 2541.587288] ? down_write+0x11a/0x1f0 [ 2541.587786] ? up_write+0x196/0x510 [ 2541.588312] kernfs_new_node+0x97/0x120 [ 2541.588958] __kernfs_create_file+0x55/0x350 [ 2541.589667] sysfs_add_file_mode_ns+0x21c/0x440 [ 2541.590399] ? __pfx_slab_attr_store+0x10/0x10 [ 2541.591140] internal_create_group+0x322/0xb90 [ 2541.591899] ? __pfx_internal_create_group+0x10/0x10 [ 2541.592693] ? up_write+0x196/0x510 [ 2541.593293] sysfs_slab_add+0x18e/0x220 [ 2541.593915] __kmem_cache_create+0x1fe/0x610 [ 2541.594615] kmem_cache_create_usercopy+0x218/0x340 [ 2541.595372] p9_client_create+0xd0b/0x1260 [ 2541.595974] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.596686] ? __pfx_p9_client_create+0x10/0x10 [ 2541.597336] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2541.597951] ? lockdep_init_map_type+0x21e/0x7e0 [ 2541.598601] ? __kasan_kmalloc+0x7f/0x90 [ 2541.599131] ? __raw_spin_lock_init+0x3a/0x110 [ 2541.599789] v9fs_session_init+0x1e0/0x17b0 [ 2541.600402] ? lock_release+0x1e3/0x680 [ 2541.600958] ? __pfx_lock_release+0x10/0x10 [ 2541.601550] ? __pfx_v9fs_session_init+0x10/0x10 [ 2541.602216] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.602925] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2541.603626] ? v9fs_mount+0x9e/0xbd0 [ 2541.604176] v9fs_mount+0xbd/0xbd0 [ 2541.604694] ? legacy_init_fs_context+0x44/0xe0 [ 2541.605333] ? __pfx_v9fs_mount+0x10/0x10 [ 2541.605921] ? cap_capable+0x1be/0x220 [ 2541.606479] ? __pfx_v9fs_mount+0x10/0x10 [ 2541.607081] legacy_get_tree+0x109/0x220 [ 2541.607673] vfs_get_tree+0x92/0x360 [ 2541.608203] path_mount+0x133c/0x1e50 [ 2541.608751] ? kasan_quarantine_put+0x81/0x1d0 [ 2541.609392] ? __pfx_path_mount+0x10/0x10 [ 2541.609978] ? putname+0x102/0x140 [ 2541.610487] ? kmem_cache_free+0xff/0x4a0 [ 2541.611079] ? putname+0x102/0x140 [ 2541.611615] __x64_sys_mount+0x286/0x310 [ 2541.612176] ? __pfx___x64_sys_mount+0x10/0x10 [ 2541.612799] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.613505] do_syscall_64+0x3f/0x90 [ 2541.614031] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2541.614766] RIP: 0033:0x7f8273cb8b19 [ 2541.615290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2541.617638] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2541.618627] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2541.619564] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2541.620496] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2541.621399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2541.622259] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2541.623128] [ 2541.656007] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2541.657041] CPU: 1 PID: 12367 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2541.658011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2541.658977] Call Trace: [ 2541.659302] [ 2541.659592] dump_stack_lvl+0xc1/0xf0 [ 2541.660082] kmem_cache_create_usercopy+0x12b/0x340 [ 2541.660715] p9_client_create+0xd0b/0x1260 [ 2541.661249] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.661890] ? __pfx_p9_client_create+0x10/0x10 [ 2541.662476] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2541.663095] ? lockdep_init_map_type+0x21e/0x7e0 [ 2541.663689] ? __kasan_kmalloc+0x7f/0x90 [ 2541.664212] ? __raw_spin_lock_init+0x3a/0x110 [ 2541.664794] v9fs_session_init+0x1e0/0x17b0 [ 2541.665336] ? lock_release+0x1e3/0x680 [ 2541.665832] ? __pfx_lock_release+0x10/0x10 [ 2541.666372] ? __pfx_v9fs_session_init+0x10/0x10 [ 2541.666970] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.667631] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2541.668239] ? v9fs_mount+0x9e/0xbd0 [ 2541.668733] v9fs_mount+0xbd/0xbd0 [ 2541.669195] ? legacy_init_fs_context+0x44/0xe0 [ 2541.669772] ? __pfx_v9fs_mount+0x10/0x10 [ 2541.670303] ? cap_capable+0x1be/0x220 [ 2541.670811] ? __pfx_v9fs_mount+0x10/0x10 [ 2541.671348] legacy_get_tree+0x109/0x220 [ 2541.671875] vfs_get_tree+0x92/0x360 [ 2541.672359] path_mount+0x133c/0x1e50 [ 2541.672854] ? kasan_quarantine_put+0x81/0x1d0 [ 2541.673424] ? __pfx_path_mount+0x10/0x10 [ 2541.673958] ? putname+0x102/0x140 [ 2541.674413] ? kmem_cache_free+0xff/0x4a0 [ 2541.674942] ? putname+0x102/0x140 [ 2541.675423] __x64_sys_mount+0x286/0x310 [ 2541.675926] ? __pfx___x64_sys_mount+0x10/0x10 [ 2541.676491] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2541.677129] do_syscall_64+0x3f/0x90 [ 2541.677604] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2541.678243] RIP: 0033:0x7f8273cb8b19 [ 2541.678699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2541.680814] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2541.681719] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2541.682556] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2541.683413] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2541.684255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2541.685100] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2541.685957] 00:37:18 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 88) 00:37:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x66e6, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000440)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:18 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:18 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973", 0x22}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:18 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2554.870251] loop2: detected capacity change from 0 to 40 00:37:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4caa6e64, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x59e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8b9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973", 0x22}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2555.001537] kernel write not supported for file /12394/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:37:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 89) 00:37:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2555.071293] loop2: detected capacity change from 0 to 40 [ 2555.110837] FAULT_INJECTION: forcing a failure. [ 2555.110837] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.111682] CPU: 0 PID: 12416 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2555.112225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.112773] Call Trace: [ 2555.112953] [ 2555.113113] dump_stack_lvl+0xc1/0xf0 [ 2555.113390] should_fail_ex+0x4b4/0x5b0 [ 2555.113685] ? __kernfs_new_node+0xd4/0x870 [ 2555.113980] should_failslab+0x9/0x20 [ 2555.114252] kmem_cache_alloc+0x5a/0x390 [ 2555.114548] __kernfs_new_node+0xd4/0x870 [ 2555.114842] ? __pfx___kernfs_new_node+0x10/0x10 [ 2555.115177] ? down_write+0x11a/0x1f0 [ 2555.115472] ? up_write+0x196/0x510 [ 2555.115737] kernfs_new_node+0x97/0x120 [ 2555.116016] __kernfs_create_file+0x55/0x350 [ 2555.116332] sysfs_add_file_mode_ns+0x21c/0x440 [ 2555.116667] ? __pfx_slab_attr_store+0x10/0x10 [ 2555.116992] internal_create_group+0x322/0xb90 [ 2555.117315] ? __pfx_internal_create_group+0x10/0x10 [ 2555.117663] ? up_write+0x196/0x510 [ 2555.117929] sysfs_slab_add+0x18e/0x220 [ 2555.118203] __kmem_cache_create+0x1fe/0x610 [ 2555.118533] kmem_cache_create_usercopy+0x218/0x340 [ 2555.118880] p9_client_create+0xd0b/0x1260 [ 2555.119182] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.119539] ? __pfx_p9_client_create+0x10/0x10 [ 2555.119861] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2555.120201] ? lockdep_init_map_type+0x21e/0x7e0 [ 2555.120528] ? __kasan_kmalloc+0x7f/0x90 [ 2555.120834] ? __raw_spin_lock_init+0x3a/0x110 [ 2555.121173] v9fs_session_init+0x1e0/0x17b0 [ 2555.121494] ? lock_release+0x1e3/0x680 [ 2555.121789] ? __pfx_lock_release+0x10/0x10 [ 2555.122103] ? __pfx_v9fs_session_init+0x10/0x10 [ 2555.122453] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.122835] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2555.123194] ? v9fs_mount+0x9e/0xbd0 [ 2555.123500] v9fs_mount+0xbd/0xbd0 [ 2555.123770] ? legacy_init_fs_context+0x44/0xe0 [ 2555.124118] ? __pfx_v9fs_mount+0x10/0x10 [ 2555.124430] ? cap_capable+0x1be/0x220 [ 2555.124726] ? __pfx_v9fs_mount+0x10/0x10 [ 2555.125040] legacy_get_tree+0x109/0x220 [ 2555.125352] vfs_get_tree+0x92/0x360 [ 2555.125646] path_mount+0x133c/0x1e50 [ 2555.125941] ? kasan_quarantine_put+0x81/0x1d0 [ 2555.126283] ? __pfx_path_mount+0x10/0x10 [ 2555.126587] ? putname+0x102/0x140 [ 2555.126863] ? kmem_cache_free+0xff/0x4a0 [ 2555.127172] ? putname+0x102/0x140 [ 2555.127454] __x64_sys_mount+0x286/0x310 [ 2555.127752] ? __pfx___x64_sys_mount+0x10/0x10 [ 2555.128080] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.128450] do_syscall_64+0x3f/0x90 [ 2555.128720] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2555.129077] RIP: 0033:0x7f8273cb8b19 [ 2555.129328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.130501] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2555.130995] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2555.131480] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2555.131946] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2555.132416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.132875] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2555.133362] [ 2555.158297] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2555.159435] CPU: 1 PID: 12416 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2555.160490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.161526] Call Trace: [ 2555.161874] [ 2555.162185] dump_stack_lvl+0xc1/0xf0 [ 2555.162715] kmem_cache_create_usercopy+0x12b/0x340 [ 2555.163395] p9_client_create+0xd0b/0x1260 [ 2555.163974] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.164659] ? __pfx_p9_client_create+0x10/0x10 [ 2555.165276] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2555.165941] ? lockdep_init_map_type+0x21e/0x7e0 [ 2555.166572] ? __kasan_kmalloc+0x7f/0x90 [ 2555.167135] ? __raw_spin_lock_init+0x3a/0x110 [ 2555.167772] v9fs_session_init+0x1e0/0x17b0 [ 2555.168357] ? lock_release+0x1e3/0x680 [ 2555.168891] ? __pfx_lock_release+0x10/0x10 [ 2555.169468] ? __pfx_v9fs_session_init+0x10/0x10 [ 2555.170108] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.170799] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2555.171476] ? v9fs_mount+0x9e/0xbd0 [ 2555.172040] v9fs_mount+0xbd/0xbd0 [ 2555.172567] ? legacy_init_fs_context+0x44/0xe0 [ 2555.173212] ? __pfx_v9fs_mount+0x10/0x10 [ 2555.173811] ? cap_capable+0x1be/0x220 [ 2555.174365] ? __pfx_v9fs_mount+0x10/0x10 [ 2555.174959] legacy_get_tree+0x109/0x220 [ 2555.175560] vfs_get_tree+0x92/0x360 [ 2555.176108] path_mount+0x133c/0x1e50 [ 2555.176673] ? kasan_quarantine_put+0x81/0x1d0 [ 2555.177322] ? __pfx_path_mount+0x10/0x10 [ 2555.177919] ? putname+0x102/0x140 [ 2555.178441] ? kmem_cache_free+0xff/0x4a0 [ 2555.179034] ? putname+0x102/0x140 [ 2555.179575] __x64_sys_mount+0x286/0x310 [ 2555.180142] ? __pfx___x64_sys_mount+0x10/0x10 [ 2555.180787] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2555.181516] do_syscall_64+0x3f/0x90 [ 2555.182056] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2555.182774] RIP: 0033:0x7f8273cb8b19 [ 2555.183293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.185697] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2555.186719] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2555.187719] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2555.188680] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2555.189635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.190585] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2555.191566] [ 2555.195193] kernel write not supported for file /12394/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:37:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 90) 00:37:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000440)={0x18, 0xd, 0x2, {{0x0, 0x4, 0x7}, 0x4}}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) preadv(r5, &(0x7f0000000880)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/224, 0xe0}, {&(0x7f00000006c0)=""/246, 0xf6}, {&(0x7f00000007c0)=""/139, 0x8b}], 0x5, 0x1c, 0x1ff) fallocate(r1, 0x20, 0x8, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73690300000078303030303030303030303030313030302c00"]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000480)={0x3ff, 0xffffffff7fffffff, 0x5}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) write$vga_arbiter(r7, &(0x7f0000000280), 0xf) 00:37:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ba, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ae90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f97376", 0x23}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2572.332213] 9pnet_fd: Insufficient options for proto=fd [ 2572.348414] loop2: detected capacity change from 0 to 40 00:37:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5be90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8bb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2572.426257] 9pnet_fd: Insufficient options for proto=fd 00:37:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f97376", 0x23}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 91) [ 2572.582391] loop2: detected capacity change from 0 to 40 [ 2572.611328] FAULT_INJECTION: forcing a failure. [ 2572.611328] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.613145] CPU: 0 PID: 12476 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2572.614246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.615345] Call Trace: [ 2572.615721] [ 2572.616051] dump_stack_lvl+0xc1/0xf0 [ 2572.616607] should_fail_ex+0x4b4/0x5b0 [ 2572.617194] ? __kernfs_new_node+0xd4/0x870 [ 2572.617801] should_failslab+0x9/0x20 [ 2572.618350] kmem_cache_alloc+0x5a/0x390 [ 2572.618940] __kernfs_new_node+0xd4/0x870 [ 2572.619534] ? __pfx___kernfs_new_node+0x10/0x10 [ 2572.620242] ? down_write+0x11a/0x1f0 [ 2572.620807] ? up_write+0x196/0x510 [ 2572.621363] kernfs_new_node+0x97/0x120 [ 2572.621959] __kernfs_create_file+0x55/0x350 [ 2572.622610] sysfs_add_file_mode_ns+0x21c/0x440 [ 2572.623282] ? __pfx_slab_attr_store+0x10/0x10 [ 2572.623988] internal_create_group+0x322/0xb90 [ 2572.624649] ? __pfx_internal_create_group+0x10/0x10 [ 2572.625374] ? up_write+0x196/0x510 [ 2572.625942] sysfs_slab_add+0x18e/0x220 [ 2572.626526] __kmem_cache_create+0x1fe/0x610 [ 2572.627207] kmem_cache_create_usercopy+0x218/0x340 [ 2572.627985] p9_client_create+0xd0b/0x1260 [ 2572.628623] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.629397] ? __pfx_p9_client_create+0x10/0x10 [ 2572.630100] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2572.630844] ? lockdep_init_map_type+0x21e/0x7e0 [ 2572.631552] ? __kasan_kmalloc+0x7f/0x90 [ 2572.632189] ? __raw_spin_lock_init+0x3a/0x110 [ 2572.632898] v9fs_session_init+0x1e0/0x17b0 [ 2572.633562] ? lock_release+0x1e3/0x680 [ 2572.634148] ? __pfx_lock_release+0x10/0x10 [ 2572.634808] ? __pfx_v9fs_session_init+0x10/0x10 [ 2572.635540] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.636365] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2572.637105] ? v9fs_mount+0x9e/0xbd0 [ 2572.637707] v9fs_mount+0xbd/0xbd0 [ 2572.638261] ? legacy_init_fs_context+0x44/0xe0 [ 2572.638896] ? __pfx_v9fs_mount+0x10/0x10 [ 2572.639446] ? cap_capable+0x1be/0x220 [ 2572.639991] ? __pfx_v9fs_mount+0x10/0x10 [ 2572.640548] legacy_get_tree+0x109/0x220 [ 2572.641104] vfs_get_tree+0x92/0x360 [ 2572.641607] path_mount+0x133c/0x1e50 [ 2572.642138] ? kasan_quarantine_put+0x81/0x1d0 [ 2572.642743] ? __pfx_path_mount+0x10/0x10 [ 2572.643299] ? putname+0x102/0x140 [ 2572.643793] ? kmem_cache_free+0xff/0x4a0 [ 2572.644354] ? putname+0x102/0x140 [ 2572.644852] __x64_sys_mount+0x286/0x310 [ 2572.645386] ? __pfx___x64_sys_mount+0x10/0x10 [ 2572.645989] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.646677] do_syscall_64+0x3f/0x90 [ 2572.647185] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2572.647887] RIP: 0033:0x7f8273cb8b19 [ 2572.648378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.650642] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2572.651600] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2572.652507] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2572.653410] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2572.654324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.655217] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2572.656169] [ 2572.695039] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2572.696127] CPU: 0 PID: 12476 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2572.697262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2572.698381] Call Trace: [ 2572.698749] [ 2572.699074] dump_stack_lvl+0xc1/0xf0 [ 2572.699647] kmem_cache_create_usercopy+0x12b/0x340 [ 2572.700378] p9_client_create+0xd0b/0x1260 [ 2572.700996] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.701735] ? __pfx_p9_client_create+0x10/0x10 [ 2572.702405] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2572.703116] ? lockdep_init_map_type+0x21e/0x7e0 [ 2572.703819] ? __kasan_kmalloc+0x7f/0x90 [ 2572.704432] ? __raw_spin_lock_init+0x3a/0x110 [ 2572.705111] v9fs_session_init+0x1e0/0x17b0 [ 2572.705750] ? lock_release+0x1e3/0x680 [ 2572.706317] ? __pfx_lock_release+0x10/0x10 [ 2572.706951] ? __pfx_v9fs_session_init+0x10/0x10 [ 2572.707665] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.708426] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2572.709152] ? v9fs_mount+0x9e/0xbd0 [ 2572.709734] v9fs_mount+0xbd/0xbd0 [ 2572.710284] ? legacy_init_fs_context+0x44/0xe0 [ 2572.710949] ? __pfx_v9fs_mount+0x10/0x10 [ 2572.711581] ? cap_capable+0x1be/0x220 [ 2572.712204] ? __pfx_v9fs_mount+0x10/0x10 [ 2572.712847] legacy_get_tree+0x109/0x220 [ 2572.713473] vfs_get_tree+0x92/0x360 [ 2572.714057] path_mount+0x133c/0x1e50 [ 