296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1430.353973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.353988] Call Trace: [ 1430.353993] [ 1430.354001] dump_stack_lvl+0x8b/0xb3 [ 1430.354034] should_fail.cold+0x5/0xa [ 1430.354058] ? radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 1430.354099] should_failslab+0x5/0x10 [ 1430.354128] kmem_cache_alloc+0x5b/0x480 [ 1430.354158] radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 1430.354204] idr_get_free+0x4b5/0x8f0 [ 1430.354260] idr_alloc_u32+0x170/0x2d0 [ 1430.354290] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 1430.354324] ? lock_acquire+0x1b2/0x530 [ 1430.354361] idr_alloc_cyclic+0x102/0x230 [ 1430.354389] ? idr_alloc+0x130/0x130 [ 1430.354409] ? rwlock_bug.part.0+0x90/0x90 [ 1430.354455] __kernfs_new_node+0x117/0x8b0 [ 1430.354500] ? kernfs_add_one+0x3c6/0x550 [ 1430.354521] ? kernfs_path_from_node+0x60/0x60 [ 1430.354565] ? lock_is_held_type+0xd7/0x130 [ 1430.354608] ? up_write+0x148/0x460 [ 1430.354628] ? kernfs_activate+0x1c4/0x240 [ 1430.354661] kernfs_new_node+0x93/0x120 [ 1430.354690] __kernfs_create_file+0x51/0x350 [ 1430.354720] sysfs_add_file_mode_ns+0x218/0x430 [ 1430.354752] ? component_del+0x4c0/0x4c0 [ 1430.354782] internal_create_group+0x322/0xb20 [ 1430.354820] ? sysfs_remove_group+0x170/0x170 [ 1430.354858] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1430.354902] loop_configure+0xf2f/0x1a10 [ 1430.354955] lo_ioctl+0x932/0x1990 [ 1430.354985] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.355014] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.355042] ? avc_ss_reset+0x180/0x180 [ 1430.355086] ? __lock_acquire+0xbac/0x6120 [ 1430.355187] ? find_held_lock+0x2c/0x110 [ 1430.355221] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.355256] blkdev_ioctl+0x356/0x7f0 [ 1430.355280] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.355309] ? selinux_file_ioctl+0xb1/0x260 [ 1430.355346] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.355381] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.355410] __x64_sys_ioctl+0x196/0x210 [ 1430.355452] do_syscall_64+0x3b/0x90 [ 1430.355478] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:16:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 33) 00:16:35 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1430.355508] RIP: 0033:0x7fa9c29338d7 [ 1430.355524] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:16:35 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 32) [ 1430.355545] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.355566] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 00:16:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x300, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1430.355580] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.355592] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.355604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:16:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 35) [ 1430.355616] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1430.355657] [ 1430.392002] loop5: detected capacity change from 0 to 256 [ 1430.392853] FAT-fs (loop6): bogus number of reserved sectors [ 1430.392873] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1430.394496] FAULT_INJECTION: forcing a failure. [ 1430.394496] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.394529] CPU: 1 PID: 6811 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1430.394553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.394569] Call Trace: [ 1430.394575] [ 1430.394584] dump_stack_lvl+0x8b/0xb3 [ 1430.394623] should_fail.cold+0x5/0xa [ 1430.394648] ? create_object.isra.0+0x3a/0xa20 [ 1430.394685] should_failslab+0x5/0x10 [ 1430.394715] kmem_cache_alloc+0x5b/0x480 [ 1430.394745] create_object.isra.0+0x3a/0xa20 [ 1430.394775] ? kasan_unpoison+0x23/0x50 [ 1430.394809] kmem_cache_alloc+0x239/0x480 [ 1430.394838] __kernfs_new_node+0xd4/0x8b0 [ 1430.394883] ? kernfs_add_one+0x3c6/0x550 [ 1430.394904] ? kernfs_path_from_node+0x60/0x60 [ 1430.394947] ? lock_is_held_type+0xd7/0x130 [ 1430.394991] ? up_write+0x148/0x460 [ 1430.395013] ? kernfs_activate+0x1c4/0x240 [ 1430.395045] kernfs_new_node+0x93/0x120 [ 1430.395073] __kernfs_create_file+0x51/0x350 00:16:35 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:16:35 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1430.395104] sysfs_add_file_mode_ns+0x218/0x430 [ 1430.395136] ? component_del+0x4c0/0x4c0 [ 1430.395166] internal_create_group+0x322/0xb20 [ 1430.395203] ? sysfs_remove_group+0x170/0x170 [ 1430.395240] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1430.395286] loop_configure+0xf2f/0x1a10 [ 1430.395339] lo_ioctl+0x932/0x1990 [ 1430.395369] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.395397] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.395425] ? avc_ss_reset+0x180/0x180 [ 1430.395469] ? __lock_acquire+0xbac/0x6120 [ 1430.395566] ? find_held_lock+0x2c/0x110 [ 1430.395600] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.395634] blkdev_ioctl+0x356/0x7f0 [ 1430.395660] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.395684] ? selinux_file_ioctl+0xb1/0x260 [ 1430.395722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.395757] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.395786] __x64_sys_ioctl+0x196/0x210 [ 1430.395829] do_syscall_64+0x3b/0x90 [ 1430.395855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.395886] RIP: 0033:0x7faa30c978d7 [ 1430.395903] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.395924] RSP: 002b:00007faa2e20cf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.395946] RAX: ffffffffffffffda RBX: 00007faa30ce1970 RCX: 00007faa30c978d7 [ 1430.395960] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.395973] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.395986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.395999] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1430.396037] [ 1430.397850] loop7: detected capacity change from 0 to 256 [ 1430.399092] FAULT_INJECTION: forcing a failure. [ 1430.399092] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.399122] CPU: 0 PID: 6808 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1430.399144] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:16:36 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1430.399159] Call Trace: [ 1430.399165] [ 1430.399173] dump_stack_lvl+0x8b/0xb3 [ 1430.399206] should_fail.cold+0x5/0xa [ 1430.399230] ? create_object.isra.0+0x3a/0xa20 [ 1430.399264] should_failslab+0x5/0x10 [ 1430.399294] kmem_cache_alloc+0x5b/0x480 [ 1430.399330] create_object.isra.0+0x3a/0xa20 [ 1430.399376] ? kasan_unpoison+0x23/0x50 [ 1430.399412] kmem_cache_alloc+0x239/0x480 [ 1430.399441] __kernfs_new_node+0xd4/0x8b0 [ 1430.399485] ? kernfs_add_one+0x3c6/0x550 [ 1430.399507] ? kernfs_path_from_node+0x60/0x60 [ 1430.399551] ? lock_is_held_type+0xd7/0x130 [ 1430.399593] ? up_write+0x148/0x460 [ 1430.399615] ? kernfs_activate+0x1c4/0x240 [ 1430.399646] kernfs_new_node+0x93/0x120 [ 1430.399675] __kernfs_create_file+0x51/0x350 [ 1430.399705] sysfs_add_file_mode_ns+0x218/0x430 [ 1430.399737] ? component_del+0x4c0/0x4c0 [ 1430.399766] internal_create_group+0x322/0xb20 [ 1430.399804] ? sysfs_remove_group+0x170/0x170 [ 1430.399841] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1430.399885] loop_configure+0xf2f/0x1a10 [ 1430.399939] lo_ioctl+0x932/0x1990 [ 1430.399979] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.400007] ? avc_ss_reset+0x180/0x180 [ 1430.400050] ? __lock_acquire+0xbac/0x6120 [ 1430.400093] ? lock_is_held_type+0xd7/0x130 [ 1430.400186] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.400220] blkdev_ioctl+0x356/0x7f0 [ 1430.400244] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.400268] ? selinux_file_ioctl+0xb1/0x260 [ 1430.400305] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.400354] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.400398] __x64_sys_ioctl+0x196/0x210 [ 1430.400454] do_syscall_64+0x3b/0x90 [ 1430.400480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.400510] RIP: 0033:0x7fe4240898d7 [ 1430.400527] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.400548] RSP: 002b:00007fe4215fef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.400569] RAX: ffffffffffffffda RBX: 00007fe4240d3970 RCX: 00007fe4240898d7 [ 1430.400584] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.400597] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.400609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.400621] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1430.400660] [ 1430.406043] FAT-fs (loop4): bogus number of reserved sectors [ 1430.406064] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1430.407989] FAT-fs (loop5): bogus number of FAT sectors [ 1430.408008] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1430.426919] FAT-fs (loop7): bogus number of FAT sectors [ 1430.426939] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1430.429991] FAT-fs (loop0): bogus number of reserved sectors [ 1430.430012] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1430.433838] 9pnet_fd: p9_fd_create_tcp (6810): problem connecting socket to 127.0.0.1 [ 1430.638740] FAULT_INJECTION: forcing a failure. [ 1430.638740] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.638773] CPU: 0 PID: 6822 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1430.638797] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.638811] Call Trace: [ 1430.638817] [ 1430.638824] dump_stack_lvl+0x8b/0xb3 [ 1430.638858] should_fail.cold+0x5/0xa [ 1430.638882] ? create_object.isra.0+0x3a/0xa20 [ 1430.638917] should_failslab+0x5/0x10 [ 1430.638946] kmem_cache_alloc+0x5b/0x480 [ 1430.638977] create_object.isra.0+0x3a/0xa20 [ 1430.639006] ? kasan_unpoison+0x23/0x50 [ 1430.639040] kmem_cache_alloc+0x239/0x480 [ 1430.639068] __kernfs_new_node+0xd4/0x8b0 [ 1430.639107] ? kernfs_add_one+0x3c6/0x550 [ 1430.639128] ? kernfs_path_from_node+0x60/0x60 [ 1430.639171] ? lock_is_held_type+0xd7/0x130 [ 1430.639215] ? up_write+0x148/0x460 [ 1430.639236] ? kernfs_activate+0x1c4/0x240 [ 1430.639267] kernfs_new_node+0x93/0x120 [ 1430.639296] __kernfs_create_file+0x51/0x350 [ 1430.639332] sysfs_add_file_mode_ns+0x218/0x430 [ 1430.639380] ? component_del+0x4c0/0x4c0 [ 1430.639410] internal_create_group+0x322/0xb20 [ 1430.639448] ? sysfs_remove_group+0x170/0x170 [ 1430.639490] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1430.639534] loop_configure+0xf2f/0x1a10 [ 1430.639585] lo_ioctl+0x932/0x1990 [ 1430.639615] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.639644] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.639672] ? avc_ss_reset+0x180/0x180 [ 1430.639714] ? __lock_acquire+0xbac/0x6120 [ 1430.639811] ? find_held_lock+0x2c/0x110 [ 1430.639845] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.639879] blkdev_ioctl+0x356/0x7f0 [ 1430.639903] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.639929] ? selinux_file_ioctl+0xb1/0x260 [ 1430.639966] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.640001] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.640030] __x64_sys_ioctl+0x196/0x210 [ 1430.640072] do_syscall_64+0x3b/0x90 [ 1430.640097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.640127] RIP: 0033:0x7fa9c29338d7 [ 1430.640145] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.640166] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.640188] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 [ 1430.640202] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.640215] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.640228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.640240] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1430.640279] [ 1430.665558] FAT-fs (loop6): bogus number of reserved sectors [ 1430.665579] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1430.668207] FAULT_INJECTION: forcing a failure. [ 1430.668207] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.668235] CPU: 0 PID: 6825 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1430.668259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.668273] Call Trace: [ 1430.668279] [ 1430.668286] dump_stack_lvl+0x8b/0xb3 [ 1430.668321] should_fail.cold+0x5/0xa [ 1430.668357] ? __kernfs_new_node+0xd4/0x8b0 [ 1430.668425] should_failslab+0x5/0x10 [ 1430.668469] kmem_cache_alloc+0x5b/0x480 [ 1430.668505] __kernfs_new_node+0xd4/0x8b0 [ 1430.668544] ? kernfs_add_one+0x3c6/0x550 [ 1430.668566] ? kernfs_path_from_node+0x60/0x60 [ 1430.668618] ? lock_is_held_type+0xd7/0x130 [ 1430.668667] ? up_write+0x148/0x460 [ 1430.668692] ? kernfs_activate+0x1c4/0x240 [ 1430.668726] kernfs_new_node+0x93/0x120 [ 1430.668763] __kernfs_create_file+0x51/0x350 [ 1430.668793] sysfs_add_file_mode_ns+0x218/0x430 [ 1430.668825] ? component_del+0x4c0/0x4c0 [ 1430.668853] internal_create_group+0x322/0xb20 [ 1430.668891] ? sysfs_remove_group+0x170/0x170 [ 1430.668927] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1430.668971] loop_configure+0xf2f/0x1a10 [ 1430.669023] lo_ioctl+0x932/0x1990 [ 1430.669053] ? __x64_sys_openat+0x13f/0x1f0 [ 1430.669083] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.669111] ? avc_ss_reset+0x180/0x180 [ 1430.669156] ? __lock_acquire+0xbac/0x6120 [ 1430.669279] ? find_held_lock+0x2c/0x110 [ 1430.669314] ? loop_set_status_old+0x1b0/0x1b0 [ 1430.669363] blkdev_ioctl+0x356/0x7f0 [ 1430.669390] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.669414] ? selinux_file_ioctl+0xb1/0x260 [ 1430.669452] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.669489] ? blkdev_common_ioctl+0x1990/0x1990 [ 1430.669518] __x64_sys_ioctl+0x196/0x210 [ 1430.669560] do_syscall_64+0x3b/0x90 [ 1430.669586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.669616] RIP: 0033:0x7faa30c978d7 [ 1430.669632] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.669653] RSP: 002b:00007faa2e20cf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.669674] RAX: ffffffffffffffda RBX: 00007faa30ce1970 RCX: 00007faa30c978d7 [ 1430.669688] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1430.669701] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.669716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1430.669728] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1430.669767] [ 1430.703764] FAT-fs (loop4): bogus number of reserved sectors [ 1430.703787] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1430.727176] FAULT_INJECTION: forcing a failure. [ 1430.727176] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.727211] CPU: 1 PID: 6831 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1430.727236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.727250] Call Trace: [ 1430.727256] [ 1430.727264] dump_stack_lvl+0x8b/0xb3 [ 1430.727299] should_fail.cold+0x5/0xa [ 1430.727324] ? getname_flags.part.0+0x50/0x4f0 [ 1430.727359] should_failslab+0x5/0x10 [ 1430.727389] kmem_cache_alloc+0x5b/0x480 [ 1430.727417] getname_flags.part.0+0x50/0x4f0 [ 1430.727455] __x64_sys_mkdir+0xda/0x140 [ 1430.727495] do_syscall_64+0x3b/0x90 [ 1430.727522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.727552] RIP: 0033:0x7fe424088c27 [ 1430.727569] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.727590] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1430.727612] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1430.727626] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1430.727640] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1430.727653] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1430.727666] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1430.727704] [ 1430.751103] loop7: detected capacity change from 0 to 256 [ 1430.778672] FAT-fs (loop7): bogus number of FAT sectors [ 1430.778722] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1430.791920] loop5: detected capacity change from 0 to 256 [ 1430.813114] FAT-fs (loop5): bogus number of FAT sectors [ 1430.813133] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1430.864415] 9pnet_fd: p9_fd_create_tcp (6835): problem connecting socket to 127.0.0.1 [ 1444.561028] kmemleak: 20 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1451.617958] FAULT_INJECTION: forcing a failure. [ 1451.617958] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.617980] CPU: 1 PID: 6850 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 00:16:56 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:16:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x480, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:16:56 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 33) 00:16:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 34) 00:16:56 executing program 2: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x1, 0x1}, 0x9) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 00:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 36) 00:16:56 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:16:56 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1451.617993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.618001] Call Trace: [ 1451.618004] [ 1451.618009] dump_stack_lvl+0x8b/0xb3 [ 1451.618030] should_fail.cold+0x5/0xa [ 1451.618043] ? create_object.isra.0+0x3a/0xa20 [ 1451.618062] should_failslab+0x5/0x10 [ 1451.618078] kmem_cache_alloc+0x5b/0x480 [ 1451.618093] create_object.isra.0+0x3a/0xa20 [ 1451.618109] ? kasan_unpoison+0x23/0x50 [ 1451.618127] kmem_cache_alloc+0x239/0x480 [ 1451.618143] __kernfs_new_node+0xd4/0x8b0 [ 1451.618164] ? kernfs_add_one+0x3c6/0x550 [ 1451.618175] ? kernfs_path_from_node+0x60/0x60 [ 1451.618198] ? lock_is_held_type+0xd7/0x130 [ 1451.618221] ? up_write+0x148/0x460 [ 1451.618233] ? kernfs_activate+0x1c4/0x240 [ 1451.618250] kernfs_new_node+0x93/0x120 [ 1451.618265] __kernfs_create_file+0x51/0x350 [ 1451.618281] sysfs_add_file_mode_ns+0x218/0x430 00:16:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x500, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1451.618298] ? component_del+0x4c0/0x4c0 [ 1451.618314] internal_create_group+0x322/0xb20 [ 1451.618335] ? sysfs_remove_group+0x170/0x170 [ 1451.618355] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.618379] loop_configure+0xf2f/0x1a10 [ 1451.618408] lo_ioctl+0x932/0x1990 [ 1451.618423] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.618439] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.618458] ? avc_ss_reset+0x180/0x180 [ 1451.618482] ? __lock_acquire+0xbac/0x6120 00:16:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 37) [ 1451.618536] ? find_held_lock+0x2c/0x110 [ 1451.618554] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.618572] blkdev_ioctl+0x356/0x7f0 [ 1451.618585] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.618598] ? selinux_file_ioctl+0xb1/0x260 [ 1451.618618] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.618637] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.618652] __x64_sys_ioctl+0x196/0x210 [ 1451.618675] do_syscall_64+0x3b/0x90 [ 1451.618689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.618705] RIP: 0033:0x7fe4240898d7 [ 1451.618714] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:16:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 35) 00:16:57 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:16:57 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x204800, 0x0) r1 = dup(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4004, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) fdatasync(r1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000001380)=0x100000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0xb8, 0x4, 0x6, 0x3, 0xffffffff, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r6 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xc000000000, 0x80081) ioctl$FICLONE(r6, 0x40049409, r2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', r5, 0x29, 0x4, 0x4, 0x41427fa1, 0x14, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x7800, 0xcba, 0x5ce5}}) fallocate(r4, 0x0, 0x0, 0x87ffffc) openat$vcsu(0xffffffffffffff9c, &(0x7f00000013c0), 0x840, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0701030112030000d203000009000000e7030000040000000000000000000000473ef70299606709182ff15824612fb40259a913a2300ae9e35b1ea8e4079f49b460629d6a9ba1723431a8df22d50b93988fb26b0a352aa53c8c600152dc4add5d84afd8b97dee2cbf1b587ea0befb624077a70eec116e8a30a024f56604ac058d436ddeef84088301909861ffdec0a934aa4e834bdc7e7930b1b63a87395bc13a3c0be66b43e71a7cc79d6006f2a42db39e4ff7668d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000294f04bf078722d342f4eb34d848d24480a332d33b74e0fd328e331bb736e6635b726598fb5fcdfd9f44b2b8f2090e0dcd44bd7da8d79dc326bdd5855889c6c31da4a4de40327cf64200e68f9a65d1089a6e19cd7f61534ce930517f5c6b9af2624a832cd228566af9ebcc9fd81e038811180cf73ffb47fb80758566a85a9d511c49dfd1f3856ba5e02b"], 0x5b6) 00:16:57 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 34) [ 1451.618725] RSP: 002b:00007fe4215fef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.618737] RAX: ffffffffffffffda RBX: 00007fe4240d3970 RCX: 00007fe4240898d7 [ 1451.618745] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.618751] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 00:16:57 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1451.618758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.618765] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.618786] [ 1451.625119] FAT-fs (loop0): bogus number of reserved sectors [ 1451.625132] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1451.648198] FAULT_INJECTION: forcing a failure. [ 1451.648198] name failslab, interval 1, probability 0, space 0, times 0 00:16:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 38) 00:16:57 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1451.648218] CPU: 1 PID: 6857 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.648231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.648239] Call Trace: [ 1451.648243] [ 1451.648247] dump_stack_lvl+0x8b/0xb3 [ 1451.648267] should_fail.cold+0x5/0xa [ 1451.648280] ? create_object.isra.0+0x3a/0xa20 [ 1451.648300] should_failslab+0x5/0x10 [ 1451.648316] kmem_cache_alloc+0x5b/0x480 [ 1451.648331] create_object.isra.0+0x3a/0xa20 [ 1451.648347] ? kasan_unpoison+0x23/0x50 [ 1451.648366] kmem_cache_alloc+0x239/0x480 [ 1451.648381] __kernfs_new_node+0xd4/0x8b0 [ 1451.648402] ? kernfs_add_one+0x3c6/0x550 [ 1451.648413] ? kernfs_path_from_node+0x60/0x60 [ 1451.648436] ? lock_is_held_type+0xd7/0x130 [ 1451.648462] ? up_write+0x148/0x460 [ 1451.648474] ? kernfs_activate+0x1c4/0x240 [ 1451.648491] kernfs_new_node+0x93/0x120 [ 1451.648506] __kernfs_create_file+0x51/0x350 [ 1451.648523] sysfs_add_file_mode_ns+0x218/0x430 [ 1451.648539] ? component_del+0x4c0/0x4c0 [ 1451.648556] internal_create_group+0x322/0xb20 [ 1451.648576] ? sysfs_remove_group+0x170/0x170 [ 1451.648596] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.648620] loop_configure+0xf2f/0x1a10 [ 1451.648648] lo_ioctl+0x932/0x1990 [ 1451.648664] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.648679] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.648694] ? avc_ss_reset+0x180/0x180 [ 1451.648718] ? __lock_acquire+0xbac/0x6120 [ 1451.648770] ? find_held_lock+0x2c/0x110 [ 1451.648788] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.648807] blkdev_ioctl+0x356/0x7f0 [ 1451.648820] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.648833] ? selinux_file_ioctl+0xb1/0x260 [ 1451.648853] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.648872] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.648887] __x64_sys_ioctl+0x196/0x210 [ 1451.648910] do_syscall_64+0x3b/0x90 [ 1451.648924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.648940] RIP: 0033:0x7faa30c978d7 [ 1451.648950] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.648961] RSP: 002b:00007faa2e20cf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.648973] RAX: ffffffffffffffda RBX: 00007faa30ce1970 RCX: 00007faa30c978d7 [ 1451.648981] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.648988] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.648995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.649001] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.649022] [ 1451.650431] loop7: detected capacity change from 0 to 256 [ 1451.652045] loop5: detected capacity change from 0 to 256 [ 1451.653424] FAT-fs (loop5): bogus number of FAT sectors [ 1451.653445] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1451.653753] FAT-fs (loop7): bogus number of FAT sectors [ 1451.653770] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1451.665654] FAULT_INJECTION: forcing a failure. [ 1451.665654] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.665686] CPU: 0 PID: 6861 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.665711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.665725] Call Trace: [ 1451.665731] [ 1451.665738] dump_stack_lvl+0x8b/0xb3 [ 1451.665770] should_fail.cold+0x5/0xa [ 1451.665794] ? __kernfs_new_node+0xd4/0x8b0 [ 1451.665833] should_failslab+0x5/0x10 [ 1451.665862] kmem_cache_alloc+0x5b/0x480 [ 1451.665892] __kernfs_new_node+0xd4/0x8b0 [ 1451.665929] ? kernfs_add_one+0x3c6/0x550 [ 1451.665950] ? kernfs_path_from_node+0x60/0x60 [ 1451.665993] ? lock_is_held_type+0xd7/0x130 [ 1451.666035] ? up_write+0x148/0x460 [ 1451.666063] ? kernfs_activate+0x1c4/0x240 [ 1451.666094] kernfs_new_node+0x93/0x120 [ 1451.666122] __kernfs_create_file+0x51/0x350 [ 1451.666152] sysfs_add_file_mode_ns+0x218/0x430 [ 1451.666183] ? component_del+0x4c0/0x4c0 [ 1451.666212] internal_create_group+0x322/0xb20 [ 1451.666249] ? sysfs_remove_group+0x170/0x170 [ 1451.666286] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.666331] loop_configure+0xf2f/0x1a10 [ 1451.666383] lo_ioctl+0x932/0x1990 [ 1451.666416] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.666445] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.666478] ? avc_ss_reset+0x180/0x180 [ 1451.666521] ? __lock_acquire+0xbac/0x6120 [ 1451.666618] ? find_held_lock+0x2c/0x110 [ 1451.666651] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.666685] blkdev_ioctl+0x356/0x7f0 [ 1451.666710] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.666733] ? selinux_file_ioctl+0xb1/0x260 [ 1451.666771] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.666806] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.666835] __x64_sys_ioctl+0x196/0x210 [ 1451.666876] do_syscall_64+0x3b/0x90 [ 1451.666902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.666932] RIP: 0033:0x7fa9c29338d7 [ 1451.666948] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.666968] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.666990] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 [ 1451.667004] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.667017] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.667030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.667042] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.667081] [ 1451.669161] FAT-fs (loop4): bogus number of reserved sectors [ 1451.669173] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1451.680404] 9pnet_fd: p9_fd_create_tcp (6852): problem connecting socket to 127.0.0.1 [ 1451.685087] FAT-fs (loop6): bogus number of reserved sectors [ 1451.685107] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1451.756886] FAULT_INJECTION: forcing a failure. [ 1451.756886] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.756923] CPU: 0 PID: 6867 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.756951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.756968] Call Trace: [ 1451.756974] [ 1451.756983] dump_stack_lvl+0x8b/0xb3 [ 1451.757020] should_fail.cold+0x5/0xa [ 1451.757048] ? __kernfs_new_node+0xd4/0x8b0 [ 1451.757093] should_failslab+0x5/0x10 [ 1451.757128] kmem_cache_alloc+0x5b/0x480 [ 1451.757162] __kernfs_new_node+0xd4/0x8b0 [ 1451.757206] ? kernfs_add_one+0x3c6/0x550 [ 1451.757231] ? kernfs_path_from_node+0x60/0x60 [ 1451.757282] ? lock_is_held_type+0xd7/0x130 [ 1451.757331] ? up_write+0x148/0x460 [ 1451.757356] ? kernfs_activate+0x1c4/0x240 [ 1451.757393] kernfs_new_node+0x93/0x120 [ 1451.757426] __kernfs_create_file+0x51/0x350 [ 1451.757468] sysfs_add_file_mode_ns+0x218/0x430 [ 1451.757505] ? component_del+0x4c0/0x4c0 [ 1451.757538] internal_create_group+0x322/0xb20 [ 1451.757608] ? sysfs_remove_group+0x170/0x170 [ 1451.757652] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.757703] loop_configure+0xf2f/0x1a10 [ 1451.757763] lo_ioctl+0x932/0x1990 [ 1451.757798] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.757837] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.757870] ? avc_ss_reset+0x180/0x180 [ 1451.757919] ? __lock_acquire+0xbac/0x6120 [ 1451.758033] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1451.758074] ? lockdep_hardirqs_on+0x79/0x100 [ 1451.758115] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.758155] blkdev_ioctl+0x356/0x7f0 [ 1451.758183] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.758210] ? selinux_file_ioctl+0xb1/0x260 [ 1451.758254] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.758295] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.758328] __x64_sys_ioctl+0x196/0x210 [ 1451.758377] do_syscall_64+0x3b/0x90 [ 1451.758407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.758442] RIP: 0033:0x7fe4240898d7 [ 1451.758461] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.758486] RSP: 002b:00007fe4215fef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.758511] RAX: ffffffffffffffda RBX: 00007fe4240d3970 RCX: 00007fe4240898d7 [ 1451.758528] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.758543] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.758558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.758572] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.758618] [ 1451.779948] FAT-fs (loop0): bogus number of reserved sectors [ 1451.779963] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1451.811844] loop7: detected capacity change from 0 to 256 [ 1451.819529] FAT-fs (loop7): bogus number of FAT sectors [ 1451.819549] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1451.838274] loop5: detected capacity change from 0 to 256 [ 1451.844642] FAT-fs (loop5): bogus number of FAT sectors [ 1451.844661] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1451.859655] 9pnet_fd: p9_fd_create_tcp (6873): problem connecting socket to 127.0.0.1 [ 1451.887767] FAULT_INJECTION: forcing a failure. [ 1451.887767] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.887787] CPU: 1 PID: 6878 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.887799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.887808] Call Trace: [ 1451.887811] [ 1451.887816] dump_stack_lvl+0x8b/0xb3 [ 1451.887836] should_fail.cold+0x5/0xa [ 1451.887849] ? create_object.isra.0+0x3a/0xa20 [ 1451.887869] should_failslab+0x5/0x10 [ 1451.887885] kmem_cache_alloc+0x5b/0x480 [ 1451.887901] create_object.isra.0+0x3a/0xa20 [ 1451.887916] ? kasan_unpoison+0x23/0x50 [ 1451.887935] kmem_cache_alloc+0x239/0x480 [ 1451.887951] __kernfs_new_node+0xd4/0x8b0 [ 1451.887972] ? kernfs_add_one+0x3c6/0x550 [ 1451.887983] ? kernfs_path_from_node+0x60/0x60 [ 1451.888007] ? lock_is_held_type+0xd7/0x130 [ 1451.888030] ? up_write+0x148/0x460 [ 1451.888045] ? kernfs_activate+0x1c4/0x240 [ 1451.888062] kernfs_new_node+0x93/0x120 [ 1451.888078] __kernfs_create_file+0x51/0x350 [ 1451.888094] sysfs_add_file_mode_ns+0x218/0x430 [ 1451.888111] ? component_del+0x4c0/0x4c0 [ 1451.888128] internal_create_group+0x322/0xb20 [ 1451.888148] ? sysfs_remove_group+0x170/0x170 [ 1451.888168] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.888192] loop_configure+0xf2f/0x1a10 [ 1451.888220] lo_ioctl+0x932/0x1990 [ 1451.888237] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.888252] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.888267] ? avc_ss_reset+0x180/0x180 [ 1451.888290] ? __lock_acquire+0xbac/0x6120 [ 1451.888343] ? find_held_lock+0x2c/0x110 [ 1451.888361] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.888379] blkdev_ioctl+0x356/0x7f0 [ 1451.888392] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.888405] ? selinux_file_ioctl+0xb1/0x260 [ 1451.888425] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.888444] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.888460] __x64_sys_ioctl+0x196/0x210 [ 1451.888483] do_syscall_64+0x3b/0x90 [ 1451.888496] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.888513] RIP: 0033:0x7fe4240898d7 [ 1451.888522] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.888533] RSP: 002b:00007fe4215fef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.888546] RAX: ffffffffffffffda RBX: 00007fe4240d3970 RCX: 00007fe4240898d7 [ 1451.888553] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.888560] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.888567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.888574] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.888595] [ 1451.902616] FAULT_INJECTION: forcing a failure. [ 1451.902616] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.902633] CPU: 1 PID: 6879 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.902645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.902653] Call Trace: [ 1451.902656] [ 1451.902660] dump_stack_lvl+0x8b/0xb3 [ 1451.902676] should_fail.cold+0x5/0xa [ 1451.902688] ? create_object.isra.0+0x3a/0xa20 [ 1451.902707] should_failslab+0x5/0x10 [ 1451.902722] kmem_cache_alloc+0x5b/0x480 [ 1451.902738] create_object.isra.0+0x3a/0xa20 [ 1451.902754] ? kasan_unpoison+0x23/0x50 [ 1451.902773] kmem_cache_alloc+0x239/0x480 [ 1451.902788] __kernfs_new_node+0xd4/0x8b0 [ 1451.902809] ? kernfs_add_one+0x3c6/0x550 [ 1451.902820] ? kernfs_path_from_node+0x60/0x60 [ 1451.902844] ? lock_is_held_type+0xd7/0x130 [ 1451.902866] ? up_write+0x148/0x460 [ 1451.902878] ? kernfs_activate+0x1c4/0x240 [ 1451.902894] kernfs_new_node+0x93/0x120 [ 1451.902910] __kernfs_create_file+0x51/0x350 [ 1451.902926] sysfs_add_file_mode_ns+0x218/0x430 [ 1451.902944] ? component_del+0x4c0/0x4c0 [ 1451.902959] internal_create_group+0x322/0xb20 [ 1451.902979] ? sysfs_remove_group+0x170/0x170 [ 1451.902999] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1451.903023] loop_configure+0xf2f/0x1a10 [ 1451.903050] lo_ioctl+0x932/0x1990 [ 1451.903066] ? __x64_sys_openat+0x13f/0x1f0 [ 1451.903081] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.903096] ? avc_ss_reset+0x180/0x180 [ 1451.903119] ? __lock_acquire+0xbac/0x6120 [ 1451.903171] ? find_held_lock+0x2c/0x110 [ 1451.903190] ? loop_set_status_old+0x1b0/0x1b0 [ 1451.903208] blkdev_ioctl+0x356/0x7f0 [ 1451.903221] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.903234] ? selinux_file_ioctl+0xb1/0x260 [ 1451.903254] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.903273] ? blkdev_common_ioctl+0x1990/0x1990 [ 1451.903288] __x64_sys_ioctl+0x196/0x210 [ 1451.903310] do_syscall_64+0x3b/0x90 [ 1451.903324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.903340] RIP: 0033:0x7fa9c29338d7 [ 1451.903348] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.903359] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.903371] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 [ 1451.903378] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1451.903385] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.903392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1451.903399] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1451.903420] [ 1451.909500] FAT-fs (loop0): bogus number of reserved sectors [ 1451.909512] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1451.912479] FAT-fs (loop6): bogus number of reserved sectors [ 1451.912488] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1451.918391] FAULT_INJECTION: forcing a failure. [ 1451.918391] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.918426] CPU: 0 PID: 6881 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1451.918458] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1451.918474] Call Trace: [ 1451.918481] [ 1451.918489] dump_stack_lvl+0x8b/0xb3 [ 1451.918525] should_fail.cold+0x5/0xa [ 1451.918550] ? getname_flags.part.0+0x50/0x4f0 [ 1451.918588] should_failslab+0x5/0x10 [ 1451.918620] kmem_cache_alloc+0x5b/0x480 [ 1451.918651] getname_flags.part.0+0x50/0x4f0 [ 1451.918693] __x64_sys_mkdir+0xda/0x140 [ 1451.918730] do_syscall_64+0x3b/0x90 [ 1451.918759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.918792] RIP: 0033:0x7faa30c96c27 [ 1451.918811] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.918833] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1451.918857] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1451.918873] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1451.918887] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1451.918902] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1451.918916] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1451.918957] [ 1465.105772] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1471.893047] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:17:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 36) 00:17:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:17:17 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x600, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:17:17 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000280)=""/137, 0x89}], 0x3, 0x7, 0x8d2d) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x150052, &(0x7f0000000000)=ANY=[]) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x511882, 0x0) 00:17:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 39) 00:17:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 35) [ 1472.351852] FAULT_INJECTION: forcing a failure. [ 1472.351852] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.351873] CPU: 0 PID: 6900 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.351886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.351895] Call Trace: [ 1472.351899] [ 1472.351903] dump_stack_lvl+0x8b/0xb3 [ 1472.351925] should_fail.cold+0x5/0xa [ 1472.351938] ? __kernfs_new_node+0xd4/0x8b0 [ 1472.351965] should_failslab+0x5/0x10 [ 1472.351983] kmem_cache_alloc+0x5b/0x480 [ 1472.351999] __kernfs_new_node+0xd4/0x8b0 [ 1472.352020] ? kernfs_add_one+0x3c6/0x550 [ 1472.352031] ? kernfs_path_from_node+0x60/0x60 [ 1472.352054] ? lock_is_held_type+0xd7/0x130 [ 1472.352077] ? up_write+0x148/0x460 [ 1472.352090] ? kernfs_activate+0x1c4/0x240 [ 1472.352107] kernfs_new_node+0x93/0x120 [ 1472.352122] __kernfs_create_file+0x51/0x350 [ 1472.352139] sysfs_add_file_mode_ns+0x218/0x430 [ 1472.352155] ? component_del+0x4c0/0x4c0 [ 1472.352172] internal_create_group+0x322/0xb20 00:17:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 36) [ 1472.352192] ? sysfs_remove_group+0x170/0x170 00:17:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1472.352212] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1472.352237] loop_configure+0xf2f/0x1a10 [ 1472.352266] lo_ioctl+0x932/0x1990 [ 1472.352282] ? __x64_sys_openat+0x13f/0x1f0 [ 1472.352298] ? loop_set_status_old+0x1b0/0x1b0 [ 1472.352314] ? avc_ss_reset+0x180/0x180 [ 1472.352338] ? __lock_acquire+0xbac/0x6120 [ 1472.352390] ? find_held_lock+0x2c/0x110 [ 1472.352408] ? loop_set_status_old+0x1b0/0x1b0 [ 1472.352427] blkdev_ioctl+0x356/0x7f0 [ 1472.352441] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.352454] ? selinux_file_ioctl+0xb1/0x260 [ 1472.352475] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1472.352494] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.352509] __x64_sys_ioctl+0x196/0x210 [ 1472.352532] do_syscall_64+0x3b/0x90 [ 1472.352546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.352563] RIP: 0033:0x7fa9c29338d7 [ 1472.352573] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.352584] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.352596] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 00:17:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x700, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1472.352604] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1472.352610] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.352617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1472.352624] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1472.352645] [ 1472.355873] loop7: detected capacity change from 0 to 256 [ 1472.359292] FAT-fs (loop7): bogus number of FAT sectors [ 1472.359323] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1472.359598] FAT-fs (loop6): bogus number of reserved sectors [ 1472.359606] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1472.387415] FAULT_INJECTION: forcing a failure. [ 1472.387415] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.387433] CPU: 0 PID: 6905 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.387449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.387458] Call Trace: [ 1472.387461] [ 1472.387465] dump_stack_lvl+0x8b/0xb3 [ 1472.387482] should_fail.cold+0x5/0xa [ 1472.387495] ? create_object.isra.0+0x3a/0xa20 [ 1472.387515] should_failslab+0x5/0x10 [ 1472.387531] kmem_cache_alloc+0x5b/0x480 [ 1472.387547] create_object.isra.0+0x3a/0xa20 [ 1472.387563] ? kasan_unpoison+0x23/0x50 00:17:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 37) [ 1472.387583] kmem_cache_alloc+0x239/0x480 [ 1472.387598] __kernfs_new_node+0xd4/0x8b0 [ 1472.387619] ? kernfs_add_one+0x3c6/0x550 [ 1472.387631] ? kernfs_path_from_node+0x60/0x60 [ 1472.387655] ? lock_is_held_type+0xd7/0x130 [ 1472.387678] ? up_write+0x148/0x460 [ 1472.387689] ? kernfs_activate+0x1c4/0x240 [ 1472.387706] kernfs_new_node+0x93/0x120 [ 1472.387722] __kernfs_create_file+0x51/0x350 [ 1472.387738] sysfs_add_file_mode_ns+0x218/0x430 [ 1472.387756] ? component_del+0x4c0/0x4c0 [ 1472.387771] internal_create_group+0x322/0xb20 [ 1472.387792] ? sysfs_remove_group+0x170/0x170 [ 1472.387812] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1472.387836] loop_configure+0xf2f/0x1a10 [ 1472.387863] lo_ioctl+0x932/0x1990 [ 1472.387879] ? __x64_sys_openat+0x13f/0x1f0 [ 1472.387894] ? loop_set_status_old+0x1b0/0x1b0 00:17:17 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 40) [ 1472.387910] ? avc_ss_reset+0x180/0x180 [ 1472.387932] ? __lock_acquire+0xbac/0x6120 [ 1472.387985] ? find_held_lock+0x2c/0x110 [ 1472.388003] ? loop_set_status_old+0x1b0/0x1b0 [ 1472.388022] blkdev_ioctl+0x356/0x7f0 [ 1472.388034] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.388047] ? selinux_file_ioctl+0xb1/0x260 [ 1472.388067] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1472.388086] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.388102] __x64_sys_ioctl+0x196/0x210 [ 1472.388124] do_syscall_64+0x3b/0x90 [ 1472.388138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.388154] RIP: 0033:0x7faa30c978d7 [ 1472.388164] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.388175] RSP: 002b:00007faa2e20cf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.388186] RAX: ffffffffffffffda RBX: 00007faa30ce1970 RCX: 00007faa30c978d7 [ 1472.388194] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1472.388201] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.388208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1472.388215] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 00:17:17 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1472.388236] [ 1472.389412] FAT-fs (loop4): bogus number of reserved sectors [ 1472.389423] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1472.392949] loop5: detected capacity change from 0 to 256 [ 1472.395151] FAT-fs (loop5): bogus number of FAT sectors [ 1472.395172] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1472.395534] FAULT_INJECTION: forcing a failure. [ 1472.395534] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.395549] CPU: 0 PID: 6907 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.395562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.395569] Call Trace: [ 1472.395572] [ 1472.395576] dump_stack_lvl+0x8b/0xb3 [ 1472.395591] should_fail.cold+0x5/0xa [ 1472.395603] ? create_object.isra.0+0x3a/0xa20 [ 1472.395622] should_failslab+0x5/0x10 [ 1472.395637] kmem_cache_alloc+0x5b/0x480 [ 1472.395652] create_object.isra.0+0x3a/0xa20 [ 1472.395669] ? kasan_unpoison+0x23/0x50 [ 1472.395688] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1472.395699] ? __d_alloc+0x31/0x990 [ 1472.395718] __d_alloc+0x31/0x990 [ 1472.395736] d_alloc+0x46/0x1c0 [ 1472.395753] __lookup_hash+0xc8/0x190 [ 1472.395771] filename_create+0x1d6/0x4a0 [ 1472.395789] ? filename_parentat+0x5a0/0x5a0 [ 1472.395806] ? lock_downgrade+0x6d0/0x6d0 [ 1472.395825] ? __virt_addr_valid+0xe9/0x350 [ 1472.395846] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1472.395865] ? is_vmalloc_addr+0x7b/0xb0 [ 1472.395881] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1472.395905] do_mkdirat+0x92/0x2e0 [ 1472.395923] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1472.395943] ? do_file_open_root+0x590/0x590 [ 1472.395963] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1472.395982] ? getname_flags.part.0+0x1dd/0x4f0 [ 1472.396004] __x64_sys_mkdir+0xf2/0x140 [ 1472.396023] do_syscall_64+0x3b/0x90 [ 1472.396036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.396052] RIP: 0033:0x7fe424088c27 [ 1472.396061] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.396073] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1472.396085] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1472.396093] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1472.396100] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.396108] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1472.396115] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1472.396138] [ 1472.407115] FAT-fs (loop0): bogus number of reserved sectors [ 1472.407136] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1472.412037] ======================================================= [ 1472.412037] WARNING: The mand mount option has been deprecated and [ 1472.412037] and is ignored by this kernel. Remove the mand [ 1472.412037] option from the mount to silence this warning. [ 1472.412037] ======================================================= [ 1472.457102] 9pnet_fd: p9_fd_create_tcp (6904): problem connecting socket to 127.0.0.1 [ 1472.579849] loop7: detected capacity change from 0 to 256 [ 1472.581885] FAULT_INJECTION: forcing a failure. [ 1472.581885] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.581916] CPU: 0 PID: 6915 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.581939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.581954] Call Trace: [ 1472.581960] [ 1472.581968] dump_stack_lvl+0x8b/0xb3 [ 1472.582002] should_fail.cold+0x5/0xa [ 1472.582025] ? create_object.isra.0+0x3a/0xa20 [ 1472.582062] should_failslab+0x5/0x10 [ 1472.582092] kmem_cache_alloc+0x5b/0x480 [ 1472.582121] create_object.isra.0+0x3a/0xa20 [ 1472.582150] ? kasan_unpoison+0x23/0x50 [ 1472.582186] kmem_cache_alloc+0x239/0x480 [ 1472.582219] __kernfs_new_node+0xd4/0x8b0 [ 1472.582258] ? kernfs_add_one+0x3c6/0x550 [ 1472.582280] ? kernfs_path_from_node+0x60/0x60 [ 1472.582323] ? lock_is_held_type+0xd7/0x130 [ 1472.582365] ? up_write+0x148/0x460 [ 1472.582387] ? kernfs_activate+0x1c4/0x240 [ 1472.582418] kernfs_new_node+0x93/0x120 [ 1472.582446] __kernfs_create_file+0x51/0x350 [ 1472.582477] sysfs_add_file_mode_ns+0x218/0x430 [ 1472.582509] ? component_del+0x4c0/0x4c0 [ 1472.582538] internal_create_group+0x322/0xb20 [ 1472.582576] ? sysfs_remove_group+0x170/0x170 [ 1472.582613] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1472.582658] loop_configure+0xf2f/0x1a10 [ 1472.582710] lo_ioctl+0x932/0x1990 [ 1472.582740] ? __x64_sys_openat+0x13f/0x1f0 [ 1472.582769] ? loop_set_status_old+0x1b0/0x1b0 [ 1472.582797] ? avc_ss_reset+0x180/0x180 [ 1472.582840] ? __lock_acquire+0xbac/0x6120 [ 1472.582938] ? find_held_lock+0x2c/0x110 [ 1472.582972] ? loop_set_status_old+0x1b0/0x1b0 [ 1472.583006] blkdev_ioctl+0x356/0x7f0 [ 1472.583031] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.583055] ? selinux_file_ioctl+0xb1/0x260 [ 1472.583093] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1472.583128] ? blkdev_common_ioctl+0x1990/0x1990 [ 1472.583157] __x64_sys_ioctl+0x196/0x210 [ 1472.583199] do_syscall_64+0x3b/0x90 [ 1472.583225] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.583256] RIP: 0033:0x7fa9c29338d7 [ 1472.583272] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.583292] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.583313] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 [ 1472.583328] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1472.583340] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.583353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1472.583366] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1472.583405] [ 1472.594348] FAT-fs (loop7): bogus number of FAT sectors [ 1472.594670] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1472.595214] FAT-fs (loop6): bogus number of reserved sectors [ 1472.595229] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1472.598720] FAULT_INJECTION: forcing a failure. [ 1472.598720] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.598753] CPU: 1 PID: 6918 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.598776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.598791] Call Trace: [ 1472.598796] [ 1472.598804] dump_stack_lvl+0x8b/0xb3 [ 1472.598837] should_fail.cold+0x5/0xa [ 1472.598860] ? getname_flags.part.0+0x50/0x4f0 [ 1472.598895] should_failslab+0x5/0x10 [ 1472.598925] kmem_cache_alloc+0x5b/0x480 [ 1472.598953] getname_flags.part.0+0x50/0x4f0 [ 1472.598992] __x64_sys_mkdir+0xda/0x140 [ 1472.599026] do_syscall_64+0x3b/0x90 [ 1472.599052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.599083] RIP: 0033:0x7faa30c96c27 [ 1472.599099] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.599120] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1472.599142] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1472.599157] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1472.599170] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.599183] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1472.599196] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1472.599233] [ 1472.674754] FAULT_INJECTION: forcing a failure. [ 1472.674754] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.674788] CPU: 1 PID: 6925 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1472.674817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1472.674831] Call Trace: [ 1472.674837] [ 1472.674844] dump_stack_lvl+0x8b/0xb3 [ 1472.674877] should_fail.cold+0x5/0xa [ 1472.674900] ? create_object.isra.0+0x3a/0xa20 [ 1472.674935] should_failslab+0x5/0x10 [ 1472.674966] kmem_cache_alloc+0x5b/0x480 [ 1472.674995] create_object.isra.0+0x3a/0xa20 [ 1472.675026] ? kasan_unpoison+0x23/0x50 [ 1472.675060] kmem_cache_alloc+0x239/0x480 [ 1472.675087] getname_flags.part.0+0x50/0x4f0 [ 1472.675126] __x64_sys_mkdir+0xda/0x140 [ 1472.675160] do_syscall_64+0x3b/0x90 [ 1472.675186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1472.675217] RIP: 0033:0x7fe424088c27 [ 1472.675233] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.675254] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1472.675275] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1472.675290] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1472.675302] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1472.675315] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1472.675327] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1472.675364] [ 1472.679872] loop2: detected capacity change from 0 to 256 [ 1472.689545] FAT-fs (loop0): bogus number of reserved sectors [ 1472.689565] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1472.702841] FAT-fs (loop2): bogus number of FAT sectors [ 1472.702861] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1472.738425] 9pnet_fd: p9_fd_create_tcp (6924): problem connecting socket to 127.0.0.1 [ 1472.751375] loop5: detected capacity change from 0 to 256 [ 1472.776234] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1472.799793] 9pnet_fd: p9_fd_create_tcp (6927): problem connecting socket to 127.0.0.1 [ 1472.858343] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1485.246242] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1492.743368] loop7: detected capacity change from 0 to 256 [ 1492.747718] loop2: detected capacity change from 0 to 256 00:17:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1800, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:17:37 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 37) 00:17:37 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:37 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:17:37 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:17:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 41) 00:17:37 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:17:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 38) [ 1492.755591] FAULT_INJECTION: forcing a failure. [ 1492.755591] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.755609] CPU: 0 PID: 6944 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.755622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.755630] Call Trace: [ 1492.755633] [ 1492.755638] dump_stack_lvl+0x8b/0xb3 [ 1492.755659] should_fail.cold+0x5/0xa [ 1492.755672] ? create_object.isra.0+0x3a/0xa20 [ 1492.755691] should_failslab+0x5/0x10 [ 1492.755707] kmem_cache_alloc+0x5b/0x480 [ 1492.755724] create_object.isra.0+0x3a/0xa20 [ 1492.755739] ? kasan_unpoison+0x23/0x50 [ 1492.755758] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1492.755768] ? ext4_alloc_inode+0x24/0x640 [ 1492.755787] ? ext4_quota_read+0x2e0/0x2e0 [ 1492.755803] ext4_alloc_inode+0x24/0x640 [ 1492.755818] ? ext4_quota_read+0x2e0/0x2e0 [ 1492.755831] alloc_inode+0x63/0x240 [ 1492.755849] new_inode+0x23/0x240 [ 1492.755867] __ext4_new_inode+0x335/0x5620 [ 1492.755887] ? lock_downgrade+0x6d0/0x6d0 00:17:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 42) [ 1492.755916] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1492.755944] ? selinux_determine_inode_label+0x1b6/0x340 [ 1492.755971] ? ext4_mkdir+0x6c3/0xb20 [ 1492.755990] ext4_mkdir+0x33a/0xb20 [ 1492.756017] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1492.756033] ? inode_permission.part.0+0xb5/0x670 [ 1492.756052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:17:38 executing program 2: pselect6(0x0, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f0000000200), 0x0) mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x20}}, 0xa9) setresuid(0x0, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1492.756076] vfs_mkdir+0x1d0/0x3c0 [ 1492.756095] do_mkdirat+0x17b/0x2e0 [ 1492.756113] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1492.756133] ? do_file_open_root+0x590/0x590 00:17:38 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1492.756152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1492.756170] ? getname_flags.part.0+0x1dd/0x4f0 [ 1492.756191] __x64_sys_mkdir+0xf2/0x140 [ 1492.756210] do_syscall_64+0x3b/0x90 [ 1492.756224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.756241] RIP: 0033:0x7fe424088c27 [ 1492.756250] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.756262] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.756273] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1492.756281] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.756288] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff 00:17:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1492.756295] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.756302] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1492.756324] 00:17:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1492.758153] FAT-fs (loop7): bogus number of FAT sectors [ 1492.758182] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1492.758393] FAT-fs (loop2): bogus number of FAT sectors [ 1492.758411] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1492.763769] FAT-fs (loop0): bogus number of reserved sectors [ 1492.763780] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1492.779171] loop5: detected capacity change from 0 to 256 [ 1492.784088] FAULT_INJECTION: forcing a failure. [ 1492.784088] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:17:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 39) 00:17:38 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 38) [ 1492.784120] CPU: 1 PID: 6948 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.784143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.784159] Call Trace: [ 1492.784165] [ 1492.784173] dump_stack_lvl+0x8b/0xb3 [ 1492.784205] should_fail.cold+0x5/0xa [ 1492.784233] strncpy_from_user+0x34/0x3d0 [ 1492.784272] getname_flags.part.0+0x95/0x4f0 [ 1492.784312] __x64_sys_mkdir+0xda/0x140 00:17:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 43) [ 1492.784346] do_syscall_64+0x3b/0x90 [ 1492.784373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.784403] RIP: 0033:0x7fa9c2932c27 [ 1492.784420] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.784448] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.784469] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1492.784484] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.784497] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1492.784511] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.784523] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1492.784561] [ 1492.810806] FAULT_INJECTION: forcing a failure. [ 1492.810806] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.810837] CPU: 1 PID: 6950 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.810860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.810874] Call Trace: [ 1492.810880] [ 1492.810887] dump_stack_lvl+0x8b/0xb3 [ 1492.810919] should_fail.cold+0x5/0xa [ 1492.810942] ? create_object.isra.0+0x3a/0xa20 [ 1492.810976] should_failslab+0x5/0x10 [ 1492.811006] kmem_cache_alloc+0x5b/0x480 [ 1492.811034] create_object.isra.0+0x3a/0xa20 [ 1492.811063] ? kasan_unpoison+0x23/0x50 [ 1492.811097] kmem_cache_alloc+0x239/0x480 [ 1492.811124] getname_flags.part.0+0x50/0x4f0 [ 1492.811163] __x64_sys_mkdir+0xda/0x140 [ 1492.811197] do_syscall_64+0x3b/0x90 [ 1492.811223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.811254] RIP: 0033:0x7faa30c96c27 [ 1492.811270] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.811290] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.811311] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1492.811325] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.811338] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1492.811351] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.811364] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1492.811401] [ 1492.816889] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1492.825532] FAT-fs (loop4): bogus number of reserved sectors [ 1492.825550] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1492.841931] 9pnet_fd: p9_fd_create_tcp (6947): problem connecting socket to 127.0.0.1 [ 1492.872100] FAULT_INJECTION: forcing a failure. [ 1492.872100] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.872121] CPU: 0 PID: 6954 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.872134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.872143] Call Trace: [ 1492.872146] [ 1492.872151] dump_stack_lvl+0x8b/0xb3 [ 1492.872172] should_fail.cold+0x5/0xa [ 1492.872188] should_failslab+0x5/0x10 [ 1492.872205] kmem_cache_alloc_lru+0x60/0x7c0 [ 1492.872216] ? ext4_alloc_inode+0x24/0x640 [ 1492.872232] ? lock_downgrade+0x6d0/0x6d0 [ 1492.872250] ? ext4_quota_read+0x2e0/0x2e0 [ 1492.872266] ext4_alloc_inode+0x24/0x640 [ 1492.872281] ? ext4_quota_read+0x2e0/0x2e0 [ 1492.872295] alloc_inode+0x63/0x240 [ 1492.872313] new_inode+0x23/0x240 [ 1492.872332] __ext4_new_inode+0x335/0x5620 [ 1492.872351] ? lock_downgrade+0x6d0/0x6d0 [ 1492.872379] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1492.872410] ? selinux_determine_inode_label+0x1b6/0x340 [ 1492.872434] ? ext4_mkdir+0x6c3/0xb20 [ 1492.872454] ext4_mkdir+0x33a/0xb20 [ 1492.872480] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1492.872496] ? inode_permission.part.0+0xb5/0x670 [ 1492.872515] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1492.872540] vfs_mkdir+0x1d0/0x3c0 [ 1492.872559] do_mkdirat+0x17b/0x2e0 [ 1492.872576] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1492.872596] ? do_file_open_root+0x590/0x590 [ 1492.872615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1492.872633] ? getname_flags.part.0+0x1dd/0x4f0 [ 1492.872654] __x64_sys_mkdir+0xf2/0x140 [ 1492.872673] do_syscall_64+0x3b/0x90 [ 1492.872688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.872705] RIP: 0033:0x7fe424088c27 [ 1492.872714] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.872726] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.872738] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1492.872746] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.872753] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1492.872760] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.872767] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1492.872789] [ 1492.884787] loop7: detected capacity change from 0 to 256 [ 1492.894339] FAT-fs (loop7): bogus number of FAT sectors [ 1492.894370] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1492.963534] FAULT_INJECTION: forcing a failure. [ 1492.963534] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.963554] CPU: 0 PID: 6965 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.963567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.963576] Call Trace: [ 1492.963579] [ 1492.963584] dump_stack_lvl+0x8b/0xb3 [ 1492.963604] should_fail.cold+0x5/0xa [ 1492.963617] ? create_object.isra.0+0x3a/0xa20 [ 1492.963637] should_failslab+0x5/0x10 [ 1492.963653] kmem_cache_alloc+0x5b/0x480 [ 1492.963668] create_object.isra.0+0x3a/0xa20 [ 1492.963684] ? kasan_unpoison+0x23/0x50 [ 1492.963702] kmem_cache_alloc+0x239/0x480 [ 1492.963716] getname_flags.part.0+0x50/0x4f0 [ 1492.963738] __x64_sys_mkdir+0xda/0x140 [ 1492.963756] do_syscall_64+0x3b/0x90 [ 1492.963770] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.963787] RIP: 0033:0x7fa9c2932c27 [ 1492.963801] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.963812] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.963824] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1492.963832] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.963839] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1492.963846] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.963853] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1492.963873] [ 1492.965003] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1492.972612] FAT-fs (loop6): bogus number of reserved sectors [ 1492.972624] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1492.998516] FAULT_INJECTION: forcing a failure. [ 1492.998516] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.998534] CPU: 0 PID: 6967 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1492.998547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1492.998556] Call Trace: [ 1492.998559] [ 1492.998564] dump_stack_lvl+0x8b/0xb3 [ 1492.998582] should_fail.cold+0x5/0xa [ 1492.998596] ? create_object.isra.0+0x3a/0xa20 [ 1492.998615] should_failslab+0x5/0x10 [ 1492.998631] kmem_cache_alloc+0x5b/0x480 [ 1492.998648] create_object.isra.0+0x3a/0xa20 [ 1492.998668] ? kasan_unpoison+0x23/0x50 [ 1492.998687] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1492.998697] ? __d_alloc+0x31/0x990 [ 1492.998715] __d_alloc+0x31/0x990 [ 1492.998732] d_alloc+0x46/0x1c0 [ 1492.998747] __lookup_hash+0xc8/0x190 [ 1492.998765] filename_create+0x1d6/0x4a0 [ 1492.998782] ? filename_parentat+0x5a0/0x5a0 [ 1492.998796] ? lock_downgrade+0x6d0/0x6d0 [ 1492.998819] ? __virt_addr_valid+0xe9/0x350 [ 1492.998836] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1492.998855] ? is_vmalloc_addr+0x7b/0xb0 [ 1492.998870] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1492.998894] do_mkdirat+0x92/0x2e0 [ 1492.998911] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1492.998931] ? do_file_open_root+0x590/0x590 [ 1492.998950] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1492.998968] ? getname_flags.part.0+0x1dd/0x4f0 [ 1492.998989] __x64_sys_mkdir+0xf2/0x140 [ 1492.999008] do_syscall_64+0x3b/0x90 [ 1492.999022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1492.999039] RIP: 0033:0x7fe424088c27 [ 1492.999048] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1492.999060] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1492.999071] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1492.999079] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1492.999086] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1492.999093] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1492.999100] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1492.999122] [ 1493.006824] FAT-fs (loop0): bogus number of reserved sectors [ 1493.006834] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1493.017814] FAULT_INJECTION: forcing a failure. [ 1493.017814] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.017831] CPU: 0 PID: 6969 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1493.017844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1493.017852] Call Trace: [ 1493.017855] [ 1493.017860] dump_stack_lvl+0x8b/0xb3 [ 1493.017877] should_fail.cold+0x5/0xa [ 1493.017889] ? getname_flags.part.0+0x50/0x4f0 [ 1493.017908] should_failslab+0x5/0x10 [ 1493.017924] kmem_cache_alloc+0x5b/0x480 [ 1493.017939] getname_flags.part.0+0x50/0x4f0 [ 1493.017960] __x64_sys_mkdir+0xda/0x140 [ 1493.017978] do_syscall_64+0x3b/0x90 [ 1493.017992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1493.018009] RIP: 0033:0x7faa30c96c27 [ 1493.018018] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.018029] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1493.018041] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1493.018049] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1493.018056] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1493.018064] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1493.018071] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1493.018091] [ 1505.798212] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:18:00 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 39) 00:18:00 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:00 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0xffff8dcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1d, 0x30, @ipv4={'\x00', '\xff\xff', @local}}, 0xfdff) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000100)={@desc={0x1, 0x0, @desc4}}) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd_index=0x5, 0x4, 0xffffffffffffffc1, 0xffff, 0x0, 0x1, {0x1}}, 0x4) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0xa8000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000140)={{r4}, {@void, @actul_num={@val=0x2d, 0x40, 0x4d}}}) r5 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) close(r6) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="3a303030303001000080000000006542ee4ae50ea2886bea54e7f8e2db3a303430a4"]) 00:18:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6400, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:18:00 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 44) 00:18:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 40) 00:18:00 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1514.776399] FAULT_INJECTION: forcing a failure. [ 1514.776399] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.776420] CPU: 1 PID: 6979 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1514.776436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1514.776445] Call Trace: [ 1514.776449] [ 1514.776454] dump_stack_lvl+0x8b/0xb3 [ 1514.776474] should_fail.cold+0x5/0xa [ 1514.776487] ? create_object.isra.0+0x3a/0xa20 [ 1514.776506] should_failslab+0x5/0x10 [ 1514.776523] kmem_cache_alloc+0x5b/0x480 [ 1514.776539] create_object.isra.0+0x3a/0xa20 [ 1514.776554] ? kasan_unpoison+0x23/0x50 [ 1514.776573] kmem_cache_alloc+0x239/0x480 [ 1514.776588] __kernfs_new_node+0xd4/0x8b0 [ 1514.776609] ? kernfs_add_one+0x3c6/0x550 [ 1514.776621] ? kernfs_path_from_node+0x60/0x60 [ 1514.776644] ? lock_is_held_type+0xd7/0x130 [ 1514.776667] ? up_write+0x148/0x460 [ 1514.776680] ? kernfs_activate+0x1c4/0x240 [ 1514.776696] kernfs_new_node+0x93/0x120 [ 1514.776711] __kernfs_create_file+0x51/0x350 [ 1514.776727] sysfs_add_file_mode_ns+0x218/0x430 [ 1514.776744] ? component_del+0x4c0/0x4c0 [ 1514.776761] internal_create_group+0x322/0xb20 [ 1514.776781] ? sysfs_remove_group+0x170/0x170 [ 1514.776801] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1514.776824] loop_configure+0xf2f/0x1a10 [ 1514.776853] lo_ioctl+0x932/0x1990 [ 1514.776869] ? __x64_sys_openat+0x13f/0x1f0 [ 1514.776884] ? loop_set_status_old+0x1b0/0x1b0 [ 1514.776899] ? avc_ss_reset+0x180/0x180 [ 1514.776922] ? __lock_acquire+0xbac/0x6120 [ 1514.776974] ? find_held_lock+0x2c/0x110 [ 1514.776992] ? loop_set_status_old+0x1b0/0x1b0 [ 1514.777011] blkdev_ioctl+0x356/0x7f0 [ 1514.777024] ? blkdev_common_ioctl+0x1990/0x1990 [ 1514.777037] ? selinux_file_ioctl+0xb1/0x260 [ 1514.777057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1514.777076] ? blkdev_common_ioctl+0x1990/0x1990 [ 1514.777091] __x64_sys_ioctl+0x196/0x210 [ 1514.777114] do_syscall_64+0x3b/0x90 [ 1514.777128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1514.777144] RIP: 0033:0x7fa9c29338d7 [ 1514.777153] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.777164] RSP: 002b:00007fa9bfea8f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.777176] RAX: ffffffffffffffda RBX: 00007fa9c297d970 RCX: 00007fa9c29338d7 [ 1514.777184] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1514.777191] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1514.777198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:18:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8004, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1514.777204] R13: 0000000000000004 R14: 0000000020000240 R15: 0000000000000000 [ 1514.777225] [ 1514.778513] FAT-fs (loop6): bogus number of reserved sectors 00:18:00 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 40) [ 1514.778524] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1514.818404] loop7: detected capacity change from 0 to 256 [ 1514.821302] FAT-fs (loop7): bogus number of FAT sectors [ 1514.821322] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1514.831280] loop5: detected capacity change from 0 to 256 [ 1514.845611] FAULT_INJECTION: forcing a failure. [ 1514.845611] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.845645] CPU: 0 PID: 6991 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1514.845670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1514.845685] Call Trace: [ 1514.845691] [ 1514.845700] dump_stack_lvl+0x8b/0xb3 [ 1514.845734] should_fail.cold+0x5/0xa [ 1514.845758] ? security_inode_alloc+0x34/0x160 [ 1514.845790] should_failslab+0x5/0x10 [ 1514.845821] kmem_cache_alloc+0x5b/0x480 [ 1514.845850] security_inode_alloc+0x34/0x160 [ 1514.845884] inode_init_always+0x5d8/0xd20 [ 1514.845922] alloc_inode+0x84/0x240 [ 1514.845954] new_inode+0x23/0x240 [ 1514.845989] __ext4_new_inode+0x335/0x5620 [ 1514.846025] ? lock_downgrade+0x6d0/0x6d0 [ 1514.846080] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1514.846132] ? selinux_determine_inode_label+0x1b6/0x340 [ 1514.846175] ? ext4_mkdir+0x6c3/0xb20 [ 1514.846211] ext4_mkdir+0x33a/0xb20 00:18:00 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1514.846261] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1514.846291] ? inode_permission.part.0+0xb5/0x670 [ 1514.846327] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1514.846378] vfs_mkdir+0x1d0/0x3c0 [ 1514.846413] do_mkdirat+0x17b/0x2e0 [ 1514.846458] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1514.846496] ? do_file_open_root+0x590/0x590 [ 1514.846532] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1514.846567] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.846606] __x64_sys_mkdir+0xf2/0x140 [ 1514.846641] do_syscall_64+0x3b/0x90 [ 1514.846668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1514.846699] RIP: 0033:0x7fe424088c27 [ 1514.846716] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.846737] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1514.846759] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1514.846773] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1514.846785] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1514.846799] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1514.846811] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 00:18:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 45) [ 1514.846852] [ 1514.852765] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1514.855240] FAULT_INJECTION: forcing a failure. [ 1514.855240] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.855269] CPU: 0 PID: 6992 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1514.855293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:18:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1514.855307] Call Trace: [ 1514.855313] [ 1514.855321] dump_stack_lvl+0x8b/0xb3 [ 1514.855349] should_fail.cold+0x5/0xa 00:18:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 41) [ 1514.855378] should_failslab+0x5/0x10 [ 1514.855407] kmem_cache_alloc_lru+0x60/0x7c0 [ 1514.855433] ? ext4_alloc_inode+0x24/0x640 [ 1514.855461] ? lock_downgrade+0x6d0/0x6d0 [ 1514.855492] ? ext4_quota_read+0x2e0/0x2e0 [ 1514.855522] ext4_alloc_inode+0x24/0x640 [ 1514.855551] ? ext4_quota_read+0x2e0/0x2e0 [ 1514.855578] alloc_inode+0x63/0x240 [ 1514.855610] new_inode+0x23/0x240 [ 1514.855646] __ext4_new_inode+0x335/0x5620 [ 1514.855680] ? lock_downgrade+0x6d0/0x6d0 [ 1514.855733] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1514.855785] ? selinux_determine_inode_label+0x1b6/0x340 [ 1514.855828] ? ext4_mkdir+0x6c3/0xb20 [ 1514.855863] ext4_mkdir+0x33a/0xb20 [ 1514.855913] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1514.855944] ? inode_permission.part.0+0xb5/0x670 00:18:00 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1514.855979] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1514.856023] vfs_mkdir+0x1d0/0x3c0 [ 1514.856059] do_mkdirat+0x17b/0x2e0 [ 1514.856092] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1514.856129] ? do_file_open_root+0x590/0x590 [ 1514.856166] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:18:00 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1514.856200] ? getname_flags.part.0+0x1dd/0x4f0 [ 1514.856240] __x64_sys_mkdir+0xf2/0x140 [ 1514.856275] do_syscall_64+0x3b/0x90 [ 1514.856301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1514.856331] RIP: 0033:0x7faa30c96c27 [ 1514.856347] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1514.856368] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1514.856389] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1514.856404] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1514.856418] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1514.856432] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1514.856445] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1514.856487] [ 1514.897189] 9pnet_fd: p9_fd_create_tcp (6990): problem connecting socket to 127.0.0.1 [ 1514.954057] loop7: detected capacity change from 0 to 256 [ 1514.963602] FAT-fs (loop7): bogus number of FAT sectors [ 1514.963614] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1515.009986] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1515.029421] FAULT_INJECTION: forcing a failure. [ 1515.029421] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.029499] CPU: 0 PID: 7001 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1515.029524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1515.029539] Call Trace: [ 1515.029545] [ 1515.029554] dump_stack_lvl+0x8b/0xb3 [ 1515.029588] should_fail.cold+0x5/0xa [ 1515.029611] ? getname_flags.part.0+0x50/0x4f0 [ 1515.029645] should_failslab+0x5/0x10 [ 1515.029675] kmem_cache_alloc+0x5b/0x480 [ 1515.029704] getname_flags.part.0+0x50/0x4f0 [ 1515.029742] __x64_sys_mkdir+0xda/0x140 [ 1515.029777] do_syscall_64+0x3b/0x90 [ 1515.029803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1515.029836] RIP: 0033:0x7fa9c2932c27 [ 1515.029853] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.029878] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1515.029899] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1515.029914] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1515.029928] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1515.029942] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1515.029955] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1515.029994] [ 1515.062953] FAULT_INJECTION: forcing a failure. [ 1515.062953] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.062976] CPU: 1 PID: 7005 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1515.062990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1515.062998] Call Trace: [ 1515.063002] [ 1515.063007] dump_stack_lvl+0x8b/0xb3 [ 1515.063029] should_fail.cold+0x5/0xa [ 1515.063045] should_failslab+0x5/0x10 [ 1515.063064] kmem_cache_alloc_lru+0x60/0x7c0 [ 1515.063076] ? ext4_alloc_inode+0x24/0x640 [ 1515.063093] ? lock_downgrade+0x6d0/0x6d0 [ 1515.063110] ? ext4_quota_read+0x2e0/0x2e0 [ 1515.063126] ext4_alloc_inode+0x24/0x640 [ 1515.063142] ? ext4_quota_read+0x2e0/0x2e0 [ 1515.063156] alloc_inode+0x63/0x240 [ 1515.063174] new_inode+0x23/0x240 [ 1515.063194] __ext4_new_inode+0x335/0x5620 [ 1515.063213] ? lock_downgrade+0x6d0/0x6d0 [ 1515.063242] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1515.063269] ? selinux_determine_inode_label+0x1b6/0x340 [ 1515.063294] ? ext4_mkdir+0x6c3/0xb20 [ 1515.063314] ext4_mkdir+0x33a/0xb20 [ 1515.063340] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1515.063357] ? inode_permission.part.0+0xb5/0x670 [ 1515.063376] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1515.063401] vfs_mkdir+0x1d0/0x3c0 [ 1515.063420] do_mkdirat+0x17b/0x2e0 [ 1515.063442] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1515.063462] ? do_file_open_root+0x590/0x590 [ 1515.063481] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1515.063500] ? getname_flags.part.0+0x1dd/0x4f0 [ 1515.063521] __x64_sys_mkdir+0xf2/0x140 [ 1515.063541] do_syscall_64+0x3b/0x90 [ 1515.063556] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1515.063574] RIP: 0033:0x7faa30c96c27 [ 1515.063584] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.063595] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1515.063607] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1515.063616] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1515.063623] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1515.063630] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1515.063637] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1515.063660] [ 1515.084715] FAULT_INJECTION: forcing a failure. [ 1515.084715] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.084733] CPU: 1 PID: 7008 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1515.084746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1515.084754] Call Trace: [ 1515.084758] [ 1515.084762] dump_stack_lvl+0x8b/0xb3 [ 1515.084781] should_fail.cold+0x5/0xa [ 1515.084794] ? create_object.isra.0+0x3a/0xa20 [ 1515.084813] should_failslab+0x5/0x10 [ 1515.084830] kmem_cache_alloc+0x5b/0x480 [ 1515.084845] create_object.isra.0+0x3a/0xa20 [ 1515.084861] ? kasan_unpoison+0x23/0x50 [ 1515.084880] kmem_cache_alloc+0x239/0x480 [ 1515.084896] jbd2__journal_start+0x18c/0x8d0 [ 1515.084916] __ext4_journal_start_sb+0x392/0x470 [ 1515.084935] __ext4_new_inode+0x2f46/0x5620 [ 1515.084969] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1515.084997] ? selinux_determine_inode_label+0x1b6/0x340 [ 1515.085021] ? ext4_mkdir+0x6c3/0xb20 [ 1515.085041] ext4_mkdir+0x33a/0xb20 [ 1515.085067] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1515.085084] ? inode_permission.part.0+0xb5/0x670 [ 1515.085103] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1515.085127] vfs_mkdir+0x1d0/0x3c0 [ 1515.085147] do_mkdirat+0x17b/0x2e0 [ 1515.085164] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1515.085184] ? do_file_open_root+0x590/0x590 [ 1515.085204] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1515.085223] ? getname_flags.part.0+0x1dd/0x4f0 [ 1515.085244] __x64_sys_mkdir+0xf2/0x140 [ 1515.085264] do_syscall_64+0x3b/0x90 [ 1515.085279] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1515.085297] RIP: 0033:0x7fe424088c27 [ 1515.085306] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.085318] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1515.085330] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1515.085339] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1515.085346] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1515.085354] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1515.085361] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1515.085384] [ 1515.108766] FAT-fs (loop0): bogus number of reserved sectors [ 1515.108780] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1515.142693] loop5: detected capacity change from 0 to 256 [ 1515.187588] 9pnet_fd: p9_fd_create_tcp (7010): problem connecting socket to 127.0.0.1 [ 1530.477360] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:18:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 41) 00:18:23 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:18:23 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:23 executing program 2: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 00:18:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 46) 00:18:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfeff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:18:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 42) [ 1538.604593] FAULT_INJECTION: forcing a failure. [ 1538.604593] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1538.604615] CPU: 0 PID: 7029 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 00:18:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)) sendfile(r1, r0, 0x0, 0xfffffdef) [ 1538.604628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.604637] Call Trace: [ 1538.604641] [ 1538.604646] dump_stack_lvl+0x8b/0xb3 [ 1538.604667] should_fail.cold+0x5/0xa [ 1538.604683] prepare_alloc_pages+0x17b/0x500 [ 1538.604710] __alloc_pages+0x131/0x4e0 00:18:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffe, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1538.604724] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1538.604742] ? lock_is_held_type+0xd7/0x130 [ 1538.604769] ? lock_release+0x3b2/0x750 [ 1538.604785] ? __slab_alloc.constprop.0+0x45/0x80 [ 1538.604810] alloc_pages+0x1a0/0x2f0 [ 1538.604824] ? mark_held_locks+0x9e/0xe0 [ 1538.604842] allocate_slab+0x22d/0x300 [ 1538.604863] ___slab_alloc+0xa09/0xe50 [ 1538.604884] ? create_object.isra.0+0x3a/0xa20 [ 1538.604908] ? lock_is_held_type+0xd7/0x130 [ 1538.604927] ? create_object.isra.0+0x3a/0xa20 00:18:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 42) 00:18:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 47) [ 1538.604943] __slab_alloc.constprop.0+0x45/0x80 [ 1538.604964] ? create_object.isra.0+0x3a/0xa20 [ 1538.604981] kmem_cache_alloc+0x393/0x480 [ 1538.604996] create_object.isra.0+0x3a/0xa20 [ 1538.605012] ? kasan_unpoison+0x23/0x50 [ 1538.605031] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1538.605042] ? ext4_alloc_inode+0x24/0x640 [ 1538.605061] ? ext4_quota_read+0x2e0/0x2e0 [ 1538.605077] ext4_alloc_inode+0x24/0x640 [ 1538.605092] ? ext4_quota_read+0x2e0/0x2e0 [ 1538.605106] alloc_inode+0x63/0x240 [ 1538.605124] new_inode+0x23/0x240 [ 1538.605143] __ext4_new_inode+0x335/0x5620 00:18:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 43) [ 1538.605163] ? lock_downgrade+0x6d0/0x6d0 [ 1538.605191] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.605219] ? selinux_determine_inode_label+0x1b6/0x340 [ 1538.605244] ? ext4_mkdir+0x6c3/0xb20 [ 1538.605263] ext4_mkdir+0x33a/0xb20 [ 1538.605290] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.605306] ? inode_permission.part.0+0xb5/0x670 [ 1538.605325] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.605349] vfs_mkdir+0x1d0/0x3c0 [ 1538.605368] do_mkdirat+0x17b/0x2e0 [ 1538.605386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.605406] ? do_file_open_root+0x590/0x590 [ 1538.605429] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.605447] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.605469] __x64_sys_mkdir+0xf2/0x140 [ 1538.605487] do_syscall_64+0x3b/0x90 [ 1538.605501] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.605518] RIP: 0033:0x7fe424088c27 [ 1538.605527] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:24 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1538.605540] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.605552] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1538.605560] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.605568] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.605576] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.605583] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1538.605605] [ 1538.612774] FAT-fs (loop0): bogus number of reserved sectors [ 1538.612786] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1538.614349] FAULT_INJECTION: forcing a failure. [ 1538.614349] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.614366] CPU: 0 PID: 7031 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.614379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.614387] Call Trace: [ 1538.614391] [ 1538.614395] dump_stack_lvl+0x8b/0xb3 [ 1538.614411] should_fail.cold+0x5/0xa [ 1538.614432] should_failslab+0x5/0x10 [ 1538.614450] kmem_cache_alloc_lru+0x60/0x7c0 [ 1538.614461] ? ext4_alloc_inode+0x24/0x640 [ 1538.614477] ? lock_downgrade+0x6d0/0x6d0 [ 1538.614494] ? ext4_quota_read+0x2e0/0x2e0 00:18:24 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:18:24 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:18:24 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1538.614511] ext4_alloc_inode+0x24/0x640 [ 1538.614527] ? ext4_quota_read+0x2e0/0x2e0 [ 1538.614541] alloc_inode+0x63/0x240 [ 1538.614559] new_inode+0x23/0x240 [ 1538.614579] __ext4_new_inode+0x335/0x5620 [ 1538.614598] ? lock_downgrade+0x6d0/0x6d0 [ 1538.614627] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.614655] ? selinux_determine_inode_label+0x1b6/0x340 [ 1538.614679] ? ext4_mkdir+0x6c3/0xb20 [ 1538.614698] ext4_mkdir+0x33a/0xb20 [ 1538.614726] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.614742] ? inode_permission.part.0+0xb5/0x670 [ 1538.614761] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.614792] vfs_mkdir+0x1d0/0x3c0 [ 1538.614812] do_mkdirat+0x17b/0x2e0 [ 1538.614829] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.614850] ? do_file_open_root+0x590/0x590 [ 1538.614869] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.614888] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.614909] __x64_sys_mkdir+0xf2/0x140 [ 1538.614928] do_syscall_64+0x3b/0x90 [ 1538.614942] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:18:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 48) [ 1538.614959] RIP: 0033:0x7fa9c2932c27 [ 1538.614968] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.614979] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.614991] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1538.614999] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.615006] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.615014] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.615021] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1538.615043] [ 1538.625130] FAULT_INJECTION: forcing a failure. [ 1538.625130] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.625147] CPU: 0 PID: 7032 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.625160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.625168] Call Trace: [ 1538.625171] [ 1538.625175] dump_stack_lvl+0x8b/0xb3 [ 1538.625190] should_fail.cold+0x5/0xa [ 1538.625203] ? getname_flags.part.0+0x50/0x4f0 [ 1538.625221] should_failslab+0x5/0x10 [ 1538.625236] kmem_cache_alloc+0x5b/0x480 [ 1538.625251] getname_flags.part.0+0x50/0x4f0 [ 1538.625272] __x64_sys_mkdir+0xda/0x140 [ 1538.625291] do_syscall_64+0x3b/0x90 [ 1538.625305] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.625321] RIP: 0033:0x7faa30c96c27 [ 1538.625330] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.625342] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.625354] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1538.625362] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.625370] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.625378] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.625385] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1538.625406] [ 1538.642011] loop7: detected capacity change from 0 to 256 [ 1538.645660] loop5: detected capacity change from 0 to 256 [ 1538.654624] FAT-fs (loop7): bogus number of FAT sectors [ 1538.654646] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1538.668400] 9pnet_fd: p9_fd_create_tcp (7034): problem connecting socket to 127.0.0.1 [ 1538.687081] loop2: detected capacity change from 0 to 40 [ 1538.749396] FAULT_INJECTION: forcing a failure. [ 1538.749396] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.749527] CPU: 0 PID: 7041 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.749541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.749551] Call Trace: [ 1538.749555] [ 1538.749559] dump_stack_lvl+0x8b/0xb3 [ 1538.749580] should_fail.cold+0x5/0xa [ 1538.749594] ? security_inode_alloc+0x34/0x160 [ 1538.749612] should_failslab+0x5/0x10 [ 1538.749630] kmem_cache_alloc+0x5b/0x480 [ 1538.749646] security_inode_alloc+0x34/0x160 [ 1538.749664] inode_init_always+0x5d8/0xd20 [ 1538.749685] alloc_inode+0x84/0x240 [ 1538.749702] new_inode+0x23/0x240 [ 1538.749721] __ext4_new_inode+0x335/0x5620 [ 1538.749741] ? lock_downgrade+0x6d0/0x6d0 [ 1538.749772] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.749801] ? selinux_determine_inode_label+0x1b6/0x340 [ 1538.749828] ? ext4_mkdir+0x6c3/0xb20 [ 1538.749848] ext4_mkdir+0x33a/0xb20 [ 1538.749875] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.749891] ? inode_permission.part.0+0xb5/0x670 [ 1538.749911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.749936] vfs_mkdir+0x1d0/0x3c0 [ 1538.749955] do_mkdirat+0x17b/0x2e0 [ 1538.749973] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.749993] ? do_file_open_root+0x590/0x590 [ 1538.750015] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.750034] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.750056] __x64_sys_mkdir+0xf2/0x140 [ 1538.750075] do_syscall_64+0x3b/0x90 [ 1538.750090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.750108] RIP: 0033:0x7fa9c2932c27 [ 1538.750117] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.750129] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.750141] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1538.750149] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.750157] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.750164] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.750171] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1538.750193] [ 1538.753225] FAULT_INJECTION: forcing a failure. [ 1538.753225] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.753241] CPU: 0 PID: 7042 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.753253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.753261] Call Trace: [ 1538.753263] [ 1538.753267] dump_stack_lvl+0x8b/0xb3 [ 1538.753282] should_fail.cold+0x5/0xa [ 1538.753295] ? jbd2__journal_start+0x18c/0x8d0 [ 1538.753311] should_failslab+0x5/0x10 [ 1538.753326] kmem_cache_alloc+0x5b/0x480 [ 1538.753342] jbd2__journal_start+0x18c/0x8d0 [ 1538.753360] __ext4_journal_start_sb+0x392/0x470 [ 1538.753379] __ext4_new_inode+0x2f46/0x5620 [ 1538.753413] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.753445] ? selinux_determine_inode_label+0x1b6/0x340 [ 1538.753468] ? ext4_mkdir+0x6c3/0xb20 [ 1538.753487] ext4_mkdir+0x33a/0xb20 [ 1538.753514] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.753530] ? inode_permission.part.0+0xb5/0x670 [ 1538.753549] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.753572] vfs_mkdir+0x1d0/0x3c0 [ 1538.753591] do_mkdirat+0x17b/0x2e0 [ 1538.753609] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.753629] ? do_file_open_root+0x590/0x590 [ 1538.753648] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.753667] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.753688] __x64_sys_mkdir+0xf2/0x140 [ 1538.753707] do_syscall_64+0x3b/0x90 [ 1538.753721] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.753737] RIP: 0033:0x7fe424088c27 [ 1538.753745] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.753756] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.753767] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1538.753775] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.753783] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.753790] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.753797] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1538.753819] [ 1538.753906] EXT4-fs error (device sda) in __ext4_new_inode:1085: Out of memory [ 1538.772300] FAULT_INJECTION: forcing a failure. [ 1538.772300] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.772317] CPU: 0 PID: 7045 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.772329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.772337] Call Trace: [ 1538.772340] [ 1538.772344] dump_stack_lvl+0x8b/0xb3 [ 1538.772359] should_fail.cold+0x5/0xa [ 1538.772372] ? create_object.isra.0+0x3a/0xa20 [ 1538.772391] should_failslab+0x5/0x10 [ 1538.772406] kmem_cache_alloc+0x5b/0x480 [ 1538.772426] create_object.isra.0+0x3a/0xa20 [ 1538.772441] ? kasan_unpoison+0x23/0x50 [ 1538.772461] kmem_cache_alloc+0x239/0x480 [ 1538.772476] security_inode_alloc+0x34/0x160 [ 1538.772494] inode_init_always+0x5d8/0xd20 [ 1538.772513] alloc_inode+0x84/0x240 [ 1538.772530] new_inode+0x23/0x240 [ 1538.772550] __ext4_new_inode+0x335/0x5620 [ 1538.772571] ? lock_downgrade+0x6d0/0x6d0 [ 1538.772602] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.772630] ? selinux_determine_inode_label+0x1b6/0x340 [ 1538.772653] ? ext4_mkdir+0x6c3/0xb20 [ 1538.772672] ext4_mkdir+0x33a/0xb20 [ 1538.772702] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.772718] ? inode_permission.part.0+0xb5/0x670 [ 1538.772737] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.772761] vfs_mkdir+0x1d0/0x3c0 [ 1538.772780] do_mkdirat+0x17b/0x2e0 [ 1538.772797] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.772817] ? do_file_open_root+0x590/0x590 [ 1538.772837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.772856] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.772877] __x64_sys_mkdir+0xf2/0x140 [ 1538.772895] do_syscall_64+0x3b/0x90 [ 1538.772909] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.772926] RIP: 0033:0x7faa30c96c27 [ 1538.772934] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.772946] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.772957] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1538.772965] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.772972] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.772980] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.772987] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1538.773009] [ 1538.783487] FAT-fs (loop4): bogus number of reserved sectors [ 1538.783498] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1538.858933] loop7: detected capacity change from 0 to 256 [ 1538.868286] FAULT_INJECTION: forcing a failure. [ 1538.868286] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.868305] CPU: 0 PID: 7053 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1538.868317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1538.868326] Call Trace: [ 1538.868330] [ 1538.868334] dump_stack_lvl+0x8b/0xb3 [ 1538.868354] should_fail.cold+0x5/0xa [ 1538.868368] ? create_object.isra.0+0x3a/0xa20 [ 1538.868388] should_failslab+0x5/0x10 [ 1538.868404] kmem_cache_alloc+0x5b/0x480 [ 1538.868425] create_object.isra.0+0x3a/0xa20 [ 1538.868441] ? kasan_unpoison+0x23/0x50 [ 1538.868460] __kmalloc_track_caller+0x25e/0x430 [ 1538.868479] ? sidtab_sid2str_get+0x17c/0x650 [ 1538.868500] kmemdup+0x23/0x50 [ 1538.868517] sidtab_sid2str_get+0x17c/0x650 [ 1538.868536] sidtab_entry_to_string+0x33/0x110 [ 1538.868558] security_sid_to_context_core+0x337/0x560 [ 1538.868582] selinux_inode_init_security+0x4c2/0x6b0 [ 1538.868604] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1538.868622] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1538.868640] ? lock_is_held_type+0xd7/0x130 [ 1538.868658] ? find_held_lock+0x2c/0x110 [ 1538.868681] security_inode_init_security+0x151/0x350 [ 1538.868695] ? ext4_init_acl+0x310/0x310 [ 1538.868710] ? inode_free_by_rcu+0x20/0x20 [ 1538.868735] ? chksum_update+0x4c/0xb0 [ 1538.868754] __ext4_new_inode+0x39c8/0x5620 [ 1538.868791] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1538.868827] ? ext4_mkdir+0x6c3/0xb20 [ 1538.868847] ext4_mkdir+0x33a/0xb20 [ 1538.868875] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1538.868891] ? inode_permission.part.0+0xb5/0x670 [ 1538.868911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.868937] vfs_mkdir+0x1d0/0x3c0 [ 1538.868956] do_mkdirat+0x17b/0x2e0 [ 1538.868974] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1538.868995] ? do_file_open_root+0x590/0x590 [ 1538.869014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1538.869033] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.869054] __x64_sys_mkdir+0xf2/0x140 [ 1538.869074] do_syscall_64+0x3b/0x90 [ 1538.869088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1538.869104] RIP: 0033:0x7fe424088c27 [ 1538.869113] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1538.869125] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1538.869137] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1538.869145] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1538.869152] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1538.869159] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1538.869166] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1538.869190] [ 1538.870730] FAT-fs (loop7): bogus number of FAT sectors [ 1538.870752] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1538.884072] syz-executor.2: attempt to access beyond end of device [ 1538.884072] loop2: rw=2049, want=44, limit=40 [ 1538.884155] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 1538.886278] FAT-fs (loop0): bogus number of reserved sectors [ 1538.886290] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1538.891983] loop5: detected capacity change from 0 to 256 [ 1538.898295] syz-executor.2: attempt to access beyond end of device [ 1538.898295] loop2: rw=2049, want=44, limit=40 [ 1538.898327] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 1538.914195] 9pnet_fd: p9_fd_create_tcp (7055): problem connecting socket to 127.0.0.1 [ 1551.854003] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:18:44 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 43) 00:18:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)='%', 0x1}], 0x1, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r1, 0x0) syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_setup(0x6d84, &(0x7f0000000180)={0x0, 0xb56, 0x0, 0x1, 0x123, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x3) 00:18:44 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 49) 00:18:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 44) 00:18:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:18:44 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:18:44 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1558.990664] FAULT_INJECTION: forcing a failure. [ 1558.990664] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.990687] CPU: 1 PID: 7076 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1558.990700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1558.990708] Call Trace: [ 1558.990712] [ 1558.990717] dump_stack_lvl+0x8b/0xb3 [ 1558.990738] should_fail.cold+0x5/0xa [ 1558.990751] ? create_object.isra.0+0x3a/0xa20 [ 1558.990771] should_failslab+0x5/0x10 [ 1558.990787] kmem_cache_alloc+0x5b/0x480 [ 1558.990804] create_object.isra.0+0x3a/0xa20 [ 1558.990820] ? kasan_unpoison+0x23/0x50 [ 1558.990839] __kmalloc+0x25b/0x440 [ 1558.990855] ext4_find_extent+0xa39/0xd20 [ 1558.990879] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1558.990903] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1558.990923] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1558.990939] ? lock_is_held_type+0xd7/0x130 [ 1558.990963] ? ext4_ext_release+0x10/0x10 [ 1558.990979] ? lock_acquire+0x1b2/0x530 [ 1558.990996] ? lock_release+0x750/0x750 [ 1558.991018] ? lock_is_held_type+0xd7/0x130 [ 1558.991043] ? down_read+0x198/0x440 [ 1558.991056] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1558.991069] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1558.991108] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1558.991131] ext4_map_blocks+0x9c8/0x1970 [ 1558.991147] ? inode_free_by_rcu+0x20/0x20 [ 1558.991161] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1558.991181] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1558.991199] ? lock_is_held_type+0xd7/0x130 [ 1558.991223] ext4_getblk+0x144/0x6b0 [ 1558.991236] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1558.991262] ext4_bread+0x2a/0x1c0 [ 1558.991276] ext4_append+0x155/0x380 [ 1558.991297] ext4_init_new_dir+0x25e/0x4d0 [ 1558.991318] ? ext4_init_dot_dotdot+0x590/0x590 [ 1558.991337] ? ext4_mkdir+0x6c3/0xb20 [ 1558.991361] ext4_mkdir+0x3cf/0xb20 00:18:44 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf0ffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1558.991385] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1558.991401] ? inode_permission.part.0+0xb5/0x670 [ 1558.991424] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1558.991449] vfs_mkdir+0x1d0/0x3c0 00:18:44 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 44) [ 1558.991468] do_mkdirat+0x17b/0x2e0 [ 1558.991486] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1558.991507] ? do_file_open_root+0x590/0x590 [ 1558.991526] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:18:44 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1558.991545] ? getname_flags.part.0+0x1dd/0x4f0 [ 1558.991566] __x64_sys_mkdir+0xf2/0x140 [ 1558.991585] do_syscall_64+0x3b/0x90 [ 1558.991599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1558.991616] RIP: 0033:0x7fe424088c27 [ 1558.991625] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1558.991637] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1558.991648] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1558.991656] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1558.991664] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1558.991671] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1558.991678] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1558.991702] [ 1558.996885] loop5: detected capacity change from 0 to 256 [ 1559.008375] loop7: detected capacity change from 0 to 256 [ 1559.011868] FAULT_INJECTION: forcing a failure. [ 1559.011868] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.011886] CPU: 1 PID: 7079 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1559.011899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:18:44 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:18:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 45) 00:18:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 50) 00:18:44 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1559.011908] Call Trace: [ 1559.011912] [ 1559.011918] dump_stack_lvl+0x8b/0xb3 [ 1559.011938] should_fail.cold+0x5/0xa [ 1559.011951] ? jbd2__journal_start+0x18c/0x8d0 [ 1559.011968] should_failslab+0x5/0x10 [ 1559.011985] kmem_cache_alloc+0x5b/0x480 [ 1559.012002] jbd2__journal_start+0x18c/0x8d0 [ 1559.012028] __ext4_journal_start_sb+0x392/0x470 [ 1559.012051] __ext4_new_inode+0x2f46/0x5620 [ 1559.012092] ? ext4_mark_inode_used+0x14a0/0x14a0 00:18:44 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1559.012128] ? selinux_determine_inode_label+0x1b6/0x340 [ 1559.012153] ? ext4_mkdir+0x6c3/0xb20 [ 1559.012174] ext4_mkdir+0x33a/0xb20 [ 1559.012201] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1559.012218] ? inode_permission.part.0+0xb5/0x670 [ 1559.012238] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.012263] vfs_mkdir+0x1d0/0x3c0 [ 1559.012282] do_mkdirat+0x17b/0x2e0 [ 1559.012301] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1559.012322] ? do_file_open_root+0x590/0x590 [ 1559.012342] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.012361] ? getname_flags.part.0+0x1dd/0x4f0 [ 1559.012382] __x64_sys_mkdir+0xf2/0x140 [ 1559.012401] do_syscall_64+0x3b/0x90 [ 1559.012420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.012437] RIP: 0033:0x7faa30c96c27 [ 1559.012447] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.012459] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1559.012471] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1559.012479] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1559.012486] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.012493] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1559.012500] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1559.012523] [ 1559.012638] EXT4-fs error (device sda) in __ext4_new_inode:1085: Out of memory [ 1559.012829] FAT-fs (loop0): bogus number of reserved sectors [ 1559.012839] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1559.013704] FAT-fs (loop7): bogus number of FAT sectors [ 1559.013820] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1559.015960] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1559.024886] FAULT_INJECTION: forcing a failure. [ 1559.024886] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.024909] CPU: 0 PID: 7080 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1559.024924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1559.024935] Call Trace: [ 1559.024939] [ 1559.024945] dump_stack_lvl+0x8b/0xb3 [ 1559.024969] should_fail.cold+0x5/0xa [ 1559.024984] ? create_object.isra.0+0x3a/0xa20 [ 1559.025007] should_failslab+0x5/0x10 [ 1559.025026] kmem_cache_alloc+0x5b/0x480 [ 1559.025045] create_object.isra.0+0x3a/0xa20 [ 1559.025067] ? kasan_unpoison+0x23/0x50 [ 1559.025090] kmem_cache_alloc+0x239/0x480 [ 1559.025107] security_inode_alloc+0x34/0x160 [ 1559.025130] inode_init_always+0x5d8/0xd20 [ 1559.025153] alloc_inode+0x84/0x240 [ 1559.025172] new_inode+0x23/0x240 [ 1559.025194] __ext4_new_inode+0x335/0x5620 [ 1559.025216] ? lock_downgrade+0x6d0/0x6d0 [ 1559.025250] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1559.025281] ? selinux_determine_inode_label+0x1b6/0x340 [ 1559.025308] ? ext4_mkdir+0x6c3/0xb20 [ 1559.025330] ext4_mkdir+0x33a/0xb20 [ 1559.025361] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1559.025379] ? inode_permission.part.0+0xb5/0x670 [ 1559.025401] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.025429] vfs_mkdir+0x1d0/0x3c0 [ 1559.025450] do_mkdirat+0x17b/0x2e0 [ 1559.025470] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1559.025493] ? do_file_open_root+0x590/0x590 [ 1559.025514] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.025535] ? getname_flags.part.0+0x1dd/0x4f0 [ 1559.025559] __x64_sys_mkdir+0xf2/0x140 [ 1559.025580] do_syscall_64+0x3b/0x90 [ 1559.025598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.025617] RIP: 0033:0x7fa9c2932c27 [ 1559.025628] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.025641] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1559.025654] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1559.025663] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1559.025671] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.025680] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1559.025688] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1559.025713] [ 1559.030379] 9pnet_fd: p9_fd_create_tcp (7078): problem connecting socket to 127.0.0.1 [ 1559.031923] FAT-fs (loop6): bogus number of reserved sectors [ 1559.031936] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1559.143741] FAULT_INJECTION: forcing a failure. [ 1559.143741] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.143762] CPU: 1 PID: 7089 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1559.143776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1559.143784] Call Trace: [ 1559.143788] [ 1559.143792] dump_stack_lvl+0x8b/0xb3 [ 1559.143813] should_fail.cold+0x5/0xa [ 1559.143828] should_failslab+0x5/0x10 [ 1559.143846] kmem_cache_alloc_lru+0x60/0x7c0 [ 1559.143861] ? ext4_alloc_inode+0x24/0x640 [ 1559.143877] ? lock_downgrade+0x6d0/0x6d0 [ 1559.143895] ? ext4_quota_read+0x2e0/0x2e0 [ 1559.143911] ext4_alloc_inode+0x24/0x640 [ 1559.143926] ? ext4_quota_read+0x2e0/0x2e0 [ 1559.143941] alloc_inode+0x63/0x240 [ 1559.143959] new_inode+0x23/0x240 [ 1559.143978] __ext4_new_inode+0x335/0x5620 [ 1559.143997] ? lock_downgrade+0x6d0/0x6d0 [ 1559.144025] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1559.144053] ? selinux_determine_inode_label+0x1b6/0x340 [ 1559.144077] ? ext4_mkdir+0x6c3/0xb20 [ 1559.144097] ext4_mkdir+0x33a/0xb20 [ 1559.144124] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1559.144140] ? inode_permission.part.0+0xb5/0x670 [ 1559.144159] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.144184] vfs_mkdir+0x1d0/0x3c0 [ 1559.144203] do_mkdirat+0x17b/0x2e0 [ 1559.144220] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1559.144240] ? do_file_open_root+0x590/0x590 [ 1559.144260] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.144278] ? getname_flags.part.0+0x1dd/0x4f0 [ 1559.144299] __x64_sys_mkdir+0xf2/0x140 [ 1559.144318] do_syscall_64+0x3b/0x90 [ 1559.144333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.144350] RIP: 0033:0x7fa9c2932c27 [ 1559.144359] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.144371] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1559.144384] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1559.144392] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1559.144399] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.144406] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1559.144414] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1559.144436] [ 1559.148129] FAULT_INJECTION: forcing a failure. [ 1559.148129] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.148154] CPU: 0 PID: 7091 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1559.148169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1559.148179] Call Trace: [ 1559.148184] [ 1559.148190] dump_stack_lvl+0x8b/0xb3 [ 1559.148212] should_fail.cold+0x5/0xa [ 1559.148227] ? create_object.isra.0+0x3a/0xa20 [ 1559.148249] should_failslab+0x5/0x10 [ 1559.148268] kmem_cache_alloc+0x5b/0x480 [ 1559.148286] create_object.isra.0+0x3a/0xa20 [ 1559.148304] ? kasan_unpoison+0x23/0x50 [ 1559.148325] kmem_cache_alloc+0x239/0x480 [ 1559.148343] jbd2__journal_start+0x18c/0x8d0 [ 1559.148366] __ext4_journal_start_sb+0x392/0x470 [ 1559.148387] __ext4_new_inode+0x2f46/0x5620 [ 1559.148430] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1559.148464] ? selinux_determine_inode_label+0x1b6/0x340 [ 1559.148492] ? ext4_mkdir+0x6c3/0xb20 [ 1559.148514] ext4_mkdir+0x33a/0xb20 [ 1559.148543] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1559.148562] ? inode_permission.part.0+0xb5/0x670 [ 1559.148584] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.148612] vfs_mkdir+0x1d0/0x3c0 [ 1559.148633] do_mkdirat+0x17b/0x2e0 [ 1559.148653] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1559.148676] ? do_file_open_root+0x590/0x590 [ 1559.148697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.148718] ? getname_flags.part.0+0x1dd/0x4f0 [ 1559.148742] __x64_sys_mkdir+0xf2/0x140 [ 1559.148762] do_syscall_64+0x3b/0x90 [ 1559.148779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.148799] RIP: 0033:0x7faa30c96c27 [ 1559.148809] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.148823] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1559.148837] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1559.148846] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1559.148854] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.148862] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1559.148870] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1559.148895] [ 1559.159512] FAT-fs (loop4): bogus number of reserved sectors [ 1559.159526] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1559.168077] loop7: detected capacity change from 0 to 256 [ 1559.172839] loop5: detected capacity change from 0 to 256 [ 1559.181586] FAT-fs (loop7): bogus number of FAT sectors [ 1559.181607] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1559.185021] FAULT_INJECTION: forcing a failure. [ 1559.185021] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.185044] CPU: 0 PID: 7097 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1559.185059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1559.185068] Call Trace: [ 1559.185073] [ 1559.185079] dump_stack_lvl+0x8b/0xb3 [ 1559.185102] should_fail.cold+0x5/0xa [ 1559.185117] ? create_object.isra.0+0x3a/0xa20 [ 1559.185139] should_failslab+0x5/0x10 [ 1559.185157] kmem_cache_alloc+0x5b/0x480 [ 1559.185176] create_object.isra.0+0x3a/0xa20 [ 1559.185199] ? kasan_unpoison+0x23/0x50 [ 1559.185220] __kmalloc_track_caller+0x25e/0x430 [ 1559.185241] ? sidtab_sid2str_get+0x17c/0x650 [ 1559.185264] kmemdup+0x23/0x50 [ 1559.185283] sidtab_sid2str_get+0x17c/0x650 [ 1559.185304] sidtab_entry_to_string+0x33/0x110 [ 1559.185328] security_sid_to_context_core+0x337/0x560 [ 1559.185353] selinux_inode_init_security+0x4c2/0x6b0 [ 1559.185379] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1559.185397] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1559.185417] ? lock_is_held_type+0xd7/0x130 [ 1559.185438] ? find_held_lock+0x2c/0x110 [ 1559.185462] security_inode_init_security+0x151/0x350 [ 1559.185478] ? ext4_init_acl+0x310/0x310 [ 1559.185495] ? inode_free_by_rcu+0x20/0x20 [ 1559.185522] ? chksum_update+0x4c/0xb0 [ 1559.185541] __ext4_new_inode+0x39c8/0x5620 [ 1559.185581] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1559.185621] ? ext4_mkdir+0x6c3/0xb20 [ 1559.185643] ext4_mkdir+0x33a/0xb20 [ 1559.185674] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1559.185692] ? inode_permission.part.0+0xb5/0x670 [ 1559.185713] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.185741] vfs_mkdir+0x1d0/0x3c0 [ 1559.185762] do_mkdirat+0x17b/0x2e0 [ 1559.185782] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1559.185804] ? do_file_open_root+0x590/0x590 [ 1559.185826] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1559.185847] ? getname_flags.part.0+0x1dd/0x4f0 [ 1559.185870] __x64_sys_mkdir+0xf2/0x140 [ 1559.185891] do_syscall_64+0x3b/0x90 [ 1559.185907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1559.185925] RIP: 0033:0x7fe424088c27 [ 1559.185935] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.185948] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1559.185960] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1559.185969] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1559.185977] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1559.185985] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1559.185992] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1559.186019] [ 1559.191746] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1559.194812] 9pnet_fd: p9_fd_create_tcp (7096): problem connecting socket to 127.0.0.1 [ 1559.195626] FAT-fs (loop0): bogus number of reserved sectors [ 1559.195639] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1573.571428] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:19:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1580.861097] FAULT_INJECTION: forcing a failure. [ 1580.861097] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.861118] CPU: 0 PID: 7113 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1580.861131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1580.861140] Call Trace: [ 1580.861144] [ 1580.861148] dump_stack_lvl+0x8b/0xb3 [ 1580.861171] should_fail.cold+0x5/0xa [ 1580.861184] ? create_object.isra.0+0x3a/0xa20 [ 1580.861206] should_failslab+0x5/0x10 [ 1580.861223] kmem_cache_alloc+0x5b/0x480 [ 1580.861240] create_object.isra.0+0x3a/0xa20 [ 1580.861256] ? kasan_unpoison+0x23/0x50 [ 1580.861276] kmem_cache_alloc_lru+0x2d3/0x7c0 [ 1580.861286] ? ext4_alloc_inode+0x24/0x640 [ 1580.861306] ? ext4_quota_read+0x2e0/0x2e0 [ 1580.861322] ext4_alloc_inode+0x24/0x640 [ 1580.861338] ? ext4_quota_read+0x2e0/0x2e0 [ 1580.861352] alloc_inode+0x63/0x240 [ 1580.861371] new_inode+0x23/0x240 00:19:06 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:06 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:06 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 46) 00:19:06 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:19:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 51) 00:19:06 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 45) [ 1580.861390] __ext4_new_inode+0x335/0x5620 [ 1580.861414] ? lock_downgrade+0x6d0/0x6d0 [ 1580.861445] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1580.861473] ? selinux_determine_inode_label+0x1b6/0x340 00:19:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1580.861498] ? ext4_mkdir+0x6c3/0xb20 [ 1580.861518] ext4_mkdir+0x33a/0xb20 [ 1580.861545] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1580.861561] ? inode_permission.part.0+0xb5/0x670 [ 1580.861581] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.861606] vfs_mkdir+0x1d0/0x3c0 [ 1580.861625] do_mkdirat+0x17b/0x2e0 00:19:06 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 46) [ 1580.861643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1580.861664] ? do_file_open_root+0x590/0x590 00:19:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 52) [ 1580.861683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.861702] ? getname_flags.part.0+0x1dd/0x4f0 [ 1580.861723] __x64_sys_mkdir+0xf2/0x140 [ 1580.861742] do_syscall_64+0x3b/0x90 [ 1580.861758] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:19:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 47) [ 1580.861776] RIP: 0033:0x7fa9c2932c27 [ 1580.861785] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.861797] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1580.861809] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1580.861817] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1580.861824] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1580.861832] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1580.861839] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1580.861861] [ 1580.863634] FAULT_INJECTION: forcing a failure. [ 1580.863634] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.863650] CPU: 0 PID: 7114 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1580.863662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1580.863670] Call Trace: [ 1580.863672] [ 1580.863677] dump_stack_lvl+0x8b/0xb3 [ 1580.863692] should_fail.cold+0x5/0xa [ 1580.863702] ? __es_tree_search.isra.0+0x1af/0x210 [ 1580.863719] ? create_object.isra.0+0x3a/0xa20 [ 1580.863738] should_failslab+0x5/0x10 [ 1580.863753] kmem_cache_alloc+0x5b/0x480 [ 1580.863769] create_object.isra.0+0x3a/0xa20 [ 1580.863785] ? kasan_unpoison+0x23/0x50 [ 1580.863804] kmem_cache_alloc+0x239/0x480 [ 1580.863821] __es_insert_extent+0x3a9/0x12f0 [ 1580.863835] ? do_raw_write_lock+0x11a/0x280 [ 1580.863854] ? do_raw_read_unlock+0x70/0x70 00:19:06 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1580.863880] ext4_es_insert_extent+0x2dc/0xbf0 [ 1580.863901] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1580.863917] ? lock_downgrade+0x6d0/0x6d0 [ 1580.863940] ? lock_is_held_type+0xd7/0x130 [ 1580.863960] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 1580.863973] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1580.863998] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 1580.864022] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1580.864040] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1580.864057] ? lock_is_held_type+0xd7/0x130 [ 1580.864079] ? ext4_ext_release+0x10/0x10 [ 1580.864096] ? lock_acquire+0x1b2/0x530 [ 1580.864113] ? lock_release+0x750/0x750 [ 1580.864139] ? lock_is_held_type+0xd7/0x130 [ 1580.864164] ? down_read+0x198/0x440 [ 1580.864177] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1580.864190] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1580.864210] ? ext4_es_lookup_extent+0xc4/0xc60 00:19:06 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:06 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1580.864233] ext4_map_blocks+0x9c8/0x1970 [ 1580.864248] ? inode_free_by_rcu+0x20/0x20 [ 1580.864266] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1580.864285] ? lock_is_held_type+0xd7/0x130 [ 1580.864309] ext4_getblk+0x144/0x6b0 [ 1580.864321] ? ext4_iomap_overwrite_begin+0xa0/0xa0 00:19:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 53) 00:19:06 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 47) [ 1580.864347] ext4_bread+0x2a/0x1c0 [ 1580.864361] ext4_append+0x155/0x380 [ 1580.864383] ext4_init_new_dir+0x25e/0x4d0 [ 1580.864403] ? ext4_init_dot_dotdot+0x590/0x590 [ 1580.864423] ? ext4_mkdir+0x6c3/0xb20 [ 1580.864448] ext4_mkdir+0x3cf/0xb20 [ 1580.864472] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1580.864490] ? inode_permission.part.0+0xb5/0x670 [ 1580.864509] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.864534] vfs_mkdir+0x1d0/0x3c0 00:19:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 48) 00:19:06 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1580.864555] do_mkdirat+0x17b/0x2e0 [ 1580.864573] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1580.864594] ? do_file_open_root+0x590/0x590 [ 1580.864615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.864634] ? getname_flags.part.0+0x1dd/0x4f0 [ 1580.864656] __x64_sys_mkdir+0xf2/0x140 [ 1580.864676] do_syscall_64+0x3b/0x90 [ 1580.864691] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1580.864708] RIP: 0033:0x7fe424088c27 [ 1580.864717] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.864729] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1580.864741] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1580.864750] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1580.864757] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1580.864766] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1580.864773] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1580.864798] [ 1580.870199] FAT-fs (loop6): bogus number of reserved sectors [ 1580.870211] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1580.871764] FAT-fs (loop0): bogus number of reserved sectors [ 1580.871773] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1580.873803] FAULT_INJECTION: forcing a failure. [ 1580.873803] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.873819] CPU: 0 PID: 7115 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1580.873831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1580.873839] Call Trace: [ 1580.873842] [ 1580.873847] dump_stack_lvl+0x8b/0xb3 [ 1580.873863] should_fail.cold+0x5/0xa [ 1580.873882] should_failslab+0x5/0x10 [ 1580.873898] __kmalloc_track_caller+0x79/0x430 [ 1580.873917] ? sidtab_sid2str_get+0x17c/0x650 [ 1580.873938] kmemdup+0x23/0x50 [ 1580.873956] sidtab_sid2str_get+0x17c/0x650 [ 1580.873975] sidtab_entry_to_string+0x33/0x110 [ 1580.873998] security_sid_to_context_core+0x337/0x560 [ 1580.874022] selinux_inode_init_security+0x4c2/0x6b0 [ 1580.874045] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1580.874062] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1580.874080] ? lock_is_held_type+0xd7/0x130 [ 1580.874097] ? find_held_lock+0x2c/0x110 [ 1580.874119] security_inode_init_security+0x151/0x350 [ 1580.874133] ? ext4_init_acl+0x310/0x310 [ 1580.874149] ? inode_free_by_rcu+0x20/0x20 [ 1580.874174] ? chksum_update+0x4c/0xb0 [ 1580.874193] __ext4_new_inode+0x39c8/0x5620 [ 1580.874229] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1580.874266] ? ext4_mkdir+0x6c3/0xb20 [ 1580.874286] ext4_mkdir+0x33a/0xb20 [ 1580.874315] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1580.874332] ? inode_permission.part.0+0xb5/0x670 [ 1580.874351] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.874375] vfs_mkdir+0x1d0/0x3c0 [ 1580.874395] do_mkdirat+0x17b/0x2e0 [ 1580.874413] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1580.874434] ? do_file_open_root+0x590/0x590 [ 1580.874454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1580.874473] ? getname_flags.part.0+0x1dd/0x4f0 [ 1580.874495] __x64_sys_mkdir+0xf2/0x140 [ 1580.874515] do_syscall_64+0x3b/0x90 [ 1580.874529] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1580.874545] RIP: 0033:0x7faa30c96c27 [ 1580.874554] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1580.874565] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1580.874577] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1580.874585] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1580.874592] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1580.874600] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1580.874607] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1580.874631] [ 1580.892910] loop5: detected capacity change from 0 to 256 [ 1580.895708] loop2: detected capacity change from 0 to 256 [ 1580.909834] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1580.917358] loop7: detected capacity change from 0 to 256 [ 1580.922833] 9pnet_fd: p9_fd_create_tcp (7120): problem connecting socket to 127.0.0.1 [ 1580.924714] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1580.941869] 9pnet_fd: p9_fd_create_tcp (7121): problem connecting socket to 127.0.0.1 [ 1580.945443] FAT-fs (loop7): bogus number of FAT sectors [ 1580.945463] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1581.004169] FAULT_INJECTION: forcing a failure. [ 1581.004169] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.004191] CPU: 0 PID: 7130 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.004206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.004215] Call Trace: [ 1581.004218] [ 1581.004223] dump_stack_lvl+0x8b/0xb3 [ 1581.004244] should_fail.cold+0x5/0xa [ 1581.004258] ? ext4_find_extent+0xa39/0xd20 [ 1581.004275] should_failslab+0x5/0x10 [ 1581.004291] __kmalloc+0x72/0x440 [ 1581.004308] ext4_find_extent+0xa39/0xd20 [ 1581.004331] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1581.004355] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.004375] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.004392] ? lock_is_held_type+0xd7/0x130 [ 1581.004420] ? ext4_ext_release+0x10/0x10 [ 1581.004438] ? lock_acquire+0x1b2/0x530 [ 1581.004455] ? lock_release+0x750/0x750 [ 1581.004477] ? lock_is_held_type+0xd7/0x130 [ 1581.004503] ? down_write+0xde/0x150 [ 1581.004516] ? down_write_killable+0x170/0x170 [ 1581.004538] ext4_map_blocks+0x652/0x1970 [ 1581.004559] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1581.004578] ? lock_is_held_type+0xd7/0x130 [ 1581.004602] ext4_getblk+0x144/0x6b0 [ 1581.004615] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1581.004640] ext4_bread+0x2a/0x1c0 [ 1581.004654] ext4_append+0x155/0x380 [ 1581.004676] ext4_init_new_dir+0x25e/0x4d0 [ 1581.004698] ? ext4_init_dot_dotdot+0x590/0x590 [ 1581.004718] ? ext4_mkdir+0x6c3/0xb20 [ 1581.004741] ext4_mkdir+0x3cf/0xb20 [ 1581.004765] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.004781] ? inode_permission.part.0+0xb5/0x670 [ 1581.004802] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.004828] vfs_mkdir+0x1d0/0x3c0 [ 1581.004848] do_mkdirat+0x17b/0x2e0 [ 1581.004866] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.004886] ? do_file_open_root+0x590/0x590 [ 1581.004906] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.004924] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.004946] __x64_sys_mkdir+0xf2/0x140 [ 1581.004965] do_syscall_64+0x3b/0x90 [ 1581.004980] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.004996] RIP: 0033:0x7fe424088c27 [ 1581.005006] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.005018] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.005030] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1581.005038] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.005045] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.005053] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.005060] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1581.005083] [ 1581.006364] FAULT_INJECTION: forcing a failure. [ 1581.006364] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.006380] CPU: 0 PID: 7131 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.006392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.006403] Call Trace: [ 1581.006406] [ 1581.006411] dump_stack_lvl+0x8b/0xb3 [ 1581.006426] should_fail.cold+0x5/0xa [ 1581.006442] should_failslab+0x5/0x10 [ 1581.006457] __kmalloc_track_caller+0x79/0x430 [ 1581.006477] ? sidtab_sid2str_get+0x17c/0x650 [ 1581.006499] kmemdup+0x23/0x50 [ 1581.006517] sidtab_sid2str_get+0x17c/0x650 [ 1581.006536] sidtab_entry_to_string+0x33/0x110 [ 1581.006558] security_sid_to_context_core+0x337/0x560 [ 1581.006582] selinux_inode_init_security+0x4c2/0x6b0 [ 1581.006605] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1581.006623] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1581.006641] ? lock_is_held_type+0xd7/0x130 [ 1581.006658] ? find_held_lock+0x2c/0x110 [ 1581.006680] security_inode_init_security+0x151/0x350 [ 1581.006695] ? ext4_init_acl+0x310/0x310 [ 1581.006710] ? inode_free_by_rcu+0x20/0x20 [ 1581.006735] ? chksum_update+0x4c/0xb0 [ 1581.006755] __ext4_new_inode+0x39c8/0x5620 [ 1581.006791] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1581.006828] ? ext4_mkdir+0x6c3/0xb20 [ 1581.006848] ext4_mkdir+0x33a/0xb20 [ 1581.006876] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.006893] ? inode_permission.part.0+0xb5/0x670 [ 1581.006912] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.006937] vfs_mkdir+0x1d0/0x3c0 [ 1581.006957] do_mkdirat+0x17b/0x2e0 [ 1581.006975] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.006995] ? do_file_open_root+0x590/0x590 [ 1581.007015] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.007034] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.007056] __x64_sys_mkdir+0xf2/0x140 [ 1581.007076] do_syscall_64+0x3b/0x90 [ 1581.007090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.007107] RIP: 0033:0x7fa9c2932c27 [ 1581.007115] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.007127] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.007138] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1581.007146] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.007153] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.007162] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.007169] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1581.007198] [ 1581.008184] FAULT_INJECTION: forcing a failure. [ 1581.008184] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.008200] CPU: 0 PID: 7132 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.008213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.008221] Call Trace: [ 1581.008224] [ 1581.008228] dump_stack_lvl+0x8b/0xb3 [ 1581.008243] should_fail.cold+0x5/0xa [ 1581.008256] ? create_object.isra.0+0x3a/0xa20 [ 1581.008275] should_failslab+0x5/0x10 [ 1581.008291] kmem_cache_alloc+0x5b/0x480 [ 1581.008307] create_object.isra.0+0x3a/0xa20 [ 1581.008323] ? kasan_unpoison+0x23/0x50 [ 1581.008342] kmem_cache_alloc+0x239/0x480 [ 1581.008359] jbd2__journal_start+0x18c/0x8d0 [ 1581.008378] __ext4_journal_start_sb+0x392/0x470 [ 1581.008401] __ext4_new_inode+0x2f46/0x5620 [ 1581.008436] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1581.008464] ? selinux_determine_inode_label+0x1b6/0x340 [ 1581.008488] ? ext4_mkdir+0x6c3/0xb20 [ 1581.008507] ext4_mkdir+0x33a/0xb20 [ 1581.008534] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.008551] ? inode_permission.part.0+0xb5/0x670 [ 1581.008570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.008594] vfs_mkdir+0x1d0/0x3c0 [ 1581.008614] do_mkdirat+0x17b/0x2e0 [ 1581.008631] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.008652] ? do_file_open_root+0x590/0x590 [ 1581.008672] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.008691] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.008712] __x64_sys_mkdir+0xf2/0x140 [ 1581.008731] do_syscall_64+0x3b/0x90 [ 1581.008745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.008762] RIP: 0033:0x7faa30c96c27 [ 1581.008771] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.008782] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.008793] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1581.008801] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.008808] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.008816] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.008823] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1581.008845] [ 1581.033212] FAT-fs (loop4): bogus number of reserved sectors [ 1581.033224] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1581.133623] FAULT_INJECTION: forcing a failure. [ 1581.133623] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.133643] CPU: 0 PID: 7135 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.133656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.133666] Call Trace: [ 1581.133669] [ 1581.133673] dump_stack_lvl+0x8b/0xb3 [ 1581.133694] should_fail.cold+0x5/0xa [ 1581.133707] ? create_object.isra.0+0x3a/0xa20 [ 1581.133727] should_failslab+0x5/0x10 [ 1581.133744] kmem_cache_alloc+0x5b/0x480 [ 1581.133761] create_object.isra.0+0x3a/0xa20 [ 1581.133776] ? kasan_unpoison+0x23/0x50 [ 1581.133796] kmem_cache_alloc+0x239/0x480 [ 1581.133812] security_inode_alloc+0x34/0x160 [ 1581.133832] inode_init_always+0x5d8/0xd20 [ 1581.133852] alloc_inode+0x84/0x240 [ 1581.133870] new_inode+0x23/0x240 [ 1581.133889] __ext4_new_inode+0x335/0x5620 [ 1581.133909] ? lock_downgrade+0x6d0/0x6d0 [ 1581.133939] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1581.133967] ? selinux_determine_inode_label+0x1b6/0x340 [ 1581.133991] ? ext4_mkdir+0x6c3/0xb20 [ 1581.134011] ext4_mkdir+0x33a/0xb20 [ 1581.134038] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.134054] ? inode_permission.part.0+0xb5/0x670 [ 1581.134074] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.134099] vfs_mkdir+0x1d0/0x3c0 [ 1581.134118] do_mkdirat+0x17b/0x2e0 [ 1581.134136] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.134156] ? do_file_open_root+0x590/0x590 [ 1581.134176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.134195] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.134216] __x64_sys_mkdir+0xf2/0x140 [ 1581.134235] do_syscall_64+0x3b/0x90 [ 1581.134250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.134268] RIP: 0033:0x7fa9c2932c27 [ 1581.134277] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.134289] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.134302] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1581.134310] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.134317] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.134325] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.134333] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1581.134355] [ 1581.148047] FAULT_INJECTION: forcing a failure. [ 1581.148047] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.148063] CPU: 0 PID: 7139 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.148075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.148082] Call Trace: [ 1581.148085] [ 1581.148089] dump_stack_lvl+0x8b/0xb3 [ 1581.148105] should_fail.cold+0x5/0xa [ 1581.148117] ? create_object.isra.0+0x3a/0xa20 [ 1581.148135] should_failslab+0x5/0x10 [ 1581.148151] kmem_cache_alloc+0x5b/0x480 [ 1581.148167] create_object.isra.0+0x3a/0xa20 [ 1581.148183] ? kasan_unpoison+0x23/0x50 [ 1581.148202] __kmalloc+0x25b/0x440 [ 1581.148218] ext4_find_extent+0xa39/0xd20 [ 1581.148242] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1581.148266] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.148283] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.148300] ? lock_is_held_type+0xd7/0x130 [ 1581.148323] ? ext4_ext_release+0x10/0x10 [ 1581.148341] ? lock_acquire+0x1b2/0x530 [ 1581.148358] ? lock_release+0x750/0x750 [ 1581.148380] ? lock_is_held_type+0xd7/0x130 [ 1581.148409] ? down_write+0xde/0x150 [ 1581.148422] ? down_write_killable+0x170/0x170 [ 1581.148444] ext4_map_blocks+0x652/0x1970 [ 1581.148464] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1581.148483] ? lock_is_held_type+0xd7/0x130 [ 1581.148507] ext4_getblk+0x144/0x6b0 [ 1581.148520] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1581.148545] ext4_bread+0x2a/0x1c0 [ 1581.148559] ext4_append+0x155/0x380 [ 1581.148581] ext4_init_new_dir+0x25e/0x4d0 [ 1581.148601] ? ext4_init_dot_dotdot+0x590/0x590 [ 1581.148621] ? ext4_mkdir+0x6c3/0xb20 [ 1581.148645] ext4_mkdir+0x3cf/0xb20 [ 1581.148669] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.148686] ? inode_permission.part.0+0xb5/0x670 [ 1581.148705] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.148729] vfs_mkdir+0x1d0/0x3c0 [ 1581.148749] do_mkdirat+0x17b/0x2e0 [ 1581.148766] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.148787] ? do_file_open_root+0x590/0x590 [ 1581.148806] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.148825] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.148847] __x64_sys_mkdir+0xf2/0x140 [ 1581.148866] do_syscall_64+0x3b/0x90 [ 1581.148880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.148897] RIP: 0033:0x7fe424088c27 [ 1581.148905] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.148916] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.148927] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1581.148935] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.148942] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.148950] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.148957] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1581.148980] [ 1581.149813] FAT-fs (loop6): bogus number of reserved sectors [ 1581.149823] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1581.155995] FAULT_INJECTION: forcing a failure. [ 1581.155995] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.156011] CPU: 0 PID: 7141 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1581.156024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1581.156031] Call Trace: [ 1581.156034] [ 1581.156039] dump_stack_lvl+0x8b/0xb3 [ 1581.156054] should_fail.cold+0x5/0xa [ 1581.156067] ? ext4_find_extent+0xa39/0xd20 [ 1581.156083] should_failslab+0x5/0x10 [ 1581.156098] __kmalloc+0x72/0x440 [ 1581.156114] ext4_find_extent+0xa39/0xd20 [ 1581.156137] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1581.156161] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.156180] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1581.156197] ? lock_is_held_type+0xd7/0x130 [ 1581.156219] ? ext4_ext_release+0x10/0x10 [ 1581.156236] ? lock_acquire+0x1b2/0x530 [ 1581.156253] ? lock_release+0x750/0x750 [ 1581.156275] ? lock_is_held_type+0xd7/0x130 [ 1581.156300] ? down_read+0x198/0x440 [ 1581.156314] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1581.156326] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1581.156346] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1581.156370] ext4_map_blocks+0x9c8/0x1970 [ 1581.156385] ? inode_free_by_rcu+0x20/0x20 [ 1581.156405] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1581.156424] ? lock_is_held_type+0xd7/0x130 [ 1581.156448] ext4_getblk+0x144/0x6b0 [ 1581.156462] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1581.156487] ext4_bread+0x2a/0x1c0 [ 1581.156501] ext4_append+0x155/0x380 [ 1581.156523] ext4_init_new_dir+0x25e/0x4d0 [ 1581.156543] ? ext4_init_dot_dotdot+0x590/0x590 [ 1581.156563] ? ext4_mkdir+0x6c3/0xb20 [ 1581.156586] ext4_mkdir+0x3cf/0xb20 [ 1581.156610] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1581.156627] ? inode_permission.part.0+0xb5/0x670 [ 1581.156646] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.156670] vfs_mkdir+0x1d0/0x3c0 [ 1581.156689] do_mkdirat+0x17b/0x2e0 [ 1581.156707] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1581.156728] ? do_file_open_root+0x590/0x590 [ 1581.156747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1581.156766] ? getname_flags.part.0+0x1dd/0x4f0 [ 1581.156787] __x64_sys_mkdir+0xf2/0x140 [ 1581.156807] do_syscall_64+0x3b/0x90 [ 1581.156821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1581.156837] RIP: 0033:0x7faa30c96c27 [ 1581.156846] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.156857] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1581.156868] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1581.156875] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1581.156883] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1581.156890] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1581.156897] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1581.156921] [ 1581.161441] FAT-fs (loop0): bogus number of reserved sectors [ 1581.161452] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1581.165789] FAT-fs (loop4): bogus number of reserved sectors [ 1581.165798] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1581.179219] loop2: detected capacity change from 0 to 256 [ 1581.180257] loop5: detected capacity change from 0 to 256 [ 1581.201397] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1581.202617] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1581.208958] loop7: detected capacity change from 0 to 256 [ 1581.227276] FAT-fs (loop7): bogus number of FAT sectors [ 1581.227297] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1581.244635] 9pnet_fd: p9_fd_create_tcp (7143): problem connecting socket to 127.0.0.1 [ 1595.264234] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:19:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) fadvise64(r0, 0x0, 0x0, 0x1) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) read(r0, &(0x7f0000000140)=""/78, 0x4e) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffb54}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40091) 00:19:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:19:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 49) 00:19:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 48) 00:19:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 54) 00:19:27 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:27 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:27 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1602.392178] loop5: detected capacity change from 0 to 256 [ 1602.398953] loop7: detected capacity change from 0 to 256 [ 1602.404376] FAT-fs (loop7): bogus number of FAT sectors [ 1602.404440] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1602.406349] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1602.418323] FAULT_INJECTION: forcing a failure. [ 1602.418323] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.418359] CPU: 0 PID: 7166 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1602.418384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1602.418407] Call Trace: [ 1602.418413] [ 1602.418422] dump_stack_lvl+0x8b/0xb3 [ 1602.418458] should_fail.cold+0x5/0xa [ 1602.418489] should_failslab+0x5/0x10 00:19:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1602.418521] __kmalloc_track_caller+0x79/0x430 [ 1602.418561] ? sidtab_sid2str_get+0x17c/0x650 [ 1602.418601] kmemdup+0x23/0x50 [ 1602.418637] sidtab_sid2str_get+0x17c/0x650 [ 1602.418673] sidtab_entry_to_string+0x33/0x110 [ 1602.418715] security_sid_to_context_core+0x337/0x560 [ 1602.418760] selinux_inode_init_security+0x4c2/0x6b0 [ 1602.418823] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1602.418864] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1602.418898] ? lock_is_held_type+0xd7/0x130 [ 1602.418932] ? find_held_lock+0x2c/0x110 [ 1602.418973] security_inode_init_security+0x151/0x350 [ 1602.419000] ? ext4_init_acl+0x310/0x310 [ 1602.419030] ? inode_free_by_rcu+0x20/0x20 [ 1602.419076] ? chksum_update+0x4c/0xb0 [ 1602.419111] __ext4_new_inode+0x39c8/0x5620 [ 1602.419179] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1602.419248] ? ext4_mkdir+0x6c3/0xb20 [ 1602.419287] ext4_mkdir+0x33a/0xb20 [ 1602.419340] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1602.419371] ? inode_permission.part.0+0xb5/0x670 [ 1602.419409] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.419456] vfs_mkdir+0x1d0/0x3c0 [ 1602.419493] do_mkdirat+0x17b/0x2e0 [ 1602.419527] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1602.419565] ? do_file_open_root+0x590/0x590 [ 1602.419602] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.419637] ? getname_flags.part.0+0x1dd/0x4f0 [ 1602.419678] __x64_sys_mkdir+0xf2/0x140 [ 1602.419729] do_syscall_64+0x3b/0x90 [ 1602.419756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1602.419800] RIP: 0033:0x7fa9c2932c27 [ 1602.419822] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.419845] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1602.419867] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1602.419882] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1602.419896] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1602.419911] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1602.419925] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1602.419970] [ 1602.464634] FAULT_INJECTION: forcing a failure. [ 1602.464634] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.464669] CPU: 0 PID: 7168 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1602.464694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1602.464710] Call Trace: [ 1602.464715] [ 1602.464724] dump_stack_lvl+0x8b/0xb3 [ 1602.464759] should_fail.cold+0x5/0xa [ 