2572.714651] ? kasan_quarantine_put+0x81/0x1d0 [ 2572.715341] ? __pfx_path_mount+0x10/0x10 [ 2572.715970] ? putname+0x102/0x140 [ 2572.716486] ? kmem_cache_free+0xff/0x4a0 [ 2572.717099] ? putname+0x102/0x140 [ 2572.717641] __x64_sys_mount+0x286/0x310 [ 2572.718231] ? __pfx___x64_sys_mount+0x10/0x10 [ 2572.718882] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2572.719640] do_syscall_64+0x3f/0x90 [ 2572.720211] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2572.720958] RIP: 0033:0x7f8273cb8b19 [ 2572.721496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2572.723950] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2572.724865] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2572.725736] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2572.726596] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2572.727465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2572.728335] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2572.729248] 00:37:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 92) 00:37:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f97376", 0x23}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:37:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8bc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) write$P9_RLERRORu(r1, &(0x7f0000000440)={0x11, 0x7, 0x1, {{0x4, ',{,%'}, 0x1ff}}, 0x11) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ce90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2584.700939] loop2: detected capacity change from 0 to 40 00:37:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2584.737624] kernel write not supported for file /12481/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:37:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8bd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5de90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:37:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2584.827490] kernel write not supported for file /12481/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:37:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:37:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2584.914289] loop2: detected capacity change from 0 to 40 00:37:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 93) 00:37:49 executing program 7: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@empty, @private}, &(0x7f0000000480)=0xc) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r4, &(0x7f0000000040)=""/170, 0xaa, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000004c0)=[r3], 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2585.036885] FAULT_INJECTION: forcing a failure. [ 2585.036885] name failslab, interval 1, probability 0, space 0, times 0 [ 2585.038326] CPU: 0 PID: 12531 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2585.039335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.040363] Call Trace: [ 2585.040695] [ 2585.040995] dump_stack_lvl+0xc1/0xf0 [ 2585.041507] should_fail_ex+0x4b4/0x5b0 [ 2585.042052] ? __kernfs_new_node+0xd4/0x870 [ 2585.042599] should_failslab+0x9/0x20 [ 2585.043107] kmem_cache_alloc+0x5a/0x390 [ 2585.043646] __kernfs_new_node+0xd4/0x870 [ 2585.044214] ? __pfx___kernfs_new_node+0x10/0x10 [ 2585.044834] ? down_write+0x11a/0x1f0 [ 2585.045354] ? up_write+0x196/0x510 [ 2585.045852] kernfs_new_node+0x97/0x120 [ 2585.046393] __kernfs_create_file+0x55/0x350 [ 2585.046991] sysfs_add_file_mode_ns+0x21c/0x440 [ 2585.047591] ? __pfx_slab_attr_store+0x10/0x10 [ 2585.048260] internal_create_group+0x322/0xb90 [ 2585.048850] ? __pfx_internal_create_group+0x10/0x10 [ 2585.049646] ? up_write+0x196/0x510 [ 2585.050303] sysfs_slab_add+0x18e/0x220 [ 2585.050998] __kmem_cache_create+0x1fe/0x610 [ 2585.051783] kmem_cache_create_usercopy+0x218/0x340 [ 2585.052653] p9_client_create+0xd0b/0x1260 [ 2585.053353] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.054027] ? __pfx_p9_client_create+0x10/0x10 [ 2585.054618] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2585.055274] ? lockdep_init_map_type+0x21e/0x7e0 [ 2585.055886] ? __kasan_kmalloc+0x7f/0x90 [ 2585.056436] ? __raw_spin_lock_init+0x3a/0x110 [ 2585.057037] v9fs_session_init+0x1e0/0x17b0 [ 2585.057600] ? lock_release+0x1e3/0x680 [ 2585.058117] ? __pfx_lock_release+0x10/0x10 [ 2585.058661] ? __pfx_v9fs_session_init+0x10/0x10 [ 2585.059286] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.059974] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2585.060625] ? v9fs_mount+0x9e/0xbd0 [ 2585.061148] v9fs_mount+0xbd/0xbd0 [ 2585.061617] ? legacy_init_fs_context+0x44/0xe0 [ 2585.062213] ? __pfx_v9fs_mount+0x10/0x10 [ 2585.062748] ? cap_capable+0x1be/0x220 [ 2585.063276] ? __pfx_v9fs_mount+0x10/0x10 [ 2585.063835] legacy_get_tree+0x109/0x220 [ 2585.064389] vfs_get_tree+0x92/0x360 [ 2585.064887] path_mount+0x133c/0x1e50 [ 2585.065409] ? kasan_quarantine_put+0x81/0x1d0 [ 2585.066007] ? __pfx_path_mount+0x10/0x10 [ 2585.066546] ? putname+0x102/0x140 [ 2585.067031] ? kmem_cache_free+0xff/0x4a0 [ 2585.067558] ? putname+0x102/0x140 [ 2585.068064] __x64_sys_mount+0x286/0x310 [ 2585.068574] ? __pfx___x64_sys_mount+0x10/0x10 [ 2585.069167] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.069830] do_syscall_64+0x3f/0x90 [ 2585.070339] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2585.071010] RIP: 0033:0x7f8273cb8b19 [ 2585.071477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.073479] kernel write not supported for file /12528/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2585.073673] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2585.073710] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2585.076623] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2585.077491] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2585.078360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.079229] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2585.080161] [ 2585.123551] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2585.125249] CPU: 0 PID: 12531 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2585.126264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2585.127261] Call Trace: [ 2585.127584] [ 2585.127904] dump_stack_lvl+0xc1/0xf0 [ 2585.128420] kmem_cache_create_usercopy+0x12b/0x340 [ 2585.129066] p9_client_create+0xd0b/0x1260 [ 2585.129610] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.130272] ? __pfx_p9_client_create+0x10/0x10 [ 2585.130861] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2585.131500] ? lockdep_init_map_type+0x21e/0x7e0 [ 2585.132141] ? __kasan_kmalloc+0x7f/0x90 [ 2585.132668] ? __raw_spin_lock_init+0x3a/0x110 [ 2585.133270] v9fs_session_init+0x1e0/0x17b0 [ 2585.133831] ? lock_release+0x1e3/0x680 [ 2585.134352] ? __pfx_lock_release+0x10/0x10 [ 2585.134900] ? __pfx_v9fs_session_init+0x10/0x10 [ 2585.135510] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.136210] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2585.136831] ? v9fs_mount+0x9e/0xbd0 [ 2585.137349] v9fs_mount+0xbd/0xbd0 [ 2585.137819] ? legacy_init_fs_context+0x44/0xe0 [ 2585.138416] ? __pfx_v9fs_mount+0x10/0x10 [ 2585.138950] ? cap_capable+0x1be/0x220 [ 2585.139478] ? __pfx_v9fs_mount+0x10/0x10 [ 2585.140091] legacy_get_tree+0x109/0x220 [ 2585.140621] vfs_get_tree+0x92/0x360 [ 2585.141110] path_mount+0x133c/0x1e50 [ 2585.141612] ? kasan_quarantine_put+0x81/0x1d0 [ 2585.142192] ? __pfx_path_mount+0x10/0x10 [ 2585.142734] ? putname+0x102/0x140 [ 2585.143204] ? kmem_cache_free+0xff/0x4a0 [ 2585.143732] ? putname+0x102/0x140 [ 2585.144220] __x64_sys_mount+0x286/0x310 [ 2585.144725] ? __pfx___x64_sys_mount+0x10/0x10 [ 2585.145298] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2585.145948] do_syscall_64+0x3f/0x90 [ 2585.146439] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2585.147077] RIP: 0033:0x7f8273cb8b19 [ 2585.147536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2585.149686] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2585.150593] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2585.151434] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2585.152307] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2585.153151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2585.153996] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2585.154865] [ 2585.214556] kernel write not supported for file /12528/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:38:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8be, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 94) 00:38:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ee90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2597.414947] loop2: detected capacity change from 0 to 40 00:38:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5fe90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2597.432374] kernel write not supported for file /12543/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:38:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8bf, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2597.627852] loop2: detected capacity change from 0 to 40 [ 2597.628107] kernel write not supported for file /12543/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:38:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x60e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {0x0}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000440)=r7, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2010000, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'version=9p2000.L'}}, {@obj_user={'obj_user', 0x3d, 'trans=fd,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wfdno'}}]}}) 00:38:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 95) 00:38:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2613.627253] loop2: detected capacity change from 0 to 40 00:38:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x61e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2613.670838] kernel write not supported for file /12587/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:38:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {0x0}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2613.721719] FAULT_INJECTION: forcing a failure. [ 2613.721719] name failslab, interval 1, probability 0, space 0, times 0 [ 2613.722504] CPU: 0 PID: 12602 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2613.723061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2613.723598] Call Trace: [ 2613.723796] [ 2613.723954] dump_stack_lvl+0xc1/0xf0 [ 2613.724238] should_fail_ex+0x4b4/0x5b0 [ 2613.724529] ? __kernfs_new_node+0xd4/0x870 [ 2613.724827] should_failslab+0x9/0x20 [ 2613.725110] kmem_cache_alloc+0x5a/0x390 [ 2613.725400] __kernfs_new_node+0xd4/0x870 [ 2613.725694] ? __pfx___kernfs_new_node+0x10/0x10 [ 2613.726029] ? down_write+0x11a/0x1f0 [ 2613.726307] ? up_write+0x196/0x510 [ 2613.726576] kernfs_new_node+0x97/0x120 [ 2613.726860] __kernfs_create_file+0x55/0x350 [ 2613.727185] sysfs_add_file_mode_ns+0x21c/0x440 [ 2613.727511] ? __pfx_slab_attr_store+0x10/0x10 [ 2613.727841] internal_create_group+0x322/0xb90 [ 2613.728169] ? __pfx_internal_create_group+0x10/0x10 [ 2613.728542] ? up_write+0x196/0x510 [ 2613.728824] sysfs_slab_add+0x18e/0x220 [ 2613.729108] __kmem_cache_create+0x1fe/0x610 [ 2613.729434] kmem_cache_create_usercopy+0x218/0x340 [ 2613.729807] p9_client_create+0xd0b/0x1260 [ 2613.730114] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.730484] ? __pfx_p9_client_create+0x10/0x10 [ 2613.730821] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2613.731180] ? lockdep_init_map_type+0x21e/0x7e0 [ 2613.731519] ? __kasan_kmalloc+0x7f/0x90 [ 2613.731830] ? __raw_spin_lock_init+0x3a/0x110 [ 2613.732172] v9fs_session_init+0x1e0/0x17b0 [ 2613.732489] ? lock_release+0x1e3/0x680 [ 2613.732781] ? __pfx_lock_release+0x10/0x10 [ 2613.733098] ? __pfx_v9fs_session_init+0x10/0x10 [ 2613.733453] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.733834] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2613.734184] ? v9fs_mount+0x9e/0xbd0 [ 2613.734470] v9fs_mount+0xbd/0xbd0 [ 2613.734737] ? legacy_init_fs_context+0x44/0xe0 [ 2613.735069] ? __pfx_v9fs_mount+0x10/0x10 [ 2613.735369] ? cap_capable+0x1be/0x220 [ 2613.735659] ? __pfx_v9fs_mount+0x10/0x10 [ 2613.735974] legacy_get_tree+0x109/0x220 [ 2613.736272] vfs_get_tree+0x92/0x360 [ 2613.736552] path_mount+0x133c/0x1e50 [ 2613.736844] ? kasan_quarantine_put+0x81/0x1d0 [ 2613.737183] ? __pfx_path_mount+0x10/0x10 [ 2613.737484] ? putname+0x102/0x140 [ 2613.737745] ? kmem_cache_free+0xff/0x4a0 [ 2613.738053] ? putname+0x102/0x140 [ 2613.738326] __x64_sys_mount+0x286/0x310 [ 2613.738623] ? __pfx___x64_sys_mount+0x10/0x10 [ 2613.738957] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.739336] do_syscall_64+0x3f/0x90 [ 2613.739611] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2613.739983] RIP: 0033:0x7f8273cb8b19 [ 2613.740256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2613.741476] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2613.742007] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2613.742506] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2613.742999] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2613.743490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2613.743985] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2613.744497] 00:38:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9f9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2613.762508] 9pnet_fd: Insufficient options for proto=fd 00:38:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2613.787924] loop2: detected capacity change from 0 to 40 [ 2613.835617] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2613.836205] CPU: 0 PID: 12602 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2613.836751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2613.837296] Call Trace: [ 2613.837476] [ 2613.837636] dump_stack_lvl+0xc1/0xf0 [ 2613.837913] kmem_cache_create_usercopy+0x12b/0x340 [ 2613.838266] p9_client_create+0xd0b/0x1260 [ 2613.838561] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.838917] ? __pfx_p9_client_create+0x10/0x10 [ 2613.839241] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2613.839587] ? lockdep_init_map_type+0x21e/0x7e0 [ 2613.839914] ? __kasan_kmalloc+0x7f/0x90 [ 2613.840221] ? __raw_spin_lock_init+0x3a/0x110 [ 2613.840541] v9fs_session_init+0x1e0/0x17b0 [ 2613.840851] ? lock_release+0x1e3/0x680 [ 2613.841125] ? __pfx_lock_release+0x10/0x10 [ 2613.841428] ? __pfx_v9fs_session_init+0x10/0x10 [ 2613.841763] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.842125] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2613.842467] ? v9fs_mount+0x9e/0xbd0 [ 2613.842744] v9fs_mount+0xbd/0xbd0 [ 2613.843003] ? legacy_init_fs_context+0x44/0xe0 [ 2613.843328] ? __pfx_v9fs_mount+0x10/0x10 [ 2613.843618] ? cap_capable+0x1be/0x220 [ 2613.843902] ? __pfx_v9fs_mount+0x10/0x10 [ 2613.844200] legacy_get_tree+0x109/0x220 [ 2613.844494] vfs_get_tree+0x92/0x360 [ 2613.844766] path_mount+0x133c/0x1e50 [ 2613.845038] ? kasan_quarantine_put+0x81/0x1d0 [ 2613.845357] ? __pfx_path_mount+0x10/0x10 [ 2613.845650] ? putname+0x102/0x140 [ 2613.845897] ? kmem_cache_free+0xff/0x4a0 [ 2613.846183] ? putname+0x102/0x140 [ 2613.846440] __x64_sys_mount+0x286/0x310 [ 2613.846720] ? __pfx___x64_sys_mount+0x10/0x10 [ 2613.847036] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2613.847399] do_syscall_64+0x3f/0x90 [ 2613.847660] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2613.848017] RIP: 0033:0x7f8273cb8b19 [ 2613.848274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2613.849435] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2613.849932] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2613.850406] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2613.850877] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2613.851344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2613.851811] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2613.852307] [ 2613.910141] kernel write not supported for file /12587/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2613.926512] 9pnet_fd: Insufficient options for proto=fd 00:38:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:31 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {0x0}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x62e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:31 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 96) 00:38:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:31 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:31 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9fa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@aname={'aname', 0x3d, '9p\x00'}}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5ea}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8, 0x1, r6}, {0x8, 0x1, r8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x808}, 0x40010) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2627.899239] loop2: detected capacity change from 0 to 40 00:38:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9fb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:32 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x63e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2628.000110] kernel write not supported for file /12632/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2628.037366] loop2: detected capacity change from 0 to 40 00:38:32 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 97) 00:38:32 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9fc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:32 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2628.123235] FAULT_INJECTION: forcing a failure. [ 2628.123235] name failslab, interval 1, probability 0, space 0, times 0 [ 2628.124095] CPU: 0 PID: 12667 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2628.124750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.125365] Call Trace: [ 2628.125567] [ 2628.125755] dump_stack_lvl+0xc1/0xf0 [ 2628.126069] should_fail_ex+0x4b4/0x5b0 [ 2628.126402] ? __kernfs_new_node+0xd4/0x870 [ 2628.126729] should_failslab+0x9/0x20 [ 2628.127061] kmem_cache_alloc+0x5a/0x390 [ 2628.127399] __kernfs_new_node+0xd4/0x870 [ 2628.127730] ? __pfx___kernfs_new_node+0x10/0x10 [ 2628.128102] ? down_write+0x11a/0x1f0 [ 2628.128427] ? up_write+0x196/0x510 [ 2628.128735] kernfs_new_node+0x97/0x120 [ 2628.129057] __kernfs_create_file+0x55/0x350 [ 2628.129418] sysfs_add_file_mode_ns+0x21c/0x440 [ 2628.129787] ? __pfx_slab_attr_store+0x10/0x10 [ 2628.130164] internal_create_group+0x322/0xb90 [ 2628.130520] ? __pfx_internal_create_group+0x10/0x10 [ 2628.130912] ? up_write+0x196/0x510 [ 2628.131213] sysfs_slab_add+0x18e/0x220 [ 2628.131530] __kmem_cache_create+0x1fe/0x610 [ 2628.131874] kmem_cache_create_usercopy+0x218/0x340 [ 2628.132270] p9_client_create+0xd0b/0x1260 [ 2628.132612] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.133015] ? __pfx_p9_client_create+0x10/0x10 [ 2628.133379] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2628.133761] ? lockdep_init_map_type+0x21e/0x7e0 [ 2628.134126] ? __kasan_kmalloc+0x7f/0x90 [ 2628.134445] ? __raw_spin_lock_init+0x3a/0x110 [ 2628.134820] v9fs_session_init+0x1e0/0x17b0 [ 2628.135160] ? lock_release+0x1e3/0x680 [ 2628.135468] ? __pfx_lock_release+0x10/0x10 [ 2628.135793] ? __pfx_v9fs_session_init+0x10/0x10 [ 2628.136161] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.136554] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2628.136934] ? v9fs_mount+0x9e/0xbd0 [ 2628.137239] v9fs_mount+0xbd/0xbd0 [ 2628.137525] ? legacy_init_fs_context+0x44/0xe0 [ 2628.137877] ? __pfx_v9fs_mount+0x10/0x10 [ 2628.138203] ? cap_capable+0x1be/0x220 [ 2628.138517] ? __pfx_v9fs_mount+0x10/0x10 [ 2628.138845] legacy_get_tree+0x109/0x220 [ 2628.139165] vfs_get_tree+0x92/0x360 [ 2628.139466] path_mount+0x133c/0x1e50 [ 2628.139774] ? kasan_quarantine_put+0x81/0x1d0 [ 2628.140128] ? __pfx_path_mount+0x10/0x10 [ 2628.140463] ? putname+0x102/0x140 [ 2628.140750] ? kmem_cache_free+0xff/0x4a0 [ 2628.141071] ? putname+0x102/0x140 [ 2628.141354] __x64_sys_mount+0x286/0x310 [ 2628.141660] ? __pfx___x64_sys_mount+0x10/0x10 [ 2628.142010] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.142412] do_syscall_64+0x3f/0x90 [ 2628.142706] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2628.143101] RIP: 0033:0x7f8273cb8b19 [ 2628.143384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.144687] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.145274] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2628.145803] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2628.146340] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2628.146876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.147413] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2628.147954] 00:38:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2628.190617] loop2: detected capacity change from 0 to 40 [ 2628.198557] kernel write not supported for file /12632/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2628.233983] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2628.234531] CPU: 0 PID: 12667 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2628.235119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2628.235708] Call Trace: [ 2628.235899] [ 2628.236071] dump_stack_lvl+0xc1/0xf0 [ 2628.236383] kmem_cache_create_usercopy+0x12b/0x340 [ 2628.236769] p9_client_create+0xd0b/0x1260 [ 2628.237095] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.237480] ? __pfx_p9_client_create+0x10/0x10 [ 2628.237822] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2628.238196] ? lockdep_init_map_type+0x21e/0x7e0 [ 2628.238545] ? __kasan_kmalloc+0x7f/0x90 [ 2628.238865] ? __raw_spin_lock_init+0x3a/0x110 [ 2628.239213] v9fs_session_init+0x1e0/0x17b0 [ 2628.239530] ? lock_release+0x1e3/0x680 [ 2628.239823] ? __pfx_lock_release+0x10/0x10 [ 2628.240146] ? __pfx_v9fs_session_init+0x10/0x10 [ 2628.240511] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.240894] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2628.241256] ? v9fs_mount+0x9e/0xbd0 [ 2628.241545] v9fs_mount+0xbd/0xbd0 [ 2628.241811] ? legacy_init_fs_context+0x44/0xe0 [ 2628.242148] ? __pfx_v9fs_mount+0x10/0x10 [ 2628.242460] ? cap_capable+0x1be/0x220 [ 2628.242756] ? __pfx_v9fs_mount+0x10/0x10 [ 2628.243062] legacy_get_tree+0x109/0x220 [ 2628.243377] vfs_get_tree+0x92/0x360 [ 2628.243669] path_mount+0x133c/0x1e50 [ 2628.243973] ? kasan_quarantine_put+0x81/0x1d0 [ 2628.244298] ? __pfx_path_mount+0x10/0x10 [ 2628.244610] ? putname+0x102/0x140 [ 2628.244882] ? kmem_cache_free+0xff/0x4a0 [ 2628.245190] ? putname+0x102/0x140 [ 2628.245470] __x64_sys_mount+0x286/0x310 [ 2628.245763] ? __pfx___x64_sys_mount+0x10/0x10 [ 2628.246098] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2628.246487] do_syscall_64+0x3f/0x90 [ 2628.246769] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2628.247147] RIP: 0033:0x7f8273cb8b19 [ 2628.247404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2628.248682] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2628.249220] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2628.249728] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2628.250235] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2628.250747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2628.251264] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2628.251792] 00:38:44 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 98) 00:38:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@privport}, {@cache_loose}, {@version_L}], [{@audit}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x646eaa4c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9fd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x64e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2640.742288] loop2: detected capacity change from 0 to 40 [ 2640.777140] kernel write not supported for file /12688/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:38:44 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9fe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb", 0xa}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 99) 00:38:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x65e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2640.924208] loop2: detected capacity change from 0 to 40 [ 2640.955570] kernel write not supported for file /12688/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2641.013904] FAULT_INJECTION: forcing a failure. [ 2641.013904] name failslab, interval 1, probability 0, space 0, times 0 [ 2641.014772] CPU: 1 PID: 12736 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2641.015324] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.015881] Call Trace: [ 2641.016062] [ 2641.016221] dump_stack_lvl+0xc1/0xf0 [ 2641.016513] should_fail_ex+0x4b4/0x5b0 [ 2641.016805] ? __kernfs_new_node+0xd4/0x870 [ 2641.017107] should_failslab+0x9/0x20 [ 2641.017381] kmem_cache_alloc+0x5a/0x390 [ 2641.017675] __kernfs_new_node+0xd4/0x870 [ 2641.017975] ? __pfx___kernfs_new_node+0x10/0x10 [ 2641.018317] ? down_write+0x11a/0x1f0 [ 2641.018596] ? up_write+0x196/0x510 [ 2641.018864] kernfs_new_node+0x97/0x120 [ 2641.019140] __kernfs_create_file+0x55/0x350 [ 2641.019462] sysfs_add_file_mode_ns+0x21c/0x440 [ 2641.019787] ? __pfx_slab_attr_store+0x10/0x10 [ 2641.020121] internal_create_group+0x322/0xb90 [ 2641.020449] ? __pfx_internal_create_group+0x10/0x10 [ 2641.020814] ? up_write+0x196/0x510 [ 2641.021084] sysfs_slab_add+0x18e/0x220 [ 2641.021368] __kmem_cache_create+0x1fe/0x610 [ 2641.021692] kmem_cache_create_usercopy+0x218/0x340 [ 2641.022049] p9_client_create+0xd0b/0x1260 [ 2641.022342] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.022710] ? __pfx_p9_client_create+0x10/0x10 [ 2641.023045] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2641.023396] ? lockdep_init_map_type+0x21e/0x7e0 [ 2641.023734] ? __kasan_kmalloc+0x7f/0x90 [ 2641.024036] ? __raw_spin_lock_init+0x3a/0x110 [ 2641.024358] v9fs_session_init+0x1e0/0x17b0 [ 2641.024682] ? lock_release+0x1e3/0x680 [ 2641.024969] ? __pfx_lock_release+0x10/0x10 [ 2641.025273] ? __pfx_v9fs_session_init+0x10/0x10 [ 2641.025608] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.025970] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2641.026315] ? v9fs_mount+0x9e/0xbd0 [ 2641.026591] v9fs_mount+0xbd/0xbd0 [ 2641.026851] ? legacy_init_fs_context+0x44/0xe0 [ 2641.027182] ? __pfx_v9fs_mount+0x10/0x10 [ 2641.027481] ? cap_capable+0x1be/0x220 [ 2641.027764] ? __pfx_v9fs_mount+0x10/0x10 [ 2641.028057] legacy_get_tree+0x109/0x220 [ 2641.028351] vfs_get_tree+0x92/0x360 [ 2641.028631] path_mount+0x133c/0x1e50 [ 2641.028908] ? kasan_quarantine_put+0x81/0x1d0 [ 2641.029229] ? __pfx_path_mount+0x10/0x10 [ 2641.029519] ? putname+0x102/0x140 [ 2641.029780] ? kmem_cache_free+0xff/0x4a0 [ 2641.030073] ? putname+0x102/0x140 [ 2641.030329] __x64_sys_mount+0x286/0x310 [ 2641.030615] ? __pfx___x64_sys_mount+0x10/0x10 [ 2641.030923] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.031293] do_syscall_64+0x3f/0x90 [ 2641.031570] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2641.031933] RIP: 0033:0x7f8273cb8b19 [ 2641.032199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.033372] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2641.033879] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2641.034359] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2641.034880] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2641.035364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.035883] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2641.036411] [ 2641.062477] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 2641.063237] CPU: 1 PID: 12736 Comm: syz-executor.0 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2641.063777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2641.064315] Call Trace: [ 2641.064509] [ 2641.064671] dump_stack_lvl+0xc1/0xf0 [ 2641.064947] kmem_cache_create_usercopy+0x12b/0x340 [ 2641.065303] p9_client_create+0xd0b/0x1260 [ 2641.065601] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.065953] ? __pfx_p9_client_create+0x10/0x10 [ 2641.066269] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2641.066620] ? lockdep_init_map_type+0x21e/0x7e0 [ 2641.066945] ? __kasan_kmalloc+0x7f/0x90 [ 2641.067235] ? __raw_spin_lock_init+0x3a/0x110 [ 2641.067564] v9fs_session_init+0x1e0/0x17b0 [ 2641.067869] ? lock_release+0x1e3/0x680 [ 2641.068148] ? __pfx_lock_release+0x10/0x10 [ 2641.068442] ? __pfx_v9fs_session_init+0x10/0x10 [ 2641.068781] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.069137] ? __kmem_cache_alloc_node+0x1bc/0x310 [ 2641.069474] ? v9fs_mount+0x9e/0xbd0 [ 2641.069769] v9fs_mount+0xbd/0xbd0 [ 2641.070040] ? legacy_init_fs_context+0x44/0xe0 [ 2641.070388] ? __pfx_v9fs_mount+0x10/0x10 [ 2641.070707] ? cap_capable+0x1be/0x220 [ 2641.071007] ? __pfx_v9fs_mount+0x10/0x10 [ 2641.071318] legacy_get_tree+0x109/0x220 [ 2641.071626] vfs_get_tree+0x92/0x360 [ 2641.071913] path_mount+0x133c/0x1e50 [ 2641.072205] ? kasan_quarantine_put+0x81/0x1d0 [ 2641.072562] ? __pfx_path_mount+0x10/0x10 [ 2641.072874] ? putname+0x102/0x140 [ 2641.073142] ? kmem_cache_free+0xff/0x4a0 [ 2641.073457] ? putname+0x102/0x140 [ 2641.073734] __x64_sys_mount+0x286/0x310 [ 2641.074035] ? __pfx___x64_sys_mount+0x10/0x10 [ 2641.074374] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2641.074764] do_syscall_64+0x3f/0x90 [ 2641.075050] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2641.075428] RIP: 0033:0x7f8273cb8b19 [ 2641.075703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.076980] RSP: 002b:00007f827122e188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2641.077522] RAX: ffffffffffffffda RBX: 00007f8273dcbf60 RCX: 00007f8273cb8b19 [ 2641.078050] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 2641.078555] RBP: 00007f827122e1d0 R08: 00000000200001c0 R09: 0000000000000000 [ 2641.079065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2641.079581] R13: 00007fff90bcda5f R14: 00007f827122e300 R15: 0000000000022000 [ 2641.080102] 00:38:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7eb0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (fail_nth: 100) 00:38:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000004c0)={{0x8a, 0x3f, 0xc0, 0x4d, 0x153, 0xda, 0x54, 0x7}, "5ba6921a7b0dcf06d27909e29ead45194b262a00a54c87f916ed6a107db0719690f3e032c6096c4ba4fa6bbd0baff71825c141bd6463476d46cc0eb4387db79c652b3abe048f1caa45b9e2d7d42a62139cd9bf412be5d7d829268dc5d4440ec359c3b4a5364ccd0fe94420aa5ff774a1402bad82fb134b9ba138663c21ca76aea0ffe29331627adbc712d72c39bb612d27cb1fbab23b2bbbefb199dc8dc2832176b3dc4bfab393faca93306552a02a6241d26fcf", ['\x00', '\x00']}, 0x2d4) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000000)='oom_adj\x00') ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000440)={'team_slave_1\x00'}) pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x66e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb", 0xa}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:38:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8c8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2652.778786] loop2: detected capacity change from 0 to 40 00:38:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x67e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb", 0xa}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2652.879943] kernel write not supported for file /12756/oom_adj (pid: 10789 comm: kworker/0:3) 00:38:57 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:57 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2652.896060] loop2: detected capacity change from 0 to 40 00:38:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:38:57 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x68e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:38:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c07", 0xf}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2653.015920] loop2: detected capacity change from 0 to 40 [ 2653.026617] kernel write not supported for file /12756/oom_adj (pid: 7301 comm: kworker/1:0) 00:39:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x69e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa01, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c07", 0xf}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cfe49f3868c65", @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xfffffffffffffd19) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000000140)='./file1\x00', 0x8, 0x2000, 0x1, {0x0, r9}}, 0x4ab1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x9, 0x8bac, 0x0, 0x3f, 0x2, 0x0, {0x0, r9}}, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='tran \x00fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:39:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2664.336061] loop2: detected capacity change from 0 to 40 00:39:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6ae90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c07", 0xf}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:08 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:08 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa02, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2664.456035] 9pnet_fd: Insufficient options for proto=fd [ 2664.472608] loop2: detected capacity change from 0 to 40 00:39:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x33010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2664.505912] 9pnet_fd: Insufficient options for proto=fd 00:39:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2676.990052] loop2: detected capacity change from 0 to 40 00:39:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6be90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x2010, r2, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000001440)=@IORING_OP_WRITE={0x17, 0x4, 0x4000, @fd_index=0x7, 0x2, &(0x7f0000000440)="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", 0x1000, 0x10, 0x0, {0x0, r6}}, 0x6) r7 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c6c6f6f73652c63617c68653d6c6f6773652c7665ffffffff6e3d3970323030302e4c2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="76726167ee76833d265007822b8dbcf3ffba3b39e17c7097efec5b00000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:39:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:21 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed", 0x11}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed", 0x11}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6ce90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2677.066292] kernel write not supported for file /12861/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:39:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa04, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2677.087089] kernel write not supported for file /12861/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2677.130217] loop2: detected capacity change from 0 to 40 00:39:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0)={0x0, 0xe627, 0x2, 0x1, 0x274}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_setup(0x730, &(0x7f0000000440)={0x0, 0xad82, 0x2, 0x0, 0x109, 0x0, r2}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r8, @ANYBLOB="2c7766646ee9542fdee57c318babe0348929106f3d", @ANYRESHEX=r7, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:21 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa05, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:21 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2677.253045] 