1602.464783] ? create_object.isra.0+0x3a/0xa20 [ 1602.464819] should_failslab+0x5/0x10 [ 1602.464850] kmem_cache_alloc+0x5b/0x480 [ 1602.464882] create_object.isra.0+0x3a/0xa20 [ 1602.464911] ? kasan_unpoison+0x23/0x50 [ 1602.464955] __kmalloc+0x25b/0x440 [ 1602.464983] ext4_find_extent+0xa39/0xd20 [ 1602.465028] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1602.465072] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1602.465108] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1602.465140] ? lock_is_held_type+0xd7/0x130 [ 1602.465183] ? ext4_ext_release+0x10/0x10 [ 1602.465214] ? lock_acquire+0x1b2/0x530 [ 1602.465246] ? lock_release+0x750/0x750 [ 1602.465286] ? lock_is_held_type+0xd7/0x130 [ 1602.465334] ? down_read+0x198/0x440 [ 1602.465359] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1602.465382] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1602.465420] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1602.465465] ext4_map_blocks+0x9c8/0x1970 [ 1602.465493] ? inode_free_by_rcu+0x20/0x20 [ 1602.465526] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1602.465561] ? lock_is_held_type+0xd7/0x130 [ 1602.465605] ext4_getblk+0x144/0x6b0 [ 1602.465630] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1602.465678] ext4_bread+0x2a/0x1c0 [ 1602.465703] ext4_append+0x155/0x380 [ 1602.465744] ext4_init_new_dir+0x25e/0x4d0 [ 1602.465783] ? ext4_init_dot_dotdot+0x590/0x590 [ 1602.465820] ? ext4_mkdir+0x6c3/0xb20 [ 1602.465864] ext4_mkdir+0x3cf/0xb20 [ 1602.465909] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1602.465940] ? inode_permission.part.0+0xb5/0x670 [ 1602.465976] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.466022] vfs_mkdir+0x1d0/0x3c0 [ 1602.466058] do_mkdirat+0x17b/0x2e0 [ 1602.466092] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1602.466130] ? do_file_open_root+0x590/0x590 [ 1602.466167] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.466202] ? getname_flags.part.0+0x1dd/0x4f0 [ 1602.466243] __x64_sys_mkdir+0xf2/0x140 [ 1602.466279] do_syscall_64+0x3b/0x90 [ 1602.466306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1602.466337] RIP: 0033:0x7faa30c96c27 [ 1602.466354] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.466376] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1602.466398] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1602.466413] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1602.466426] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1602.466441] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1602.466454] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1602.466499] [ 1602.472829] FAULT_INJECTION: forcing a failure. [ 1602.472829] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.472860] CPU: 0 PID: 7169 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1602.472884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1602.472899] Call Trace: [ 1602.472904] [ 1602.472912] dump_stack_lvl+0x8b/0xb3 [ 1602.472942] should_fail.cold+0x5/0xa [ 1602.472966] ? create_object.isra.0+0x3a/0xa20 [ 1602.473001] should_failslab+0x5/0x10 [ 1602.473030] kmem_cache_alloc+0x5b/0x480 [ 1602.473061] create_object.isra.0+0x3a/0xa20 [ 1602.473092] ? kasan_unpoison+0x23/0x50 [ 1602.473129] __kmalloc+0x25b/0x440 [ 1602.473158] ext4_find_extent+0xa39/0xd20 [ 1602.473203] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1602.473249] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1602.473281] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1602.473313] ? lock_is_held_type+0xd7/0x130 [ 1602.473356] ? ext4_ext_release+0x10/0x10 [ 1602.473391] ? lock_acquire+0x1b2/0x530 [ 1602.473429] ? lock_release+0x750/0x750 [ 1602.473470] ? lock_is_held_type+0xd7/0x130 [ 1602.473519] ? down_write+0xde/0x150 [ 1602.473542] ? down_write_killable+0x170/0x170 [ 1602.473586] ext4_map_blocks+0x652/0x1970 [ 1602.473623] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1602.473661] ? lock_is_held_type+0xd7/0x130 [ 1602.473708] ext4_getblk+0x144/0x6b0 [ 1602.473733] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1602.473781] ext4_bread+0x2a/0x1c0 [ 1602.473807] ext4_append+0x155/0x380 [ 1602.473848] ext4_init_new_dir+0x25e/0x4d0 [ 1602.473886] ? ext4_init_dot_dotdot+0x590/0x590 [ 1602.473925] ? ext4_mkdir+0x6c3/0xb20 [ 1602.473969] ext4_mkdir+0x3cf/0xb20 [ 1602.474015] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1602.474046] ? inode_permission.part.0+0xb5/0x670 [ 1602.474083] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.474129] vfs_mkdir+0x1d0/0x3c0 [ 1602.474166] do_mkdirat+0x17b/0x2e0 [ 1602.474200] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1602.474240] ? do_file_open_root+0x590/0x590 [ 1602.474278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1602.474313] ? getname_flags.part.0+0x1dd/0x4f0 [ 1602.474355] __x64_sys_mkdir+0xf2/0x140 [ 1602.474391] do_syscall_64+0x3b/0x90 [ 1602.474418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1602.474449] RIP: 0033:0x7fe424088c27 [ 1602.474466] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.474488] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1602.474510] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1602.474525] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1602.474539] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1602.474553] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1602.474567] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1602.474612] [ 1602.496025] FAT-fs (loop4): bogus number of reserved sectors [ 1602.496162] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1602.521738] FAT-fs (loop0): bogus number of reserved sectors [ 1602.521759] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1617.568913] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1625.527084] FAULT_INJECTION: forcing a failure. [ 1625.527084] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.527105] CPU: 1 PID: 7183 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.527120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.527130] Call Trace: [ 1625.527133] [ 1625.527139] dump_stack_lvl+0x8b/0xb3 [ 1625.527161] should_fail.cold+0x5/0xa [ 1625.527172] ? __es_tree_search.isra.0+0x1af/0x210 [ 1625.527190] ? create_object.isra.0+0x3a/0xa20 [ 1625.527209] should_failslab+0x5/0x10 [ 1625.527226] kmem_cache_alloc+0x5b/0x480 [ 1625.527243] create_object.isra.0+0x3a/0xa20 [ 1625.527258] ? kasan_unpoison+0x23/0x50 [ 1625.527278] kmem_cache_alloc+0x239/0x480 [ 1625.527294] __es_insert_extent+0x3a9/0x12f0 [ 1625.527309] ? do_raw_write_lock+0x11a/0x280 [ 1625.527328] ? do_raw_read_unlock+0x70/0x70 [ 1625.527354] ext4_es_insert_extent+0x2dc/0xbf0 [ 1625.527376] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1625.527395] ? lock_downgrade+0x6d0/0x6d0 [ 1625.527418] ? lock_is_held_type+0xd7/0x130 [ 1625.527439] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 1625.527452] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.527478] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 1625.527502] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.527520] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.527537] ? lock_is_held_type+0xd7/0x130 [ 1625.527559] ? ext4_ext_release+0x10/0x10 [ 1625.527576] ? lock_acquire+0x1b2/0x530 [ 1625.527593] ? lock_release+0x750/0x750 [ 1625.527614] ? lock_is_held_type+0xd7/0x130 [ 1625.527640] ? down_read+0x198/0x440 [ 1625.527653] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1625.527665] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.527685] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1625.527709] ext4_map_blocks+0x9c8/0x1970 [ 1625.527724] ? inode_free_by_rcu+0x20/0x20 [ 1625.527742] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.527760] ? lock_is_held_type+0xd7/0x130 [ 1625.527784] ext4_getblk+0x144/0x6b0 [ 1625.527797] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.527823] ext4_bread+0x2a/0x1c0 [ 1625.527837] ext4_append+0x155/0x380 [ 1625.527859] ext4_init_new_dir+0x25e/0x4d0 00:19:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 55) 00:19:50 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:50 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:19:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 50) 00:19:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:19:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="71245e8445e77e3b32e4eb88185451bba09cd965ddd254436bf25f512a48d10e886c49c5ce90a2c40d81dae1cc6cf37ecba87ecf07db9749913a4b42d2efa34e5243d7ca8482e4966f5f9b3541", 0x4d}], 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x200, 0x8, 0x1, 0x7}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x2, 0x0, 0x4, 0x2}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x2, 0x3ff, 0x7f, 0x0, 0xe9, "08a1927522d400739651ae41e333ca738886c5", 0x400, 0x4}) 00:19:50 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 49) [ 1625.527879] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.527899] ? ext4_mkdir+0x6c3/0xb20 [ 1625.527923] ext4_mkdir+0x3cf/0xb20 [ 1625.527947] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.527963] ? inode_permission.part.0+0xb5/0x670 [ 1625.527983] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.528007] vfs_mkdir+0x1d0/0x3c0 [ 1625.528044] do_mkdirat+0x17b/0x2e0 [ 1625.528062] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.528083] ? do_file_open_root+0x590/0x590 [ 1625.528102] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.528121] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.528142] __x64_sys_mkdir+0xf2/0x140 [ 1625.528161] do_syscall_64+0x3b/0x90 [ 1625.528175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.528192] RIP: 0033:0x7fe424088c27 [ 1625.528201] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.528213] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.528225] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 00:19:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1625.528233] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.528240] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.528247] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.528254] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 00:19:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 56) 00:19:50 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:19:50 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 50) 00:19:50 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1625.528278] [ 1625.545721] loop7: detected capacity change from 0 to 256 [ 1625.558000] FAULT_INJECTION: forcing a failure. [ 1625.558000] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.558033] CPU: 0 PID: 7191 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.558058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.558073] Call Trace: [ 1625.558080] [ 1625.558088] dump_stack_lvl+0x8b/0xb3 [ 1625.558122] should_fail.cold+0x5/0xa [ 1625.558148] ? create_object.isra.0+0x3a/0xa20 [ 1625.558185] should_failslab+0x5/0x10 [ 1625.558216] kmem_cache_alloc+0x5b/0x480 [ 1625.558249] create_object.isra.0+0x3a/0xa20 [ 1625.558281] ? kasan_unpoison+0x23/0x50 [ 1625.558320] __kmalloc+0x25b/0x440 [ 1625.558350] ext4_find_extent+0xa39/0xd20 [ 1625.558404] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1625.558451] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.558488] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.558522] ? lock_is_held_type+0xd7/0x130 [ 1625.558567] ? ext4_ext_release+0x10/0x10 [ 1625.558600] ? lock_acquire+0x1b2/0x530 [ 1625.558634] ? lock_release+0x750/0x750 [ 1625.558677] ? lock_is_held_type+0xd7/0x130 [ 1625.558728] ? down_read+0x198/0x440 [ 1625.558754] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1625.558779] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.558819] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1625.558866] ext4_map_blocks+0x9c8/0x1970 [ 1625.558896] ? inode_free_by_rcu+0x20/0x20 [ 1625.558929] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.558966] ? lock_is_held_type+0xd7/0x130 [ 1625.559014] ext4_getblk+0x144/0x6b0 [ 1625.559040] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.559091] ext4_bread+0x2a/0x1c0 [ 1625.559118] ext4_append+0x155/0x380 [ 1625.559161] ext4_init_new_dir+0x25e/0x4d0 [ 1625.559204] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.559244] ? ext4_mkdir+0x6c3/0xb20 [ 1625.559290] ext4_mkdir+0x3cf/0xb20 [ 1625.559338] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.559371] ? inode_permission.part.0+0xb5/0x670 [ 1625.559410] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.559458] vfs_mkdir+0x1d0/0x3c0 [ 1625.559497] do_mkdirat+0x17b/0x2e0 [ 1625.559532] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.559573] ? do_file_open_root+0x590/0x590 [ 1625.559612] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.559649] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.559693] __x64_sys_mkdir+0xf2/0x140 [ 1625.559731] do_syscall_64+0x3b/0x90 [ 1625.559760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.559792] RIP: 0033:0x7fa9c2932c27 [ 1625.559809] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.559832] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.559855] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1625.559870] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.559885] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.559899] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.559913] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1625.559960] [ 1625.560599] FAT-fs (loop0): bogus number of reserved sectors [ 1625.560611] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1625.584652] FAT-fs (loop7): bogus number of FAT sectors [ 1625.584674] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1625.590231] loop5: detected capacity change from 0 to 256 [ 1625.592553] FAULT_INJECTION: forcing a failure. [ 1625.592553] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.592571] CPU: 1 PID: 7196 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.592583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.592591] Call Trace: [ 1625.592595] [ 1625.592599] dump_stack_lvl+0x8b/0xb3 [ 1625.592620] should_fail.cold+0x5/0xa [ 1625.592633] ? __es_insert_extent+0x3a9/0x12f0 [ 1625.592651] should_failslab+0x5/0x10 [ 1625.592668] kmem_cache_alloc+0x5b/0x480 [ 1625.592685] __es_insert_extent+0x3a9/0x12f0 [ 1625.592699] ? do_raw_write_lock+0x11a/0x280 [ 1625.592718] ? do_raw_read_unlock+0x70/0x70 [ 1625.592744] ext4_es_insert_extent+0x2dc/0xbf0 [ 1625.592766] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1625.592782] ? lock_downgrade+0x6d0/0x6d0 [ 1625.592804] ? lock_is_held_type+0xd7/0x130 [ 1625.592825] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 1625.592839] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.592865] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 1625.592888] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.592906] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.592923] ? lock_is_held_type+0xd7/0x130 [ 1625.592946] ? ext4_ext_release+0x10/0x10 [ 1625.592962] ? lock_acquire+0x1b2/0x530 [ 1625.592979] ? lock_release+0x750/0x750 00:19:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 51) 00:19:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:19:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1625.593001] ? lock_is_held_type+0xd7/0x130 [ 1625.593026] ? down_read+0x198/0x440 [ 1625.593040] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1625.593052] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.593072] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1625.593096] ext4_map_blocks+0x9c8/0x1970 [ 1625.593111] ? inode_free_by_rcu+0x20/0x20 [ 1625.593128] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.593147] ? lock_is_held_type+0xd7/0x130 [ 1625.593171] ext4_getblk+0x144/0x6b0 [ 1625.593184] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.593210] ext4_bread+0x2a/0x1c0 [ 1625.593224] ext4_append+0x155/0x380 [ 1625.593246] ext4_init_new_dir+0x25e/0x4d0 [ 1625.593266] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.593286] ? ext4_mkdir+0x6c3/0xb20 [ 1625.593309] ext4_mkdir+0x3cf/0xb20 [ 1625.593333] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.593350] ? inode_permission.part.0+0xb5/0x670 [ 1625.593370] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.593397] vfs_mkdir+0x1d0/0x3c0 [ 1625.593417] do_mkdirat+0x17b/0x2e0 [ 1625.593435] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.593455] ? do_file_open_root+0x590/0x590 [ 1625.593474] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.593493] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.593515] __x64_sys_mkdir+0xf2/0x140 [ 1625.593534] do_syscall_64+0x3b/0x90 [ 1625.593548] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.593565] RIP: 0033:0x7faa30c96c27 [ 1625.593574] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.593586] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.593598] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1625.593605] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.593613] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.593620] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.593627] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1625.593651] [ 1625.595900] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1625.596647] FAT-fs (loop6): bogus number of reserved sectors [ 1625.596668] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1625.632700] FAT-fs (loop4): bogus number of reserved sectors [ 1625.632714] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1625.702808] FAULT_INJECTION: forcing a failure. [ 1625.702808] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.702829] CPU: 1 PID: 7200 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.702842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.702851] Call Trace: [ 1625.702854] [ 1625.702859] dump_stack_lvl+0x8b/0xb3 [ 1625.702880] should_fail.cold+0x5/0xa [ 1625.702893] ? ext4_find_extent+0xa39/0xd20 [ 1625.702910] should_failslab+0x5/0x10 [ 1625.702927] __kmalloc+0x72/0x440 [ 1625.702943] ext4_find_extent+0xa39/0xd20 [ 1625.702966] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1625.702990] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.703009] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.703026] ? lock_is_held_type+0xd7/0x130 00:19:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 57) 00:19:51 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 51) 00:19:51 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:19:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1625.703049] ? ext4_ext_release+0x10/0x10 [ 1625.703067] ? lock_acquire+0x1b2/0x530 [ 1625.703084] ? lock_release+0x750/0x750 [ 1625.703105] ? lock_is_held_type+0xd7/0x130 [ 1625.703131] ? down_write+0xde/0x150 [ 1625.703143] ? down_write_killable+0x170/0x170 [ 1625.703166] ext4_map_blocks+0x652/0x1970 [ 1625.703186] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.703204] ? lock_is_held_type+0xd7/0x130 [ 1625.703231] ext4_getblk+0x144/0x6b0 [ 1625.703244] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.703270] ext4_bread+0x2a/0x1c0 [ 1625.703283] ext4_append+0x155/0x380 [ 1625.703304] ext4_init_new_dir+0x25e/0x4d0 [ 1625.703324] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.703344] ? ext4_mkdir+0x6c3/0xb20 [ 1625.703367] ext4_mkdir+0x3cf/0xb20 [ 1625.703391] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.703408] ? inode_permission.part.0+0xb5/0x670 [ 1625.703428] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.703453] vfs_mkdir+0x1d0/0x3c0 [ 1625.703473] do_mkdirat+0x17b/0x2e0 [ 1625.703490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.703511] ? do_file_open_root+0x590/0x590 [ 1625.703530] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.703549] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.703571] __x64_sys_mkdir+0xf2/0x140 [ 1625.703590] do_syscall_64+0x3b/0x90 [ 1625.703604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.703621] RIP: 0033:0x7fe424088c27 [ 1625.703630] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.703642] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.703654] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1625.703662] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.703669] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.703677] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.703684] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1625.703707] [ 1625.723761] FAULT_INJECTION: forcing a failure. [ 1625.723761] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.723779] CPU: 1 PID: 7203 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.723792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.723800] Call Trace: [ 1625.723803] [ 1625.723807] dump_stack_lvl+0x8b/0xb3 [ 1625.723824] should_fail.cold+0x5/0xa [ 1625.723837] ? jbd2__journal_start+0x18c/0x8d0 [ 1625.723854] should_failslab+0x5/0x10 [ 1625.723870] kmem_cache_alloc+0x5b/0x480 [ 1625.723886] jbd2__journal_start+0x18c/0x8d0 [ 1625.723904] __ext4_journal_start_sb+0x392/0x470 [ 1625.723923] __ext4_new_inode+0x2f46/0x5620 [ 1625.723957] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1625.723985] ? selinux_determine_inode_label+0x1b6/0x340 [ 1625.724009] ? ext4_mkdir+0x6c3/0xb20 [ 1625.724046] ext4_mkdir+0x33a/0xb20 [ 1625.724073] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.724090] ? inode_permission.part.0+0xb5/0x670 [ 1625.724109] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.724133] vfs_mkdir+0x1d0/0x3c0 [ 1625.724152] do_mkdirat+0x17b/0x2e0 [ 1625.724170] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.724190] ? do_file_open_root+0x590/0x590 [ 1625.724209] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.724228] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.724249] __x64_sys_mkdir+0xf2/0x140 [ 1625.724268] do_syscall_64+0x3b/0x90 [ 1625.724282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.724298] RIP: 0033:0x7fa9c2932c27 [ 1625.724307] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.724319] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.724331] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1625.724338] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.724346] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.724353] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.724360] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1625.724382] [ 1625.724423] EXT4-fs error (device sda) in __ext4_new_inode:1085: Out of memory [ 1625.747041] loop7: detected capacity change from 0 to 256 [ 1625.751434] FAT-fs (loop7): bogus number of FAT sectors [ 1625.751454] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1625.814943] loop5: detected capacity change from 0 to 256 [ 1625.824024] FAULT_INJECTION: forcing a failure. [ 1625.824024] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.824052] CPU: 1 PID: 7213 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.824065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.824074] Call Trace: [ 1625.824077] [ 1625.824082] dump_stack_lvl+0x8b/0xb3 [ 1625.824102] should_fail.cold+0x5/0xa [ 1625.824113] ? __es_insert_extent+0x3a9/0x12f0 [ 1625.824130] ? create_object.isra.0+0x3a/0xa20 [ 1625.824150] should_failslab+0x5/0x10 [ 1625.824167] kmem_cache_alloc+0x5b/0x480 [ 1625.824184] create_object.isra.0+0x3a/0xa20 [ 1625.824200] ? kasan_unpoison+0x23/0x50 [ 1625.824219] kmem_cache_alloc+0x239/0x480 [ 1625.824235] __es_insert_extent+0x3a9/0x12f0 [ 1625.824250] ? do_raw_write_lock+0x11a/0x280 [ 1625.824269] ? do_raw_read_unlock+0x70/0x70 [ 1625.824295] ext4_es_insert_extent+0x2dc/0xbf0 [ 1625.824317] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1625.824332] ? lock_downgrade+0x6d0/0x6d0 [ 1625.824355] ? lock_is_held_type+0xd7/0x130 [ 1625.824375] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 1625.824392] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.824418] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 1625.824441] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.824460] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.824476] ? lock_is_held_type+0xd7/0x130 [ 1625.824499] ? ext4_ext_release+0x10/0x10 [ 1625.824515] ? lock_acquire+0x1b2/0x530 [ 1625.824532] ? lock_release+0x750/0x750 [ 1625.824554] ? lock_is_held_type+0xd7/0x130 [ 1625.824579] ? down_read+0x198/0x440 [ 1625.824593] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1625.824605] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1625.824625] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1625.824648] ext4_map_blocks+0x9c8/0x1970 [ 1625.824664] ? inode_free_by_rcu+0x20/0x20 [ 1625.824681] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.824703] ? lock_is_held_type+0xd7/0x130 [ 1625.824729] ext4_getblk+0x144/0x6b0 [ 1625.824742] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.824767] ext4_bread+0x2a/0x1c0 [ 1625.824781] ext4_append+0x155/0x380 [ 1625.824803] ext4_init_new_dir+0x25e/0x4d0 [ 1625.824823] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.824843] ? ext4_mkdir+0x6c3/0xb20 [ 1625.824867] ext4_mkdir+0x3cf/0xb20 [ 1625.824891] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.824907] ? inode_permission.part.0+0xb5/0x670 [ 1625.824927] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.824951] vfs_mkdir+0x1d0/0x3c0 [ 1625.824971] do_mkdirat+0x17b/0x2e0 [ 1625.824989] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.825009] ? do_file_open_root+0x590/0x590 [ 1625.825029] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.825048] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.825070] __x64_sys_mkdir+0xf2/0x140 [ 1625.825089] do_syscall_64+0x3b/0x90 [ 1625.825103] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.825120] RIP: 0033:0x7faa30c96c27 [ 1625.825129] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.825141] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.825153] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1625.825162] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.825169] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.825176] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.825183] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1625.825207] [ 1625.829661] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1625.837418] FAT-fs (loop4): bogus number of reserved sectors [ 1625.837429] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1625.899684] FAULT_INJECTION: forcing a failure. [ 1625.899684] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.899704] CPU: 1 PID: 7217 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.899717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.899726] Call Trace: [ 1625.899729] [ 1625.899734] dump_stack_lvl+0x8b/0xb3 [ 1625.899754] should_fail.cold+0x5/0xa [ 1625.899768] ? create_object.isra.0+0x3a/0xa20 [ 1625.899788] should_failslab+0x5/0x10 [ 1625.899804] kmem_cache_alloc+0x5b/0x480 [ 1625.899821] create_object.isra.0+0x3a/0xa20 [ 1625.899837] ? kasan_unpoison+0x23/0x50 [ 1625.899857] __kmalloc+0x25b/0x440 [ 1625.899872] ext4_find_extent+0xa39/0xd20 [ 1625.899896] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1625.899921] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1625.899949] ? ext4_ext_release+0x10/0x10 [ 1625.899967] ? lock_acquire+0x1b2/0x530 [ 1625.899983] ? lock_release+0x750/0x750 [ 1625.900005] ? lock_is_held_type+0xd7/0x130 [ 1625.900040] ? down_write+0xde/0x150 [ 1625.900053] ? down_write_killable+0x170/0x170 [ 1625.900075] ext4_map_blocks+0x652/0x1970 [ 1625.900095] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1625.900114] ? lock_is_held_type+0xd7/0x130 [ 1625.900137] ext4_getblk+0x144/0x6b0 [ 1625.900150] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1625.900176] ext4_bread+0x2a/0x1c0 [ 1625.900190] ext4_append+0x155/0x380 [ 1625.900211] ext4_init_new_dir+0x25e/0x4d0 [ 1625.900231] ? ext4_init_dot_dotdot+0x590/0x590 [ 1625.900251] ? ext4_mkdir+0x6c3/0xb20 [ 1625.900274] ext4_mkdir+0x3cf/0xb20 [ 1625.900298] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.900315] ? inode_permission.part.0+0xb5/0x670 [ 1625.900334] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.900359] vfs_mkdir+0x1d0/0x3c0 [ 1625.900379] do_mkdirat+0x17b/0x2e0 [ 1625.900399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.900420] ? do_file_open_root+0x590/0x590 [ 1625.900440] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.900458] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.900480] __x64_sys_mkdir+0xf2/0x140 [ 1625.900499] do_syscall_64+0x3b/0x90 [ 1625.900513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.900530] RIP: 0033:0x7fe424088c27 [ 1625.900539] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.900551] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.900564] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1625.900572] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.900579] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.900587] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.900594] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1625.900617] [ 1625.902727] loop7: detected capacity change from 0 to 256 [ 1625.903602] FAT-fs (loop0): bogus number of reserved sectors [ 1625.903612] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1625.909741] FAT-fs (loop7): bogus number of FAT sectors [ 1625.909761] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1625.924059] FAULT_INJECTION: forcing a failure. [ 1625.924059] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.924091] CPU: 0 PID: 7219 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1625.924117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1625.924132] Call Trace: [ 1625.924139] [ 1625.924147] dump_stack_lvl+0x8b/0xb3 [ 1625.924181] should_fail.cold+0x5/0xa [ 1625.924206] ? create_object.isra.0+0x3a/0xa20 [ 1625.924245] should_failslab+0x5/0x10 [ 1625.924276] kmem_cache_alloc+0x5b/0x480 [ 1625.924308] create_object.isra.0+0x3a/0xa20 [ 1625.924339] ? kasan_unpoison+0x23/0x50 [ 1625.924378] __kmalloc_track_caller+0x25e/0x430 [ 1625.924420] ? sidtab_sid2str_get+0x17c/0x650 [ 1625.924460] kmemdup+0x23/0x50 [ 1625.924494] sidtab_sid2str_get+0x17c/0x650 [ 1625.924532] sidtab_entry_to_string+0x33/0x110 [ 1625.924576] security_sid_to_context_core+0x337/0x560 [ 1625.924623] selinux_inode_init_security+0x4c2/0x6b0 [ 1625.924669] ? selinux_dentry_init_security+0x2c0/0x2c0 [ 1625.924703] ? posix_acl_fix_xattr_userns+0x390/0x390 [ 1625.924738] ? lock_is_held_type+0xd7/0x130 [ 1625.924773] ? find_held_lock+0x2c/0x110 [ 1625.924815] security_inode_init_security+0x151/0x350 [ 1625.924843] ? ext4_init_acl+0x310/0x310 [ 1625.924874] ? inode_free_by_rcu+0x20/0x20 [ 1625.924926] ? chksum_update+0x4c/0xb0 [ 1625.924962] __ext4_new_inode+0x39c8/0x5620 [ 1625.925035] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1625.925107] ? ext4_mkdir+0x6c3/0xb20 [ 1625.925147] ext4_mkdir+0x33a/0xb20 [ 1625.925204] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1625.925236] ? inode_permission.part.0+0xb5/0x670 [ 1625.925275] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.925324] vfs_mkdir+0x1d0/0x3c0 [ 1625.925363] do_mkdirat+0x17b/0x2e0 [ 1625.925399] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1625.925444] ? do_file_open_root+0x590/0x590 [ 1625.925483] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1625.925520] ? getname_flags.part.0+0x1dd/0x4f0 [ 1625.925564] __x64_sys_mkdir+0xf2/0x140 [ 1625.925603] do_syscall_64+0x3b/0x90 [ 1625.925631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1625.925664] RIP: 0033:0x7fa9c2932c27 [ 1625.925682] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.925705] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1625.925728] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1625.925744] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1625.925758] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1625.925773] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1625.925787] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1625.925835] [ 1625.930085] loop5: detected capacity change from 0 to 256 [ 1625.931236] FAT-fs (loop6): bogus number of reserved sectors [ 1625.931254] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1625.943981] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1640.606106] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:20:14 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 52) 00:20:14 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 52) 00:20:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 58) 00:20:14 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1649.564733] loop7: detected capacity change from 0 to 256 [ 1649.569678] FAT-fs (loop7): bogus number of FAT sectors [ 1649.569710] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1649.578183] FAULT_INJECTION: forcing a failure. [ 1649.578183] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.578203] CPU: 0 PID: 7238 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.578217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.578227] Call Trace: [ 1649.578231] [ 1649.578236] dump_stack_lvl+0x8b/0xb3 [ 1649.578259] should_fail.cold+0x5/0xa [ 1649.578274] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 1649.578296] should_failslab+0x5/0x10 [ 1649.578314] kmem_cache_alloc+0x5b/0x480 [ 1649.578333] ext4_mb_new_blocks+0x222c/0x4b60 [ 1649.578359] ? lock_is_held_type+0xd7/0x130 [ 1649.578387] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1649.578408] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.578430] ? ext4_cache_extents+0x68/0x2d0 [ 1649.578447] ? ext4_discard_preallocations+0xe60/0xe60 [ 1649.578465] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1649.578485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.578506] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1649.578525] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.578546] ? ext4_inode_to_goal_block+0x320/0x430 [ 1649.578568] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1649.578595] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.578615] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.578633] ? lock_is_held_type+0xd7/0x130 00:20:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x18000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:20:14 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1649.578657] ? ext4_ext_release+0x10/0x10 [ 1649.578681] ? lock_release+0x750/0x750 [ 1649.578704] ? lock_is_held_type+0xd7/0x130 [ 1649.578734] ? down_write_killable+0x170/0x170 [ 1649.578759] ext4_map_blocks+0x652/0x1970 [ 1649.578780] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.578800] ? lock_is_held_type+0xd7/0x130 00:20:14 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1649.578826] ext4_getblk+0x144/0x6b0 [ 1649.578840] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.578868] ext4_bread+0x2a/0x1c0 [ 1649.578882] ext4_append+0x155/0x380 [ 1649.578906] ext4_init_new_dir+0x25e/0x4d0 [ 1649.578928] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.578949] ? ext4_mkdir+0x6c3/0xb20 00:20:14 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)={0x0, 0x101}) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x9, 0xe68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000050500)={0x0, 0x0, "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", "6ed14c6089716b98fcc089bae4f6e1a4613fee779387f400f2ab69d0c193b3576fd8a8e6e487c44ab000f37ee4be9cd718add070321797fcffa835eeddf14091052167350e334b528c713367717fc7ca69df998efb4722bb5b262a191f7e8bd4d01035b80813e311ebc4282a8fa2a5f3adb8fa57fb15b4b5fe5911c2efe0b00431fe8a613dca64c926b6bc601062ca67594f381737d432ea7539a3a5efd18917b9eb6fad7d7724cf9457eb7af17ee04fdaa0199ee200884b704944ecd640ce2c7220f2a3c9e252439227586bad92a1efdb30306baac589fe3e18c2514c6536c02947698fbe8c07fdb8beeab9d2578c5066ac84e479b453759906bbfd0e48e0d2ebd20a34f46c3717a8a915870c1de1744e475bc74613607113bd321a9575f5e38d289bebfe993383228866eb7f9c2804a60824b7721eeeca072656781636b37ce5fce1f310bd7301010f0e40bd98341997ea886cc8a258acbb3602660a0fb083a4370b89caa1227f8b6ed4681bff458a3175f8a7c4f7da4f61873f5fe066bb74ab30294dd6bdc5ed0579a7f909969da0e00e8bec0ef0787508937cb037a004cedb98ba5a52eb77893218564a1f90324bc1b63a8fb3596ae9c8a109a5b6a45957ac8b3adb77ed9307eaeedc4862a1783ad0c1da818b0b976f53258a52386e224ea40512e267dab8160279ed64d3d43cba46ed6feced99f4ca6b71db1e4f8e58a1ddbb251816584359b378cc22b4480126ba81ff36eb2c9ece554a6031dedd344123bb47c89309496d2cc9941979702337bfd8ec2c397274a93b4637287b4461a8316591156bc6df0d89eb859d56dcdfb4931a76f8cb92f282fbd252e2a37102a3eae34b11dd343a556c45f1e65debb412c293af9e10bea1142af53f95fbce56b462d95bdd2f89428b505505241e7c3dd3227ba05c656ebac5963b6784ea4927a2c1484499205a4304e73bfaee30ff6a6ead7526b6a275a7d3b05d3176c8aa64025bf66f42a3966a56aef0cb99475b980610a7e235f02ba29260fbb1cc2813a6aa395b23184bf0d4bd2610859bb402d57b9ddd1c49b799c42e4fa61edd365cecf5a5b59bed631168882256ebcc9d30dd3342f75908199ea4b3a3f765a26383747446ac25c8183e6f31f5aeb60ec480cc10715326f28d1d088886ee1be07faf314d7f2967aab9416f2d6726ff097f0894c854b5490bcabf3c781345e893e536afca869d4e6a6403a99a2c105a5f0085e650eb46ab92253ea54e129f5f865c52cf423a5e7ead374342c39d91e0bf3124d2fcbc8791cefb1e5349b2a6ce1b5ad1f923d0036fb119d96fbcd4a57b251d1f62bf8d49b40d3b7806ff3be9a204fde0820fa6b8fef057c4f4324184c64d750d349578549e343a7ee6ccdded50abff02d0433739f5b9f3b619a80b07f5ba62c6b386b8c4483209c366dd51a2c1bd3bb9d1b01357386f352f23f746a6f03e6d68a7adace0454f46cefb30292cfba171f68789bf7dd2d0f5ada68fa27f40c843dbbd4535212eb0d4b0aec3578001ee7ce6ce711584368ecc46330b017352eeb5bb69773aee155543ad0cda9e43444f97d8a972837ace60640d18eff1e0689ddce75d694c85d43a9603d1ffe58c42393d34c6090c320f3e9c6facd117a6b9d9f7808a8f1a268ab81fabec7e0ad5b95b0392cd04614e9cfc95db2cdd34374324f83a858c3d46fc3b430b5b6b8e27871e961fc24da3d85b924276ce73452cd000f0b2f245a255560faff9d91f28811ac21bcbc2976ed332cebe7c0a3621e3126e283dd6f2bfd7955a27ae7bafe4738bdf038a6975cffd5e698c4dc74d194b90f1bda6287e263a0ddae4dc02d355781cb8e8d16b03a41b22e8e5b025a921f5c543fd09fd9730a1b2c3fc983f068b534b69dbe985f6a1593a7aa0a86ed4d4dd1bb5f151626b4f32cded28917582b12050894aa1b00f2dd6dc7866ab362e318a0fe27f750bec69dc82e7ff08c1bce75782cb20505ba416714eed780635c7ae9b9a06b90944375d33249d5ca4f732c03387388828cd0ab881d143f98fd854a40ade3963985a22baab5967bbd2543f231dcb295ba8050c2a8bb1603feda6877be98688a37d70ad944e6b81d1e8c5e013a5b22c52c0f42da321038e53f1bd77b008404ce6eec87e1effa22eed11c5bcdcefff6c3f2160a6f62f88ae33976a50546098a9fe6649f7bf840b99e1934c0337bb508ed13fb5ce37252a659ed80f44581bc591c61d66e35742505c67cc7d039771a0c545cd4d35d0265ba67915414b0e800dae2f8f703ebbe98b433d0686bf77959b566fc20276c387a1021d4b88bc29a25ebef1f24f5cef7325224762dc605a2c2c81d906feca693cad7895a598633b2720c6a7de9691c54422229d27ca8c48af8a16ec877b5abb93c2f1e48faff8a613213df3f2a008f8cdd714f105697798e95976110d0bde9c880bbd74d4c246208cbba710b8115292ffc5476410ed8b14bd22c3bd6a867ddfa38d07f07ebadc87cc7eaaacdd4f0e542ed9233a406fc74c6a6443deb3f32accbbfc380919effaf32014f8a7c5ae9dedf26bccba8f02f977dc7f2fc8c0b4ecd01a174d10af07912f07bb4041c48458248e34d95e78f737c572dde15d88b4d5b78a110ed971029ee7a9dfc8031cc00d0c66808355f5c526be9a6011389904403c1952189005549f0a088658fd984128b0d16185df1f1fdd34455a478f5cf5f378125c0bd36c0cfd551f6f298bd79e2f6c1cffaa11d4ac23b68790fcb02dd537eaffbec3cb0bfc9f6963657b684ef3ca8c8981ea8259126119f69c6bdfa401ceded5463dc027339a01a8cbd8eb1cfa75bb1f700bc53690a99da257dbf86c5d28c3e0ed3e4e99d89b26afc3dccd02a1e4b00440e9abe7b07a100e0506d27ae708902572d3b2139514d22ba3c8dc39d6add62522b70a5d591318be4a6fa0acd2d9299e53aab961177ee3fe6523ac396e483a3b9ce935d5901a37e2340e0135f2287a271c88cb1cefa83f05bec4d02606d3d559b8fe209e2ddf8ee6161fea64c3b63c9515b41abf451a8657435e788190c3c447b334abdd088c5a5b975897b367784dda36005def6377f9fad72164f63f4d36c86fc3d75070a46ef6e5b5f7d80c6f55c8c379c05320baa3c435c08b216c90217643fcca51cb733404bad43e6ac4b6522d8c9e360b153b0377b58d5d2e01f14104f78ea09c878ec72d29a4dfeae763b1699805b05e9accd0be69ffba8efe236ce6038a651825204ab1c6b063495c5d7772f624795be0568d314cf8f97382e0d5673a63d91c8a2dfe2ba1b5d5e7187235e1e3978bcca3799fd3655b28b2fe64d8efe6b7bba7ec2c3c06c1228d33b64eebc8428c67efb217e7b58ce1ec50444656544b56c83be43b13a4499d78c350d38ed192c11710982100a3dfbee49802b0a9a761cf431db9bcf705860c1f2c6d60dedc95c3e4b26f3894169bd81d1c0b8b0682b49579552629e9d6dc35a919ccf6d747d74834daef574d4dbfe8d1b7e518d5d64b186e8679de5404d56d599061a9a9738ed3021ef1d57cbb5cb76c7f937587b4b26bbe55e94a805ebf44ea532179039d0fcafaad99ddae3757b47b7d1a537fb113a9da5c81505460ba192d8fc5e9232ba9cf9661b88f84b02c2eff5613e9e7f95d787e8bbdf94d299d2b9cfb4161b51ca5fa8b0cb78cd5ca048cd1d05cd391a6eca9cd1c75411cf7af5dc785dac245c52e3551934213dbffe28f242f1766522cb1ee731769c226ecbc5e5bd458d46cc927fd6a5d50b666b66c25d74e7026f9b1889c1f7123b0df4a12806ab6712b4ffc521b305b9b9cba5d2833458d74a89b7bc5ca9875cda61ac8259d0d0f4586b3230a80b168fe662ea89bac5bb0eca1508f46f7e662ba7e3e646ca94c956e22aeea8a66d7b3a1003698624defe95426f05ca839b10baa4b301314f46ad3f8e150bdb4105b22cce245587f243b2aa057427261e71b6b5108d393ed4e8d87ec701b432ad4fdfb1625158920463a991fe65f6628742161d5ec933f846b99c40c66167397938393c6c17102b7fa599dec8265adaa4697139b7eb9ff6fe476b9330d3c2aac9d0767e845ff85f669ecc5a847a94950944d76b48dc4a2b045d8818c8fd948502a4a536ef7f373e5b5d2deb42e3ca62d001af48a4ee2086c420cefc1a608dc481469c3eac38445a53b32691b4a1b36b40dc21d87d7a27c7fb667fbdc5f70de072cba4a8db45ba6aa11ed52559cdafe7ad2bc95a4110a7845136fab847b72e2515e077f83ba211d2251424f4518ca10bace8491709806bda482795d4a330285208dec20433e62ccec3111765fff6305532d65814bb6b9218d293d0821779f1aba96c20ac29f55927cbe0673a0c246675b995a77da6b29ebf779d79c42c95aee3a2b92123752a8f0f6f1ea2c39941ac9df56e86cde471f3047a14d7b17f0207578a5f330f049b611b3eb62900cb3bf50d386f988b83ca6ba9e24f8b1aecc735318e7f60506393df1d1b09cec6a748836c1cfb6074dbc21909e82b0133f6a4be2a1b80dd1806019e6943e1268c3534cf5861630df0406ba33a36dc10d2c600f496b05a1053063d7840ca4e57e612e8b22cc7b44240cb4a1180506e54627c16502fce4300c4c0ac8769d1c61dfd27d2cfb7f70cf2b306304349d8d08b37b95151c2bea2a1f2d2bf62ef0e910ee05e6aec750b802b9c65d078769fa4157fd12226e85049663e87a5e54cde8da2aa97106e511a1f87c880003c23cc95475954eacd1cd334dfb7710038c39e7632cc233260328eb363d5e6866bce561c5e20d8951cfd93a78b54f23a09f5483cbedd35a62815c93104439c4dca35f41734e0028f6ea24d18110aecec6c601d8bd17980e329cc73948cbf29a78c25c6a74a95280e720c945637dc8bebfd88bf8209d96a418f52838cba8503a5f88cb0bf74676007df8928d7e1924048bb19c8f326955d6a960ddb97c5593f50688cae526720d3b77dc4d16cfb21b002786cdd7e49a756368930316d9bb5b2e1234b9a90b2285da5a7410e933baeeb4a9aa6fd0f723fd96cbca29ee08b2f7cfa875e557e4ec4d76c4b6f40a038f6e2204b299574c96f3d7119c41419a3a74f3f2a4673d945ea51c54574319207c36aa1d26147e189a8e605e66a051c4be947dcda70fb344ae5fc5b94690140b7a7cc03452eef6d824e2718fa5fd3ebcc36c08452dc9928bed6572741d171e9ed3e38f57596266b41311478f52837f485b7bd8b9be40d87500e1f3fc6cc75a4b801e9b8a6fb44797ae3d6d4ac776b2b141c5e8ef067ad974378db61a909b1c69bcf2064b13742d9c03fa3550507f8c163755cbbf2ad59441e136c929c247d4bf828fd1e6d73867d190e6967138ac031e1c6e3c90c5087eea2305c046094b11e75a1b7415a772cb12cf75d2"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000007c0)) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051500)={0x7cbb, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, r3}, {}, {0x0, r6}], 0xff, "dda46f09132a67"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000059500)={0x6, [{r93, r120}, {0x0, r167}, {r126}, {}, {r39}, {r85}, {r49, r64}, {}, {0x0, r89}, {0x0, r145}, {0x0, r86}, {r58, r159}, {}, {}, {r129, r69}, {r7}, {r180}, {0x0, r117}, {r17}, {r141, r117}, {}, {r40}, {}, {}, {0x0, r84}, {r71}, {}, {r21}, {}, {r76, r33}, {r12, r131}, {0x0, r66}, {}, {0x0, r97}, {0x0, r18}, {}, {0x0, r56}, {0x0, r173}, {}, {}, {r87}, {}, {r141}, {0x0, r23}, {r99, r79}, {r168}, {}, {r82, r101}, {}, {}, {r58, r136}, {}, {r183}, {r171}, {}, {r72}, {0x0, r133}, {}, {0x0, r97}, {}, {}, {r169, r36}, {0x0, r117}, {r182}, {}, {0x0, r181}, {}, {0x0, r143}, {0x0, r26}, {}, {r62, r46}, {}, {}, {r138}, {r75}, {r14}, {}, {}, {r83}, {r53}, {}, {0x0, r177}, {}, {r121, r81}, {}, {r109, r149}, {0x0, r68}, {r65, r164}, {r134}, {0x0, r60}, {}, {0x0, r105}, {}, {r77, r10}, {}, {}, {}, {}, {r112, r177}, {}, {r99, r176}, {0x0, r145}, {r123, r9}, {0x0, r79}, {}, {}, {r19}, {}, {r110, r135}, {0x0, r48}, {r15, r113}, {r169}, {r123}, {r67, r174}, {}, {r40}, {r130, r160}, {r55, r103}, {}, {r75, r170}, {}, {r157, r27}, {r92}, {}, {0x0, r30}, {}, {0x0, r139}, {0x0, r122}, {r38}, {0x0, r178}, {}, {}, {}, {r96}, {0x0, r22}, {r42, r124}, {0x0, r165}, {0x0, r29}, {r169}, {r119}, {r35}, {r25, r31}, {}, {0x0, r36}, {0x0, r176}, {r20, r46}, {}, {r51, r88}, {}, {}, {r47}, {r185}, {r102, r74}, {}, {r137, r156}, {}, {}, {r127}, {r32, r44}, {}, {r158}, {r57, r115}, {r82, r161}, {}, {0x0, r105}, {r100}, {0x0, r91}, {r116, r148}, {0x0, r162}, {}, {r140}, {}, {r108}, {}, {}, {r95, r50}, {}, {0x0, r61}, {0x0, r144}, {0x0, r172}, {r109, r63}, {0x0, r54}, {r106, r94}, {r28, r64}, {}, {0x0, r16}, {0x0, r64}, {0x0, r114}, {}, {}, {r43}, {r104}, {r92}, {}, {}, {r155, r101}, {r125}, {}, {r90, r34}, {r70}, {r78, r29}, {0x0, r136}, {0x0, r153}, {r132}, {}, {0x0, r9}, {r150}, {}, {r151}, {r175, r11}, {r5, r166}, {}, {0x0, r30}, {r119, r59}, {0x0, r111}, {r37, r152}, {0x0, r147}, {}, {}, {}, {}, {0x0, r154}, {}, {}, {r73}, {r118, r128}, {0x0, r152}, {}, {r179, r184}, {r80, r142}, {}, {}, {0x0, r107}, {0x0, r13}, {}, {}, {}, {}, {}, {r8, r31}, {}, {r45, r98}, {}, {}, {r24}, {}, {r41, r176}, {0x0, r135}, {}, {r171, r146}, {}, {r163, r181}, {}, {}, {r52}], 0x40, "9f67af323f7db8"}) r186 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADMODE1(r186, 0x1278, &(0x7f0000000080)) r187 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366f6259d00080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="6de90700"/17]) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001840)={{0x0, 0x40, 0x81, 0x0, 0x1000, 0xa202, 0xfffffffffffffffe, 0x5, 0x6, 0xe, 0x0, 0x0, 0x29, 0x2, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000002840)={r188, 0xbbc0}) mknodat(r187, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1649.578975] ext4_mkdir+0x3cf/0xb20 [ 1649.579001] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.579018] ? inode_permission.part.0+0xb5/0x670 io_submit(0x0, 0x3, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xff81, r0, &(0x7f0000000140)="8f00174b1eda21d40ec19a317cac1db7fce101f08e3cfd6b6f0df873d6302d946a89f4b7f83821c8ce61b2dbe0e7ff32b9ccea787da72038fb4d4941fae94b7328da0c81db41051dff8551dd8fd832d261a2e373662b50c999a85d22bfed9f65c443fedca512717a8952dec0535d41220e81160670dc3f476e74c14fc0dab3281c35d9294dea8318c36e88063e87d2ef2fae9323ad6464ceedd50a34234a767e788b2074cbfaed298bf7a8d38e5f143168272902c0f3d0da04d26e70e360c3a5e4791f7e16325e5c2130839c8eeb73632cc457a0a9f3873e39fb27bda45dee4fc5", 0xe1, 0xfd5, 0x0, 0x2, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x7a, r186, &(0x7f0000000300)="78cb6a2ad0d9000200007d8060b2507e91f1a589c9a383bab305e99fa0740c8c6a365bc2802aa94b38b2e098f55b5c5d50fbc9b5a9629795a14493e2818cd8947300001f5ec9f7d461698dbcfc00"/91, 0x5b, 0x20000000004e20, 0x0, 0x0, r186}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0xff7f, 0xffffffffffffffff, &(0x7f00000003c0)="f6f1267dd29568acc211688cf3a7426ed69d8e558a633b59f1164f765e9a79eda6a6a8a912eca4d1a40b102d2ac0335c20ba72947e2cfe331eb368f5ad77209995d10f54b275d232cae9fd285608b5f5f37c2e10d4de6444ca8bb36c943d43c1445ad80e58ca1ceba14c5bb8872808e7e1144e12066471da42eb5768256dba6b52b25e8f4cb13126a605000000d6fa2ad266fb2861a094f2eee36b2abddf6e8c028d76c8c965697d2d331f7b271b7a471575bb36f7c8ea5bcb3dbeed22688f9a196f24010cc787e4884aebdbbdda423bfb9c3a359382", 0xd6, 0x1f, 0x0, 0x3, r2}]) sendfile(0xffffffffffffffff, r4, &(0x7f0000001800)=0x7, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) [ 1649.579040] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.579066] vfs_mkdir+0x1d0/0x3c0 [ 1649.579088] do_mkdirat+0x17b/0x2e0 [ 1649.579107] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.579129] ? do_file_open_root+0x590/0x590 [ 1649.579151] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.579171] ? getname_flags.part.0+0x1dd/0x4f0 00:20:14 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1649.579194] __x64_sys_mkdir+0xf2/0x140 [ 1649.579215] do_syscall_64+0x3b/0x90 00:20:14 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:20:14 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 53) 00:20:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 59) [ 1649.579230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.579248] RIP: 0033:0x7fe424088c27 [ 1649.579258] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:20:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 53) [ 1649.579271] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.579283] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1649.579292] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.579300] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.579308] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.579316] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1649.579341] [ 1649.598079] FAULT_INJECTION: forcing a failure. [ 1649.598079] name failslab, interval 