9pnet_fd: Insufficient options for proto=fd [ 2677.320103] 9pnet_fd: Insufficient options for proto=fd 00:39:34 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed", 0x11}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa06, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x646eaa7a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6de90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2690.620382] loop2: detected capacity change from 0 to 40 00:39:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6ee90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x69010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2690.710278] kernel write not supported for file /12938/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:39:34 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed85", 0x12}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2690.770248] loop2: detected capacity change from 0 to 40 [ 2690.850449] kernel write not supported for file /12938/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:39:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x29000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa07, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x505800, 0x100) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c72f8ff01e3b514aef4bb0829e3d14554368850", @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) write$P9_RMKDIR(r6, &(0x7f0000000440)={0x14, 0x49, 0x1, {0x1, 0x3, 0x4}}, 0x14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed85", 0x12}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6a010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6fe90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2702.093256] 9pnet_fd: Insufficient options for proto=fd 00:39:46 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x70e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2702.101652] loop2: detected capacity change from 0 to 40 00:39:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa08, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed85", 0x12}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6b010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:46 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2a000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2702.210618] 9pnet_fd: Insufficient options for proto=fd 00:39:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2702.254962] loop2: detected capacity change from 0 to 40 00:39:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2b000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa09, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x71e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7aaa6e64, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x0, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000009c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="1c005e80080005000000f5ff070007"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x5800442}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20800}, 0x40) write$P9_RMKDIR(r7, &(0x7f0000000440)={0x14, 0x49, 0x2, {0x1, 0x4, 0x5}}, 0x14) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="741472616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d30783030162c00"]) [ 2715.124388] kernel write not supported for file /13025/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:39:59 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfaf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2715.137129] loop2: detected capacity change from 0 to 40 [ 2715.179113] kernel write not supported for file /13025/net/fib_triestat (pid: 10789 comm: kworker/0:3) 00:39:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x81ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:39:59 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:39:59 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x72e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:39:59 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x39020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2715.338047] loop2: detected capacity change from 0 to 40 00:40:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2e0, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x10000, @empty, 0x5d}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) listen(r6, 0x7) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r9, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c6c6f6f73652c00616368653d6c6f6f73652c76657273696f6e3d3970323030302e4c2c666f776e65723c1bf46b7833f2014edff621b5d8bf6f044eaf4f00f75a53c3128121da6f19eb4546e3fe0db2b32d7d9f70ff63bca0840816e89856c2c0f712b7bd6ac1d17cb04755e67df9ec767268ab7471c253d90b2bd8df1dd13de5d6dba89151f56d83bf64411351", @ANYRESDEC=0x0, @ANYBLOB="2c00f4e6e8f2a171f378e08ce307fdba5f4b2c6f714da0772e2eada643b1ab53b9ad27ad5bf4c9ef7c6a8475bf065615d04c8bed107c18e9993addeeff887f347dca8be1f5056060db358f731e48e186c62ed15563d90b337257c7902864efdeaec486e57fe9ee2c2d05a2e467f6bd005d24b9427bc26a34b524a9b516c9a7e139f92c3a13ce049c77ac3ad5cade2085a7288d1040ddbb92b026404a3a978125ed6556ee0f96620d86b33b548b3baef4"]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766ea39643d8d31235e83a3f02775a4f2de5ce16874235140dd12c766a1962d9cb473fc4d037c57cd71ebea7d4bb557e2cade526c232e224e290595773ed9e162aeecde9f61c595af82798eca147628c4f7f87d91cbd5e2da8c4ae81a65fd109cbc55b3110000000000000000000000000000d32c1744ce8344a3d8aa9399d0ed82ef30a95d94784d6fba2b6f2bc9daea669b3dbd26847c9e230066772e9b4f7192b831286f72ed49e3329b9e", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:40:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x4, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x73e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2727.619549] loop2: detected capacity change from 0 to 40 00:40:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x82ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfbf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2727.688752] kernel write not supported for file /13070/net/fib_triestat (pid: 10789 comm: kworker/0:3) [ 2727.694324] 9pnet_fd: Insufficient options for proto=fd 00:40:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x83ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:11 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfcf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x74e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:11 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2727.761715] kernel write not supported for file /13070/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2727.820296] loop2: detected capacity change from 0 to 40 00:40:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x14000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x14, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB="fa00"]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x19ab6e64, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x75e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5caa6e64, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2741.027449] loop2: detected capacity change from 0 to 40 00:40:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x76e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfef9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2741.137017] kernel write not supported for file /13133/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 2741.173375] loop2: detected capacity change from 0 to 40 [ 2741.224695] kernel write not supported for file /13133/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:40:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002840)=[{&(0x7f0000000480)=""/19, 0x13}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/136, 0x88}, {&(0x7f0000001580)=""/24, 0x18}, {&(0x7f00000015c0)=""/19, 0x13}, {&(0x7f0000001600)=""/54, 0x36}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/31, 0x1f}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/133, 0x85}], 0xa) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000002a80), 0x3d0, 0x4000) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000002ac0)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="6f3ddff4fb2a2fa440301f8f58d0658b435575b04e5e242853b6226696a2ce0e571dfa423013d95c0e6728a1886c95f5399ed3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) open_tree(r5, &(0x7f0000002b00)='./file0\x00', 0x8801) recvfrom(r8, &(0x7f0000002980)=""/243, 0xf3, 0x60, &(0x7f00000001c0)=@caif=@rfm={0x25, 0x7, "d6038722251c91d8195b910ac8cbfb1c"}, 0x80) 00:40:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x85ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x6c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x77e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x646eaa5c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2753.002840] loop2: detected capacity change from 0 to 40 [ 2753.055381] kernel write not supported for file /13173/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:40:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x72000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x7e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x86ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x78e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2753.147582] kernel write not supported for file /13173/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 2753.218606] loop2: detected capacity change from 0 to 40 00:40:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x79010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @multicast1, r3}, 0xc) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x6, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x103, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfff9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x79e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2753.443293] loop2: detected capacity change from 0 to 40 [ 2753.481412] kernel write not supported for file /13211/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 2753.610613] kernel write not supported for file /13211/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:40:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x36000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x87ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:40:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969", 0x3b}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:40:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r8 = syz_io_uring_setup(0x4ce1, &(0x7f0000000440)={0x0, 0xe34c, 0x0, 0x1, 0x371}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4000000}}, './file0\x00'}) pread64(r10, &(0x7f0000000580)=""/176, 0xb0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) dup(r8) syz_io_uring_submit(r9, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x1, 0x8, 0x0, 0xfffffb25, 0x1, 0x1, {0x0, r5}}, 0xfffffffe) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d7692a8eff66ea4151129093bc1b1661f377d14227276d89e7450276ab96b2c83783abfe92e5fd99305ff19c6259801261d79817bd1c1a152ee970932587f3f000000fd3e00e5428596cad33a3bcf0fae5175d5266248bae666f7b34dd5069fe7f620c101e6513ce2b896b531618e5cfabb4fd7a3c990", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:40:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7ae90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2765.552184] loop2: detected capacity change from 0 to 40 [ 2765.594627] kernel write not supported for file /13243/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:40:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969", 0x3b}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2765.606901] 9pnet_fd: Insufficient options for proto=fd 00:40:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x88ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2765.662856] kernel write not supported for file /13243/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2765.664032] 9pnet_fd: Insufficient options for proto=fd 00:40:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x301, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2765.672748] loop2: detected capacity change from 0 to 40 00:40:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:40:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) write$vga_arbiter(r7, &(0x7f0000000480), 0xf) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2765.790312] kernel write not supported for file /13272/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2765.837529] kernel write not supported for file /13272/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7be90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB="f5433df45e312c792719ad1ad32f49e40000"]) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) connect$802154_dgram(r7, &(0x7f00000003c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)) 00:41:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x3c4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969", 0x3b}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x89ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2776.845710] loop2: detected capacity change from 0 to 40 [ 2776.856168] kernel write not supported for file /13294/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8aed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2776.974062] kernel write not supported for file /13294/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) openat(r2, &(0x7f0000000500)='./file0\x00', 0x10080, 0x30) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = syz_io_uring_setup(0x2663, &(0x7f0000000740)={0x0, 0x200, 0x4, 0x0, 0x1}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000180)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) r9 = syz_open_dev$vcsn(&(0x7f0000000440), 0x10001, 0x8000) recvfrom$inet(r9, &(0x7f0000000480)=""/22, 0x16, 0x2021, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8bed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd6ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d05", 0x58}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7ce90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x646eab19, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2788.269621] loop2: detected capacity change from 0 to 40 00:41:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x79010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2788.307004] kernel write not supported for file /13339/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7de90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd7ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8c020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d05", 0x58}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2788.435133] kernel write not supported for file /13339/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2788.492617] loop2: detected capacity change from 0 to 40 00:41:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x85000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d05", 0x58}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='rfdno', &(0x7f0000000480)='./file0\x00', r7) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd8ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8ced0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7ee90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2801.467749] loop2: detected capacity change from 0 to 40 [ 2801.475893] kernel write not supported for file /13396/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7fe90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9c86642, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2801.606991] kernel write not supported for file /13396/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:41:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8ded0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333d", 0x67}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xb00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2801.729434] loop2: detected capacity change from 0 to 40 00:41:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646ea218d7a65f6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8eed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x81e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2801.842327] 9pnet_fd: Insufficient options for proto=fd [ 2801.883556] 9pnet_fd: Insufficient options for proto=fd 00:41:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) splice(r7, &(0x7f0000000440)=0x2, r8, &(0x7f0000000480)=0xcb7, 0x4, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x82e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1020, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8fed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333d", 0x67}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2813.430823] loop2: detected capacity change from 0 to 40 00:41:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdaea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2813.465623] kernel write not supported for file /13471/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 2813.574610] kernel write not supported for file /13471/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:41:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdbea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1400, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') syz_io_uring_setup(0x456c, &(0x7f0000000480)={0x0, 0x159, 0x1, 0x0, 0x3b9}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000440)=0xd179, 0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="25fe1056babdbceae82cd8bbabedae5dd8aca35c79fb", 0x16) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472613df70000c045ace5596409fc1e857388e9ec83dda196f30e39a8246c0d39369bea04a96bcb3ebd81858a99834df2b53cc609014010c18b297ad1fb020566c5f6024fb18fa934688f119152b36a1d42f7d15c07178e21e3c268c4c0eea1d07d7624c3b3969dab93f061287ac7f8aa42e904e67724dd8d4d5a0d341df91b3c37b842b4702abac7dd61251f854b94e26758ec5cee1e7077ba647e5385aed48893fe00e70bc60cffa976e8da8399494c13f2a49ccdd50f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:41:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x90ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2824.540165] loop2: detected capacity change from 0 to 40 00:41:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x98f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x83e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333d", 0x67}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdcea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a", 0x6e}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:41:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2824.632024] kernel write not supported for file /13512/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:41:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:41:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x91ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:41:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x99f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2824.680415] kernel write not supported for file /13512/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2824.689889] loop2: detected capacity change from 0 to 40 00:42:01 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9af80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a", 0x6e}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xddea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x92ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:01 executing program 7: renameat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x93ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2837.831093] loop2: detected capacity change from 0 to 40 00:42:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9bf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:02 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a", 0x6e}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2837.919720] kernel write not supported for file /13548/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:42:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x94ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:02 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdeea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x85e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:02 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9cf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:02 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x6fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x3f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2838.044990] loop2: detected capacity change from 0 to 40 00:42:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}, {@msize={'msize', 0x3d, 0xdc6}}, {@version_L}, {@nodevmap}], [{@uid_lt={'uid<', 0xee00}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x86e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2851.530496] loop2: detected capacity change from 0 to 40 00:42:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x95ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9df80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde2", 0x72}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdfea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x4000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe0ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe1ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x87e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde2", 0x72}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x96ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x7fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9ef80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x6c00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2851.704569] kernel write not supported for file /13624/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2851.802197] loop2: detected capacity change from 0 to 40 [ 2851.870139] kernel write not supported for file /13624/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:42:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe2ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:27 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x88e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9ff80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:27 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x7e00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:27 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde2", 0x72}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x4, 0x5, 0x1dd}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x77359400}, 0x1, 0x0, 0x1}, 0x4ab1) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0f7766646e6fe9", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:42:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2863.877515] loop2: detected capacity change from 0 to 40 00:42:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2863.921152] kernel write not supported for file /13673/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:42:28 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa0f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2863.928641] 9pnet_fd: Insufficient options for proto=fd 00:42:28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x89e90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2863.975781] kernel write not supported for file /13673/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2863.984684] 9pnet_fd: Insufficient options for proto=fd 00:42:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe3ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:28 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x8084, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34", 0x74}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:28 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8ae90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) r7 = syz_io_uring_setup(0x6e56, &(0x7f0000000440)={0x0, 0xb86e, 0x20, 0x3, 0x102}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) r8 = syz_open_dev$vcsa(&(0x7f0000000540), 0xfffffffffffff000, 0x100040) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r9, &(0x7f0000000040)=""/170, 0xaa, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000005c0)=[r8, r1, r9, r6, r10], 0x5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2864.108558] loop2: detected capacity change from 0 to 40 00:42:28 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2875.440599] loop2: detected capacity change from 0 to 40 00:42:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa1f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x98ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:39 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xc403, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34", 0x74}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:39 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9fa0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000440)=0x8000, 0x0, 0x4) 00:42:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa2f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2875.523525] kernel write not supported for file /13743/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2875.618625] kernel write not supported for file /13743/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:42:50 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB="8000"]) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0xc71e, r2, &(0x7f0000000440)="123867a19614ff0897acf9593c72b55efe336bbfa4b69d068cd42443943b27a9f1a988a8705a6fd15419df20dd901dd5", 0x30, 0x2, 0x0, 0x5, r8}]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000500), &(0x7f0000000540)={'L+', 0x4}, 0x16, 0x2) 00:42:50 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x99020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:50 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe5ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:50 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x99ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34", 0x74}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa3f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2886.778488] loop2: detected capacity change from 0 to 40 00:42:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x0, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) [ 2886.856310] kernel write not supported for file /13777/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2886.857590] 9pnet_fd: Insufficient options for proto=fd [ 2886.862087] loop2: detected capacity change from 0 to 40 00:42:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa4f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe6ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xfeff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9aed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2886.947431] kernel write not supported for file /13777/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2886.954183] 9pnet_fd: Insufficient options for proto=fd 00:42:51 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x0, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:42:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001800)='cgroup.threads\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000001840), &(0x7f0000001880)={'L-', 0x101}, 0x16, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f0000001780)={{'\x00', 0x3}, {0x1}, 0x22, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)="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", 0x1c5, 0x0, &(0x7f00000006c0)={0x2, 0x101f, {0x1, 0xc, 0x12, "180ca44b8eeb014b504bf0af863e8146bfd7", 0x1000, "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"}, 0x7a, "ae032e2cb2caec228f0f535b79344157f82ea432fc62b3bbbfba17a5f7d14e7b87f35e9ddfdd0746e11db4f3b4c938447063fa090c082f43dedd5f7a1a8172c8137417f1419c178cc30332b32ded43bb68fc64ebf6615499566576b97f6c3771fbbd0582e4894cc9521aa3388e35a03b68bbf724f30f482a1724"}, 0x10a5}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xff03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa5f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:42:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9bed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:42:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe7ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2887.149061] loop2: detected capacity change from 0 to 40 [ 2887.281422] kernel write not supported for file /13821/net/fib_triestat (pid: 13237 comm: kworker/0:1) [ 2887.329746] kernel write not supported for file /13821/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:43:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa6f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9c86642, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r7 = socket$inet(0x2, 0x5, 0x2) write$binfmt_elf32(r7, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0xac2) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@uname={'uname', 0x3d, '@[\x8e]{+-#[*'}}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c978021126d73687a653d3078303030303030303030303030313030302c00be12bfeacb78452268883e1dd5062340b20dbae2b0e963f8cf5ce9868936a7179bafacd1463d710b4d7cdfef4802e8d531b56be9"]) 00:43:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0xfffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x0, 0x55fc) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:43:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe8ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9ced0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2899.736832] loop2: detected capacity change from 0 to 40 00:43:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa7f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2899.892272] kernel write not supported for file /13847/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2899.999000] kernel write not supported for file /13847/net/fib_triestat (pid: 13237 comm: kworker/0:1) 00:43:16 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11690, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:16 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x19010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2912.861619] loop2: detected capacity change from 0 to 40 00:43:16 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46b, 0x10, 0x0, 0xd6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:16 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa8f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xde000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:16 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) 00:43:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe9ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9ded0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) 00:43:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11691, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9eed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeaea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2912.978555] kernel write not supported for file /13880/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa9f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2913.001898] loop2: detected capacity change from 0 to 40 00:43:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11692, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xebea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) [ 2913.174334] kernel write not supported for file /13880/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9fed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaaf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) 00:43:17 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2080000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}], [{@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@dont_appraise}, {@fsmagic={'fsmagic', 0x3d, 0xf8}}, {@dont_hash}, {@dont_appraise}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000007020001005b07000037"], 0xe) pread64(r9, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r7) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000040)=""/170, 0xaa, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000740)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x9000001b}, r10}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xecea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2913.356216] loop2: detected capacity change from 0 to 40 00:43:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11693, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:17 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xabf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:17 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:43:17 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2913.502841] loop2: detected capacity change from 0 to 40 00:43:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mount(&(0x7f0000000540)=ANY=[@ANYBLOB="2f6465762f736776d120255e3000"], &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='incremental-fs\x00', 0x8008, &(0x7f0000000500)='msize') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xacf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11694, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeeea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) (fail_nth: 1) 00:43:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa1ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2925.508466] loop2: detected capacity change from 0 to 40 [ 2925.540205] FAULT_INJECTION: forcing a failure. [ 2925.540205] name failslab, interval 1, probability 0, space 0, times 0 [ 2925.541432] CPU: 0 PID: 13975 Comm: syz-executor.2 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2925.542121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2925.542805] Call Trace: [ 2925.543039] [ 2925.543239] dump_stack_lvl+0xc1/0xf0 [ 2925.543582] should_fail_ex+0x4b4/0x5b0 [ 2925.543953] ? __blockdev_direct_IO+0x210/0x4b70 [ 2925.544379] should_failslab+0x9/0x20 [ 2925.544725] kmem_cache_alloc+0x5a/0x390 [ 2925.545090] ? iov_iter_alignment+0xe2/0x5f0 [ 2925.545502] __blockdev_direct_IO+0x210/0x4b70 [ 2925.545910] ? __pfx_fat_get_block+0x10/0x10 [ 2925.546330] ? mark_lock.part.0+0xef/0x2f50 [ 2925.546707] ? __pfx___lock_acquire+0x10/0x10 [ 2925.547101] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2925.547503] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 2925.547931] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2925.548358] ? __pfx_mark_lock.part.0+0x10/0x10 [ 2925.548765] ? __pfx___lock_acquire+0x10/0x10 [ 2925.549181] ? mark_held_locks+0x9e/0xe0 [ 2925.549560] ? __mark_inode_dirty+0x249/0xc10 [ 2925.549964] fat_direct_IO+0x1e4/0x390 [ 2925.550329] generic_file_direct_write+0x140/0x370 [ 2925.550776] ? __pfx_generic_write_checks+0x10/0x10 [ 2925.551224] __generic_file_write_iter+0x195/0x280 [ 2925.551666] generic_file_write_iter+0xe7/0x350 [ 2925.552086] vfs_write+0x941/0xd40 [ 2925.552408] ? __pfx_vfs_write+0x10/0x10 [ 2925.552771] ? __fget_files+0x270/0x480 [ 2925.553152] ksys_write+0x12b/0x260 [ 2925.553486] ? __pfx_ksys_write+0x10/0x10 [ 2925.553865] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2925.554326] do_syscall_64+0x3f/0x90 [ 2925.554661] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2925.555106] RIP: 0033:0x7f022be63b19 [ 2925.555434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2925.556932] RSP: 002b:00007f02293d9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2925.557572] RAX: ffffffffffffffda RBX: 00007f022bf76f60 RCX: 00007f022be63b19 [ 2925.558167] RDX: 0000000000000220 RSI: 0000000000000000 RDI: 0000000000000003 [ 2925.558758] RBP: 00007f02293d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2925.559342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2925.559930] R13: 00007ffec60214bf R14: 00007f02293d9300 R15: 0000000000022000 [ 2925.560557] 00:43:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa2ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xefea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xadf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11695, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2925.689029] kernel write not supported for file /13972/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) (fail_nth: 2) 00:43:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf0ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaef80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2925.769044] loop2: detected capacity change from 0 to 40 [ 2925.864107] kernel write not supported for file /13972/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:41 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa3ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x1, 0x0, {0x9, 0x9, 0x0, 0x344, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x80000000}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x82c7433162a982fd}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x33ab6e64, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) (fail_nth: 3) 00:43:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf1ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11696, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2937.149393] loop2: detected capacity change from 0 to 40 00:43:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaff80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2937.176145] FAULT_INJECTION: forcing a failure. [ 2937.176145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2937.176968] CPU: 0 PID: 14035 Comm: syz-executor.2 Not tainted 6.4.0-rc3-next-20230524 #1 [ 2937.177504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.178041] Call Trace: [ 2937.178221] [ 2937.178378] dump_stack_lvl+0xc1/0xf0 [ 2937.178650] should_fail_ex+0x4b4/0x5b0 [ 2937.178941] _copy_to_user+0x30/0xc0 [ 2937.179214] simple_read_from_buffer+0xd0/0x170 [ 2937.179546] proc_fail_nth_read+0x19c/0x230 [ 2937.179848] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2937.180195] ? security_file_permission+0xb5/0xe0 [ 2937.180529] vfs_read+0x1e4/0x8b0 [ 2937.180786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2937.181119] ? __pfx_vfs_read+0x10/0x10 [ 2937.181425] ? __fget_files+0x270/0x480 [ 2937.181723] ksys_read+0x12b/0x260 [ 2937.181974] ? __pfx_ksys_read+0x10/0x10 [ 2937.182262] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2937.182621] do_syscall_64+0x3f/0x90 [ 2937.182889] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2937.183252] RIP: 0033:0x7f022be1669c [ 2937.183502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2937.184692] RSP: 002b:00007f02293d9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2937.185189] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f022be1669c [ 2937.185667] RDX: 000000000000000f RSI: 00007f02293d91e0 RDI: 0000000000000004 [ 2937.186156] RBP: 00007f02293d91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2937.186657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2937.187166] R13: 00007ffec60214bf R14: 00007f02293d9300 R15: 0000000000022000 [ 2937.187682] 00:43:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11697, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb0f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf2ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:41 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) [ 2937.279625] kernel write not supported for file /14034/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2937.317580] loop2: detected capacity change from 0 to 40 [ 2937.442600] kernel write not supported for file /14034/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa4ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:53 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00') 00:43:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) fchdir(r2) 00:43:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf3ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11698, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb1f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2949.506940] loop2: detected capacity change from 0 to 40 [ 2949.527580] kernel write not supported for file /14072/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:53 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x80}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 00:43:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x11699, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf4ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb2f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2949.635412] loop2: detected capacity change from 0 to 40 [ 2949.641344] kernel write not supported for file /14072/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:43:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa5ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:43:53 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x47010000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169a, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:43:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x52000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb3f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa6ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) [ 2962.097300] loop2: detected capacity change from 0 to 40 [ 2962.098745] FAT-fs (loop2): Unrecognized mount option "`mkdosfØ +" or missing value [ 2962.127405] loop2: detected capacity change from 0 to 40 [ 2962.128363] FAT-fs (loop2): Unrecognized mount option "`mkdosfØ +" or missing value 00:44:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169b, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r7 = dup2(r6, r0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000540)=@ccm_128={{0x303}, "c40e818880b33b9d", "3300466b67de3b6c1ea84b32256e071a", "6859e06a", "e27e0cb053b8925f"}, 0x28) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x4002, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@nodevmap}, {@posixacl}], [{@appraise_type}]}}) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r4) clone3(&(0x7f0000001700)={0x34e1d4590ac98e9e, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x40}, &(0x7f0000000640)=""/109, 0x6d, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x7, {r6}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c96662d6c563ec1067954604561f748ad6c646e9eae174dd2000000000000f2c0e076036f3d718470fb9ae40beb25687a37424ca5ae4c27fd07b2696c747d96daa14aae3f3da05fa1d19708f73843b4a5f8e989387db3aa96e7b9ef45ab25f958c5d12f02e35d10e1414f707b085462c4f29968071903ba67fa5195bf8f313213ee37a34d8998d7185b", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:44:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa7ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2962.208566] kernel write not supported for file /14156/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2962.210168] kernel write not supported for file /14156/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2962.212363] 9pnet_fd: Insufficient options for proto=fd [ 2962.262232] kernel write not supported for file /14156/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2962.264412] kernel write not supported for file /14156/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:44:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x53000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1db}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000004c0)={0x0, 0x1, 0x4771df0354e5fb46, 0x0, 0x1ba}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) getresuid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x100000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'net/fib_triestat\x00'}}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, r8}}], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'trans=fd,'}}, {@obj_user={'obj_user', 0x3d, 'fowner<'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0xcb}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:44:19 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa8ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb4f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2975.092788] loop2: detected capacity change from 0 to 40 [ 2975.129663] kernel write not supported for file /14177/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:44:19 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb5f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:44:19 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x54000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:19 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169d, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 2975.268845] kernel write not supported for file /14177/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 2975.288081] FAT-fs (loop2): bogus number of reserved sectors [ 2975.289045] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2975.328301] FAT-fs (loop2): bogus number of reserved sectors [ 2975.329469] FAT-fs (loop2): Can't find a valid FAT filesystem 00:44:33 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0xfff) 00:44:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$FIBMAP(r0, 0x127f, &(0x7f0000000180)=0xb0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf471, 0x4, 0x3, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) readv(r8, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/104, 0x68}, {&(0x7f0000000740)=""/197, 0xc5}, {&(0x7f0000000840)=""/30, 0x1e}], 0x7) pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e26e48f7f0000002c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x55000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa9ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169e, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb6f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaaed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2989.275869] loop2: detected capacity change from 0 to 40 00:44:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb7f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x1169f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x56000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:33 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf7ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x4, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000600)='./file1\x00', &(0x7f0000000640), 0x282000c, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733d6692eb510349513d5e7e3ad85710631c66ee3a948eb70c217d9cf745030575457c74eef9d4d41219967b398bb09c1424d2ffb7f9fb5cf3256b2ca54845a2f7d753f9a2d9efcabcf080c33be9de93c812be1e132e2b239d8fafbab4181ba0639ff783ff034c279ae32afa6b42c571df1fb7874dafdd971dd221a80800000000000000dd1f03bc130957c5cfd84cae0809f55c7a857e2f3e55a1c081fea4cb75d21c8b2fe055e1f3d21cba875b156f887f336c7cbaa102f0d11b307d42998bb26d7ba900633781f3bd0146f6b8ef5957822004492ec321ca54fc5c900bc036d863e4", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',version=9p2000,seclabel,\x00']) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) move_mount(r0, &(0x7f0000000580)='./file0\x00', 0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x42) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)=ANY=[@ANYBLOB="01c1065a4800000018000000", @ANYRES32=r2, @ANYBLOB="3f00000048dc00002e2f66f913653000"]) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)='memory.swap.high\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x30d) syz_io_uring_setup(0x272a, &(0x7f0000000480)={0x0, 0xa9c1, 0x4, 0x1, 0x373, 0x0, r5}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) r7 = syz_io_uring_setup(0x5d30, &(0x7f0000000780), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c40c60059633433885c38a86c385d1320904130a19e2bd2e45b64d574f04f61d48ec36fcb7480d9c3d6912a566da64785e80a676d7cf66bdd0de379f10a820646861e79e00b1a3118201d80a80257de"]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xabed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb8f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x57000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f0000004b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4800}, 0x10044050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x339, 0x0, 0x0, {0x29}}, 0x14}}, 0x0) setxattr$security_evm(&(0x7f0000000580)='./file2\x00', &(0x7f0000000600), &(0x7f0000000640)=@sha1={0x1, "4196cd3019363e10e4d2f0d406727c86a73fa4db"}, 0x15, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x1) r9 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x1f) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r5, 0x0, 0x628, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x41) write$binfmt_aout(r1, 0x0, 0x220) 00:44:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf8ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3003.250205] loop2: detected capacity change from 0 to 40 00:44:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf9ea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaced0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:44:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb9f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x646eab33, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:44:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3003.369653] kernel write not supported for file /14278/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:44:47 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/30, 0x1e}], 0x1, &(0x7f0000000500)=""/47, 0x2f}, 0x40) write$binfmt_aout(r1, 0x0, 0x220) 00:44:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbaf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3003.545970] kernel write not supported for file /14278/net/fib_triestat (pid: 7301 comm: kworker/1:0) [ 3003.595259] loop2: detected capacity change from 0 to 40 00:45:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) bind(r1, &(0x7f0000000440)=@nl=@unspec, 0x80) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=0x10000, 0x8, 0x4) [ 3016.488559] loop2: detected capacity change from 0 to 40 00:45:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbbf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8084ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfaea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x75000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = fsmount(r2, 0x1, 0x3d) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8000, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r8}}, {@posixacl}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@seclabel}]}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r10, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaded0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x84800000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfbea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f0000000180), 0x0, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x0) pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x4) copy_file_range(r1, &(0x7f0000000140)=0x6, r2, &(0x7f0000000440)=0x80, 0x0, 0x0) 00:45:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xaeed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:00 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbcf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3016.686084] loop2: detected capacity change from 0 to 40 00:45:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3016.723057] 9pnet_fd: Insufficient options for proto=fd [ 3016.732622] kernel write not supported for file /14352/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:12 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:12 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfcea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3028.878806] loop2: detected capacity change from 0 to 40 00:45:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xafed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbdf80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:12 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000440)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b49bc973e7bd1f1ee751aecea883f10b4c9e46c451b118bbcb3334990ee85fc3185cd2ca7416a96e11aa1ea84b53d074b147663bef8d1c8622a01dc10cc2125a058e371abc32e768f789deab447f83e5a51b561a1c2ac7f94162a5eabbc08f45b7804ded127f4e2a81aa9f2517d9c7bb150a6c344aee6f686395db822f8b1bf7d866b9718b05a4000"/243, 0xf3}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x474, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:45:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x9d000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000440)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000840)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0xfffffffffffffd07, 0x4d9dd6bf}, {0x0, 0x0, 0x6}, {&(0x7f0000000740)="787e38253b3c1a1e8c9e973eba6010891ef88b00276dbb7915403d91f0dd4e5aa9db9b778a7bb4bd4d5cbbd6e435c9ba14472d6358431937282521e872c4c5d5419b261bf2202e1734cd37ab44787c9734354fc21c886064c0058890fb1df60c928368fab2a7860d35fc8fa51aae9f610daec2d620aa51d1d968c3e8dd75f5cd632a4562b413eeed0bd664da70386c9d87f9da502ccfac9f269db26a9fed5bad13d166f6197a2f6d794035a378bdf4458c0b00fd60aec53768b0f7e970e866dcb8cc8243f74717f2ea540cd79f70f6ba98a504deaf87e9ed984d38037f6c8b7ae73ad25507e55c9eb6f08933f70d2f890f5a816acb14486bf8", 0xf9, 0x630}], 0x0, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file2\x00', 0x101, 