1, probability 0, space 0, times 0 00:20:15 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1649.598109] CPU: 0 PID: 7239 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.598133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.598147] Call Trace: [ 1649.598139] FAULT_INJECTION: forcing a failure. [ 1649.598139] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.598153] [ 1649.598163] dump_stack_lvl+0x8b/0xb3 [ 1649.598192] should_fail.cold+0x5/0xa [ 1649.598216] ? ext4_find_extent+0xa39/0xd20 [ 1649.598245] should_failslab+0x5/0x10 [ 1649.598274] __kmalloc+0x72/0x440 [ 1649.598303] ext4_find_extent+0xa39/0xd20 [ 1649.598347] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1649.598400] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.598432] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.598463] ? lock_is_held_type+0xd7/0x130 [ 1649.598506] ? ext4_ext_release+0x10/0x10 [ 1649.598540] ? lock_acquire+0x1b2/0x530 [ 1649.598572] ? lock_release+0x750/0x750 [ 1649.598613] ? lock_is_held_type+0xd7/0x130 [ 1649.598661] ? down_write+0xde/0x150 [ 1649.598684] ? down_write_killable+0x170/0x170 [ 1649.598727] ext4_map_blocks+0x652/0x1970 [ 1649.598763] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.598798] ? lock_is_held_type+0xd7/0x130 [ 1649.598843] ext4_getblk+0x144/0x6b0 [ 1649.598868] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.598916] ext4_bread+0x2a/0x1c0 [ 1649.598942] ext4_append+0x155/0x380 [ 1649.598982] ext4_init_new_dir+0x25e/0x4d0 [ 1649.599020] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.599058] ? ext4_mkdir+0x6c3/0xb20 [ 1649.599102] ext4_mkdir+0x3cf/0xb20 [ 1649.599147] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.599178] ? inode_permission.part.0+0xb5/0x670 [ 1649.599215] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.599260] vfs_mkdir+0x1d0/0x3c0 [ 1649.599297] do_mkdirat+0x17b/0x2e0 [ 1649.599330] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.599368] ? do_file_open_root+0x590/0x590 [ 1649.599405] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.599440] ? getname_flags.part.0+0x1dd/0x4f0 [ 1649.599481] __x64_sys_mkdir+0xf2/0x140 [ 1649.599516] do_syscall_64+0x3b/0x90 [ 1649.599543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.599573] RIP: 0033:0x7faa30c96c27 [ 1649.599589] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.599610] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.599631] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1649.599646] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.599659] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.599673] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.599686] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1649.599731] [ 1649.599739] CPU: 1 PID: 7240 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.599766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.599782] Call Trace: [ 1649.599788] [ 1649.599797] dump_stack_lvl+0x8b/0xb3 [ 1649.599832] should_fail.cold+0x5/0xa [ 1649.599862] ? ext4_find_extent+0xa39/0xd20 [ 1649.599894] should_failslab+0x5/0x10 [ 1649.599925] __kmalloc+0x72/0x440 [ 1649.599955] ext4_find_extent+0xa39/0xd20 [ 1649.599999] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1649.600045] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.600079] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.600110] ? lock_is_held_type+0xd7/0x130 [ 1649.600153] ? ext4_ext_release+0x10/0x10 [ 1649.600187] ? lock_acquire+0x1b2/0x530 [ 1649.600219] ? lock_release+0x750/0x750 [ 1649.600259] ? lock_is_held_type+0xd7/0x130 [ 1649.600306] ? down_write+0xde/0x150 [ 1649.600331] ? down_write_killable+0x170/0x170 [ 1649.600385] ext4_map_blocks+0x652/0x1970 [ 1649.600423] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.600458] ? lock_is_held_type+0xd7/0x130 [ 1649.600502] ext4_getblk+0x144/0x6b0 [ 1649.600527] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.600575] ext4_bread+0x2a/0x1c0 [ 1649.600600] ext4_append+0x155/0x380 [ 1649.600641] ext4_init_new_dir+0x25e/0x4d0 [ 1649.600679] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.600716] ? ext4_mkdir+0x6c3/0xb20 [ 1649.600759] ext4_mkdir+0x3cf/0xb20 [ 1649.600804] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.600835] ? inode_permission.part.0+0xb5/0x670 [ 1649.600872] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.600919] vfs_mkdir+0x1d0/0x3c0 [ 1649.600955] do_mkdirat+0x17b/0x2e0 [ 1649.600988] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.601026] ? do_file_open_root+0x590/0x590 [ 1649.601062] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.601097] ? getname_flags.part.0+0x1dd/0x4f0 [ 1649.601137] __x64_sys_mkdir+0xf2/0x140 [ 1649.601173] do_syscall_64+0x3b/0x90 [ 1649.601199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.601230] RIP: 0033:0x7fa9c2932c27 [ 1649.601246] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.601268] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.601290] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1649.601305] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.601318] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.601332] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.601346] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1649.601390] [ 1649.617260] loop5: detected capacity change from 0 to 256 [ 1649.648099] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1649.761559] loop7: detected capacity change from 0 to 256 [ 1649.767775] loop2: detected capacity change from 0 to 256 [ 1649.768768] FAT-fs (loop2): Unrecognized mount option "mé" or missing value [ 1649.769501] FAT-fs (loop7): bogus number of FAT sectors [ 1649.769524] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1649.789106] FAULT_INJECTION: forcing a failure. [ 1649.789106] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.789130] CPU: 0 PID: 7253 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.789145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.789155] Call Trace: [ 1649.789159] [ 1649.789165] dump_stack_lvl+0x8b/0xb3 [ 1649.789188] should_fail.cold+0x5/0xa [ 1649.789204] ? create_object.isra.0+0x3a/0xa20 [ 1649.789229] should_failslab+0x5/0x10 [ 1649.789249] kmem_cache_alloc+0x5b/0x480 [ 1649.789270] create_object.isra.0+0x3a/0xa20 [ 1649.789288] ? kasan_unpoison+0x23/0x50 [ 1649.789311] __kmalloc+0x25b/0x440 [ 1649.789328] ext4_find_extent+0xa39/0xd20 [ 1649.789357] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1649.789388] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.789412] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.789432] ? lock_is_held_type+0xd7/0x130 [ 1649.789459] ? ext4_ext_release+0x10/0x10 [ 1649.789478] ? lock_acquire+0x1b2/0x530 [ 1649.789499] ? lock_release+0x750/0x750 [ 1649.789524] ? lock_is_held_type+0xd7/0x130 [ 1649.789553] ? down_read+0x198/0x440 [ 1649.789569] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1649.789584] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1649.789609] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1649.789636] ext4_map_blocks+0x9c8/0x1970 [ 1649.789655] ? inode_free_by_rcu+0x20/0x20 [ 1649.789676] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.789697] ? lock_is_held_type+0xd7/0x130 [ 1649.789724] ext4_getblk+0x144/0x6b0 [ 1649.789740] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.789769] ext4_bread+0x2a/0x1c0 [ 1649.789784] ext4_append+0x155/0x380 [ 1649.789809] ext4_init_new_dir+0x25e/0x4d0 [ 1649.789834] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.789856] ? ext4_mkdir+0x6c3/0xb20 [ 1649.789884] ext4_mkdir+0x3cf/0xb20 [ 1649.789912] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.789931] ? inode_permission.part.0+0xb5/0x670 [ 1649.789954] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.789982] vfs_mkdir+0x1d0/0x3c0 [ 1649.790004] do_mkdirat+0x17b/0x2e0 [ 1649.790024] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.790048] ? do_file_open_root+0x590/0x590 [ 1649.790071] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.790093] ? getname_flags.part.0+0x1dd/0x4f0 [ 1649.790117] __x64_sys_mkdir+0xf2/0x140 [ 1649.790139] do_syscall_64+0x3b/0x90 [ 1649.790155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.790174] RIP: 0033:0x7fa9c2932c27 [ 1649.790185] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.790198] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.790212] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1649.790222] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.790230] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.790239] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.790247] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1649.790274] [ 1649.801793] loop2: detected capacity change from 0 to 256 [ 1649.802137] FAT-fs (loop2): Unrecognized mount option "mé" or missing value [ 1649.806640] FAT-fs (loop6): bogus number of reserved sectors [ 1649.806652] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1649.832091] FAULT_INJECTION: forcing a failure. [ 1649.832091] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.832127] CPU: 1 PID: 7260 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.832152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.832167] Call Trace: [ 1649.832173] [ 1649.832181] dump_stack_lvl+0x8b/0xb3 [ 1649.832216] should_fail.cold+0x5/0xa [ 1649.832241] ? create_object.isra.0+0x3a/0xa20 [ 1649.832279] should_failslab+0x5/0x10 [ 1649.832311] kmem_cache_alloc+0x5b/0x480 [ 1649.832343] create_object.isra.0+0x3a/0xa20 [ 1649.832401] ? kasan_unpoison+0x23/0x50 [ 1649.832438] kmem_cache_alloc+0x239/0x480 [ 1649.832469] ext4_mb_new_blocks+0x64b/0x4b60 [ 1649.832517] ? lock_is_held_type+0xd7/0x130 [ 1649.832557] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1649.832590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.832626] ? ext4_cache_extents+0x68/0x2d0 [ 1649.832654] ? ext4_discard_preallocations+0xe60/0xe60 [ 1649.832686] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1649.832720] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.832755] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1649.832790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.832824] ? ext4_inode_to_goal_block+0x320/0x430 [ 1649.832863] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1649.832909] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.832942] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.832973] ? lock_is_held_type+0xd7/0x130 [ 1649.833015] ? ext4_ext_release+0x10/0x10 [ 1649.833055] ? lock_release+0x750/0x750 [ 1649.833096] ? lock_is_held_type+0xd7/0x130 [ 1649.833146] ? down_write_killable+0x170/0x170 [ 1649.833189] ext4_map_blocks+0x652/0x1970 [ 1649.833225] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.833259] ? lock_is_held_type+0xd7/0x130 [ 1649.833303] ext4_getblk+0x144/0x6b0 [ 1649.833327] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.833375] ext4_bread+0x2a/0x1c0 [ 1649.833400] ext4_append+0x155/0x380 [ 1649.833440] ext4_init_new_dir+0x25e/0x4d0 [ 1649.833478] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.833515] ? ext4_mkdir+0x6c3/0xb20 [ 1649.833558] ext4_mkdir+0x3cf/0xb20 [ 1649.833603] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.833633] ? inode_permission.part.0+0xb5/0x670 [ 1649.833670] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.833715] vfs_mkdir+0x1d0/0x3c0 [ 1649.833751] do_mkdirat+0x17b/0x2e0 [ 1649.833784] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.833822] ? do_file_open_root+0x590/0x590 [ 1649.833859] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.833894] ? getname_flags.part.0+0x1dd/0x4f0 [ 1649.833934] __x64_sys_mkdir+0xf2/0x140 [ 1649.833969] do_syscall_64+0x3b/0x90 [ 1649.833996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.834027] RIP: 0033:0x7fe424088c27 [ 1649.834044] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.834066] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.834088] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1649.834103] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.834117] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.834131] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.834144] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1649.834188] [ 1649.846305] loop5: detected capacity change from 0 to 256 [ 1649.846374] FAULT_INJECTION: forcing a failure. [ 1649.846374] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.846459] CPU: 1 PID: 7264 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1649.846487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1649.846501] Call Trace: [ 1649.846506] [ 1649.846514] dump_stack_lvl+0x8b/0xb3 [ 1649.846543] should_fail.cold+0x5/0xa [ 1649.846567] ? __es_insert_extent+0x3a9/0x12f0 [ 1649.846598] should_failslab+0x5/0x10 [ 1649.846626] kmem_cache_alloc+0x5b/0x480 [ 1649.846657] __es_insert_extent+0x3a9/0x12f0 [ 1649.846685] ? do_raw_write_lock+0x11a/0x280 [ 1649.846719] ? do_raw_read_unlock+0x70/0x70 [ 1649.846768] ext4_es_insert_extent+0x2dc/0xbf0 [ 1649.846809] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1649.846838] ? lock_downgrade+0x6d0/0x6d0 [ 1649.846880] ? lock_is_held_type+0xd7/0x130 [ 1649.846916] ? __ext4_handle_dirty_metadata+0x720/0x720 [ 1649.846941] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1649.846988] ext4_ext_map_blocks+0x1a36/0x5cd0 [ 1649.847032] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.847066] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1649.847097] ? lock_is_held_type+0xd7/0x130 [ 1649.847139] ? ext4_ext_release+0x10/0x10 [ 1649.847170] ? lock_acquire+0x1b2/0x530 [ 1649.847202] ? lock_release+0x750/0x750 [ 1649.847242] ? lock_is_held_type+0xd7/0x130 [ 1649.847294] ? down_read+0x198/0x440 [ 1649.847318] ? rwsem_down_read_slowpath+0xac0/0xac0 [ 1649.847342] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1649.847378] ? ext4_es_lookup_extent+0xc4/0xc60 [ 1649.847423] ext4_map_blocks+0x9c8/0x1970 [ 1649.847450] ? inode_free_by_rcu+0x20/0x20 [ 1649.847482] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1649.847517] ? lock_is_held_type+0xd7/0x130 [ 1649.847562] ext4_getblk+0x144/0x6b0 [ 1649.847586] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1649.847634] ext4_bread+0x2a/0x1c0 [ 1649.847660] ext4_append+0x155/0x380 [ 1649.847700] ext4_init_new_dir+0x25e/0x4d0 [ 1649.847737] ? ext4_init_dot_dotdot+0x590/0x590 [ 1649.847774] ? ext4_mkdir+0x6c3/0xb20 [ 1649.847818] ext4_mkdir+0x3cf/0xb20 [ 1649.847863] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1649.847893] ? inode_permission.part.0+0xb5/0x670 [ 1649.847928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.847973] vfs_mkdir+0x1d0/0x3c0 [ 1649.848014] do_mkdirat+0x17b/0x2e0 [ 1649.848047] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1649.848085] ? do_file_open_root+0x590/0x590 [ 1649.848122] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1649.848156] ? getname_flags.part.0+0x1dd/0x4f0 [ 1649.848198] __x64_sys_mkdir+0xf2/0x140 [ 1649.848233] do_syscall_64+0x3b/0x90 [ 1649.848260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1649.848290] RIP: 0033:0x7faa30c96c27 [ 1649.848307] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1649.848328] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1649.848349] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1649.848363] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1649.848389] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1649.848402] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1649.848416] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1649.848460] [ 1649.853899] FAT-fs (loop0): bogus number of reserved sectors [ 1649.853917] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1649.863612] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1649.873994] FAT-fs (loop4): bogus number of reserved sectors [ 1649.874013] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1649.911018] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1661.471111] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:20:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 54) 00:20:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 60) 00:20:33 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:20:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:33 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 54) 00:20:33 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x64000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1668.643285] loop5: detected capacity change from 0 to 256 [ 1668.645856] loop7: detected capacity change from 0 to 256 [ 1668.648773] FAT-fs (loop7): bogus number of FAT sectors [ 1668.648798] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1668.654097] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.675680] FAULT_INJECTION: forcing a failure. [ 1668.675680] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.675716] CPU: 1 PID: 7282 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.675740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.675755] Call Trace: [ 1668.675761] [ 1668.675770] dump_stack_lvl+0x8b/0xb3 [ 1668.675804] should_fail.cold+0x5/0xa [ 1668.675829] ? jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1668.675859] should_failslab+0x5/0x10 [ 1668.675890] kmem_cache_alloc+0x5b/0x480 [ 1668.675909] ? mark_held_locks+0x9e/0xe0 [ 1668.675947] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1668.675979] jbd2_journal_get_create_access+0x40/0x560 [ 1668.676020] __ext4_journal_get_create_access+0x50/0x1f0 [ 1668.676055] ext4_getblk+0x33c/0x6b0 [ 1668.676080] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.676128] ext4_bread+0x2a/0x1c0 [ 1668.676153] ext4_append+0x155/0x380 [ 1668.676193] ext4_init_new_dir+0x25e/0x4d0 [ 1668.676232] ? ext4_init_dot_dotdot+0x590/0x590 00:20:33 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1668.676270] ? ext4_mkdir+0x6c3/0xb20 [ 1668.676314] ext4_mkdir+0x3cf/0xb20 [ 1668.676359] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.676399] ? inode_permission.part.0+0xb5/0x670 00:20:33 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80040000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1668.676437] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.676485] vfs_mkdir+0x1d0/0x3c0 [ 1668.676522] do_mkdirat+0x17b/0x2e0 [ 1668.676555] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.676594] ? do_file_open_root+0x590/0x590 00:20:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 55) [ 1668.676631] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.676692] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.676732] __x64_sys_mkdir+0xf2/0x140 [ 1668.676768] do_syscall_64+0x3b/0x90 [ 1668.676796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.676828] RIP: 0033:0x7fe424088c27 [ 1668.676845] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:20:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 55) [ 1668.676867] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.676890] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1668.676905] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.676919] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.676933] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 00:20:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 61) [ 1668.676947] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1668.676990] [ 1668.677179] ENOMEM in journal_alloc_journal_head, retrying. [ 1668.695793] FAULT_INJECTION: forcing a failure. [ 1668.695793] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.695813] CPU: 0 PID: 7286 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.695826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.695837] Call Trace: [ 1668.695841] [ 1668.695846] dump_stack_lvl+0x8b/0xb3 [ 1668.695872] should_fail.cold+0x5/0xa [ 1668.695886] ? ext4_mb_new_blocks+0x64b/0x4b60 00:20:34 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1668.695908] should_failslab+0x5/0x10 00:20:34 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1668.695927] kmem_cache_alloc+0x5b/0x480 [ 1668.695945] ext4_mb_new_blocks+0x64b/0x4b60 [ 1668.695970] ? lock_is_held_type+0xd7/0x130 [ 1668.695993] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1668.696012] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.696033] ? ext4_cache_extents+0x68/0x2d0 [ 1668.696049] ? ext4_discard_preallocations+0xe60/0xe60 00:20:34 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1668.696066] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.696086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.696104] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.696123] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.696143] ? ext4_inode_to_goal_block+0x320/0x430 [ 1668.696164] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1668.696187] ? mark_held_locks+0x9e/0xe0 [ 1668.696205] ? lockdep_hardirqs_on_prepare+0x400/0x400 00:20:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 56) [ 1668.696223] ? finish_task_switch.isra.0+0x226/0x880 [ 1668.696246] ? lockdep_hardirqs_on+0x79/0x100 [ 1668.696268] ? ext4_ext_release+0x10/0x10 [ 1668.696290] ? lock_release+0x750/0x750 [ 1668.696306] ? io_schedule_timeout+0x140/0x140 [ 1668.696330] ? lock_is_held_type+0xd7/0x130 [ 1668.696348] ? __cond_resched+0x13/0x20 [ 1668.696366] ? down_write_killable+0x170/0x170 [ 1668.696393] ext4_map_blocks+0x652/0x1970 [ 1668.696414] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1668.696432] ? lock_is_held_type+0xd7/0x130 [ 1668.696456] ext4_getblk+0x144/0x6b0 [ 1668.696469] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.696495] ext4_bread+0x2a/0x1c0 [ 1668.696509] ext4_append+0x155/0x380 [ 1668.696530] ext4_init_new_dir+0x25e/0x4d0 [ 1668.696552] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.696571] ? ext4_mkdir+0x6c3/0xb20 [ 1668.696595] ext4_mkdir+0x3cf/0xb20 [ 1668.696623] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.696658] ? inode_permission.part.0+0xb5/0x670 [ 1668.696680] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.696705] vfs_mkdir+0x1d0/0x3c0 [ 1668.696725] do_mkdirat+0x17b/0x2e0 [ 1668.696743] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.696763] ? do_file_open_root+0x590/0x590 [ 1668.696783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.696802] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.696824] __x64_sys_mkdir+0xf2/0x140 [ 1668.696843] do_syscall_64+0x3b/0x90 [ 1668.696857] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.696874] RIP: 0033:0x7faa30c96c27 [ 1668.696884] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.696896] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.696907] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1668.696916] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.696923] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.696931] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.696938] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1668.696961] [ 1668.702818] FAT-fs (loop0): bogus number of reserved sectors [ 1668.702838] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1668.705938] FAULT_INJECTION: forcing a failure. [ 1668.705938] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.705956] CPU: 0 PID: 7287 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.705968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.705977] Call Trace: [ 1668.705980] [ 1668.705984] dump_stack_lvl+0x8b/0xb3 [ 1668.706001] should_fail.cold+0x5/0xa [ 1668.706014] ? create_object.isra.0+0x3a/0xa20 [ 1668.706034] should_failslab+0x5/0x10 [ 1668.706050] kmem_cache_alloc+0x5b/0x480 [ 1668.706067] create_object.isra.0+0x3a/0xa20 [ 1668.706083] ? kasan_unpoison+0x23/0x50 [ 1668.706103] __kmalloc+0x25b/0x440 [ 1668.706119] ext4_find_extent+0xa39/0xd20 [ 1668.706142] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1668.706167] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.706185] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.706202] ? lock_is_held_type+0xd7/0x130 [ 1668.706224] ? ext4_ext_release+0x10/0x10 [ 1668.706243] ? lock_acquire+0x1b2/0x530 [ 1668.706260] ? lock_release+0x750/0x750 [ 1668.706281] ? lock_is_held_type+0xd7/0x130 [ 1668.706307] ? down_write+0xde/0x150 [ 1668.706319] ? down_write_killable+0x170/0x170 [ 1668.706342] ext4_map_blocks+0x652/0x1970 [ 1668.706361] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1668.706384] ? lock_is_held_type+0xd7/0x130 [ 1668.706408] ext4_getblk+0x144/0x6b0 [ 1668.706421] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.706447] ext4_bread+0x2a/0x1c0 [ 1668.706461] ext4_append+0x155/0x380 [ 1668.706482] ext4_init_new_dir+0x25e/0x4d0 [ 1668.706503] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.706523] ? ext4_mkdir+0x6c3/0xb20 [ 1668.706546] ext4_mkdir+0x3cf/0xb20 [ 1668.706570] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.706586] ? inode_permission.part.0+0xb5/0x670 [ 1668.706606] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.706630] vfs_mkdir+0x1d0/0x3c0 [ 1668.706649] do_mkdirat+0x17b/0x2e0 [ 1668.706667] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.706688] ? do_file_open_root+0x590/0x590 [ 1668.706708] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.706726] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.706748] __x64_sys_mkdir+0xf2/0x140 [ 1668.706767] do_syscall_64+0x3b/0x90 [ 1668.706781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.706797] RIP: 0033:0x7fa9c2932c27 [ 1668.706806] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.706817] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.706829] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1668.706837] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.706844] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.706851] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.706858] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1668.706882] [ 1668.715771] FAT-fs (loop6): bogus number of reserved sectors [ 1668.715783] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1668.733645] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.792856] loop7: detected capacity change from 0 to 256 [ 1668.797150] loop5: detected capacity change from 0 to 256 [ 1668.799150] FAT-fs (loop7): bogus number of FAT sectors [ 1668.799171] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1668.806897] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.843991] FAULT_INJECTION: forcing a failure. [ 1668.843991] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.844010] CPU: 0 PID: 7294 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.844023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.844032] Call Trace: [ 1668.844035] [ 1668.844040] dump_stack_lvl+0x8b/0xb3 [ 1668.844061] should_fail.cold+0x5/0xa [ 1668.844074] ? create_object.isra.0+0x3a/0xa20 [ 1668.844096] should_failslab+0x5/0x10 [ 1668.844114] kmem_cache_alloc+0x5b/0x480 [ 1668.844131] create_object.isra.0+0x3a/0xa20 [ 1668.844147] ? kasan_unpoison+0x23/0x50 [ 1668.844168] kmem_cache_alloc+0x239/0x480 [ 1668.844184] ext4_mb_new_blocks+0x64b/0x4b60 [ 1668.844210] ? lock_is_held_type+0xd7/0x130 [ 1668.844232] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1668.844251] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.844271] ? ext4_cache_extents+0x68/0x2d0 [ 1668.844286] ? ext4_discard_preallocations+0xe60/0xe60 [ 1668.844303] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.844322] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.844340] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.844359] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.844381] ? ext4_inode_to_goal_block+0x320/0x430 [ 1668.844402] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1668.844427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.844456] ? ext4_ext_release+0x10/0x10 [ 1668.844477] ? lock_release+0x750/0x750 [ 1668.844499] ? lock_is_held_type+0xd7/0x130 [ 1668.844526] ? down_write_killable+0x170/0x170 [ 1668.844550] ext4_map_blocks+0x652/0x1970 [ 1668.844570] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1668.844589] ? lock_is_held_type+0xd7/0x130 [ 1668.844613] ext4_getblk+0x144/0x6b0 [ 1668.844626] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.844661] ext4_bread+0x2a/0x1c0 [ 1668.844675] ext4_append+0x155/0x380 [ 1668.844697] ext4_init_new_dir+0x25e/0x4d0 [ 1668.844717] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.844737] ? ext4_mkdir+0x6c3/0xb20 [ 1668.844760] ext4_mkdir+0x3cf/0xb20 [ 1668.844785] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.844803] ? inode_permission.part.0+0xb5/0x670 [ 1668.844826] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.844850] vfs_mkdir+0x1d0/0x3c0 [ 1668.844870] do_mkdirat+0x17b/0x2e0 [ 1668.844889] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.844909] ? do_file_open_root+0x590/0x590 [ 1668.844928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.844947] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.844969] __x64_sys_mkdir+0xf2/0x140 [ 1668.844988] do_syscall_64+0x3b/0x90 [ 1668.845002] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.845019] RIP: 0033:0x7faa30c96c27 [ 1668.845028] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.845040] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.845052] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1668.845060] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.845067] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.845074] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.845082] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1668.845106] [ 1668.853104] FAT-fs (loop4): bogus number of reserved sectors [ 1668.853116] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1668.881557] FAULT_INJECTION: forcing a failure. [ 1668.881557] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.881593] CPU: 1 PID: 7297 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.881623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.881638] Call Trace: [ 1668.881645] [ 1668.881653] dump_stack_lvl+0x8b/0xb3 [ 1668.881688] should_fail.cold+0x5/0xa [ 1668.881713] ? create_object.isra.0+0x3a/0xa20 [ 1668.881750] should_failslab+0x5/0x10 [ 1668.881780] kmem_cache_alloc+0x5b/0x480 [ 1668.881812] create_object.isra.0+0x3a/0xa20 [ 1668.881842] ? kasan_unpoison+0x23/0x50 [ 1668.881880] __kmalloc+0x25b/0x440 [ 1668.881909] ext4_find_extent+0xa39/0xd20 [ 1668.881955] ext4_ext_map_blocks+0x1c8/0x5cd0 [ 1668.882002] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.882036] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.882068] ? lock_is_held_type+0xd7/0x130 [ 1668.882112] ? ext4_ext_release+0x10/0x10 [ 1668.882147] ? lock_acquire+0x1b2/0x530 [ 1668.882179] ? lock_release+0x750/0x750 [ 1668.882220] ? lock_is_held_type+0xd7/0x130 [ 1668.882268] ? down_write+0xde/0x150 [ 1668.882292] ? down_write_killable+0x170/0x170 [ 1668.882335] ext4_map_blocks+0x652/0x1970 [ 1668.882384] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1668.882420] ? lock_is_held_type+0xd7/0x130 [ 1668.882465] ext4_getblk+0x144/0x6b0 [ 1668.882490] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.882538] ext4_bread+0x2a/0x1c0 [ 1668.882564] ext4_append+0x155/0x380 [ 1668.882605] ext4_init_new_dir+0x25e/0x4d0 [ 1668.882644] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.882681] ? ext4_mkdir+0x6c3/0xb20 [ 1668.882726] ext4_mkdir+0x3cf/0xb20 [ 1668.882771] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.882802] ? inode_permission.part.0+0xb5/0x670 [ 1668.882839] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.882885] vfs_mkdir+0x1d0/0x3c0 [ 1668.882923] do_mkdirat+0x17b/0x2e0 [ 1668.882956] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.882995] ? do_file_open_root+0x590/0x590 [ 1668.883032] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.883068] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.883109] __x64_sys_mkdir+0xf2/0x140 [ 1668.883146] do_syscall_64+0x3b/0x90 [ 1668.883173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.883204] RIP: 0033:0x7fa9c2932c27 [ 1668.883221] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.883243] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.883265] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1668.883280] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.883293] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.883307] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.883321] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1668.883366] [ 1668.903753] loop2: detected capacity change from 0 to 256 [ 1668.904919] FAT-fs (loop6): bogus number of reserved sectors [ 1668.904939] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1668.906503] FAULT_INJECTION: forcing a failure. [ 1668.906503] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.906534] CPU: 1 PID: 7301 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.906557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.906573] Call Trace: [ 1668.906579] [ 1668.906586] dump_stack_lvl+0x8b/0xb3 [ 1668.906619] should_fail.cold+0x5/0xa [ 1668.906643] ? create_object.isra.0+0x3a/0xa20 [ 1668.906678] should_failslab+0x5/0x10 [ 1668.906709] kmem_cache_alloc+0x5b/0x480 [ 1668.906739] create_object.isra.0+0x3a/0xa20 [ 1668.906769] ? kasan_unpoison+0x23/0x50 [ 1668.906809] kmem_cache_alloc+0x239/0x480 [ 1668.906839] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1668.906871] jbd2_journal_get_create_access+0x40/0x560 [ 1668.906914] __ext4_journal_get_create_access+0x50/0x1f0 [ 1668.906950] ext4_getblk+0x33c/0x6b0 [ 1668.906974] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.907021] ext4_bread+0x2a/0x1c0 [ 1668.907047] ext4_append+0x155/0x380 [ 1668.907086] ext4_init_new_dir+0x25e/0x4d0 [ 1668.907124] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.907161] ? ext4_mkdir+0x6c3/0xb20 [ 1668.907204] ext4_mkdir+0x3cf/0xb20 [ 1668.907249] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.907279] ? inode_permission.part.0+0xb5/0x670 [ 1668.907315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.907360] vfs_mkdir+0x1d0/0x3c0 [ 1668.907397] do_mkdirat+0x17b/0x2e0 [ 1668.907430] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.907468] ? do_file_open_root+0x590/0x590 [ 1668.907504] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.907539] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.907579] __x64_sys_mkdir+0xf2/0x140 [ 1668.907615] do_syscall_64+0x3b/0x90 [ 1668.907642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.907673] RIP: 0033:0x7fe424088c27 [ 1668.907689] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.907711] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.907733] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe424088c27 [ 1668.907747] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.907761] RBP: 00007fe4215ff040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.907775] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.907788] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1668.907831] [ 1668.914632] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.917848] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1668.923678] FAT-fs (loop0): bogus number of reserved sectors [ 1668.923700] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1668.949833] loop7: detected capacity change from 0 to 256 [ 1668.956117] FAT-fs (loop7): bogus number of FAT sectors [ 1668.956139] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1668.969587] FAULT_INJECTION: forcing a failure. [ 1668.969587] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.969607] CPU: 0 PID: 7307 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1668.969621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1668.969630] Call Trace: [ 1668.969634] [ 1668.969640] dump_stack_lvl+0x8b/0xb3 [ 1668.969663] should_fail.cold+0x5/0xa [ 1668.969677] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 1668.969697] should_failslab+0x5/0x10 [ 1668.969715] kmem_cache_alloc+0x5b/0x480 [ 1668.969732] ext4_mb_new_blocks+0x222c/0x4b60 [ 1668.969757] ? lock_is_held_type+0xd7/0x130 [ 1668.969779] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1668.969797] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.969818] ? ext4_cache_extents+0x68/0x2d0 [ 1668.969833] ? ext4_discard_preallocations+0xe60/0xe60 [ 1668.969850] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.969869] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.969887] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1668.969906] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.969925] ? ext4_inode_to_goal_block+0x320/0x430 [ 1668.969946] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1668.969971] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.969989] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1668.970006] ? lock_is_held_type+0xd7/0x130 [ 1668.970028] ? ext4_ext_release+0x10/0x10 [ 1668.970050] ? lock_release+0x750/0x750 [ 1668.970072] ? lock_is_held_type+0xd7/0x130 [ 1668.970099] ? down_write_killable+0x170/0x170 [ 1668.970127] ext4_map_blocks+0x652/0x1970 [ 1668.970147] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1668.970166] ? lock_is_held_type+0xd7/0x130 [ 1668.970190] ext4_getblk+0x144/0x6b0 [ 1668.970203] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1668.970228] ext4_bread+0x2a/0x1c0 [ 1668.970242] ext4_append+0x155/0x380 [ 1668.970263] ext4_init_new_dir+0x25e/0x4d0 [ 1668.970284] ? ext4_init_dot_dotdot+0x590/0x590 [ 1668.970304] ? ext4_mkdir+0x6c3/0xb20 [ 1668.970327] ext4_mkdir+0x3cf/0xb20 [ 1668.970351] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1668.970367] ? inode_permission.part.0+0xb5/0x670 [ 1668.970388] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.970412] vfs_mkdir+0x1d0/0x3c0 [ 1668.970431] do_mkdirat+0x17b/0x2e0 [ 1668.970449] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1668.970470] ? do_file_open_root+0x590/0x590 [ 1668.970489] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1668.970508] ? getname_flags.part.0+0x1dd/0x4f0 [ 1668.970530] __x64_sys_mkdir+0xf2/0x140 [ 1668.970549] do_syscall_64+0x3b/0x90 [ 1668.970564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1668.970581] RIP: 0033:0x7faa30c96c27 [ 1668.970590] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1668.970602] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1668.970614] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1668.970623] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1668.970630] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1668.970638] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1668.970645] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1668.970668] [ 1681.460220] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:20:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 57) 00:20:56 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:20:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0x800}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004851}, 0x4000850) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x595a}, {0x6, 0x11, 0xffe0}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7}, {0x8}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa2010}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x40008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x16}, &(0x7f0000000280)=""/153, 0x99, &(0x7f00000001c0)=""/119, &(0x7f0000000340)=[r9], 0x1}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname}, {@cache_fscache}, {@dfltuid}]}}) 00:20:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8cffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:20:56 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:56 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:20:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 62) 00:20:56 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 56) [ 1691.360898] loop7: detected capacity change from 0 to 256 [ 1691.363646] FAT-fs (loop7): bogus number of FAT sectors [ 1691.363667] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1691.367355] FAULT_INJECTION: forcing a failure. [ 1691.367355] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.367440] CPU: 0 PID: 7325 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.367466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.367483] Call Trace: [ 1691.367490] [ 1691.367499] dump_stack_lvl+0x8b/0xb3 [ 1691.367534] should_fail.cold+0x5/0xa [ 1691.367565] should_failslab+0x5/0x10 [ 1691.367598] __kmalloc_track_caller+0x79/0x430 [ 1691.367637] ? strndup_user+0x70/0xe0 [ 1691.367677] memdup_user+0x22/0xd0 [ 1691.367712] strndup_user+0x70/0xe0 [ 1691.367748] __x64_sys_mount+0x133/0x300 [ 1691.367782] ? path_mount+0x1f80/0x1f80 [ 1691.367817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1691.367863] do_syscall_64+0x3b/0x90 [ 1691.367892] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:20:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf6ffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1691.367925] RIP: 0033:0x7fe42408b04a [ 1691.367943] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.367965] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1691.367989] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1691.368004] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1691.368019] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1691.368034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1691.368048] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1691.368089] [ 1691.387583] FAULT_INJECTION: forcing a failure. [ 1691.387583] name failslab, interval 1, probability 0, space 0, times 0 00:20:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 63) [ 1691.387619] CPU: 0 PID: 7329 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.387644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.387660] Call Trace: [ 1691.387666] [ 1691.387675] dump_stack_lvl+0x8b/0xb3 [ 1691.387709] should_fail.cold+0x5/0xa [ 1691.387735] ? create_object.isra.0+0x3a/0xa20 [ 1691.387773] should_failslab+0x5/0x10 [ 1691.387805] kmem_cache_alloc+0x5b/0x480 [ 1691.387838] create_object.isra.0+0x3a/0xa20 [ 1691.387869] ? kasan_unpoison+0x23/0x50 [ 1691.387907] kmem_cache_alloc+0x239/0x480 [ 1691.387940] ext4_mb_new_blocks+0x222c/0x4b60 00:20:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 64) [ 1691.387990] ? lock_is_held_type+0xd7/0x130 [ 1691.388032] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1691.388066] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.388104] ? ext4_cache_extents+0x68/0x2d0 [ 1691.388134] ? ext4_discard_preallocations+0xe60/0xe60 00:20:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1691.388167] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1691.388204] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.388242] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1691.388278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:20:56 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1691.388320] ? ext4_inode_to_goal_block+0x320/0x430 [ 1691.388366] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1691.388416] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1691.388451] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1691.388484] ? lock_is_held_type+0xd7/0x130 [ 1691.388529] ? ext4_ext_release+0x10/0x10 [ 1691.388573] ? lock_release+0x750/0x750 [ 1691.388616] ? lock_is_held_type+0xd7/0x130 [ 1691.388671] ? down_write_killable+0x170/0x170 [ 1691.388716] ext4_map_blocks+0x652/0x1970 [ 1691.388755] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1691.388792] ? lock_is_held_type+0xd7/0x130 [ 1691.388839] ext4_getblk+0x144/0x6b0 [ 1691.388865] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1691.388917] ext4_bread+0x2a/0x1c0 [ 1691.388944] ext4_append+0x155/0x380 [ 1691.389012] ext4_init_new_dir+0x25e/0x4d0 [ 1691.389053] ? ext4_init_dot_dotdot+0x590/0x590 [ 1691.389092] ? ext4_mkdir+0x6c3/0xb20 [ 1691.389139] ext4_mkdir+0x3cf/0xb20 [ 1691.389187] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1691.389220] ? inode_permission.part.0+0xb5/0x670 [ 1691.389258] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:20:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 65) 00:20:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 58) [ 1691.389306] vfs_mkdir+0x1d0/0x3c0 [ 1691.389345] do_mkdirat+0x17b/0x2e0 [ 1691.389380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1691.389420] ? do_file_open_root+0x590/0x590 [ 1691.389459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.389496] ? getname_flags.part.0+0x1dd/0x4f0 [ 1691.389539] __x64_sys_mkdir+0xf2/0x140 [ 1691.389577] do_syscall_64+0x3b/0x90 [ 1691.389606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.389638] RIP: 0033:0x7faa30c96c27 [ 1691.389656] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.389678] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1691.389701] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1691.389717] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1691.389731] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1691.389746] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1691.389760] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1691.389807] [ 1691.392651] FAULT_INJECTION: forcing a failure. [ 1691.392651] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.392682] CPU: 0 PID: 7327 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.392707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.392723] Call Trace: [ 1691.392729] [ 1691.392737] dump_stack_lvl+0x8b/0xb3 [ 1691.392767] should_fail.cold+0x5/0xa [ 1691.392792] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 1691.392827] should_failslab+0x5/0x10 [ 1691.392857] kmem_cache_alloc+0x5b/0x480 [ 1691.392894] ext4_mb_new_blocks+0x222c/0x4b60 [ 1691.392943] ? lock_is_held_type+0xd7/0x130 [ 1691.392994] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1691.393027] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.393064] ? ext4_cache_extents+0x68/0x2d0 [ 1691.393092] ? ext4_discard_preallocations+0xe60/0xe60 [ 1691.393126] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1691.393163] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.393200] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1691.393237] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.393274] ? ext4_inode_to_goal_block+0x320/0x430 [ 1691.393316] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1691.393371] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1691.393405] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1691.393438] ? lock_is_held_type+0xd7/0x130 [ 1691.393483] ? ext4_ext_release+0x10/0x10 [ 1691.393526] ? lock_release+0x750/0x750 [ 1691.393569] ? lock_is_held_type+0xd7/0x130 [ 1691.393624] ? down_write_killable+0x170/0x170 [ 1691.393669] ext4_map_blocks+0x652/0x1970 [ 1691.393707] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1691.393744] ? lock_is_held_type+0xd7/0x130 [ 1691.393792] ext4_getblk+0x144/0x6b0 [ 1691.393818] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1691.393869] ext4_bread+0x2a/0x1c0 [ 1691.393896] ext4_append+0x155/0x380 [ 1691.393939] ext4_init_new_dir+0x25e/0x4d0 [ 1691.393979] ? ext4_init_dot_dotdot+0x590/0x590 [ 1691.394019] ? ext4_mkdir+0x6c3/0xb20 [ 1691.394065] ext4_mkdir+0x3cf/0xb20 [ 1691.394113] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1691.394146] ? inode_permission.part.0+0xb5/0x670 [ 1691.394184] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.394232] vfs_mkdir+0x1d0/0x3c0 [ 1691.394271] do_mkdirat+0x17b/0x2e0 [ 1691.394307] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1691.394347] ? do_file_open_root+0x590/0x590 [ 1691.394386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.394423] ? getname_flags.part.0+0x1dd/0x4f0 [ 1691.394466] __x64_sys_mkdir+0xf2/0x140 [ 1691.394505] do_syscall_64+0x3b/0x90 [ 1691.394533] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.394565] RIP: 0033:0x7fa9c2932c27 [ 1691.394583] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.394609] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1691.394632] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1691.394647] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1691.394662] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1691.394676] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1691.394690] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1691.394737] [ 1691.417593] loop5: detected capacity change from 0 to 256 [ 1691.436157] FAT-fs (loop4): bogus number of reserved sectors [ 1691.436179] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1691.452622] FAULT_INJECTION: forcing a failure. [ 1691.452622] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.452644] CPU: 1 PID: 7335 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.452658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.452666] Call Trace: [ 1691.452671] [ 1691.452676] dump_stack_lvl+0x8b/0xb3 [ 1691.452700] should_fail.cold+0x5/0xa [ 1691.452713] ? create_object.isra.0+0x3a/0xa20 [ 1691.452732] should_failslab+0x5/0x10 [ 1691.452749] kmem_cache_alloc+0x5b/0x480 [ 