0x1, &(0x7f0000000640)=[{&(0x7f0000000540)="374caeecdb4d4bf67b2e5924ff6dc430a124302cd1385c9fc5e36623ec8a62c246eb2cdb1f48ac9a5577e11db10f450cee055e0439c5d831aaace8832d7ff621df71c972a0dd6bf41c9d4aa5420dcf2aaa5df1f61db19aa93e67d5f570dc83937a562e254b9e0518f1be635622c62ee021a1554cfbb2ed33bc4921540e2ab98ca6bfc3acfd292308605e5122bd47a09fac569611b761dafa63ae434b5f292b4f0cbfcbaf80f6341cdaa754cc831d27a2e8370739b151478f57e6f975341f1fed07cb71", 0xc3, 0x2}], 0x800000, &(0x7f00000008c0)=ANY=[@ANYBLOB="62736467726f7570732c695f76657273696f6e2c6e6f6d6263616368652c695f76657273696f6e2c6572726f72733d636f6e74696e75652c6d696e5f62617463685f74696d653d3078303030303030303030303030303430302c646f6e745f6d6561737572652c6f626a5f726f6c653d76666174002c726f6f74636f6e746578743d73797374656d5f752c00881db0e6f37f7b57091c47befda11bb280b010349f5c7b1f4427c1e4cab2bd2c68d04126e6b02b53602fcc13d8223bb8760591408e349cd9a61c87fc21ef8802683e17a9458ef2371909a81dbc64"]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xe45b33fe42bf3084, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000440)) mknodat$loop(r0, &(0x7f0000000480)='./file2\x00', 0x8000, 0x0) 00:45:13 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3029.014457] kernel write not supported for file /14411/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbef80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:13 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3029.141314] EXT4-fs: Ignoring removed i_version option [ 3029.141780] EXT4-fs: Ignoring removed i_version option [ 3029.149440] ext3: Unknown parameter 'dont_measure' [ 3029.160223] kernel write not supported for file /14411/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 3029.237803] loop2: detected capacity change from 0 to 32640 [ 3029.454975] EXT4-fs: Ignoring removed i_version option [ 3029.455420] EXT4-fs: Ignoring removed i_version option [ 3029.456138] ext3: Unknown parameter 'dont_measure' 00:45:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd5020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xffffffffffffffff}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)=0x0) syz_open_procfs(r2, &(0x7f0000000480)='map_files\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x0) openat(r1, &(0x7f0000000140)='./file2\x00', 0x4000, 0xa0) r3 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, r4, 0xc9908000) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r3, 0x0, 0x220) 00:45:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000000000000000cb2daa0db10615fb3b240ebbc00", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:45:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb1ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xbff80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3041.089188] loop2: detected capacity change from 0 to 16383 [ 3041.093110] kernel write not supported for file /14461/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3041.111020] FAT-fs (loop2): bogus number of reserved sectors [ 3041.111845] FAT-fs (loop2): Can't find a valid FAT filesystem 00:45:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3041.131625] kernel write not supported for file /14461/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:25 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:25 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fallocate(r7, 0x10, 0x100, 0x8707) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x40, 0x11) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',moche=loose,version=9p2r<\x00'/37, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3041.174291] loop2: detected capacity change from 0 to 16383 [ 3041.176077] FAT-fs (loop2): Unrecognized mount option "./file2" or missing value [ 3041.262165] 9pnet: Unknown protocol version 9p2r< [ 3041.307036] 9pnet: Unknown protocol version 9p2r< 00:45:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pread64(r4, &(0x7f0000000580)=""/174, 0xeb, 0x9) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x200000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@version_L}, {@access_client}, {@noextend}, {@msize={'msize', 0x3d, 0xfffffffffffff0c2}}, {@debug={'debug', 0x3d, 0x1d}}, {@posixacl}], [{@smackfshat={'smackfshat', 0x3d, 'wfdno'}}]}}) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r5 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd6020000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116a9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000004c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000100)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4842, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f00000005c0)) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) accept4$inet(r1, 0x0, &(0x7f0000000500), 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x100) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000580)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000480)='timers\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) openat2(r5, &(0x7f0000000140)='./file1\x00', &(0x7f0000000440)={0x202180, 0x88, 0x7}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) openat(r6, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x104) write$binfmt_aout(r1, 0x0, 0x220) 00:45:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb2ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3053.380465] loop2: detected capacity change from 0 to 40 [ 3053.385815] kernel write not supported for file /14506/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc1f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116aa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3053.500051] kernel write not supported for file /14506/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:45:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc2f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd8f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x6db1, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) lseek(r2, 0x4, 0x1) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d3078303030303030303030303030310019ace00002a84dc77e217312b0822caa3479b917cf84a3aff55c41ff9afe596f00994d08558bd6391ff6776998ac762197c146386f3d3d00de9e7fba9b47d90a85cb27d807d687ca1239cda479604fb72517267f4a1e8ebf3defcb22392aee20c7173b1b2999ad48a31c85ff44d2ff2fc937098610dd9a095a3424dba89847397a2a4e30f8a06b1edc8ccb8f804b5fd56aed8f6a46192898f224356efbcb0cc0a01026741a8b7e7c0328ef892482"]) 00:45:37 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f0000000440)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a573eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa9174ae9fca75158a0fbe3cbfd7300d6f47d2ea3b0a0a888b889734665122ba1c3c009449e0e952d77c357ccba5f13222576cc62e12ddea917131e9300524ea3c84539e1f82a18d2f082475a005", 0x126}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:45:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116ab, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:37 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3053.664062] loop2: detected capacity change from 0 to 40 [ 3053.711335] kernel write not supported for file /14550/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 3053.736832] kernel write not supported for file /14550/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:45:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9c86642, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:45:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000580)={0x1, 0x3, 0x1000, 0x22, &(0x7f00000004c0)="9d89a2d550b9b1f505b9e5c0b6e51ebd27fa375a45a6270cca2d7d87681bd7351be3", 0x46, 0x0, &(0x7f0000000500)="186430883c37aac47a5ca6b23829c34c6befbca0f687b9219bb0d08b34546074ad9dcbce61af7388c109bb75c2a892243e1413ce851e341bc9a4e1dc61d6c04a26e61606b5dd"}) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') r8 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) shmat(r8, &(0x7f0000ff1000/0x3000)=nil, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB='e0\x00'/16]) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000480)={'ip6gre0\x00'}) pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x209504, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x0, 0x81) pwritev(r1, &(0x7f0000000040), 0x0, 0x1e, 0x3) write$binfmt_aout(r1, 0x0, 0x220) 00:45:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc3f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9c86642, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116ac, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffea0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3065.334956] loop2: detected capacity change from 0 to 40 00:45:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc4f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:45:49 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @dev}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x53bb7f954317cb50}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x20008040) write$binfmt_aout(r1, 0x0, 0x220) 00:45:49 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3065.451234] loop2: detected capacity change from 0 to 40 [ 3065.470419] syz_tun: entered promiscuous mode [ 3065.487276] syz_tun: left promiscuous mode [ 3065.498756] syz_tun: entered promiscuous mode [ 3065.508895] syz_tun: left promiscuous mode 00:46:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB="ac00"]) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:03 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116ad, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:03 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdaf90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:03 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:03 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc5f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:03 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000440)="601c6d6b646d7366d8a02b00080101000440002000f8019b4500f58e4a4bef69229384", 0x23}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1b, 0x0) write$binfmt_aout(r1, 0x0, 0x220) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000a42b812564b796ebe38e88d4381afe", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653200"]) renameat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000480)='./file0\x00') 00:46:03 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3079.819970] loop2: detected capacity change from 0 to 40 [ 3079.825735] FAT-fs (loop2): count of clusters too big (40633342) [ 3079.826213] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3079.835552] loop2: detected capacity change from 0 to 40 [ 3079.836342] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value 00:46:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r2, 0x0, 0x4, r1, 0xffffffffffffffff) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r3 = syz_open_procfs(r2, &(0x7f0000000000)='smaps_rollup\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000500)=""/185, 0xb9, 0x10000000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000200)={0x0, 0x2, [0x8, 0x8, 0x4, 0x7, 0x6, 0x3]}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000840)='./file2\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r3, @ANYRESHEX=r5, @ANYRES32=r4, @ANYRESHEX]) r7 = openat(r6, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r7, 0x0, 0x220) 00:46:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdbf90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3079.920557] kernel write not supported for file /14618/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:46:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc6f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:04 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116ae, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:04 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3080.048411] FAT-fs (loop2): Unrecognized mount option "00000000000000000000003" or missing value [ 3080.100232] kernel write not supported for file /14618/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:46:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x452e, &(0x7f00000000c0)={0x0, 0x9ee1, 0x4, 0x0, 0x0, 0x0, r2}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) openat(r0, &(0x7f0000000140)='./file2\x00', 0x0, 0x20) write$binfmt_aout(r1, 0x0, 0x220) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) openat(r2, &(0x7f0000000480)='./file2\x00', 0x581, 0x174) 00:46:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc7f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdcf90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116af, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3091.447411] loop2: detected capacity change from 0 to 40 [ 3091.482787] kernel write not supported for file /14682/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:46:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xc8f80000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) lsetxattr$security_evm(&(0x7f0000000140)='./file2\x00', &(0x7f0000000440), &(0x7f0000000480)=@ng={0x4, 0x1, "26e88953fbf1d45239"}, 0xb, 0x1) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x8a) 00:46:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xddf90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3091.598776] loop2: detected capacity change from 0 to 40 00:46:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd4030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3091.609232] kernel write not supported for file /14682/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:46:15 executing program 7: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000440)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) fstatfs(r1, &(0x7f0000000480)=""/35) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d30780e303030303030304430303031303030857f"]) 00:46:15 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xd9c86642, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdef90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:15 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3091.804380] kernel write not supported for file /14731/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 3091.848436] kernel write not supported for file /14731/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:46:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:29 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xdff90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x80000001}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') openat(r2, &(0x7f0000000f80)='./file2\x00', 0x35414bf85569b1eb, 0x10) pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) openat(r2, &(0x7f0000000140)='./file2\x00', 0x0, 0x161) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r3, &(0x7f0000000040)=""/170, 0xaa, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r4, &(0x7f0000001140)=""/179, 0xffffffffffffffa2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) writev(r5, &(0x7f0000000fc0)=[{&(0x7f0000001040)="5617f2ed5f7e28a7e8ecc62bc7fd79cf68421acb096ccea9cfa6bb8f632077e5b4f6f27e77c0386e48d9e65fa9df0004362f5cb7d4423dff92a1a1e5104722395c47a43d6b487215b67714f3b5718d17d372728e688d964b199551fbf330ca86277dba138022f2bd072f47528f14eaf1dd997b159ffe50ac2f3889d7c8f28ef93f6213be5271e87f5383af73ed81e0b1a726a37e3309337fa81d0807e63d9bb62c9b8786386ebd24667a7b7ecf414aedbb1386f86b4dc6274b0ce7a58b1ada7bee0b7cfa44b29e5538c7619edb68e33d7755747188bcbeb7bc4c1dc1e4ecebbfefb842336626a98d65000468f8d7917bc3cfbfab72b3bd99cf853086d2", 0xfd}], 0x1) sendfile(r2, r2, &(0x7f0000001000)=0x69, 0x2) write$binfmt_aout(r1, 0x0, 0x220) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x6, 0x81, 0x7, 0x2, 0x3e, 0x1, 0x1fa, 0x40, 0x21c, 0x7, 0xffff, 0x38, 0x2, 0x8, 0x4, 0x80}, [{0x60000000, 0xffff, 0x6, 0x2, 0x7fffffff, 0x6, 0x20, 0x7fff}], "b0ad436c55085a33d3643622c80eb5f1e6fedfc65931176c2b7df44a53725e4c2183c72939c376005ecc59bd5abcda462da85ee87c9f10c14cb44d29ae9efb79f76780461c0cc871afb30c7bdee9e6e169dc9c4300473895a2e09519facc51aaa346a89c1413693b9b1ede43c15ea4c400315e620b4aafb2ce2fdb325f0ac4667f437c6a4e7816b37ca9d74e2260bafaebe09b1453", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0d) write$binfmt_aout(r1, &(0x7f0000001200)={{0x10b, 0x1f, 0x4, 0x6, 0x347, 0x8, 0xb4, 0x6}, "65f6a0964ba889f6750e800f2c8f328018c01a88ecf26b5d8c0d6e07d825576e7d2083137333697f44bded4263726c6e45314317e74d944494e2275f75e16c42aa686d99530a2c0bba71c3031b7bf57ab3cb31e1fcfa1b439407c0a28640e08112ee930c3e2391deecebb247c86500e920bca9ee74fa2227d21b8823b61af6d43f1a4d959ab1245fbede4a215a82cc76c2e69f61eccbdf71f25931b56d639a5c6eab1973f9d9ff866778d66d9d7c2bbe50504f6936d1482150afd5a668d4c5304d81629c5ca375636484d060172e9b75cede997dce9cfdae3c", ['\x00']}, 0x1f9) 00:46:29 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, &(0x7f0000000440)={{r6}, "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"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3105.761544] loop2: detected capacity change from 0 to 264192 [ 3105.788153] kernel write not supported for file /14758/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:46:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3105.897889] kernel write not supported for file /14758/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:46:42 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB="7492753a2ebb2772616e733d66482c", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',loose,cache=loose,version=9p2000.L,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0xc, 0x4, 0x5, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x6}, [@typed={0x5, 0x32, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_client}]}}) 00:46:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000017c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000018c0)="1998a0c40b619ba9a479e27ed07b7a420976d45a68950456b9d10e638c31f003f973769ed5011ca7110e05cc07be6a308a769c69218ceb118a36658dbdbcb33fac736a1c5b35576ee1514fb6ff82e9e43f726cac21465b0f50713079d6b6880bdb5c9217ca69f67754f3183acb430f4f29bb4efcc4567c046f5d0b4ad5c8b7668db643c1e01f9000af70a582e10380727a19ec2d6f94bf7da4f06a4a9074de0e840ad6e610e7c3a39aca406f458f524ff55a77ff90f80b22b5fca59dcfd6a62e6d232d3fac2b5610a171c69a4912ee0f830a828586a2", 0xd6}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}, {&(0x7f0000000140)="b3a3304fce8779b5e75c356903eb0d7eeb9f", 0x12}, {&(0x7f0000000440)="7db7d9b72a02c5e6d884b46caa794a7746874c8c006e6faab7da6904874650e96c3bc6cf27391044f400", 0x2a}, {&(0x7f0000000480)="127793aa4f333bb06cba23aadab61e17a3c0c64e987bc43edf34b81e6cd54c0a53a99b2c65670216006f63ee0b302adf24976e87321607794e0a14d72c9ba73f8eff6fee17066aa5c5c8eb58bdf14f04fb7d88e414046b979dc3b56ba30377a4255d8c401e9e20f20973cb6b4cc94696124f6eac901919fcb0e8769619048cb3205a3675b5b203ff5da60b394f24cacccd38771c36dc6436cd11b59aec7b59680828777ef0527001cba5c9ccf0ad96403758367f3b2591b21967d27f38ce6e8172b03c5c1f976275703750852cf312b70b29275f023c85a707a81cc0", 0xdc}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000019c0)="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", 0x178}, {&(0x7f0000001680)="8b4fe81aa56e9ff5a53ff61c84efa1a3dda786ab7673c132eb57a4c74579b8e8659996dd37b315c03070ae0d51cc73828181830e58fef9d3706ac8ca0416c5b431f049ef189ee023c2594bc6ce35fdfa2cce7777a5b4c7f2aa7152fbd1678db5c2d0502679811651c8e041148b180543d16233216a65b0c085678e57675f82cc1738c44c5bb808852a325f6471b22c2f47034f5011560e3c9c5150264006", 0x9e}, {&(0x7f0000001740)="91d1867fe436e86b5ebed07d3514e4c9", 0x10}, {&(0x7f0000001780)="ae1e5952d4e6dde95b7ff8a2285a165a0ac7080809ecae58a24f762333e8f0839f715f6124848ef626b373facb4c19cfd88f6f043dbd3c0e5c7c", 0x3a}], 0xd, 0x239, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:46:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf5ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe0f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3118.058410] loop2: detected capacity change from 0 to 40 00:46:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe1f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe2f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8084ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {}, {r4}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000056b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "5d2f3aae6f5980"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYBLOB="000000000100000024f2ffffffffffff0000000000000000ff000000000000004c030000000000000800000000000000000400000101000007000000ff0f00000000000000000000090000000000000034b900000000000000000000000000000800"/112]) 00:46:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:46:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe3f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x40801, &(0x7f0000001740)=ANY=[@ANYBLOB="696f636861727365343d69736f383835392d342c757466383d312c6e6d7461696c3d302c6e6e6f6e756d7461696c3d312c73756e695f786c6174653d302c696f636861727365743d6d6163726f6d616e69616e2c726f6f74636f6e746578743d756e636f6e66696e65645f752c726f6f74636f6e746578743d726f6f742c7375626a5f75f465723d2f6465762f7667615f61726269746572002c6f626a5f747970653d6d73697a652c6f626a5f747970653d7766646e6f2c666f776e65723d000000", @ANYRESDEC=r7, @ANYBLOB=',\x00']) pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056b00)={0x0, [], 0x0, "5d2f3aae6f5980"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000054ec0)={0x0, 0x0, "cb7e88d394837aaab0a5b9e9128e2a7e9d1c3cd741fa23fdbf577bc27a145888aab4a46eba70dcf25f950a9ebc83ebeda3bb85528ee84545729f8154d4f88298e8f23f3a68e50cb7c606be64d82419a3f652b5b200ed0080a97f12347c9e7c8b6357b10b3459e6052694979df4ee49a8ca1d76462aa35a8c34e2d20c136b24a2ab5a9054619836d82a964f51d148b1ae9e7e0224267c886190e7cef5a4bb39fcd63af00c5ee93a103412df90678f2544c3b0dc612c0c1013bbb5966d82bf244781fcd4af8b22d0ffa631ef0ba1500c82ae7ef4418e98f29a46244c6130f91cc94764cb6549b2e987dd98b2fcb304fd84c59fcc106d7c64d60e85d1c55fbddb25", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055ec0)={0xdaf, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x7b, "f330b23e0b18b3"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3132.196116] loop2: detected capacity change from 0 to 40 00:46:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 2: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000100)='sit0\x00') r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000440)="601c6d6b6443efe85ada6e47da0008000440002000f801", 0x17}, {0x0, 0x0, 0xfdf1}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = open_tree(r0, &(0x7f00000004c0)='./file2\x00', 0x89101) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x40101, 0x0) openat(r2, &(0x7f0000000140)='./file2\x00', 0x140, 0x3e405cb9ed7fd6fb) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r2, 0x0, 0x220) 00:46:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4266c8d900000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3132.321964] loop2: detected capacity change from 0 to 253 00:46:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3132.342246] FAT-fs (loop2): bogus logical sector size 55879 [ 3132.342702] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3132.361006] loop2: detected capacity change from 0 to 253 [ 3132.366806] FAT-fs (loop2): Unrecognized mount option "./file2" or missing value 00:46:56 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:46:56 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 7: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r4 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) syz_io_uring_setup(0x47a, &(0x7f00000001c0)={0x0, 0x9440, 0x4, 0x3, 0x215, 0x0, r7}, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001840)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000000140)='./file1\x00', 0x8, 0x2000, 0x1, {0x0, r11}}, 0x4ab1) syz_io_uring_submit(r2, r8, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) 00:47:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xff030000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x4caa6e6400000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3145.549339] kernel write not supported for file /14906/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:47:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe5f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xeb000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x59e9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116b9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 3145.652939] kernel write not supported for file /14906/net/fib_triestat (pid: 7301 comm: kworker/1:0) 00:47:22 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116ba, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ae9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0xea, 0x7, &(0x7f0000000980)=[{&(0x7f00000004c0)="671a8440b1d81272c38538474086db13d292e4eae9d3b815f540abd6dd436f180b902d46fbbe519597d02c24c8f2f23a1cf6489a72b58c85ad47f491c5a9d0a8aff1053d0ab0fba5f1b2", 0x4a, 0x4bf}, {&(0x7f0000000540)="2aa93b294216a91fd2c1f7988e502f16ef20b064c6bf7508628895e3c8ab1053d7cfb91c71b9e6a413f8f1990b86daa7f917491e92f1b9f0e04703b4f4736c02f8ee8b7da6cecac615ade8181626", 0x4e, 0x800}, {&(0x7f00000005c0)="6cf2661dd32d49a0a99fe08027258ef9bf1e784f93bd1739a354921af35dc6e4c88eb07445b0f97610a38a50d8e9c5509536cba14644a19b3daa97a84d89b52d21bfcd015d0fa8e80fb13a2eccd3d183e8aa9b07f6bc", 0x56, 0x8000}, {&(0x7f0000000640)="5d8ef5be66ac033bb8099469eb54bf81277e683f3bf0552c3487c7b833cb645c9b0ecd3e0a571fce24fcd03867107762d745a918dfcb6a2343f6c94b5a55544b656d7c0d99b1e6dbfb779768d443d707958b5e2d3b8e35d9c22c12446b026a48179ea6a3243e55ed370150dcf6b9b1507da75ae0eadef25c8b8ef9c476c1b9ccd3bd8704eb188b7caf15", 0x8a, 0x1}, {&(0x7f0000000700)="bfee27cfe236a7e206ed095236ccf083fc59fb5a7799fa78525f515cd2ee07ff98167603d84326b30852714772d34279db8508aac151e541df43238d5db849e246dc69bb039b9510b88bc9de6cafbcd6c3fac69b71d6deeaa78ec86e447c0381a5485f9ea4f9554886bd1a90621d1a648eaf3332835f1da24b", 0x79, 0x3}, {&(0x7f0000000780)="0eb04d55997e87d33c698cea51f5041c571ccd5f780c0977ba64fcd4e3c62d662a7b427899028c7d93532c7e4272cf056822afaab301220de8b6246c961ed0d1aafd555800cb6a1bac50a9da98c8104ed51139410d201ac3abffca596042151ef5e116bb2fcf833432c0a2718d8ade7546994c1a06d53bf7fd44864a2309ad5e996757ac9a0a91bab9c5850186262244042affe1e3a073f60caf2833954d761055be5194e9c7c910677310b62392640f6220ab59cc8454798bd70c8eb92cb9e68cd377a2b5472c8d3af78c421f4f7139c38ee01eb076089809a61647843a7983eb71e3deb19706c4698b477d3147d370730c66", 0xf3, 0xa34f}, {&(0x7f0000000880)="17d98206ffc7ef9a99c0f6dd51952b130d3d82be25920692f49876c6ba65d31646995223be13a419a84621520d4a5d98f34e26f87d9f8841ea9c2fce81f95213f6b8af032aa6660e51410d11ab5c82217c5ec66863015b3c8474b0163bfd9a19f08eb6144c2a963a55a18b643396bebddd24ec34ec6ddbfdf37f046b27b2e9ef61241f5f791784291831c0489edb9e6f6f1adba700099276050851229ac8d98dbbada232658e17bd629f08511a2b9ddd6414b6f9e290e9d7ffcb60436ac967730f0b69420a8a4c290fe2724f4dcd4785ff776e91bf8f2e32f74118978c005cf7c93128ea5dc25557590e8513f94c1474bd", 0xf1, 0x3}], 0x2, &(0x7f0000000b80)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x33, 0x36, 0x74]}}, {}, {@huge_within_size}, {@huge_always}, {@mode={'mode', 0x3d, 0x1000}}], [{@measure}, {@hash}, {@measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '/dev/vga_arbiter\x00'}}, {@euid_eq}, {@context={'context', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@seclabel}, {@fsname}]}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r5, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6c6b6f73659883602c63616301653d6c6f3c1cb44a85dd6f73652c7273696f6e3d3970098f6d74398fab", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(r7, 0x0, 0x4, r6, 0xffffffffffffffff) r8 = syz_open_procfs(r7, &(0x7f00000001c0)='net/fib_triestat\x00') pread64(r8, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRESHEX=r0, @ANYBLOB="2c060000006f395a755af5ec7d1a581b09d6db508297f46317c91f5581f9c8b0a65e4bf1b87e99b5a901", @ANYRESHEX=r1, @ANYBLOB=',msize=0x0000000000001000,\x00']) 00:47:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x56a3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40045}, 0x2400c081) openat(r0, &(0x7f0000000500)='./file1\x00', 0x2502, 0x74) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0) execve(&(0x7f0000000540)='./file1\x00', &(0x7f0000000840)=[&(0x7f0000000580)='!#}\x00', &(0x7f0000000740)='vfat\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='/{$#\x00', &(0x7f0000000800)='%+{\x00'], &(0x7f0000000980)=[&(0x7f0000000880)='---.+\x00', &(0x7f00000008c0)='vfat\x00', &(0x7f0000000900)='@\'-\x00', &(0x7f0000000940)='\x00']) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0x54}}, 0x40000) write$binfmt_aout(r1, 0x0, 0x220) [ 3158.764962] loop2: detected capacity change from 0 to 40 00:47:22 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe6f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116bb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5be9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3158.799636] loop7: detected capacity change from 0 to 163 [ 3158.804309] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 3158.822269] kernel write not supported for file /14962/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:47:22 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:22 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:22 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3158.885479] loop7: detected capacity change from 0 to 163 [ 3158.888337] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 00:47:23 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe7f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ce9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3158.900848] kernel write not supported for file /14962/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:47:23 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x40000, 0x110) fcntl$getownex(r1, 0x10, &(0x7f0000000440)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r4, &(0x7f0000000040)=""/170, 0xaa, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r3, 0x7, r4, &(0x7f0000000480)={r2, r0, 0x8000}) 00:47:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) close(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r7, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3159.020551] loop2: detected capacity change from 0 to 40 [ 3159.045269] kernel write not supported for file /15004/net/fib_triestat (pid: 11966 comm: kworker/0:0) [ 3159.084510] kernel write not supported for file /15004/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:47:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)="9f71b22c35defe86bbc6afcc05d006a9710bc7d5840194b4cb271272c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x79}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000004c0)="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", 0x150}, {&(0x7f0000000640)="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", 0x172}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) 00:47:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x1eb000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0xf46d, 0x8f1a797ea2e65a7e, 0x2, 0x1dd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4, 0x6, @mcast2, 0x400}, 0x1c) r3 = syz_io_uring_setup(0x2663, &(0x7f00000000c0), &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r6, &(0x7f0000000040)=""/170, 0xaa, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}, {@cache_loose}, {@version_L}], [{@fowner_lt}]}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000300)={0x1, 0x64e, 0xe35e}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3171.887859] loop2: detected capacity change from 0 to 40 00:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5de9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116bc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x80000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe8f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xe9f90000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x8084ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 00:47:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)={0x77359400}, 0x10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff3000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) mount$9p_fd(0x116bd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) r1 = openat(r0, &(0x7f0000000000)='./file2\x00', 0x4042, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0x101001, 0x20) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9f71b22c35defe86bbc6afcc05d006a9710bc7d584019472c9cbc84ce27a533f32c7fb9f1e4c1c09c081eec92ad9ff7b1eedd296de503f1a641969c1dcbe05501d290cb7e7710386a99ef31578f4452dd81416a89c430d051683b5ac988cd186c462051e79333dd2f37c9ffb657a6245fde29b34f0", 0x75}, {&(0x7f0000000040)="d7210f7e04ae50fadbdb3351e40c0788ed8580", 0x13}, {&(0x7f00000000c0)="1998a0c40b619ba9a479e27ed87b7a420976d45a68950456b9d10e638c31f003f973769e", 0x24}, {&(0x7f0000000240)="160173c54e3bf246ba0ccf1e01d663b3814c7c7f8700d629b883c0c6d05580b1c44706fc473f5ee92aaf7179f70783c83ab28b09c38535435f4ce7395da1f3f131c915c1baa93c64554de312bbdd9b301dbfa14bdfaeab68fd205cf35c7e7b09bc973e7bd1f1ee751aecea883f10b4c9e46c5918bd800bea933111", 0x7b}, {&(0x7f00000002c0)="588a290accda9b982ab4a1f3acd4920ea675c92ff4a260dc427ad24024814a453eeb647c78c1aab91f310fa84f3a7fa3989a48aec3d388e9098060c31ae9490499b294177a6943dd9e11ac373c3b6bcdaf23d5b78c2fde9ce828ae14124daf07f7fc6ef7b9a42330829e94dc82ed3640cd23f0b559f2765d72b6c92ab62bc30c999ca356d41b39606cd8954ce25e29a543f0068b77c1c2ade9d3d0924eb014d32fd0ed050dc152fb838fe6decb7cfe8f374ebe28641ad09bff24dee70fa205e567252cd3d9810361c751090c1fd73c3005e12fca644f91eafa91", 0xda}], 0x5, 0x1f, 0x0) write$binfmt_aout(r1, 0x0, 0x220) r2 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9, 0x400) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000480)={{0x2, 0x2, 0x2, 0x2, 0x401}, 0x3, 0x1, 0x8000}) [ 3172.043176] kernel write not supported for file /15029/net/fib_triestat (pid: 11966 comm: kworker/0:0) 00:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x5ee9000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x2eb000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) 00:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0xfffffff5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) [ 3172.117200] loop2: detected capacity change from 0 to 40 [ 3172.159434] kernel write not supported for file /15029/net/fib_triestat (pid: 7301 comm: kworker/1:0) VM DIAGNOSIS: 00:52:38 Registers: info registers vcpu 0 RAX=0000000000a0f57b RBX=0000000000000000 RCX=ffffffff844d98be RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812880b5 RBP=dffffc0000000000 RSP=ffffffff85407e10 R8 =0000000000000001 R9 =ffffed100d9c69f8 R10=ffff88806ce34fc3 R11=0000000000000001 R12=ffffffff85d36f90 R13=1ffffffff0a80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844da84f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc736746000 CR3=000000000d716000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=c8dd4a0000000000 401d FPR7=c000000000000000 4001 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=746f72702f6374652f00656372000a23 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=3270682820262620294c4c554e203d21 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000c10a71 RBX=0000000000000001 RCX=ffffffff844d98be RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812880b5 RBP=dffffc0000000000 RSP=ffff888008e27e70 R8 =0000000000000001 R9 =ffffed100d9e69f8 R10=ffff88806cf34fc3 R11=0000000000000001 R12=ffffffff85d36f90 R13=1ffff110011c4fd3 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff844da84f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efd87f47010 CR3=0000000016514000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000418458c500000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000