1691.452765] create_object.isra.0+0x3a/0xa20 [ 1691.452781] ? kasan_unpoison+0x23/0x50 [ 1691.452800] __kmalloc_track_caller+0x25e/0x430 [ 1691.452819] ? strndup_user+0x70/0xe0 [ 1691.452839] memdup_user+0x22/0xd0 [ 1691.452856] strndup_user+0x70/0xe0 [ 1691.452874] __x64_sys_mount+0x133/0x300 [ 1691.452891] ? path_mount+0x1f80/0x1f80 [ 1691.452908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1691.452932] do_syscall_64+0x3b/0x90 [ 1691.452946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.452969] RIP: 0033:0x7fe42408b04a [ 1691.452979] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.452991] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1691.453003] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1691.453011] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1691.453018] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1691.453026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1691.453033] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1691.453053] [ 1691.453986] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1691.454834] FAT-fs (loop0): bogus number of reserved sectors [ 1691.454846] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1691.515002] FAULT_INJECTION: forcing a failure. [ 1691.515002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.515023] CPU: 1 PID: 7338 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.515036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.515043] Call Trace: [ 1691.515047] [ 1691.515052] dump_stack_lvl+0x8b/0xb3 [ 1691.515072] should_fail.cold+0x5/0xa [ 1691.515087] _copy_from_user+0x2a/0x170 [ 1691.515102] memdup_user+0x65/0xd0 [ 1691.515121] strndup_user+0x70/0xe0 [ 1691.515138] __x64_sys_mount+0x133/0x300 [ 1691.515155] ? path_mount+0x1f80/0x1f80 [ 1691.515172] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1691.515196] do_syscall_64+0x3b/0x90 [ 1691.515210] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.515226] RIP: 0033:0x7fe42408b04a [ 1691.515236] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.515248] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1691.515260] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1691.515268] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1691.515276] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1691.515283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1691.515291] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1691.515311] [ 1691.613340] loop7: detected capacity change from 0 to 256 [ 1691.626591] FAT-fs (loop7): bogus number of FAT sectors [ 1691.626613] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1691.634016] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1691.669153] FAULT_INJECTION: forcing a failure. [ 1691.669153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.669190] CPU: 0 PID: 7349 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.669215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.669231] Call Trace: [ 1691.669237] [ 1691.669246] dump_stack_lvl+0x8b/0xb3 [ 1691.669280] should_fail.cold+0x5/0xa [ 1691.669309] _copy_from_user+0x2a/0x170 [ 1691.669337] memdup_user+0x65/0xd0 [ 1691.669378] strndup_user+0x70/0xe0 [ 1691.669417] __x64_sys_mount+0x133/0x300 [ 1691.669450] ? path_mount+0x1f80/0x1f80 [ 1691.669485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1691.669531] do_syscall_64+0x3b/0x90 [ 1691.669559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.669591] RIP: 0033:0x7fe42408b04a [ 1691.669609] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.669631] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1691.669655] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1691.669671] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1691.669685] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1691.669700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1691.669714] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1691.669754] [ 1691.670326] FAULT_INJECTION: forcing a failure. [ 1691.670326] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.670355] CPU: 0 PID: 7348 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1691.670385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1691.670399] Call Trace: [ 1691.670404] [ 1691.670413] dump_stack_lvl+0x8b/0xb3 [ 1691.670442] should_fail.cold+0x5/0xa [ 1691.670467] ? __es_insert_extent+0x3a9/0x12f0 [ 1691.670501] should_failslab+0x5/0x10 [ 1691.670532] kmem_cache_alloc+0x5b/0x480 [ 1691.670565] __es_insert_extent+0x3a9/0x12f0 [ 1691.670624] ext4_es_insert_extent+0x2dc/0xbf0 [ 1691.670667] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1691.670719] ? down_write_killable+0x170/0x170 [ 1691.670764] ext4_map_blocks+0x8e1/0x1970 [ 1691.670803] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1691.670841] ? lock_is_held_type+0xd7/0x130 [ 1691.670889] ext4_getblk+0x144/0x6b0 [ 1691.670915] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1691.670967] ext4_bread+0x2a/0x1c0 [ 1691.670994] ext4_append+0x155/0x380 [ 1691.671037] ext4_init_new_dir+0x25e/0x4d0 [ 1691.671078] ? ext4_init_dot_dotdot+0x590/0x590 [ 1691.671118] ? ext4_mkdir+0x6c3/0xb20 [ 1691.671165] ext4_mkdir+0x3cf/0xb20 [ 1691.671214] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1691.671246] ? inode_permission.part.0+0xb5/0x670 [ 1691.671285] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.671335] vfs_mkdir+0x1d0/0x3c0 [ 1691.671374] do_mkdirat+0x17b/0x2e0 [ 1691.671410] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1691.671450] ? do_file_open_root+0x590/0x590 [ 1691.671490] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1691.671527] ? getname_flags.part.0+0x1dd/0x4f0 [ 1691.671571] __x64_sys_mkdir+0xf2/0x140 [ 1691.671609] do_syscall_64+0x3b/0x90 [ 1691.671637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1691.671669] RIP: 0033:0x7faa30c96c27 [ 1691.671687] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1691.671708] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1691.671730] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1691.671745] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1691.671759] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1691.671774] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1691.671788] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1691.671835] [ 1691.707472] FAT-fs (loop4): bogus number of reserved sectors [ 1691.707493] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1704.781802] kmemleak: 12 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:21:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 57) 00:21:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 59) 00:21:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 66) [ 1712.230664] loop7: detected capacity change from 0 to 256 00:21:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfeffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:21:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:17 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0x800}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004851}, 0x4000850) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x595a}, {0x6, 0x11, 0xffe0}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7}, {0x8}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa2010}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x40008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x16}, &(0x7f0000000280)=""/153, 0x99, &(0x7f00000001c0)=""/119, &(0x7f0000000340)=[r9], 0x1}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname}, {@cache_fscache}, {@dfltuid}]}}) 00:21:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1712.241744] FAULT_INJECTION: forcing a failure. [ 1712.241744] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.241763] CPU: 0 PID: 7365 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1712.241776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.241785] Call Trace: [ 1712.241788] [ 1712.241794] dump_stack_lvl+0x8b/0xb3 [ 1712.241814] should_fail.cold+0x5/0xa [ 1712.241827] ? create_object.isra.0+0x3a/0xa20 [ 1712.241847] should_failslab+0x5/0x10 [ 1712.241864] kmem_cache_alloc+0x5b/0x480 [ 1712.241880] create_object.isra.0+0x3a/0xa20 [ 1712.241896] ? kasan_unpoison+0x23/0x50 [ 1712.241916] kmem_cache_alloc+0x239/0x480 [ 1712.241932] ext4_mb_new_blocks+0x222c/0x4b60 [ 1712.241958] ? lock_is_held_type+0xd7/0x130 [ 1712.241980] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1712.241997] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.242017] ? ext4_cache_extents+0x68/0x2d0 [ 1712.242032] ? ext4_discard_preallocations+0xe60/0xe60 00:21:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 58) [ 1712.242049] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1712.242068] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.242086] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1712.242105] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.242123] ? ext4_inode_to_goal_block+0x320/0x430 00:21:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1712.242144] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1712.242169] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1712.242185] ? finish_task_switch.isra.0+0x226/0x880 [ 1712.242206] ? lockdep_hardirqs_on+0x79/0x100 [ 1712.242229] ? ext4_ext_release+0x10/0x10 [ 1712.242250] ? lock_release+0x750/0x750 [ 1712.242272] ? lock_is_held_type+0xd7/0x130 [ 1712.242303] ? down_write_killable+0x170/0x170 [ 1712.242326] ext4_map_blocks+0x652/0x1970 [ 1712.242345] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1712.242364] ? lock_is_held_type+0xd7/0x130 [ 1712.242387] ext4_getblk+0x144/0x6b0 [ 1712.242400] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1712.242426] ext4_bread+0x2a/0x1c0 [ 1712.242439] ext4_append+0x155/0x380 [ 1712.242461] ext4_init_new_dir+0x25e/0x4d0 [ 1712.242481] ? ext4_init_dot_dotdot+0x590/0x590 [ 1712.242501] ? ext4_mkdir+0x6c3/0xb20 00:21:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1712.242524] ext4_mkdir+0x3cf/0xb20 [ 1712.242548] ? ext4_init_new_dir+0x4d0/0x4d0 00:21:17 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1712.242564] ? inode_permission.part.0+0xb5/0x670 [ 1712.242584] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.242608] vfs_mkdir+0x1d0/0x3c0 [ 1712.242627] do_mkdirat+0x17b/0x2e0 [ 1712.242645] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 00:21:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 67) 00:21:17 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffff000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1712.242665] ? do_file_open_root+0x590/0x590 [ 1712.242685] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.242703] ? getname_flags.part.0+0x1dd/0x4f0 [ 1712.242725] __x64_sys_mkdir+0xf2/0x140 [ 1712.242744] do_syscall_64+0x3b/0x90 [ 1712.242758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.242774] RIP: 0033:0x7fa9c2932c27 [ 1712.242783] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.242795] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1712.242807] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1712.242815] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1712.242822] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1712.242829] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1712.242837] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1712.242860] [ 1712.253960] FAULT_INJECTION: forcing a failure. [ 1712.253960] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.253996] CPU: 1 PID: 7361 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1712.254023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.254039] Call Trace: [ 1712.254046] [ 1712.254054] dump_stack_lvl+0x8b/0xb3 [ 1712.254090] should_fail.cold+0x5/0xa [ 1712.254115] ? create_object.isra.0+0x3a/0xa20 [ 1712.254153] should_failslab+0x5/0x10 [ 1712.254185] kmem_cache_alloc+0x5b/0x480 [ 1712.254216] create_object.isra.0+0x3a/0xa20 [ 1712.254248] ? kasan_unpoison+0x23/0x50 [ 1712.254285] __kmalloc_track_caller+0x25e/0x430 [ 1712.254323] ? strndup_user+0x70/0xe0 [ 1712.254372] memdup_user+0x22/0xd0 [ 1712.254406] strndup_user+0x70/0xe0 [ 1712.254441] __x64_sys_mount+0x17c/0x300 [ 1712.254475] ? path_mount+0x1f80/0x1f80 [ 1712.254509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.254555] do_syscall_64+0x3b/0x90 [ 1712.254583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.254616] RIP: 0033:0x7fe42408b04a [ 1712.254634] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.254657] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1712.254681] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1712.254697] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1712.254713] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1712.254727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1712.254741] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1712.254782] [ 1712.263665] FAT-fs (loop6): bogus number of reserved sectors [ 1712.263677] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1712.263837] FAT-fs (loop7): bogus number of FAT sectors [ 1712.263854] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1712.277495] FAT-fs (loop0): bogus number of reserved sectors [ 1712.277519] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1712.282611] loop5: detected capacity change from 0 to 256 [ 1712.298908] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1712.303464] FAULT_INJECTION: forcing a failure. [ 1712.303464] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.303501] CPU: 1 PID: 7372 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1712.303526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.303543] Call Trace: [ 1712.303550] [ 1712.303558] dump_stack_lvl+0x8b/0xb3 [ 1712.303594] should_fail.cold+0x5/0xa [ 1712.303615] ? __es_tree_search.isra.0+0x1af/0x210 [ 1712.303649] ? create_object.isra.0+0x3a/0xa20 [ 1712.303686] should_failslab+0x5/0x10 [ 1712.303719] kmem_cache_alloc+0x5b/0x480 [ 1712.303755] create_object.isra.0+0x3a/0xa20 [ 1712.303786] ? kasan_unpoison+0x23/0x50 [ 1712.303825] kmem_cache_alloc+0x239/0x480 [ 1712.303858] __es_insert_extent+0x3a9/0x12f0 [ 1712.303916] ext4_es_insert_extent+0x2dc/0xbf0 [ 1712.303965] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1712.303997] ? __cond_resched+0x13/0x20 [ 1712.304037] ? down_write_killable+0x170/0x170 [ 1712.304083] ext4_map_blocks+0x8e1/0x1970 [ 1712.304122] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1712.304160] ? lock_is_held_type+0xd7/0x130 [ 1712.304208] ext4_getblk+0x144/0x6b0 [ 1712.304234] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1712.304286] ext4_bread+0x2a/0x1c0 [ 1712.304313] ext4_append+0x155/0x380 [ 1712.304356] ext4_init_new_dir+0x25e/0x4d0 [ 1712.304401] ? ext4_init_dot_dotdot+0x590/0x590 [ 1712.304441] ? ext4_mkdir+0x6c3/0xb20 [ 1712.304488] ext4_mkdir+0x3cf/0xb20 [ 1712.304536] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1712.304569] ? inode_permission.part.0+0xb5/0x670 [ 1712.304607] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.304658] vfs_mkdir+0x1d0/0x3c0 [ 1712.304697] do_mkdirat+0x17b/0x2e0 [ 1712.304733] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1712.304774] ? do_file_open_root+0x590/0x590 [ 1712.304813] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.304851] ? getname_flags.part.0+0x1dd/0x4f0 [ 1712.304894] __x64_sys_mkdir+0xf2/0x140 [ 1712.304932] do_syscall_64+0x3b/0x90 [ 1712.304961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.304993] RIP: 0033:0x7faa30c96c27 [ 1712.305012] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.305034] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1712.305057] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1712.305073] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1712.305087] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1712.305102] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1712.305116] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1712.305163] [ 1712.311687] FAT-fs (loop4): bogus number of reserved sectors [ 1712.311699] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1712.361499] FAULT_INJECTION: forcing a failure. [ 1712.361499] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.361520] CPU: 0 PID: 7377 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1712.361534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.361542] Call Trace: [ 1712.361546] [ 1712.361551] dump_stack_lvl+0x8b/0xb3 [ 1712.361572] should_fail.cold+0x5/0xa [ 1712.361586] ? __es_insert_extent+0x3a9/0x12f0 [ 1712.361604] should_failslab+0x5/0x10 [ 1712.361624] kmem_cache_alloc+0x5b/0x480 [ 1712.361642] __es_insert_extent+0x3a9/0x12f0 [ 1712.361671] ext4_es_insert_extent+0x2dc/0xbf0 [ 1712.361692] ? ext4_es_scan_clu+0x2e0/0x2e0 [ 1712.361718] ? down_write_killable+0x170/0x170 [ 1712.361743] ext4_map_blocks+0x8e1/0x1970 [ 1712.361762] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1712.361781] ? lock_is_held_type+0xd7/0x130 [ 1712.361806] ext4_getblk+0x144/0x6b0 [ 1712.361819] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1712.361845] ext4_bread+0x2a/0x1c0 [ 1712.361859] ext4_append+0x155/0x380 [ 1712.361880] ext4_init_new_dir+0x25e/0x4d0 [ 1712.361901] ? ext4_init_dot_dotdot+0x590/0x590 [ 1712.361921] ? ext4_mkdir+0x6c3/0xb20 [ 1712.361944] ext4_mkdir+0x3cf/0xb20 [ 1712.361968] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1712.361985] ? inode_permission.part.0+0xb5/0x670 [ 1712.362005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.362030] vfs_mkdir+0x1d0/0x3c0 [ 1712.362050] do_mkdirat+0x17b/0x2e0 [ 1712.362068] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1712.362088] ? do_file_open_root+0x590/0x590 [ 1712.362108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1712.362127] ? getname_flags.part.0+0x1dd/0x4f0 [ 1712.362149] __x64_sys_mkdir+0xf2/0x140 [ 1712.362168] do_syscall_64+0x3b/0x90 [ 1712.362182] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.362199] RIP: 0033:0x7fa9c2932c27 [ 1712.362208] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.362220] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1712.362232] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1712.362240] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1712.362247] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1712.362255] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1712.362262] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1712.362285] [ 1712.369169] loop7: detected capacity change from 0 to 256 [ 1712.369887] FAT-fs (loop6): bogus number of reserved sectors [ 1712.369897] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1712.376902] FAT-fs (loop7): bogus number of FAT sectors [ 1712.376923] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1712.385344] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1712.466698] loop5: detected capacity change from 0 to 256 [ 1712.477492] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1712.492196] FAULT_INJECTION: forcing a failure. [ 1712.492196] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.492214] CPU: 0 PID: 7388 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1712.492227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1712.492235] Call Trace: [ 1712.492239] [ 1712.492244] dump_stack_lvl+0x8b/0xb3 [ 1712.492265] should_fail.cold+0x5/0xa [ 1712.492278] ? create_object.isra.0+0x3a/0xa20 [ 1712.492298] should_failslab+0x5/0x10 [ 1712.492315] kmem_cache_alloc+0x5b/0x480 [ 1712.492331] create_object.isra.0+0x3a/0xa20 [ 1712.492346] ? kasan_unpoison+0x23/0x50 [ 1712.492369] __kmalloc_track_caller+0x25e/0x430 [ 1712.492388] ? strndup_user+0x70/0xe0 [ 1712.492409] memdup_user+0x22/0xd0 [ 1712.492426] strndup_user+0x70/0xe0 [ 1712.492443] __x64_sys_mount+0x133/0x300 [ 1712.492460] ? path_mount+0x1f80/0x1f80 [ 1712.492477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1712.492501] do_syscall_64+0x3b/0x90 [ 1712.492515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1712.492532] RIP: 0033:0x7fe42408b04a [ 1712.492542] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1712.492554] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1712.492566] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1712.492574] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1712.492582] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1712.492589] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1712.492597] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1712.492617] [ 1712.504051] FAT-fs (loop0): bogus number of reserved sectors [ 1712.504063] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1712.546527] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1726.519038] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1733.686819] FAULT_INJECTION: forcing a failure. 00:21:38 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 59) 00:21:38 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffdfc, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:21:38 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:21:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 60) 00:21:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001500)={0x14, r1, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfc}, {0x6, 0x11, 0x800}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004851}, 0x4000850) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}], 0x20}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd0, r6, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x595a}, {0x6, 0x11, 0xffe0}, {0x8, 0x13, 0x400}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x7}, {0x8}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa2010}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x40008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x16}, &(0x7f0000000280)=""/153, 0x99, &(0x7f00000001c0)=""/119, &(0x7f0000000340)=[r9], 0x1}, 0x58) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname}, {@cache_fscache}, {@dfltuid}]}}) 00:21:38 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 68) [ 1733.686819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.686841] CPU: 1 PID: 7400 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.686854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:21:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 69) [ 1733.686863] Call Trace: [ 1733.686867] [ 1733.686872] dump_stack_lvl+0x8b/0xb3 [ 1733.686893] should_fail.cold+0x5/0xa [ 1733.686909] _copy_from_user+0x2a/0x170 [ 1733.686925] memdup_user+0x65/0xd0 [ 1733.686946] strndup_user+0x70/0xe0 [ 1733.686964] __x64_sys_mount+0x133/0x300 [ 1733.686982] ? path_mount+0x1f80/0x1f80 [ 1733.686999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.687023] do_syscall_64+0x3b/0x90 [ 1733.687037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.687054] RIP: 0033:0x7fe42408b04a [ 1733.687063] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.687075] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1733.687087] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1733.687095] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1733.687103] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 00:21:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 61) [ 1733.687110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1733.687118] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1733.687138] 00:21:39 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 60) [ 1733.742213] FAULT_INJECTION: forcing a failure. [ 1733.742213] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.742232] CPU: 1 PID: 7408 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 00:21:39 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1733.742245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.742254] Call Trace: [ 1733.742257] [ 1733.742262] dump_stack_lvl+0x8b/0xb3 [ 1733.742279] should_fail.cold+0x5/0xa [ 1733.742290] ? __es_tree_search.isra.0+0x1af/0x210 [ 1733.742309] ? create_object.isra.0+0x3a/0xa20 [ 1733.742329] should_failslab+0x5/0x10 [ 1733.742349] kmem_cache_alloc+0x5b/0x480 [ 1733.742367] create_object.isra.0+0x3a/0xa20 [ 1733.742383] ? kasan_unpoison+0x23/0x50 00:21:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 70) [ 1733.742403] kmem_cache_alloc+0x239/0x480 [ 1733.742420] __es_insert_extent+0x3a9/0x12f0 [ 1733.742449] ext4_es_insert_extent+0x2dc/0xbf0 [ 1733.742471] ? ext4_es_scan_clu+0x2e0/0x2e0 00:21:39 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xffffff8c, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1733.742498] ? down_write_killable+0x170/0x170 [ 1733.742522] ext4_map_blocks+0x8e1/0x1970 [ 1733.742542] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1733.742561] ? lock_is_held_type+0xd7/0x130 [ 1733.742587] ext4_getblk+0x144/0x6b0 [ 1733.742601] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1733.742627] ext4_bread+0x2a/0x1c0 [ 1733.742640] ext4_append+0x155/0x380 [ 1733.742662] ext4_init_new_dir+0x25e/0x4d0 [ 1733.742683] ? ext4_init_dot_dotdot+0x590/0x590 [ 1733.742703] ? ext4_mkdir+0x6c3/0xb20 [ 1733.742727] ext4_mkdir+0x3cf/0xb20 [ 1733.742751] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1733.742768] ? inode_permission.part.0+0xb5/0x670 [ 1733.742788] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.742814] vfs_mkdir+0x1d0/0x3c0 [ 1733.742834] do_mkdirat+0x17b/0x2e0 [ 1733.742852] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 00:21:39 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1733.742872] ? do_file_open_root+0x590/0x590 [ 1733.742892] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.742911] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.742932] __x64_sys_mkdir+0xf2/0x140 [ 1733.742951] do_syscall_64+0x3b/0x90 [ 1733.742966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.742982] RIP: 0033:0x7fa9c2932c27 [ 1733.742991] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.743002] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1733.743013] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1733.743021] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1733.743028] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1733.743036] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1733.743043] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1733.743067] [ 1733.743259] FAULT_INJECTION: forcing a failure. [ 1733.743259] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.743275] CPU: 1 PID: 7402 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.743288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.743297] Call Trace: [ 1733.743301] [ 1733.743305] dump_stack_lvl+0x8b/0xb3 [ 1733.743321] should_fail.cold+0x5/0xa [ 1733.743335] ? ext4_mb_new_blocks+0x222c/0x4b60 [ 1733.743356] should_failslab+0x5/0x10 [ 1733.743371] kmem_cache_alloc+0x5b/0x480 [ 1733.743388] ext4_mb_new_blocks+0x222c/0x4b60 [ 1733.743414] ? lock_is_held_type+0xd7/0x130 [ 1733.743435] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1733.743454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.743473] ? ext4_cache_extents+0x68/0x2d0 [ 1733.743489] ? ext4_discard_preallocations+0xe60/0xe60 [ 1733.743507] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1733.743527] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.743547] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1733.743567] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.743587] ? ext4_inode_to_goal_block+0x320/0x430 [ 1733.743610] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1733.743636] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1733.743656] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1733.743675] ? lock_is_held_type+0xd7/0x130 [ 1733.743699] ? ext4_ext_release+0x10/0x10 [ 1733.743722] ? lock_release+0x750/0x750 [ 1733.743745] ? lock_is_held_type+0xd7/0x130 [ 1733.743774] ? down_write_killable+0x170/0x170 [ 1733.743797] ext4_map_blocks+0x652/0x1970 [ 1733.743818] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1733.743838] ? lock_is_held_type+0xd7/0x130 [ 1733.743864] ext4_getblk+0x144/0x6b0 [ 1733.743877] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1733.743904] ext4_bread+0x2a/0x1c0 [ 1733.743918] ext4_append+0x155/0x380 [ 1733.743941] ext4_init_new_dir+0x25e/0x4d0 [ 1733.743963] ? ext4_init_dot_dotdot+0x590/0x590 [ 1733.743983] ? ext4_mkdir+0x6c3/0xb20 [ 1733.744008] ext4_mkdir+0x3cf/0xb20 [ 1733.744034] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1733.744051] ? inode_permission.part.0+0xb5/0x670 [ 1733.744070] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.744096] vfs_mkdir+0x1d0/0x3c0 [ 1733.744116] do_mkdirat+0x17b/0x2e0 [ 1733.744135] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.744157] ? do_file_open_root+0x590/0x590 [ 1733.744178] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.744198] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.744221] __x64_sys_mkdir+0xf2/0x140 [ 1733.744241] do_syscall_64+0x3b/0x90 [ 1733.744256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.744273] RIP: 0033:0x7faa30c96c27 [ 1733.744282] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.744294] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1733.744306] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1733.744314] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1733.744323] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1733.744331] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1733.744338] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1733.744362] [ 1733.747864] loop7: detected capacity change from 0 to 256 [ 1733.753498] FAT-fs (loop6): bogus number of reserved sectors [ 1733.753510] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1733.753643] FAT-fs (loop7): bogus number of FAT sectors [ 1733.753662] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1733.789618] loop5: detected capacity change from 0 to 256 [ 1733.801637] FAULT_INJECTION: forcing a failure. [ 1733.801637] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.801656] CPU: 1 PID: 7416 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.801669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.801679] Call Trace: [ 1733.801682] [ 1733.801688] dump_stack_lvl+0x8b/0xb3 [ 1733.801706] should_fail.cold+0x5/0xa [ 1733.801719] ? copy_mount_options+0x55/0x180 [ 1733.801735] should_failslab+0x5/0x10 [ 1733.801752] kmem_cache_alloc_trace+0x55/0x3c0 [ 1733.801764] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.801788] copy_mount_options+0x55/0x180 [ 1733.801804] __x64_sys_mount+0x1a8/0x300 [ 1733.801821] ? path_mount+0x1f80/0x1f80 [ 1733.801838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.801862] do_syscall_64+0x3b/0x90 [ 1733.801876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.801893] RIP: 0033:0x7fe42408b04a [ 1733.801902] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.801913] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1733.801925] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1733.801933] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1733.801940] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1733.801948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1733.801955] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1733.801976] [ 1733.826332] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1733.882051] FAULT_INJECTION: forcing a failure. [ 1733.882051] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.882117] CPU: 0 PID: 7418 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.882145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.882163] Call Trace: [ 1733.882170] [ 1733.882180] dump_stack_lvl+0x8b/0xb3 [ 1733.882219] should_fail.cold+0x5/0xa [ 1733.882247] ? create_object.isra.0+0x3a/0xa20 [ 1733.882290] should_failslab+0x5/0x10 [ 1733.882325] kmem_cache_alloc+0x5b/0x480 [ 1733.882366] create_object.isra.0+0x3a/0xa20 [ 1733.882406] ? kasan_unpoison+0x23/0x50 [ 1733.882450] kmem_cache_alloc+0x239/0x480 [ 1733.882486] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1733.882524] jbd2_journal_get_create_access+0x40/0x560 [ 1733.882573] __ext4_journal_get_create_access+0x50/0x1f0 [ 1733.882615] ext4_getblk+0x33c/0x6b0 [ 1733.882645] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1733.882701] ext4_bread+0x2a/0x1c0 [ 1733.882731] ext4_append+0x155/0x380 [ 1733.882779] ext4_init_new_dir+0x25e/0x4d0 [ 1733.882824] ? ext4_init_dot_dotdot+0x590/0x590 [ 1733.882869] ? ext4_mkdir+0x6c3/0xb20 [ 1733.882921] ext4_mkdir+0x3cf/0xb20 [ 1733.882974] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1733.883011] ? inode_permission.part.0+0xb5/0x670 [ 1733.883054] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.883109] vfs_mkdir+0x1d0/0x3c0 [ 1733.883153] do_mkdirat+0x17b/0x2e0 [ 1733.883192] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.883239] ? do_file_open_root+0x590/0x590 [ 1733.883283] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.883325] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.883373] __x64_sys_mkdir+0xf2/0x140 [ 1733.883415] do_syscall_64+0x3b/0x90 [ 1733.883447] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.883485] RIP: 0033:0x7faa30c96c27 [ 1733.883504] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.883529] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1733.883554] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1733.883572] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1733.883587] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1733.883604] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1733.883619] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1733.883670] [ 1733.887885] FAULT_INJECTION: forcing a failure. [ 1733.887885] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.887905] CPU: 1 PID: 7422 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.887919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.887928] Call Trace: [ 1733.887932] [ 1733.887937] dump_stack_lvl+0x8b/0xb3 [ 1733.887959] should_fail.cold+0x5/0xa [ 1733.887973] ? jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1733.887992] should_failslab+0x5/0x10 [ 1733.888010] kmem_cache_alloc+0x5b/0x480 [ 1733.888021] ? mark_held_locks+0x9e/0xe0 [ 1733.888043] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1733.888064] jbd2_journal_get_create_access+0x40/0x560 [ 1733.888089] __ext4_journal_get_create_access+0x50/0x1f0 [ 1733.888109] ext4_getblk+0x33c/0x6b0 [ 1733.888123] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1733.888149] ext4_bread+0x2a/0x1c0 [ 1733.888162] ext4_append+0x155/0x380 [ 1733.888184] ext4_init_new_dir+0x25e/0x4d0 [ 1733.888205] ? ext4_init_dot_dotdot+0x590/0x590 [ 1733.888226] ? ext4_mkdir+0x6c3/0xb20 [ 1733.888249] ext4_mkdir+0x3cf/0xb20 [ 1733.888273] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1733.888290] ? inode_permission.part.0+0xb5/0x670 [ 1733.888311] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.888337] vfs_mkdir+0x1d0/0x3c0 [ 1733.888357] do_mkdirat+0x17b/0x2e0 [ 1733.888375] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.888395] ? do_file_open_root+0x590/0x590 [ 1733.888415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.888434] ? getname_flags.part.0+0x1dd/0x4f0 [ 1733.888460] __x64_sys_mkdir+0xf2/0x140 [ 1733.888479] do_syscall_64+0x3b/0x90 [ 1733.888495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.888513] RIP: 0033:0x7fa9c2932c27 [ 1733.888522] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.888534] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1733.888546] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1733.888554] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1733.888562] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1733.888570] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1733.888578] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1733.888601] [ 1733.888722] ENOMEM in journal_alloc_journal_head, retrying. [ 1733.892544] loop7: detected capacity change from 0 to 256 [ 1733.898617] FAT-fs (loop6): bogus number of reserved sectors [ 1733.898629] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1733.905148] FAT-fs (loop7): bogus number of FAT sectors [ 1733.905167] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1733.912418] FAT-fs (loop4): bogus number of reserved sectors [ 1733.912438] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1733.931632] FAULT_INJECTION: forcing a failure. [ 1733.931632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1733.931650] CPU: 1 PID: 7426 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1733.931662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1733.931670] Call Trace: [ 1733.931674] [ 1733.931679] dump_stack_lvl+0x8b/0xb3 [ 1733.931696] should_fail.cold+0x5/0xa [ 1733.931712] _copy_from_user+0x2a/0x170 [ 1733.931728] memdup_user+0x65/0xd0 [ 1733.931749] strndup_user+0x70/0xe0 [ 1733.931767] __x64_sys_mount+0x17c/0x300 [ 1733.931785] ? path_mount+0x1f80/0x1f80 [ 1733.931802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1733.931825] do_syscall_64+0x3b/0x90 [ 1733.931839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1733.931856] RIP: 0033:0x7fe42408b04a [ 1733.931865] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1733.931877] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1733.931889] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1733.931898] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1733.931906] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1733.931914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1733.931921] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1733.931942] [ 1733.999735] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1745.624013] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:21:58 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 61) 00:21:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:58 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:21:58 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1752.807414] FAULT_INJECTION: forcing a failure. [ 1752.807414] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.807435] CPU: 1 PID: 7441 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.807449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.807458] Call Trace: [ 1752.807461] [ 1752.807467] dump_stack_lvl+0x8b/0xb3 [ 1752.807488] should_fail.cold+0x5/0xa [ 1752.807502] ? create_object.isra.0+0x3a/0xa20 00:21:58 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:21:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 71) [ 1752.807524] should_failslab+0x5/0x10 [ 1752.807542] kmem_cache_alloc+0x5b/0x480 [ 1752.807559] create_object.isra.0+0x3a/0xa20 [ 1752.807575] ? kasan_unpoison+0x23/0x50 00:21:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 62) 00:21:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffff6, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1752.807595] kmem_cache_alloc+0x239/0x480 [ 1752.807611] ext4_mb_new_blocks+0x222c/0x4b60 [ 1752.807637] ? lock_is_held_type+0xd7/0x130 [ 1752.807660] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1752.807678] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.807698] ? ext4_cache_extents+0x68/0x2d0 [ 1752.807713] ? ext4_discard_preallocations+0xe60/0xe60 [ 1752.807730] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1752.807749] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.807767] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1752.807786] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.807804] ? ext4_inode_to_goal_block+0x320/0x430 [ 1752.807825] ext4_ext_map_blocks+0x1fb0/0x5cd0 [ 1752.807849] ? lockdep_hardirqs_on+0x79/0x100 00:21:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 63) 00:21:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 72) [ 1752.807866] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1752.807897] ? ext4_ext_release+0x10/0x10 [ 1752.807911] ? lock_acquire+0x1db/0x530 [ 1752.807933] ? lock_release+0x750/0x750 [ 1752.807955] ? lock_is_held_type+0xd7/0x130 [ 1752.807982] ? down_write_killable+0x170/0x170 00:21:58 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:21:58 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 62) [ 1752.808005] ext4_map_blocks+0x652/0x1970 [ 1752.808024] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1752.808043] ? lock_is_held_type+0xd7/0x130 [ 1752.808067] ext4_getblk+0x144/0x6b0 [ 1752.808080] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1752.808105] ext4_bread+0x2a/0x1c0 [ 1752.808119] ext4_append+0x155/0x380 [ 1752.808140] ext4_init_new_dir+0x25e/0x4d0 [ 1752.808162] ? ext4_init_dot_dotdot+0x590/0x590 [ 1752.808181] ? ext4_mkdir+0x6c3/0xb20 [ 1752.808205] ext4_mkdir+0x3cf/0xb20 00:21:58 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffe, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1752.808229] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1752.808245] ? inode_permission.part.0+0xb5/0x670 [ 1752.808265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.808290] vfs_mkdir+0x1d0/0x3c0 [ 1752.808309] do_mkdirat+0x17b/0x2e0 [ 1752.808327] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.808348] ? do_file_open_root+0x590/0x590 [ 1752.808368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.808386] ? getname_flags.part.0+0x1dd/0x4f0 [ 1752.808408] __x64_sys_mkdir+0xf2/0x140 [ 1752.808427] do_syscall_64+0x3b/0x90 [ 1752.808441] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.808458] RIP: 0033:0x7fa9c2932c27 [ 1752.808467] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:21:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 73) 00:21:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 64) [ 1752.808479] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1752.808490] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1752.808498] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1752.808506] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff 00:21:58 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1752.808514] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1752.808521] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1752.808545] [ 1752.817288] loop7: detected capacity change from 0 to 256 [ 1752.832417] FAULT_INJECTION: forcing a failure. [ 1752.832417] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.832433] CPU: 1 PID: 7449 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.832446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.832454] Call Trace: [ 1752.832457] [ 1752.832462] dump_stack_lvl+0x8b/0xb3 [ 1752.832478] should_fail.cold+0x5/0xa [ 1752.832491] ? jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1752.832507] should_failslab+0x5/0x10 [ 1752.832524] kmem_cache_alloc+0x5b/0x480 [ 1752.832540] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1752.832557] jbd2_journal_get_create_access+0x40/0x560 [ 1752.832580] __ext4_journal_get_create_access+0x50/0x1f0 [ 1752.832599] ext4_getblk+0x33c/0x6b0 [ 1752.832606] loop5: detected capacity change from 0 to 256 [ 1752.832612] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1752.832641] ext4_bread+0x2a/0x1c0 [ 1752.832655] ext4_append+0x155/0x380 [ 1752.832677] ext4_init_new_dir+0x25e/0x4d0 [ 1752.832697] ? ext4_init_dot_dotdot+0x590/0x590 [ 1752.832717] ? ext4_mkdir+0x6c3/0xb20 [ 1752.832740] ext4_mkdir+0x3cf/0xb20 [ 1752.832764] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1752.832780] ? inode_permission.part.0+0xb5/0x670 [ 1752.832800] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.832824] vfs_mkdir+0x1d0/0x3c0 [ 1752.832843] do_mkdirat+0x17b/0x2e0 [ 1752.832861] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.832882] ? do_file_open_root+0x590/0x590 [ 1752.832901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.832921] ? getname_flags.part.0+0x1dd/0x4f0 [ 1752.832945] __x64_sys_mkdir+0xf2/0x140 [ 1752.832964] do_syscall_64+0x3b/0x90 [ 1752.832978] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.832995] RIP: 0033:0x7faa30c96c27 [ 1752.833004] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.833015] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1752.833026] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1752.833034] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1752.833042] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1752.833049] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1752.833056] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1752.833079] [ 1752.833096] ENOMEM in journal_alloc_journal_head, retrying. [ 1752.834498] FAULT_INJECTION: forcing a failure. [ 1752.834498] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.834513] CPU: 1 PID: 7450 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.834526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.834533] Call Trace: [ 1752.834536] [ 1752.834540] dump_stack_lvl+0x8b/0xb3 [ 1752.834555] should_fail.cold+0x5/0xa [ 1752.834567] ? getname_flags.part.0+0x50/0x4f0 [ 1752.834585] should_failslab+0x5/0x10 [ 1752.834600] kmem_cache_alloc+0x5b/0x480 [ 1752.834610] ? asm_exc_page_fault+0x1e/0x30 [ 1752.834630] getname_flags.part.0+0x50/0x4f0 [ 1752.834650] getname_flags+0x9a/0xe0 [ 1752.834668] user_path_at_empty+0x2b/0x60 [ 1752.834687] __x64_sys_mount+0x1e9/0x300 [ 1752.834704] ? path_mount+0x1f80/0x1f80 [ 1752.834721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.834744] do_syscall_64+0x3b/0x90 [ 1752.834758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.834774] RIP: 0033:0x7fe42408b04a [ 1752.834783] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.834794] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1752.834805] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1752.834813] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1752.834821] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1752.834829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1752.834836] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1752.834856] [ 1752.841516] FAT-fs (loop7): bogus number of FAT sectors [ 1752.841537] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1752.841716] FAT-fs (loop6): bogus number of reserved sectors [ 1752.841724] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1752.841830] FAT-fs (loop4): bogus number of reserved sectors [ 1752.841837] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1752.862796] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1752.875971] loop2: detected capacity change from 0 to 256 [ 1752.902293] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1752.955223] FAULT_INJECTION: forcing a failure. [ 1752.955223] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.955261] CPU: 1 PID: 7459 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.955275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.955283] Call Trace: [ 1752.955286] [ 1752.955292] dump_stack_lvl+0x8b/0xb3 [ 1752.955313] should_fail.cold+0x5/0xa [ 1752.955327] ? create_object.isra.0+0x3a/0xa20 [ 1752.955350] should_failslab+0x5/0x10 [ 1752.955367] kmem_cache_alloc+0x5b/0x480 [ 1752.955384] create_object.isra.0+0x3a/0xa20 [ 1752.955400] ? kasan_unpoison+0x23/0x50 [ 1752.955419] __kmalloc_track_caller+0x25e/0x430 [ 1752.955439] ? strndup_user+0x70/0xe0 [ 1752.955460] memdup_user+0x22/0xd0 [ 1752.955477] strndup_user+0x70/0xe0 [ 1752.955495] __x64_sys_mount+0x133/0x300 [ 1752.955512] ? path_mount+0x1f80/0x1f80 [ 1752.955530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.955554] do_syscall_64+0x3b/0x90 [ 1752.955568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.955585] RIP: 0033:0x7faa30c9904a [ 1752.955595] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.955607] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1752.955619] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1752.955627] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1752.955634] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1752.955642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1752.955649] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1752.955670] [ 1752.958998] FAULT_INJECTION: forcing a failure. [ 1752.958998] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.959014] CPU: 1 PID: 7458 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.959027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.959034] Call Trace: [ 1752.959037] [ 1752.959041] dump_stack_lvl+0x8b/0xb3 [ 1752.959056] should_fail.cold+0x5/0xa [ 1752.959069] ? create_object.isra.0+0x3a/0xa20 [ 1752.959087] should_failslab+0x5/0x10 [ 1752.959102] kmem_cache_alloc+0x5b/0x480 [ 1752.959117] create_object.isra.0+0x3a/0xa20 [ 1752.959133] ? kasan_unpoison+0x23/0x50 [ 1752.959151] kmem_cache_alloc+0x239/0x480 [ 1752.959166] getname_flags.part.0+0x50/0x4f0 [ 1752.959188] getname_flags+0x9a/0xe0 [ 1752.959206] user_path_at_empty+0x2b/0x60 [ 1752.959225] __x64_sys_mount+0x1e9/0x300 [ 1752.959242] ? path_mount+0x1f80/0x1f80 [ 1752.959259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.959282] do_syscall_64+0x3b/0x90 [ 1752.959296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.959312] RIP: 0033:0x7fe42408b04a [ 1752.959321] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.959333] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1752.959347] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1752.959355] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1752.959362] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1752.959369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1752.959376] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1752.959397] [ 1752.962237] FAT-fs (loop0): bogus number of reserved sectors [ 1752.962248] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1752.963322] FAT-fs (loop4): bogus number of reserved sectors [ 1752.963333] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1752.963578] FAULT_INJECTION: forcing a failure. [ 1752.963578] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.963593] CPU: 1 PID: 7461 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1752.963606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1752.963613] Call Trace: [ 1752.963616] [ 1752.963623] dump_stack_lvl+0x8b/0xb3 [ 1752.963638] should_fail.cold+0x5/0xa [ 1752.963650] ? create_object.isra.0+0x3a/0xa20 [ 1752.963668] should_failslab+0x5/0x10 [ 1752.963684] kmem_cache_alloc+0x5b/0x480 [ 1752.963700] create_object.isra.0+0x3a/0xa20 [ 1752.963716] ? kasan_unpoison+0x23/0x50 [ 1752.963735] kmem_cache_alloc+0x239/0x480 [ 1752.963751] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1752.963770] jbd2_journal_get_create_access+0x40/0x560 [ 1752.963792] __ext4_journal_get_create_access+0x50/0x1f0 [ 1752.963812] ext4_getblk+0x33c/0x6b0 [ 1752.963826] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1752.963851] ext4_bread+0x2a/0x1c0 [ 1752.963864] ext4_append+0x155/0x380 [ 1752.963887] ext4_init_new_dir+0x25e/0x4d0 [ 1752.963907] ? ext4_init_dot_dotdot+0x590/0x590 [ 1752.963927] ? ext4_mkdir+0x6c3/0xb20 [ 1752.963950] ext4_mkdir+0x3cf/0xb20 [ 1752.963974] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1752.963990] ? inode_permission.part.0+0xb5/0x670 [ 1752.964010] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.964035] vfs_mkdir+0x1d0/0x3c0 [ 1752.964055] do_mkdirat+0x17b/0x2e0 [ 1752.964073] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.964093] ? do_file_open_root+0x590/0x590 [ 1752.964113] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.964131] ? getname_flags.part.0+0x1dd/0x4f0 [ 1752.964153] __x64_sys_mkdir+0xf2/0x140 [ 1752.964172] do_syscall_64+0x3b/0x90 [ 1752.964186] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1752.964202] RIP: 0033:0x7fa9c2932c27 [ 1752.964211] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.964223] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1752.964234] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c2932c27 [ 1752.964242] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1752.964250] RBP: 00007fa9bfea9040 R08: 0000000000000000 R09: ffffffffffffffff [ 1752.964257] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1752.964264] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1752.964287] [ 1752.967672] FAT-fs (loop6): bogus number of reserved sectors [ 1752.967682] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1752.974033] loop7: detected capacity change from 0 to 256 [ 1752.983818] FAT-fs (loop7): bogus number of FAT sectors [ 1752.983838] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1753.058830] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1753.077506] FAULT_INJECTION: forcing a failure. [ 1753.077506] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.077526] CPU: 1 PID: 7468 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1753.077540] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1753.077549] Call Trace: [ 1753.077553] [ 1753.077558] dump_stack_lvl+0x8b/0xb3 [ 1753.077579] should_fail.cold+0x5/0xa [ 1753.077595] should_failslab+0x5/0x10 [ 1753.077614] __kmalloc_track_caller+0x79/0x430 [ 1753.077634] ? strndup_user+0x70/0xe0 [ 1753.077655] memdup_user+0x22/0xd0 [ 1753.077672] strndup_user+0x70/0xe0 [ 1753.077690] __x64_sys_mount+0x133/0x300 [ 1753.077708] ? path_mount+0x1f80/0x1f80 [ 1753.077726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.077750] do_syscall_64+0x3b/0x90 [ 1753.077764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1753.077781] RIP: 0033:0x7faa30c9904a [ 1753.077790] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.077803] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1753.077815] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1753.077823] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1753.077834] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1753.077842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1753.077855] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1753.077875] [ 1753.079642] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1753.080077] FAULT_INJECTION: forcing a failure. [ 1753.080077] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.080093] CPU: 1 PID: 7467 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1753.080106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1753.080114] Call Trace: [ 1753.080117] [ 1753.080121] dump_stack_lvl+0x8b/0xb3 [ 1753.080136] should_fail.cold+0x5/0xa [ 1753.080149] ? create_object.isra.0+0x3a/0xa20 [ 1753.080169] should_failslab+0x5/0x10 [ 1753.080184] kmem_cache_alloc+0x5b/0x480 [ 1753.080199] create_object.isra.0+0x3a/0xa20 [ 1753.080215] ? kasan_unpoison+0x23/0x50 [ 1753.080234] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1753.080250] copy_mount_options+0x55/0x180 [ 1753.080266] __x64_sys_mount+0x1a8/0x300 [ 1753.080282] ? path_mount+0x1f80/0x1f80 [ 1753.080300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1753.080322] do_syscall_64+0x3b/0x90 [ 1753.080336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1753.080356] RIP: 0033:0x7fe42408b04a [ 1753.080364] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1753.080376] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1753.080387] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1753.080396] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1753.080404] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1753.080412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1753.080419] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1753.080441] [ 1753.089699] FAT-fs (loop0): bogus number of reserved sectors [ 1753.089712] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1766.511511] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:22:18 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 63) 00:22:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:22:18 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:22:18 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:22:18 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:22:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 65) 00:22:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 74) 00:22:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1773.709306] FAULT_INJECTION: forcing a failure. [ 1773.709306] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.709388] CPU: 1 PID: 7488 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1773.709417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1773.709435] Call Trace: [ 1773.709442] [ 1773.709452] dump_stack_lvl+0x8b/0xb3 [ 1773.709493] should_fail.cold+0x5/0xa [ 1773.709522] ? create_object.isra.0+0x3a/0xa20 [ 1773.709566] should_failslab+0x5/0x10 [ 1773.709602] kmem_cache_alloc+0x5b/0x480 [ 1773.709638] create_object.isra.0+0x3a/0xa20 [ 1773.709674] ? kasan_unpoison+0x23/0x50 [ 1773.709722] kmem_cache_alloc+0x239/0x480 [ 1773.709758] jbd2_journal_add_journal_head+0x1cb/0x5c0 [ 1773.709796] jbd2_journal_get_create_access+0x40/0x560 [ 1773.709845] __ext4_journal_get_create_access+0x50/0x1f0 [ 1773.709887] ext4_getblk+0x33c/0x6b0 [ 1773.709917] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1773.709973] ext4_bread+0x2a/0x1c0 [ 1773.710002] ext4_append+0x155/0x380 [ 1773.710055] ext4_init_new_dir+0x25e/0x4d0 [ 1773.710101] ? ext4_init_dot_dotdot+0x590/0x590 00:22:19 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 64) 00:22:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1773.710178] ? ext4_mkdir+0x6c3/0xb20 [ 1773.710230] ext4_mkdir+0x3cf/0xb20 [ 1773.710283] ? ext4_init_new_dir+0x4d0/0x4d0 [ 1773.710319] ? inode_permission.part.0+0xb5/0x670 [ 1773.710363] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:22:19 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1773.710423] vfs_mkdir+0x1d0/0x3c0 [ 1773.710467] do_mkdirat+0x17b/0x2e0 [ 1773.710500] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1773.710530] ? do_file_open_root+0x590/0x590 [ 1773.710558] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1773.710584] ? getname_flags.part.0+0x1dd/0x4f0 [ 1773.710613] __x64_sys_mkdir+0xf2/0x140 [ 1773.710640] do_syscall_64+0x3b/0x90 [ 1773.710661] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:22:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 66) [ 1773.710685] RIP: 0033:0x7faa30c96c27 [ 1773.710698] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.710714] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1773.710730] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c96c27 [ 1773.710741] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1773.710751] RBP: 00007faa2e20d040 R08: 0000000000000000 R09: ffffffffffffffff [ 1773.710761] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 1773.710771] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1773.710803] [ 1773.712383] FAT-fs (loop4): bogus number of reserved sectors [ 1773.712399] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1773.714625] FAULT_INJECTION: forcing a failure. [ 1773.714625] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.714648] CPU: 1 PID: 7491 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1773.714665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1773.714681] Call Trace: [ 1773.714685] [ 1773.714691] dump_stack_lvl+0x8b/0xb3 [ 1773.714711] should_fail.cold+0x5/0xa [ 1773.714729] ? create_object.isra.0+0x3a/0xa20 [ 1773.714754] should_failslab+0x5/0x10 [ 1773.714776] kmem_cache_alloc+0x5b/0x480 [ 1773.714797] create_object.isra.0+0x3a/0xa20 [ 1773.714820] ? kasan_unpoison+0x23/0x50 [ 1773.714845] __kmalloc_track_caller+0x25e/0x430 [ 1773.714872] ? strndup_user+0x70/0xe0 [ 1773.714902] memdup_user+0x22/0xd0 [ 1773.714926] strndup_user+0x70/0xe0 [ 1773.714950] __x64_sys_mount+0x133/0x300 [ 1773.714974] ? path_mount+0x1f80/0x1f80 [ 1773.714998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.715030] do_syscall_64+0x3b/0x90 [ 1773.715049] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1773.715071] RIP: 0033:0x7fa9c293504a [ 1773.715084] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:22:19 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1773.715100] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1773.715115] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a 00:22:19 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1773.715127] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1773.715137] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1773.715148] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1773.715158] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1773.715187] [ 1773.716002] FAT-fs (loop6): bogus number of reserved sectors [ 1773.716016] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1773.730953] loop5: detected capacity change from 0 to 256 [ 1773.733526] loop2: detected capacity change from 0 to 256 [ 1773.736290] loop7: detected capacity change from 0 to 256 [ 1773.737778] FAT-fs (loop7): bogus number of FAT sectors [ 1773.737808] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1773.759216] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1773.770794] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1773.777803] FAULT_INJECTION: forcing a failure. [ 1773.777803] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.777834] CPU: 0 PID: 7493 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1773.777859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:22:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 75) 00:22:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1773.777874] Call Trace: [ 1773.777880] [ 1773.777888] dump_stack_lvl+0x8b/0xb3 [ 1773.777921] should_fail.cold+0x5/0xa [ 1773.777944] ? alloc_fs_context+0x58/0x9d0 [ 1773.777977] should_failslab+0x5/0x10 [ 1773.778007] kmem_cache_alloc_trace+0x55/0x3c0 00:22:19 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1773.778037] alloc_fs_context+0x58/0x9d0 [ 1773.778075] path_mount+0xa4d/0x1f80 00:22:19 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 65) [ 1773.778109] ? kasan_quarantine_put+0x87/0x1e0 [ 1773.778154] ? finish_automount+0xa20/0xa20 [ 1773.778181] ? kmem_cache_free+0xe0/0x420 [ 1773.778208] ? putname+0xfe/0x140 [ 1773.778247] __x64_sys_mount+0x27e/0x300 [ 1773.778277] ? path_mount+0x1f80/0x1f80 [ 1773.778309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.778357] do_syscall_64+0x3b/0x90 00:22:19 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1773.778382] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1773.778413] RIP: 0033:0x7fe42408b04a [ 1773.778429] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.778450] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1773.778471] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1773.778486] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 00:22:19 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf0ffffffffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1773.778500] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1773.778514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1773.778527] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1773.778564] [ 1773.837572] loop7: detected capacity change from 0 to 256 [ 1773.840558] FAT-fs (loop7): bogus number of FAT sectors [ 1773.840580] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1773.881574] FAULT_INJECTION: forcing a failure. [ 1773.881574] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.881593] CPU: 1 PID: 7501 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1773.881606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1773.881615] Call Trace: [ 1773.881618] [ 1773.881623] dump_stack_lvl+0x8b/0xb3 [ 1773.881643] should_fail.cold+0x5/0xa [ 1773.881658] should_failslab+0x5/0x10 [ 1773.881677] __kmalloc_track_caller+0x79/0x430 [ 1773.881698] ? strndup_user+0x70/0xe0 [ 1773.881719] memdup_user+0x22/0xd0 [ 1773.881736] strndup_user+0x70/0xe0 [ 1773.881753] __x64_sys_mount+0x133/0x300 [ 1773.881772] ? path_mount+0x1f80/0x1f80 [ 1773.881789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.881813] do_syscall_64+0x3b/0x90 [ 1773.881827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1773.881845] RIP: 0033:0x7fa9c293504a [ 1773.881854] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.881866] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1773.881877] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1773.881885] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1773.881893] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1773.881901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1773.881908] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1773.881928] [ 1773.885723] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1773.945092] FAULT_INJECTION: forcing a failure. [ 1773.945092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.945129] CPU: 0 PID: 7503 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1773.945153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1773.945168] Call Trace: [ 1773.945175] [ 1773.945183] dump_stack_lvl+0x8b/0xb3 [ 1773.945217] should_fail.cold+0x5/0xa [ 1773.945245] _copy_from_user+0x2a/0x170 [ 1773.945271] memdup_user+0x65/0xd0 [ 1773.945304] strndup_user+0x70/0xe0 [ 1773.945343] __x64_sys_mount+0x133/0x300 [ 1773.945375] ? path_mount+0x1f80/0x1f80 [ 1773.945407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.945450] do_syscall_64+0x3b/0x90 [ 1773.945476] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1773.945506] RIP: 0033:0x7faa30c9904a [ 1773.945523] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.945544] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1773.945566] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1773.945580] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1773.945594] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1773.945609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1773.945622] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1773.945659] [ 1773.957237] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1773.966159] loop2: detected capacity change from 0 to 256 [ 1773.977982] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1773.981901] loop7: detected capacity change from 0 to 256 [ 1774.014046] FAT-fs (loop7): bogus number of FAT sectors [ 1774.014067] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1774.020866] FAULT_INJECTION: forcing a failure. [ 1774.020866] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.020901] CPU: 1 PID: 7513 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1774.020916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1774.020925] Call Trace: [ 1774.020929] [ 1774.020935] dump_stack_lvl+0x8b/0xb3 [ 1774.020956] should_fail.cold+0x5/0xa [ 1774.020970] ? create_object.isra.0+0x3a/0xa20 [ 1774.020991] should_failslab+0x5/0x10 [ 1774.021009] kmem_cache_alloc+0x5b/0x480 [ 1774.021025] create_object.isra.0+0x3a/0xa20 [ 1774.021045] ? kasan_unpoison+0x23/0x50 [ 1774.021064] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1774.021080] alloc_fs_context+0x58/0x9d0 [ 1774.021103] path_mount+0xa4d/0x1f80 [ 1774.021125] ? kasan_quarantine_put+0x87/0x1e0 [ 1774.021143] ? finish_automount+0xa20/0xa20 [ 1774.021158] ? kmem_cache_free+0xe0/0x420 [ 1774.021172] ? putname+0xfe/0x140 [ 1774.021193] __x64_sys_mount+0x27e/0x300 [ 1774.021210] ? path_mount+0x1f80/0x1f80 [ 1774.021228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.021252] do_syscall_64+0x3b/0x90 [ 1774.021266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1774.021283] RIP: 0033:0x7fe42408b04a [ 1774.021293] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.021304] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1774.021316] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1774.021325] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1774.021333] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1774.021341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1774.021348] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1774.021369] [ 1774.022858] loop5: detected capacity change from 0 to 256 [ 1774.025916] FAT-fs (loop0): bogus number of reserved sectors [ 1774.025928] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1774.032584] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1774.054470] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1774.107421] FAULT_INJECTION: forcing a failure. [ 1774.107421] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.107455] CPU: 0 PID: 7518 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1774.107479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1774.107493] Call Trace: [ 1774.107499] [ 1774.107507] dump_stack_lvl+0x8b/0xb3 [ 1774.107543] should_fail.cold+0x5/0xa [ 1774.107571] should_failslab+0x5/0x10 [ 1774.107602] __kmalloc_track_caller+0x79/0x430 [ 1774.107638] ? strndup_user+0x70/0xe0 [ 1774.107676] memdup_user+0x22/0xd0 [ 1774.107708] strndup_user+0x70/0xe0 [ 1774.107741] __x64_sys_mount+0x17c/0x300 [ 1774.107773] ? path_mount+0x1f80/0x1f80 [ 1774.107805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.107848] do_syscall_64+0x3b/0x90 [ 1774.107873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1774.107904] RIP: 0033:0x7fa9c293504a [ 1774.107921] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.107942] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1774.107964] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1774.107979] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1774.107993] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1774.108007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1774.108021] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1774.108058] [ 1774.120996] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1774.160097] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1787.854560] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:22:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 67) 00:22:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 66) 00:22:40 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x0, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:22:40 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1795.379767] loop7: detected capacity change from 0 to 256 [ 1795.381858] FAULT_INJECTION: forcing a failure. [ 1795.381858] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.381881] CPU: 1 PID: 7530 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.381894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:22:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 76) [ 1795.381903] Call Trace: [ 1795.381907] [ 1795.381913] dump_stack_lvl+0x8b/0xb3 [ 1795.381934] should_fail.cold+0x5/0xa [ 1795.381948] ? create_object.isra.0+0x3a/0xa20 [ 1795.381969] should_failslab+0x5/0x10 [ 1795.381987] kmem_cache_alloc+0x5b/0x480 [ 1795.382003] create_object.isra.0+0x3a/0xa20 00:22:40 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1795.382021] ? kasan_unpoison+0x23/0x50 [ 1795.382041] __kmalloc_track_caller+0x25e/0x430 00:22:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x100000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:22:40 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1795.382062] ? strndup_user+0x70/0xe0 [ 1795.382083] memdup_user+0x22/0xd0 [ 1795.382100] strndup_user+0x70/0xe0 [ 1795.382118] __x64_sys_mount+0x17c/0x300 [ 1795.382135] ? path_mount+0x1f80/0x1f80 [ 1795.382153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.382177] do_syscall_64+0x3b/0x90 [ 1795.382193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.382211] RIP: 0033:0x7fa9c293504a [ 1795.382221] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.382235] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.382248] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a 00:22:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 77) [ 1795.382257] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1795.382266] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 00:22:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 67) [ 1795.382275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.382283] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1795.382305] [ 1795.388033] loop5: detected capacity change from 0 to 256 [ 1795.396680] FAT-fs (loop7): bogus number of FAT sectors 00:22:40 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1795.396729] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1795.399599] FAULT_INJECTION: forcing a failure. [ 1795.399599] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.399620] CPU: 1 PID: 7533 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.399637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:22:40 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1795.399648] Call Trace: [ 1795.399652] [ 1795.399658] dump_stack_lvl+0x8b/0xb3 00:22:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 68) [ 1795.399679] should_fail.cold+0x5/0xa [ 1795.399697] ? alloc_fs_context+0x58/0x9d0 [ 1795.399719] should_failslab+0x5/0x10 [ 1795.399739] kmem_cache_alloc_trace+0x55/0x3c0 [ 1795.399758] alloc_fs_context+0x58/0x9d0 [ 1795.399781] path_mount+0xa4d/0x1f80 [ 1795.399805] ? kasan_quarantine_put+0x87/0x1e0 [ 1795.399828] ? finish_automount+0xa20/0xa20 00:22:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1795.399848] ? kmem_cache_free+0xe0/0x420 [ 1795.399869] ? putname+0xfe/0x140 [ 1795.399897] __x64_sys_mount+0x27e/0x300 [ 1795.399919] ? path_mount+0x1f80/0x1f80 [ 1795.399942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.399971] do_syscall_64+0x3b/0x90 00:22:40 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1795.399990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.400011] RIP: 0033:0x7fe42408b04a [ 1795.400023] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.400039] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.400055] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1795.400066] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 00:22:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 68) [ 1795.400077] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1795.400088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.400098] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1795.400125] [ 1795.404995] FAT-fs (loop6): bogus number of reserved sectors [ 1795.405008] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1795.417953] loop2: detected capacity change from 0 to 256 [ 1795.422867] FAULT_INJECTION: forcing a failure. [ 1795.422867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.422902] CPU: 0 PID: 7541 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.422929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1795.422945] Call Trace: [ 1795.422952] [ 1795.422961] dump_stack_lvl+0x8b/0xb3 [ 1795.422997] should_fail.cold+0x5/0xa [ 1795.423028] _copy_from_user+0x2a/0x170 [ 1795.423058] memdup_user+0x65/0xd0 [ 1795.423095] strndup_user+0x70/0xe0 [ 1795.423131] __x64_sys_mount+0x17c/0x300 [ 1795.423168] ? path_mount+0x1f80/0x1f80 [ 1795.423203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.423252] do_syscall_64+0x3b/0x90 [ 1795.423281] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.423315] RIP: 0033:0x7faa30c9904a [ 1795.423341] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.423364] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.423388] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1795.423405] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1795.423420] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1795.423435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.423450] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1795.423493] [ 1795.428652] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1795.442587] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1795.468526] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1795.498128] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1795.525053] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1795.567303] FAULT_INJECTION: forcing a failure. [ 1795.567303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.567328] CPU: 1 PID: 7546 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.567342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1795.567350] Call Trace: [ 1795.567354] [ 1795.567359] dump_stack_lvl+0x8b/0xb3 [ 1795.567379] should_fail.cold+0x5/0xa [ 1795.567395] _copy_from_user+0x2a/0x170 [ 1795.567410] memdup_user+0x65/0xd0 [ 1795.567429] strndup_user+0x70/0xe0 [ 1795.567446] __x64_sys_mount+0x17c/0x300 [ 1795.567464] ? path_mount+0x1f80/0x1f80 [ 1795.567481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.567505] do_syscall_64+0x3b/0x90 [ 1795.567519] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.567536] RIP: 0033:0x7fa9c293504a [ 1795.567545] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.567557] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.567569] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1795.567577] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1795.567585] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1795.567592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.567599] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1795.567619] [ 1795.571301] FAULT_INJECTION: forcing a failure. [ 1795.571301] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.571320] CPU: 1 PID: 7545 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.571342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1795.571352] Call Trace: [ 1795.571356] [ 1795.571362] dump_stack_lvl+0x8b/0xb3 [ 1795.571382] should_fail.cold+0x5/0xa [ 1795.571399] ? create_object.isra.0+0x3a/0xa20 [ 1795.571424] should_failslab+0x5/0x10 [ 1795.571446] kmem_cache_alloc+0x5b/0x480 [ 1795.571468] create_object.isra.0+0x3a/0xa20 [ 1795.571487] ? kasan_unpoison+0x23/0x50 [ 1795.571513] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1795.571534] legacy_init_fs_context+0x40/0xe0 [ 1795.571556] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1795.571577] alloc_fs_context+0x563/0x9d0 [ 1795.571605] path_mount+0xa4d/0x1f80 [ 1795.571626] ? kasan_quarantine_put+0x87/0x1e0 [ 1795.571647] ? finish_automount+0xa20/0xa20 [ 1795.571664] ? kmem_cache_free+0xe0/0x420 [ 1795.571683] ? putname+0xfe/0x140 [ 1795.571712] __x64_sys_mount+0x27e/0x300 [ 1795.571735] ? path_mount+0x1f80/0x1f80 [ 1795.571758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.571788] do_syscall_64+0x3b/0x90 [ 1795.571807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.571829] RIP: 0033:0x7fe42408b04a [ 1795.571839] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.571854] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.571868] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1795.571879] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1795.571889] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1795.571899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.571909] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1795.571936] [ 1795.580900] FAT-fs (loop0): bogus number of reserved sectors [ 1795.580912] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1795.616136] loop5: detected capacity change from 0 to 256 [ 1795.626548] FAULT_INJECTION: forcing a failure. [ 1795.626548] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.626567] CPU: 1 PID: 7556 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.626581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1795.626590] Call Trace: [ 1795.626594] [ 1795.626599] dump_stack_lvl+0x8b/0xb3 [ 1795.626619] should_fail.cold+0x5/0xa [ 1795.626632] ? copy_mount_options+0x55/0x180 [ 1795.626647] should_failslab+0x5/0x10 [ 1795.626664] kmem_cache_alloc_trace+0x55/0x3c0 [ 1795.626675] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1795.626700] copy_mount_options+0x55/0x180 [ 1795.626716] __x64_sys_mount+0x1a8/0x300 [ 1795.626733] ? path_mount+0x1f80/0x1f80 [ 1795.626750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.626773] do_syscall_64+0x3b/0x90 [ 1795.626787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.626804] RIP: 0033:0x7faa30c9904a [ 1795.626813] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.626824] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.626836] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1795.626844] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1795.626852] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1795.626860] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.626867] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1795.626887] [ 1795.637638] loop7: detected capacity change from 0 to 256 [ 1795.644965] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1795.648166] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1795.663742] FAT-fs (loop7): bogus number of FAT sectors [ 1795.663756] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1795.671890] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1795.714098] FAULT_INJECTION: forcing a failure. [ 1795.714098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1795.714119] CPU: 1 PID: 7559 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1795.714132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1795.714141] Call Trace: [ 1795.714145] [ 1795.714151] dump_stack_lvl+0x8b/0xb3 [ 1795.714170] should_fail.cold+0x5/0xa [ 1795.714186] _copy_from_user+0x2a/0x170 [ 1795.714201] memdup_user+0x65/0xd0 [ 1795.714219] strndup_user+0x70/0xe0 [ 1795.714237] __x64_sys_mount+0x17c/0x300 [ 1795.714255] ? path_mount+0x1f80/0x1f80 [ 1795.714272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1795.714297] do_syscall_64+0x3b/0x90 [ 1795.714311] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1795.714331] RIP: 0033:0x7fa9c293504a [ 1795.714341] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1795.714353] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1795.714365] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1795.714373] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1795.714380] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1795.714388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1795.714395] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1795.714416] [ 1795.729897] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1808.047003] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:23:00 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 69) 00:23:00 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:00 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 69) 00:23:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 78) 00:23:00 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x300000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:23:00 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1815.628961] FAULT_INJECTION: forcing a failure. [ 1815.628961] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.628996] CPU: 0 PID: 7577 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.629021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1815.629037] Call Trace: [ 1815.629044] [ 1815.629052] dump_stack_lvl+0x8b/0xb3 [ 1815.629087] should_fail.cold+0x5/0xa [ 1815.629112] ? create_object.isra.0+0x3a/0xa20 [ 1815.629152] should_failslab+0x5/0x10 [ 1815.629188] kmem_cache_alloc+0x5b/0x480 [ 1815.629234] create_object.isra.0+0x3a/0xa20 [ 1815.629268] ? kasan_unpoison+0x23/0x50 [ 1815.629305] __kmalloc_track_caller+0x25e/0x430 [ 1815.629348] ? strndup_user+0x70/0xe0 [ 1815.629388] memdup_user+0x22/0xd0 [ 1815.629422] strndup_user+0x70/0xe0 [ 1815.629457] __x64_sys_mount+0x133/0x300 [ 1815.629490] ? path_mount+0x1f80/0x1f80 [ 1815.629524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.629570] do_syscall_64+0x3b/0x90 [ 1815.629598] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.629631] RIP: 0033:0x7faa30c9904a [ 1815.629649] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.629672] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.629696] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1815.629711] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1815.629727] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1815.629741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.629755] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1815.629797] [ 1815.633222] loop7: detected capacity change from 0 to 256 [ 1815.635294] loop5: detected capacity change from 0 to 256 [ 1815.638727] FAULT_INJECTION: forcing a failure. [ 1815.638727] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.638787] CPU: 1 PID: 7581 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.638813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:23:01 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1815.638831] Call Trace: [ 1815.638838] [ 1815.638847] dump_stack_lvl+0x8b/0xb3 [ 1815.638883] should_fail.cold+0x5/0xa [ 1815.638909] ? create_object.isra.0+0x3a/0xa20 [ 1815.638948] should_failslab+0x5/0x10 [ 1815.638981] kmem_cache_alloc+0x5b/0x480 00:23:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 79) 00:23:01 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 70) [ 1815.639013] create_object.isra.0+0x3a/0xa20 [ 1815.639045] ? kasan_unpoison+0x23/0x50 [ 1815.639083] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1815.639115] copy_mount_options+0x55/0x180 [ 1815.639149] __x64_sys_mount+0x1a8/0x300 [ 1815.639188] ? path_mount+0x1f80/0x1f80 [ 1815.639222] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.639271] do_syscall_64+0x3b/0x90 00:23:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 70) [ 1815.639299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.639334] RIP: 0033:0x7fa9c293504a [ 1815.639352] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.639380] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.639404] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1815.639421] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1815.639436] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1815.639451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.639465] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1815.639507] [ 1815.642819] FAULT_INJECTION: forcing a failure. [ 1815.642819] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.642854] CPU: 1 PID: 7580 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.642878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1815.642893] Call Trace: [ 1815.642899] [ 1815.642909] dump_stack_lvl+0x8b/0xb3 [ 1815.642945] should_fail.cold+0x5/0xa [ 1815.642974] should_failslab+0x5/0x10 [ 1815.643012] __kmalloc_track_caller+0x79/0x430 [ 1815.643049] ? vfs_parse_fs_string+0xc0/0x150 [ 1815.643095] kmemdup_nul+0x2d/0xa0 [ 1815.643130] vfs_parse_fs_string+0xc0/0x150 [ 1815.643163] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1815.643196] ? __kasan_kmalloc+0x81/0xa0 [ 1815.643225] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1815.643262] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1815.643301] ? alloc_fs_context+0x5ac/0x9d0 [ 1815.643348] path_mount+0x612/0x1f80 [ 1815.643390] ? kasan_quarantine_put+0x87/0x1e0 [ 1815.643431] ? finish_automount+0xa20/0xa20 [ 1815.643461] ? kmem_cache_free+0xe0/0x420 [ 1815.643494] ? putname+0xfe/0x140 [ 1815.643540] __x64_sys_mount+0x27e/0x300 [ 1815.643572] ? path_mount+0x1f80/0x1f80 [ 1815.643611] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.643660] do_syscall_64+0x3b/0x90 [ 1815.643689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.643721] RIP: 0033:0x7fe42408b04a [ 1815.643742] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.643764] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.643787] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1815.643803] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1815.643822] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1815.643837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.643852] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1815.643897] [ 1815.647547] FAT-fs (loop6): bogus number of reserved sectors [ 1815.647566] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1815.649762] FAT-fs (loop7): bogus number of FAT sectors [ 1815.649780] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1815.659532] FAT-fs (loop4): bogus number of reserved sectors [ 1815.659555] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1815.661789] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1815.704220] 9pnet_fd: p9_fd_create_tcp (7578): problem connecting socket to 127.0.0.1 [ 1815.853624] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1815.879113] FAULT_INJECTION: forcing a failure. [ 1815.879113] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.879149] CPU: 1 PID: 7590 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.879173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1815.879187] Call Trace: [ 1815.879193] [ 1815.879202] dump_stack_lvl+0x8b/0xb3 [ 1815.879234] should_fail.cold+0x5/0xa [ 1815.879258] ? create_object.isra.0+0x3a/0xa20 [ 1815.879293] should_failslab+0x5/0x10 [ 1815.879328] kmem_cache_alloc+0x5b/0x480 [ 1815.879357] create_object.isra.0+0x3a/0xa20 [ 1815.879386] ? kasan_unpoison+0x23/0x50 [ 1815.879421] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1815.879450] copy_mount_options+0x55/0x180 [ 1815.879479] __x64_sys_mount+0x1a8/0x300 [ 1815.879510] ? path_mount+0x1f80/0x1f80 [ 1815.879541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.879584] do_syscall_64+0x3b/0x90 [ 1815.879610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.879640] RIP: 0033:0x7fa9c293504a [ 1815.879657] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.879678] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.879700] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1815.879715] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1815.879729] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1815.879743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.879757] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1815.879794] [ 1815.883721] FAULT_INJECTION: forcing a failure. [ 1815.883721] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.883754] CPU: 1 PID: 7589 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.883780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1815.883796] Call Trace: [ 1815.883802] [ 1815.883810] dump_stack_lvl+0x8b/0xb3 [ 1815.883840] should_fail.cold+0x5/0xa [ 1815.883866] ? create_object.isra.0+0x3a/0xa20 [ 1815.883903] should_failslab+0x5/0x10 [ 1815.883934] kmem_cache_alloc+0x5b/0x480 [ 1815.883966] create_object.isra.0+0x3a/0xa20 [ 1815.883999] ? kasan_unpoison+0x23/0x50 [ 1815.884037] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1815.884069] alloc_fs_context+0x58/0x9d0 [ 1815.884114] path_mount+0xa4d/0x1f80 [ 1815.884151] ? kasan_quarantine_put+0x87/0x1e0 [ 1815.884187] ? finish_automount+0xa20/0xa20 [ 1815.884218] ? kmem_cache_free+0xe0/0x420 [ 1815.884248] ? putname+0xfe/0x140 [ 1815.884291] __x64_sys_mount+0x27e/0x300 [ 1815.884332] ? path_mount+0x1f80/0x1f80 [ 1815.884368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.884415] do_syscall_64+0x3b/0x90 [ 1815.884443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.884482] RIP: 0033:0x7fe42408b04a [ 1815.884504] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.884534] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.884558] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1815.884574] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1815.884590] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1815.884605] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.884621] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1815.884664] [ 1815.886855] FAT-fs (loop6): bogus number of reserved sectors [ 1815.886922] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1815.887136] FAT-fs (loop0): bogus number of reserved sectors [ 1815.887151] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1815.896502] FAULT_INJECTION: forcing a failure. [ 1815.896502] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.896532] CPU: 1 PID: 7591 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1815.896556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1815.896570] Call Trace: [ 1815.896576] [ 1815.896584] dump_stack_lvl+0x8b/0xb3 [ 1815.896616] should_fail.cold+0x5/0xa [ 1815.896640] ? create_object.isra.0+0x3a/0xa20 [ 1815.896673] should_failslab+0x5/0x10 [ 1815.896702] kmem_cache_alloc+0x5b/0x480 [ 1815.896730] create_object.isra.0+0x3a/0xa20 [ 1815.896759] ? kasan_unpoison+0x23/0x50 [ 1815.896793] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1815.896822] copy_mount_options+0x55/0x180 [ 1815.896851] __x64_sys_mount+0x1a8/0x300 [ 1815.896882] ? path_mount+0x1f80/0x1f80 [ 1815.896914] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1815.896956] do_syscall_64+0x3b/0x90 [ 1815.896981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1815.897011] RIP: 0033:0x7faa30c9904a [ 1815.897027] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1815.897048] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1815.897069] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1815.897084] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1815.897098] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1815.897112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1815.897125] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1815.897163] [ 1815.907542] FAT-fs (loop4): bogus number of reserved sectors [ 1815.907561] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1829.576893] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:23:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 71) 00:23:23 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x0, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:23:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 71) 00:23:23 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1837.836618] loop7: detected capacity change from 0 to 256 00:23:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:23 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x500000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:23:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 80) [ 1837.854300] loop2: detected capacity change from 0 to 256 [ 1837.855818] FAULT_INJECTION: forcing a failure. [ 1837.855818] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.855836] CPU: 1 PID: 7606 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1837.855849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1837.855858] Call Trace: [ 1837.855862] [ 1837.855867] dump_stack_lvl+0x8b/0xb3 [ 1837.855888] should_fail.cold+0x5/0xa [ 1837.855902] ? getname_kernel+0x4e/0x370 [ 1837.855922] should_failslab+0x5/0x10 [ 1837.855940] kmem_cache_alloc+0x5b/0x480 [ 1837.855956] getname_kernel+0x4e/0x370 [ 1837.855974] kern_path+0x1b/0x50 [ 1837.855990] lookup_bdev+0xc3/0x260 [ 1837.856011] ? bd_abort_claiming+0x90/0x90 [ 1837.856031] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1837.856052] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1837.856071] ? cred_has_capability.isra.0+0x14e/0x2b0 [ 1837.856094] blkdev_get_by_path+0x71/0x2e0 [ 1837.856106] ? blkdev_get_by_dev+0x80/0x80 [ 1837.856117] ? kfree+0x1d3/0x410 [ 1837.856142] mount_bdev+0x5b/0x3f0 [ 1837.856159] ? msdos_mount+0x40/0x40 [ 1837.856179] ? setup+0xd0/0xd0 [ 1837.856195] legacy_get_tree+0x105/0x220 [ 1837.856216] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1837.856237] vfs_get_tree+0x8e/0x2f0 [ 1837.856253] path_mount+0x131b/0x1f80 [ 1837.856272] ? kasan_quarantine_put+0x87/0x1e0 [ 1837.856289] ? finish_automount+0xa20/0xa20 [ 1837.856304] ? kmem_cache_free+0xe0/0x420 [ 1837.856318] ? putname+0xfe/0x140 [ 1837.856338] __x64_sys_mount+0x27e/0x300 [ 1837.856355] ? path_mount+0x1f80/0x1f80 [ 1837.856372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1837.856396] do_syscall_64+0x3b/0x90 00:23:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 81) [ 1837.856409] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.856427] RIP: 0033:0x7fe42408b04a [ 1837.856436] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:23:23 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1837.856447] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1837.856459] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1837.856467] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1837.856475] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1837.856482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1837.856490] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1837.856510] [ 1837.864124] FAT-fs (loop7): bogus number of FAT sectors [ 1837.864144] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1837.869877] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1837.874136] loop5: detected capacity change from 0 to 256 [ 1837.874289] FAULT_INJECTION: forcing a failure. [ 1837.874289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.874452] CPU: 0 PID: 7608 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1837.874477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1837.874493] Call Trace: [ 1837.874499] [ 1837.874507] dump_stack_lvl+0x8b/0xb3 [ 1837.874541] should_fail.cold+0x5/0xa [ 1837.874569] _copy_from_user+0x2a/0x170 [ 1837.874595] copy_mount_options+0x76/0x180 [ 1837.874626] __x64_sys_mount+0x1a8/0x300 [ 1837.874657] ? path_mount+0x1f80/0x1f80 00:23:23 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:23 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x600000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:23:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 72) 00:23:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 72) [ 1837.874689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1837.874732] do_syscall_64+0x3b/0x90 [ 1837.874758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.874789] RIP: 0033:0x7fa9c293504a [ 1837.874806] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.874827] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1837.874848] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a 00:23:23 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1837.874863] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1837.874877] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1837.874890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1837.874903] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1837.874941] [ 1837.883809] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1837.894576] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1837.897000] FAT-fs (loop6): bogus number of reserved sectors [ 1837.897021] FAT-fs (loop6): Can't find a valid FAT filesystem 00:23:23 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1837.906948] FAULT_INJECTION: forcing a failure. [ 1837.906948] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.906980] CPU: 0 PID: 7612 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1837.907004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1837.907019] Call Trace: [ 1837.907025] [ 1837.907033] dump_stack_lvl+0x8b/0xb3 [ 1837.907090] should_fail.cold+0x5/0xa [ 1837.907113] ? getname_flags.part.0+0x50/0x4f0 [ 1837.907149] should_failslab+0x5/0x10 [ 1837.907179] kmem_cache_alloc+0x5b/0x480 [ 1837.907199] ? asm_exc_page_fault+0x1e/0x30 [ 1837.907238] getname_flags.part.0+0x50/0x4f0 [ 1837.907276] getname_flags+0x9a/0xe0 [ 1837.907314] user_path_at_empty+0x2b/0x60 [ 1837.907353] __x64_sys_mount+0x1e9/0x300 [ 1837.907384] ? path_mount+0x1f80/0x1f80 [ 1837.907416] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1837.907459] do_syscall_64+0x3b/0x90 [ 1837.907485] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1837.907515] RIP: 0033:0x7faa30c9904a [ 1837.907532] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1837.907552] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1837.907574] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1837.907588] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1837.907602] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1837.907616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1837.907629] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1837.907667] [ 1837.909604] 9pnet_fd: p9_fd_create_tcp (7610): problem connecting socket to 127.0.0.1 [ 1837.994437] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:23:23 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1838.009691] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1838.025288] loop7: detected capacity change from 0 to 256 [ 1838.032745] FAT-fs (loop7): bogus number of FAT sectors [ 1838.032775] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1838.048667] FAULT_INJECTION: forcing a failure. [ 1838.048667] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.048699] CPU: 0 PID: 7619 Comm: syz-executor.0 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1838.048723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1838.048738] Call Trace: [ 1838.048744] [ 1838.048752] dump_stack_lvl+0x8b/0xb3 [ 1838.048785] should_fail.cold+0x5/0xa [ 1838.048809] ? legacy_init_fs_context+0x40/0xe0 [ 1838.048842] should_failslab+0x5/0x10 [ 1838.048872] kmem_cache_alloc_trace+0x55/0x3c0 [ 1838.048902] legacy_init_fs_context+0x40/0xe0 [ 1838.048930] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1838.048961] alloc_fs_context+0x563/0x9d0 [ 1838.049006] path_mount+0xa4d/0x1f80 [ 1838.049042] ? kasan_quarantine_put+0x87/0x1e0 [ 1838.049083] ? finish_automount+0xa20/0xa20 [ 1838.049111] ? kmem_cache_free+0xe0/0x420 [ 1838.049138] ? putname+0xfe/0x140 [ 1838.049178] __x64_sys_mount+0x27e/0x300 [ 1838.049209] ? path_mount+0x1f80/0x1f80 [ 1838.049241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.049284] do_syscall_64+0x3b/0x90 [ 1838.049318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1838.049352] RIP: 0033:0x7fe42408b04a [ 1838.049369] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.049394] RSP: 002b:00007fe4215fefa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 00:23:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 82) 00:23:23 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x60d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) [ 1838.049418] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fe42408b04a [ 1838.049435] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fe4215ff000 [ 1838.049449] RBP: 00007fe4215ff040 R08: 00007fe4215ff040 R09: 0000000020000000 [ 1838.049467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 00:23:23 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 73) [ 1838.049483] R13: 0000000020000080 R14: 00007fe4215ff000 R15: 0000000020001a00 [ 1838.049526] [ 1838.060282] loop2: detected capacity change from 0 to 256 [ 1838.069761] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1838.081806] FAULT_INJECTION: forcing a failure. [ 1838.081806] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.081836] CPU: 0 PID: 7623 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1838.081860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1838.081874] Call Trace: [ 1838.081879] [ 1838.081887] dump_stack_lvl+0x8b/0xb3 [ 1838.081916] should_fail.cold+0x5/0xa [ 1838.081939] ? getname_flags.part.0+0x50/0x4f0 [ 1838.081973] should_failslab+0x5/0x10 [ 1838.082002] kmem_cache_alloc+0x5b/0x480 [ 1838.082021] ? asm_exc_page_fault+0x1e/0x30 [ 1838.082058] getname_flags.part.0+0x50/0x4f0 [ 1838.082096] getname_flags+0x9a/0xe0 [ 1838.082130] user_path_at_empty+0x2b/0x60 [ 1838.082165] __x64_sys_mount+0x1e9/0x300 [ 1838.082195] ? path_mount+0x1f80/0x1f80 [ 1838.082227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.082269] do_syscall_64+0x3b/0x90 [ 1838.082300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1838.082333] RIP: 0033:0x7fa9c293504a [ 1838.082350] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.082371] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1838.082392] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1838.082407] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1838.082421] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1838.082435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1838.082448] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1838.082486] [ 1838.094159] 9pnet_fd: p9_fd_create_tcp (7622): problem connecting socket to 127.0.0.1 [ 1838.095018] loop5: detected capacity change from 0 to 256 [ 1838.105541] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1838.121958] 9pnet_fd: p9_fd_create_tcp (7626): problem connecting socket to 127.0.0.1 [ 1838.146088] FAULT_INJECTION: forcing a failure. [ 1838.146088] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.146123] CPU: 0 PID: 7629 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1838.146147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1838.146162] Call Trace: [ 1838.146168] [ 1838.146177] dump_stack_lvl+0x8b/0xb3 [ 1838.146210] should_fail.cold+0x5/0xa [ 1838.146233] ? getname_flags.part.0+0x50/0x4f0 [ 1838.146268] should_failslab+0x5/0x10 [ 1838.146298] kmem_cache_alloc+0x5b/0x480 [ 1838.146324] ? asm_exc_page_fault+0x1e/0x30 [ 1838.146361] getname_flags.part.0+0x50/0x4f0 [ 1838.146404] getname_flags+0x9a/0xe0 [ 1838.146437] user_path_at_empty+0x2b/0x60 [ 1838.146473] __x64_sys_mount+0x1e9/0x300 [ 1838.146503] ? path_mount+0x1f80/0x1f80 [ 1838.146535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.146577] do_syscall_64+0x3b/0x90 [ 1838.146603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1838.146633] RIP: 0033:0x7faa30c9904a [ 1838.146650] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.146671] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1838.146693] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1838.146707] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1838.146721] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1838.146735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1838.146748] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1838.146785] [ 1838.152548] loop7: detected capacity change from 0 to 256 [ 1838.169857] FAT-fs (loop7): bogus number of FAT sectors [ 1838.169879] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1838.185536] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1838.208404] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1838.292226] FAULT_INJECTION: forcing a failure. [ 1838.292226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1838.292247] CPU: 1 PID: 7639 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1838.292261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1838.292270] Call Trace: [ 1838.292274] [ 1838.292278] dump_stack_lvl+0x8b/0xb3 [ 1838.292300] should_fail.cold+0x5/0xa [ 1838.292320] _copy_from_user+0x2a/0x170 [ 1838.292336] copy_mount_options+0x76/0x180 [ 1838.292353] __x64_sys_mount+0x1a8/0x300 [ 1838.292371] ? path_mount+0x1f80/0x1f80 [ 1838.292388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1838.292412] do_syscall_64+0x3b/0x90 [ 1838.292426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1838.292444] RIP: 0033:0x7fa9c293504a [ 1838.292453] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1838.292465] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1838.292476] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1838.292484] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1838.292492] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1838.292500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1838.292508] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1838.292528] [ 1838.300091] FAT-fs (loop6): bogus number of reserved sectors [ 1838.300102] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1850.243333] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:23:42 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x700000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:23:42 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x0, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:23:42 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 74) 00:23:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:23:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 73) 00:23:42 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x6b, 0x4, 0xf4, 0x0, 0x100000000, 0x20102, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x14000, 0x6, 0x0, 0x9, 0x4, 0x7, 0x82, 0x0, 0xbe5, 0x0, 0x4}, r1, 0x0, r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="980040000000000000000000", @ANYRES32=r2, @ANYBLOB="01010000000000002e8fdc0b2f66696c77bcafdc542510bbe81511d768a8987283a34bd188ae1eb7c96a9c9b43d025bc4aae46c7d75c53f190c373f02b78c6f0a16217ec83a4e065e7d07f84970c1fa29c5186ba9c8b36de0f699563501366595e50d723471085695f05000000738976104fbab86223944042bc2e1aaa67af0ee1e9baf683f74f2e5d47f3841b809abd5c108f230090d78961a0c8c5614e9bff668d3205186884ab79b96c519d945b4c872649fd85d68567956fdecd396c6b72da372ec13f"]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000180)='./file0\x00', 0x10) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2f, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040080) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = inotify_init() close_range(r5, r6, 0x2) 00:23:42 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:23:42 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1857.700242] loop7: detected capacity change from 0 to 256 [ 1857.706277] loop5: detected capacity change from 0 to 256 [ 1857.708004] FAT-fs (loop7): bogus number of FAT sectors [ 1857.708024] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1857.737991] FAT-fs (loop0): bogus number of reserved sectors [ 1857.738019] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1857.740606] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1857.746877] FAULT_INJECTION: forcing a failure. [ 1857.746877] name failslab, interval 1, probability 0, space 0, times 0 [ 1857.746910] CPU: 0 PID: 7660 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1857.746936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1857.746951] Call Trace: [ 1857.746957] [ 1857.746966] dump_stack_lvl+0x8b/0xb3 [ 1857.747001] should_fail.cold+0x5/0xa [ 1857.747027] ? alloc_fs_context+0x58/0x9d0 [ 1857.747061] should_failslab+0x5/0x10 [ 1857.747093] kmem_cache_alloc_trace+0x55/0x3c0 [ 1857.747125] alloc_fs_context+0x58/0x9d0 [ 1857.747167] path_mount+0xa4d/0x1f80 00:23:43 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1857.747203] ? kasan_quarantine_put+0x87/0x1e0 [ 1857.747239] ? finish_automount+0xa20/0xa20 [ 1857.747267] ? kmem_cache_free+0xe0/0x420 [ 1857.747297] ? putname+0xfe/0x140 [ 1857.747371] __x64_sys_mount+0x27e/0x300 [ 1857.747404] ? path_mount+0x1f80/0x1f80 [ 1857.747438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1857.747485] do_syscall_64+0x3b/0x90 [ 1857.747513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1857.747546] RIP: 0033:0x7fa9c293504a [ 1857.747564] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1857.747587] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1857.747610] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1857.747626] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1857.747641] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1857.747656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1857.747671] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1857.747711] [ 1857.757725] FAULT_INJECTION: forcing a failure. [ 1857.757725] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:23:43 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1800000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1857.757756] CPU: 0 PID: 7661 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1857.757781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1857.757796] Call Trace: [ 1857.757802] [ 1857.757810] dump_stack_lvl+0x8b/0xb3 [ 1857.757840] should_fail.cold+0x5/0xa [ 1857.757870] strncpy_from_user+0x34/0x3d0 [ 1857.757912] getname_flags.part.0+0x95/0x4f0 00:23:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1857.757954] getname_flags+0x9a/0xe0 [ 1857.757990] user_path_at_empty+0x2b/0x60 [ 1857.758027] __x64_sys_mount+0x1e9/0x300 [ 1857.758061] ? path_mount+0x1f80/0x1f80 [ 1857.758096] ? syscall_enter_from_user_mode+0x1d/0x50 00:23:43 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 75) 00:23:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 74) [ 1857.758141] do_syscall_64+0x3b/0x90 [ 1857.758168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1857.758200] RIP: 0033:0x7faa30c9904a [ 1857.758218] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1857.758241] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1857.758263] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1857.758278] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1857.758293] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 00:23:43 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1857.758314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1857.758329] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1857.758370] [ 1857.821657] 9pnet_fd: p9_fd_create_tcp (7657): problem connecting socket to 127.0.0.1 [ 1857.878655] loop7: detected capacity change from 0 to 256 [ 1857.884925] FAT-fs (loop7): bogus number of FAT sectors [ 1857.884944] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1857.993919] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1858.044675] FAULT_INJECTION: forcing a failure. [ 1858.044675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1858.044707] CPU: 1 PID: 7676 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1858.044731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1858.044746] Call Trace: [ 1858.044752] [ 1858.044761] dump_stack_lvl+0x8b/0xb3 [ 1858.044794] should_fail.cold+0x5/0xa [ 1858.044822] strncpy_from_user+0x34/0x3d0 [ 1858.044862] getname_flags.part.0+0x95/0x4f0 [ 1858.044902] getname_flags+0x9a/0xe0 [ 1858.044936] user_path_at_empty+0x2b/0x60 [ 1858.044971] __x64_sys_mount+0x1e9/0x300 [ 1858.045003] ? path_mount+0x1f80/0x1f80 [ 1858.045034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1858.045078] do_syscall_64+0x3b/0x90 [ 1858.045104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1858.045135] RIP: 0033:0x7faa30c9904a [ 1858.045151] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1858.045172] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1858.045200] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1858.045215] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1858.045229] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1858.045243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1858.045256] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1858.045293] [ 1858.057515] FAULT_INJECTION: forcing a failure. [ 1858.057515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1858.057545] CPU: 1 PID: 7678 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1858.057573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1858.057587] Call Trace: [ 1858.057591] [ 1858.057599] dump_stack_lvl+0x8b/0xb3 [ 1858.057626] should_fail.cold+0x5/0xa [ 1858.057653] prepare_alloc_pages+0x17b/0x500 [ 1858.057691] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1858.057735] __alloc_pages+0x131/0x4e0 [ 1858.057761] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1858.057793] ? lock_is_held_type+0xd7/0x130 [ 1858.057832] ? lock_release+0x3b2/0x750 [ 1858.057860] ? __slab_alloc.constprop.0+0x45/0x80 [ 1858.057905] alloc_pages+0x1a0/0x2f0 [ 1858.057938] allocate_slab+0x22d/0x300 [ 1858.057977] ___slab_alloc+0xa09/0xe50 [ 1858.058015] ? getname_flags.part.0+0x50/0x4f0 [ 1858.058057] ? lock_is_held_type+0xd7/0x130 [ 1858.058091] ? getname_flags.part.0+0x50/0x4f0 [ 1858.058122] __slab_alloc.constprop.0+0x45/0x80 [ 1858.058159] ? getname_flags.part.0+0x50/0x4f0 [ 1858.058190] kmem_cache_alloc+0x393/0x480 [ 1858.058218] getname_flags.part.0+0x50/0x4f0 [ 1858.058256] getname_flags+0x9a/0xe0 [ 1858.058290] user_path_at_empty+0x2b/0x60 [ 1858.058325] __x64_sys_mount+0x1e9/0x300 [ 1858.058355] ? path_mount+0x1f80/0x1f80 [ 1858.058387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1858.058429] do_syscall_64+0x3b/0x90 [ 1858.058454] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1858.058484] RIP: 0033:0x7fa9c293504a [ 1858.058500] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1858.058521] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1858.058543] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1858.058557] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1858.058571] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1858.058586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1858.058599] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1858.058636] [ 1858.070756] FAT-fs (loop6): bogus number of reserved sectors [ 1858.070775] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1858.126586] FAT-fs (loop0): bogus number of reserved sectors [ 1858.126611] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1858.147076] FAT-fs (loop0): bogus number of reserved sectors [ 1858.147098] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1873.000579] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:24:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 75) 00:24:07 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:24:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 76) 00:24:07 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x6b, 0x4, 0xf4, 0x0, 0x100000000, 0x20102, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x14000, 0x6, 0x0, 0x9, 0x4, 0x7, 0x82, 0x0, 0xbe5, 0x0, 0x4}, r1, 0x0, r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)=ANY=[@ANYBLOB="980040000000000000000000", @ANYRES32=r2, @ANYBLOB="01010000000000002e8fdc0b2f66696c77bcafdc542510bbe81511d768a8987283a34bd188ae1eb7c96a9c9b43d025bc4aae46c7d75c53f190c373f02b78c6f0a16217ec83a4e065e7d07f84970c1fa29c5186ba9c8b36de0f699563501366595e50d723471085695f05000000738976104fbab86223944042bc2e1aaa67af0ee1e9baf683f74f2e5d47f3841b809abd5c108f230090d78961a0c8c5614e9bff668d3205186884ab79b96c519d945b4c872649fd85d68567956fdecd396c6b72da372ec13f"]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) creat(&(0x7f0000000180)='./file0\x00', 0x10) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2f, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20040080) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x103, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = inotify_init() close_range(r5, r6, 0x2) 00:24:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1882.350465] FAULT_INJECTION: forcing a failure. [ 1882.350465] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.350486] CPU: 1 PID: 7692 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1882.350499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.350510] Call Trace: [ 1882.350514] [ 1882.350519] dump_stack_lvl+0x8b/0xb3 [ 1882.350540] should_fail.cold+0x5/0xa [ 1882.350554] ? create_object.isra.0+0x3a/0xa20 [ 1882.350574] should_failslab+0x5/0x10 [ 1882.350592] kmem_cache_alloc+0x5b/0x480 [ 1882.350608] create_object.isra.0+0x3a/0xa20 [ 1882.350623] ? kasan_unpoison+0x23/0x50 [ 1882.350643] kmem_cache_alloc+0x239/0x480 [ 1882.350657] getname_flags.part.0+0x50/0x4f0 [ 1882.350679] getname_flags+0x9a/0xe0 [ 1882.350697] user_path_at_empty+0x2b/0x60 [ 1882.350716] __x64_sys_mount+0x1e9/0x300 [ 1882.350733] ? path_mount+0x1f80/0x1f80 [ 1882.350750] ? syscall_enter_from_user_mode+0x1d/0x50 00:24:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 77) [ 1882.350774] do_syscall_64+0x3b/0x90 [ 1882.350788] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.350806] RIP: 0033:0x7fa9c293504a [ 1882.350815] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.350827] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1882.350839] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1882.350847] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1882.350855] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1882.350862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1882.350870] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1882.350890] [ 1882.363674] FAT-fs (loop6): bogus number of reserved sectors [ 1882.363687] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1882.367813] loop7: detected capacity change from 0 to 256 [ 1882.382033] FAULT_INJECTION: forcing a failure. [ 1882.382033] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.382064] CPU: 0 PID: 7699 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1882.382089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.382104] Call Trace: [ 1882.382110] [ 1882.382118] dump_stack_lvl+0x8b/0xb3 [ 1882.382152] should_fail.cold+0x5/0xa [ 1882.382176] ? create_object.isra.0+0x3a/0xa20 [ 1882.382213] should_failslab+0x5/0x10 00:24:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6400000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1882.382244] kmem_cache_alloc+0x5b/0x480 [ 1882.382273] create_object.isra.0+0x3a/0xa20 [ 1882.382309] ? kasan_unpoison+0x23/0x50 [ 1882.382344] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1882.382373] alloc_fs_context+0x58/0x9d0 [ 1882.382413] path_mount+0xa4d/0x1f80 [ 1882.382447] ? kasan_quarantine_put+0x87/0x1e0 [ 1882.382479] ? finish_automount+0xa20/0xa20 [ 1882.382506] ? kmem_cache_free+0xe0/0x420 [ 1882.382533] ? putname+0xfe/0x140 [ 1882.382572] __x64_sys_mount+0x27e/0x300 [ 1882.382602] ? path_mount+0x1f80/0x1f80 [ 1882.382634] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.382677] do_syscall_64+0x3b/0x90 [ 1882.382703] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.382734] RIP: 0033:0x7faa30c9904a [ 1882.382750] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:24:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 76) 00:24:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:07 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x0, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:24:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1882.382772] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1882.382794] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1882.382809] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1882.382823] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1882.382837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1882.382850] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 00:24:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 78) [ 1882.382888] [ 1882.383118] loop5: detected capacity change from 0 to 256 [ 1882.390241] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1882.393596] FAT-fs (loop0): bogus number of reserved sectors [ 1882.393617] FAT-fs (loop0): Can't find a valid FAT filesystem 00:24:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaef) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1882.396865] FAT-fs (loop7): bogus number of FAT sectors [ 1882.396882] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1882.398649] FAT-fs (loop4): bogus number of reserved sectors [ 1882.398666] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1882.412323] 9pnet_fd: p9_fd_create_tcp (7702): problem connecting socket to 127.0.0.1 [ 1882.419346] FAT-fs (loop0): bogus number of reserved sectors [ 1882.419370] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1882.487031] FAULT_INJECTION: forcing a failure. [ 1882.487031] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.487051] CPU: 1 PID: 7709 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1882.487065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.487074] Call Trace: [ 1882.487077] [ 1882.487082] dump_stack_lvl+0x8b/0xb3 [ 1882.487103] should_fail.cold+0x5/0xa [ 1882.487116] ? alloc_fs_context+0x58/0x9d0 [ 1882.487134] should_failslab+0x5/0x10 [ 1882.487152] kmem_cache_alloc_trace+0x55/0x3c0 [ 1882.487169] alloc_fs_context+0x58/0x9d0 [ 1882.487190] path_mount+0xa4d/0x1f80 [ 1882.487209] ? kasan_quarantine_put+0x87/0x1e0 [ 1882.487227] ? finish_automount+0xa20/0xa20 [ 1882.487242] ? kmem_cache_free+0xe0/0x420 [ 1882.487257] ? putname+0xfe/0x140 [ 1882.487279] __x64_sys_mount+0x27e/0x300 [ 1882.487299] ? path_mount+0x1f80/0x1f80 [ 1882.487317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.487344] do_syscall_64+0x3b/0x90 [ 1882.487358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.487375] RIP: 0033:0x7fa9c293504a [ 1882.487385] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.487398] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1882.487410] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1882.487418] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1882.487425] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1882.487433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1882.487440] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1882.487460] [ 1882.516459] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1882.585034] loop7: detected capacity change from 0 to 256 [ 1882.596576] FAULT_INJECTION: forcing a failure. [ 1882.596576] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.596593] CPU: 1 PID: 7717 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1882.596606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.596614] Call Trace: [ 1882.596618] [ 1882.596623] dump_stack_lvl+0x8b/0xb3 [ 1882.596643] should_fail.cold+0x5/0xa [ 1882.596656] ? create_object.isra.0+0x3a/0xa20 [ 1882.596676] should_failslab+0x5/0x10 [ 1882.596693] kmem_cache_alloc+0x5b/0x480 [ 1882.596709] create_object.isra.0+0x3a/0xa20 [ 1882.596728] ? kasan_unpoison+0x23/0x50 [ 1882.596758] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1882.596776] alloc_fs_context+0x58/0x9d0 [ 1882.596809] path_mount+0xa4d/0x1f80 [ 1882.596839] ? kasan_quarantine_put+0x87/0x1e0 [ 1882.596870] ? finish_automount+0xa20/0xa20 [ 1882.596895] ? kmem_cache_free+0xe0/0x420 [ 1882.596914] ? putname+0xfe/0x140 [ 1882.596944] __x64_sys_mount+0x27e/0x300 [ 1882.596964] ? path_mount+0x1f80/0x1f80 [ 1882.596989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.597018] do_syscall_64+0x3b/0x90 [ 1882.597041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.597063] RIP: 0033:0x7faa30c9904a [ 1882.597075] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.597096] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1882.597114] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1882.597125] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1882.597137] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1882.597151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1882.597163] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1882.597195] [ 1882.603391] FAT-fs (loop7): bogus number of FAT sectors [ 1882.603412] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1882.603728] FAT-fs (loop4): bogus number of reserved sectors [ 1882.603736] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1882.605105] FAT-fs (loop0): bogus number of reserved sectors [ 1882.605125] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1882.622330] FAULT_INJECTION: forcing a failure. [ 1882.622330] name failslab, interval 1, probability 0, space 0, times 0 [ 1882.622355] CPU: 1 PID: 7720 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1882.622368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1882.622375] Call Trace: [ 1882.622379] [ 1882.622383] dump_stack_lvl+0x8b/0xb3 [ 1882.622399] should_fail.cold+0x5/0xa [ 1882.622414] should_failslab+0x5/0x10 [ 1882.622429] __kmalloc_track_caller+0x79/0x430 [ 1882.622449] ? vfs_parse_fs_string+0xc0/0x150 [ 1882.622468] kmemdup_nul+0x2d/0xa0 [ 1882.622485] vfs_parse_fs_string+0xc0/0x150 [ 1882.622501] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1882.622516] ? __kasan_kmalloc+0x81/0xa0 [ 1882.622530] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1882.622546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1882.622566] ? alloc_fs_context+0x5ac/0x9d0 [ 1882.622587] path_mount+0x612/0x1f80 [ 1882.622605] ? kasan_quarantine_put+0x87/0x1e0 [ 1882.622622] ? finish_automount+0xa20/0xa20 [ 1882.622637] ? kmem_cache_free+0xe0/0x420 [ 1882.622651] ? putname+0xfe/0x140 [ 1882.622672] __x64_sys_mount+0x27e/0x300 [ 1882.622688] ? path_mount+0x1f80/0x1f80 [ 1882.622705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1882.622727] do_syscall_64+0x3b/0x90 [ 1882.622741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1882.622757] RIP: 0033:0x7fa9c293504a [ 1882.622767] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1882.622778] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1882.622790] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1882.622798] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1882.622805] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1882.622813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1882.622820] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1882.622841] [ 1882.629437] FAT-fs (loop0): bogus number of reserved sectors [ 1882.629457] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1882.665023] loop5: detected capacity change from 0 to 256 [ 1882.672373] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1882.693871] 9pnet_fd: p9_fd_create_tcp (7724): problem connecting socket to 127.0.0.1 [ 1882.740704] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:24:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xafe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8004000000000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x40000, 0x0) 00:24:22 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:24:22 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 79) 00:24:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 77) 00:24:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:22 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1897.432609] loop7: detected capacity change from 0 to 256 [ 1897.432845] FAULT_INJECTION: forcing a failure. [ 1897.432845] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.432878] CPU: 0 PID: 7739 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1897.432902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1897.432917] Call Trace: [ 1897.432923] [ 1897.432931] dump_stack_lvl+0x8b/0xb3 [ 1897.432964] should_fail.cold+0x5/0xa [ 1897.432987] ? create_object.isra.0+0x3a/0xa20 [ 1897.433022] should_failslab+0x5/0x10 [ 1897.433053] kmem_cache_alloc+0x5b/0x480 [ 1897.433081] create_object.isra.0+0x3a/0xa20 [ 1897.433111] ? kasan_unpoison+0x23/0x50 [ 1897.433145] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1897.433174] alloc_fs_context+0x58/0x9d0 [ 1897.433213] path_mount+0xa4d/0x1f80 [ 1897.433248] ? kasan_quarantine_put+0x87/0x1e0 [ 1897.433280] ? finish_automount+0xa20/0xa20 [ 1897.433317] ? kmem_cache_free+0xe0/0x420 [ 1897.433345] ? putname+0xfe/0x140 [ 1897.433384] __x64_sys_mount+0x27e/0x300 [ 1897.433414] ? path_mount+0x1f80/0x1f80 [ 1897.433446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.433488] do_syscall_64+0x3b/0x90 [ 1897.433515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1897.433546] RIP: 0033:0x7fa9c293504a [ 1897.433563] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.433584] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1897.433607] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a 00:24:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1897.433622] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1897.433637] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1897.433652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 00:24:22 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:24:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 78) [ 1897.433666] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1897.433704] [ 1897.437755] FAT-fs (loop0): bogus number of reserved sectors [ 1897.437768] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1897.440145] FAT-fs (loop7): bogus number of FAT sectors [ 1897.440166] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1897.445420] FAT-fs (loop0): bogus number of reserved sectors [ 1897.445431] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1897.450641] FAULT_INJECTION: forcing a failure. [ 1897.450641] name failslab, interval 1, probability 0, space 0, times 0 00:24:22 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8cffffff00000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1897.450659] CPU: 1 PID: 7745 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1897.450673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:24:22 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 80) [ 1897.450682] Call Trace: [ 1897.450686] [ 1897.450691] dump_stack_lvl+0x8b/0xb3 [ 1897.450714] should_fail.cold+0x5/0xa [ 1897.450727] ? create_object.isra.0+0x3a/0xa20 [ 1897.450749] should_failslab+0x5/0x10 [ 1897.450767] kmem_cache_alloc+0x5b/0x480 [ 1897.450784] create_object.isra.0+0x3a/0xa20 [ 1897.450799] ? kasan_unpoison+0x23/0x50 [ 1897.450818] kmem_cache_alloc_trace+0x22e/0x3c0 00:24:22 executing program 2: r0 = syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r3, &(0x7f0000000000), 0xfffffe06) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x7fd6, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11000000000000000000000067a201000000000000000000000014000000000000000000000002000000070000000000000010000000000000000000000007003b292ca4504cabe0661cfb8a75ae20bb12c11ce01d658c18a3ba29425e0aaa14224c0d34e9593ffc2e87f1ab9a99c3c90a81df8f1a390be493702491b54b1c962599fbab406b2e654ecca734609da41d0f"], 0x40}, 0xc854) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x5db5, &(0x7f00000001c0)=[r5, 0xffffffffffffffff, r6, r7, r4], 0x5, 0x0, 0x0, {0x0, r8}}, 0x1) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r8) [ 1897.450836] legacy_init_fs_context+0x40/0xe0 [ 1897.450856] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1897.450872] alloc_fs_context+0x563/0x9d0 [ 1897.450893] path_mount+0xa4d/0x1f80 00:24:22 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xafe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1897.450912] ? kasan_quarantine_put+0x87/0x1e0 [ 1897.450929] ? finish_automount+0xa20/0xa20 [ 1897.450944] ? kmem_cache_free+0xe0/0x420 [ 1897.450959] ? putname+0xfe/0x140 [ 1897.450980] __x64_sys_mount+0x27e/0x300 [ 1897.450996] ? path_mount+0x1f80/0x1f80 [ 1897.451014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.451037] do_syscall_64+0x3b/0x90 [ 1897.451052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1897.451069] RIP: 0033:0x7faa30c9904a [ 1897.451078] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:24:22 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1897.451090] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1897.451106] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1897.451114] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1897.451122] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1897.451130] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1897.451138] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1897.451158] [ 1897.451804] FAT-fs (loop4): bogus number of reserved sectors [ 1897.451814] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1897.460151] loop5: detected capacity change from 0 to 256 [ 1897.469363] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1897.478619] FAT-fs (loop6): bogus number of reserved sectors [ 1897.478641] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1897.493040] 9pnet_fd: p9_fd_create_tcp (7747): problem connecting socket to 127.0.0.1 [ 1897.558053] FAT-fs (loop0): bogus number of reserved sectors [ 1897.558067] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1897.579806] FAT-fs (loop0): bogus number of reserved sectors [ 1897.579817] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1897.584826] loop7: detected capacity change from 0 to 256 [ 1897.594490] FAULT_INJECTION: forcing a failure. [ 1897.594490] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.594507] CPU: 1 PID: 7755 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1897.594523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1897.594533] Call Trace: [ 1897.594537] [ 1897.594542] dump_stack_lvl+0x8b/0xb3 [ 1897.594563] should_fail.cold+0x5/0xa [ 1897.594579] should_failslab+0x5/0x10 [ 1897.594598] __kmalloc_track_caller+0x79/0x430 [ 1897.594618] ? vfs_parse_fs_string+0xc0/0x150 [ 1897.594639] kmemdup_nul+0x2d/0xa0 [ 1897.594657] vfs_parse_fs_string+0xc0/0x150 [ 1897.594672] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1897.594687] ? __kasan_kmalloc+0x81/0xa0 [ 1897.594703] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1897.594718] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1897.594738] ? alloc_fs_context+0x5ac/0x9d0 [ 1897.594759] path_mount+0x612/0x1f80 [ 1897.594778] ? kasan_quarantine_put+0x87/0x1e0 [ 1897.594796] ? finish_automount+0xa20/0xa20 [ 1897.594811] ? kmem_cache_free+0xe0/0x420 [ 1897.594825] ? putname+0xfe/0x140 [ 1897.594846] __x64_sys_mount+0x27e/0x300 [ 1897.594862] ? path_mount+0x1f80/0x1f80 [ 1897.594880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.594903] do_syscall_64+0x3b/0x90 [ 1897.594918] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1897.594935] RIP: 0033:0x7faa30c9904a [ 1897.594944] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.594957] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1897.594969] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1897.594978] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1897.594986] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1897.594993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1897.595001] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1897.595021] [ 1897.602661] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1897.616136] FAT-fs (loop7): bogus number of FAT sectors [ 1897.616161] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1897.646897] FAULT_INJECTION: forcing a failure. [ 1897.646897] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.646918] CPU: 1 PID: 7760 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1897.646931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1897.646940] Call Trace: [ 1897.646944] [ 1897.646949] dump_stack_lvl+0x8b/0xb3 [ 1897.646969] should_fail.cold+0x5/0xa [ 1897.646982] ? create_object.isra.0+0x3a/0xa20 [ 1897.647004] should_failslab+0x5/0x10 [ 1897.647021] kmem_cache_alloc+0x5b/0x480 [ 1897.647039] create_object.isra.0+0x3a/0xa20 [ 1897.647054] ? kasan_unpoison+0x23/0x50 [ 1897.647073] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1897.647089] alloc_fs_context+0x58/0x9d0 [ 1897.647111] path_mount+0xa4d/0x1f80 [ 1897.647130] ? kasan_quarantine_put+0x87/0x1e0 [ 1897.647148] ? finish_automount+0xa20/0xa20 [ 1897.647163] ? kmem_cache_free+0xe0/0x420 [ 1897.647177] ? putname+0xfe/0x140 [ 1897.647198] __x64_sys_mount+0x27e/0x300 [ 1897.647215] ? path_mount+0x1f80/0x1f80 [ 1897.647232] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.647256] do_syscall_64+0x3b/0x90 [ 1897.647270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1897.647291] RIP: 0033:0x7fa9c293504a [ 1897.647300] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.647312] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1897.647324] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1897.647332] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1897.647340] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1897.647347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1897.647355] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1897.647375] [ 1897.651403] FAT-fs (loop6): bogus number of reserved sectors [ 1897.651415] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1897.731859] loop5: detected capacity change from 0 to 256 [ 1897.735023] loop2: detected capacity change from 0 to 256 [ 1897.744743] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1897.757096] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1897.774273] 9pnet_fd: p9_fd_create_tcp (7767): problem connecting socket to 127.0.0.1 [ 1897.807046] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1912.845513] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:24:45 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:45 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:24:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 79) 00:24:45 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 81) 00:24:45 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xafe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:24:45 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0x0, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1920.348222] loop7: detected capacity change from 0 to 256 [ 1920.365752] loop2: detected capacity change from 0 to 256 [ 1920.375268] FAULT_INJECTION: forcing a failure. [ 1920.375268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1920.375366] CPU: 0 PID: 7790 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1920.375380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1920.375388] Call Trace: [ 1920.375392] [ 1920.375397] dump_stack_lvl+0x8b/0xb3 [ 1920.375417] should_fail.cold+0x5/0xa [ 1920.375433] prepare_alloc_pages+0x17b/0x500 [ 1920.375459] __alloc_pages+0x131/0x4e0 [ 1920.375473] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1920.375490] ? lock_is_held_type+0xd7/0x130 [ 1920.375512] ? lock_release+0x3b2/0x750 [ 1920.375528] ? __slab_alloc.constprop.0+0x45/0x80 [ 1920.375553] alloc_pages+0x1a0/0x2f0 [ 1920.375570] allocate_slab+0x22d/0x300 [ 1920.375585] loop5: detected capacity change from 0 to 256 00:24:45 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1920.375591] ___slab_alloc+0xa09/0xe50 [ 1920.375613] ? getname_kernel+0x4e/0x370 [ 1920.375636] ? lock_is_held_type+0xd7/0x130 [ 1920.375654] ? getname_kernel+0x4e/0x370 [ 1920.375670] __slab_alloc.constprop.0+0x45/0x80 [ 1920.375690] ? getname_kernel+0x4e/0x370 [ 1920.375706] kmem_cache_alloc+0x393/0x480 [ 1920.375721] getname_kernel+0x4e/0x370 [ 1920.375739] kern_path+0x1b/0x50 [ 1920.375755] lookup_bdev+0xc3/0x260 [ 1920.375776] ? bd_abort_claiming+0x90/0x90 [ 1920.375795] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.375815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.375834] ? cred_has_capability.isra.0+0x14e/0x2b0 [ 1920.375854] blkdev_get_by_path+0x71/0x2e0 [ 1920.375867] ? blkdev_get_by_dev+0x80/0x80 [ 1920.375877] ? kfree+0x1d3/0x410 [ 1920.375901] mount_bdev+0x5b/0x3f0 [ 1920.375917] ? msdos_mount+0x40/0x40 [ 1920.375936] ? setup+0xd0/0xd0 [ 1920.375953] legacy_get_tree+0x105/0x220 [ 1920.375968] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.375989] vfs_get_tree+0x8e/0x2f0 [ 1920.376005] path_mount+0x131b/0x1f80 [ 1920.376023] ? kasan_quarantine_put+0x87/0x1e0 [ 1920.376041] ? finish_automount+0xa20/0xa20 [ 1920.376055] ? kmem_cache_free+0xe0/0x420 [ 1920.376069] ? putname+0xfe/0x140 [ 1920.376090] __x64_sys_mount+0x27e/0x300 [ 1920.376106] ? path_mount+0x1f80/0x1f80 [ 1920.376123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.376146] do_syscall_64+0x3b/0x90 00:24:45 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 82) [ 1920.376159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1920.376176] RIP: 0033:0x7fa9c293504a [ 1920.376188] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.376200] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1920.376213] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1920.376221] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1920.376228] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1920.376236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 00:24:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 80) [ 1920.376243] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1920.376278] [ 1920.382738] FAT-fs (loop7): bogus number of FAT sectors [ 1920.382760] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1920.386108] FAT-fs (loop6): bogus number of reserved sectors [ 1920.386120] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1920.387701] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1920.397938] FAULT_INJECTION: forcing a failure. [ 1920.397938] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.397955] CPU: 0 PID: 7791 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1920.397968] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:24:45 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1920.397976] Call Trace: [ 1920.397979] [ 1920.397983] dump_stack_lvl+0x8b/0xb3 [ 1920.397999] should_fail.cold+0x5/0xa [ 1920.398014] should_failslab+0x5/0x10 [ 1920.398031] __kmalloc_track_caller+0x79/0x430 [ 1920.398050] ? vfs_parse_fs_string+0xc0/0x150 [ 1920.398072] kmemdup_nul+0x2d/0xa0 [ 1920.398092] vfs_parse_fs_string+0xc0/0x150 [ 1920.398108] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1920.398122] ? __kasan_kmalloc+0x81/0xa0 [ 1920.398137] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1920.398152] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.398171] ? alloc_fs_context+0x5ac/0x9d0 [ 1920.398192] path_mount+0x612/0x1f80 [ 1920.398210] ? kasan_quarantine_put+0x87/0x1e0 [ 1920.398228] ? finish_automount+0xa20/0xa20 [ 1920.398242] ? kmem_cache_free+0xe0/0x420 [ 1920.398257] ? putname+0xfe/0x140 [ 1920.398277] __x64_sys_mount+0x27e/0x300 [ 1920.398297] ? path_mount+0x1f80/0x1f80 [ 1920.398313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.398336] do_syscall_64+0x3b/0x90 [ 1920.398350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1920.398366] RIP: 0033:0x7faa30c9904a [ 1920.398375] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.398386] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1920.398398] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1920.398405] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1920.398413] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1920.398420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1920.398428] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1920.398448] [ 1920.400904] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1920.414935] FAT-fs (loop0): bogus number of reserved sectors [ 1920.414969] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1920.416721] 9pnet_fd: p9_fd_create_tcp (7787): problem connecting socket to 127.0.0.1 [ 1920.444131] 9pnet_fd: p9_fd_create_tcp (7785): problem connecting socket to 127.0.0.1 [ 1920.445498] FAT-fs (loop0): bogus number of reserved sectors [ 1920.445518] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1920.499118] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1920.512980] FAULT_INJECTION: forcing a failure. [ 1920.512980] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.513000] CPU: 0 PID: 7797 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1920.513014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1920.513023] Call Trace: [ 1920.513026] [ 1920.513030] dump_stack_lvl+0x8b/0xb3 [ 1920.513051] should_fail.cold+0x5/0xa [ 1920.513065] ? create_object.isra.0+0x3a/0xa20 [ 1920.513084] should_failslab+0x5/0x10 [ 1920.513101] kmem_cache_alloc+0x5b/0x480 [ 1920.513117] create_object.isra.0+0x3a/0xa20 [ 1920.513132] ? kasan_unpoison+0x23/0x50 [ 1920.513151] __kmalloc_track_caller+0x25e/0x430 [ 1920.513170] ? vfs_parse_fs_string+0xc0/0x150 [ 1920.513190] kmemdup_nul+0x2d/0xa0 [ 1920.513207] vfs_parse_fs_string+0xc0/0x150 [ 1920.513223] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1920.513238] ? __kasan_kmalloc+0x81/0xa0 [ 1920.513253] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1920.513267] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.513291] ? alloc_fs_context+0x5ac/0x9d0 [ 1920.513312] path_mount+0x612/0x1f80 [ 1920.513331] ? kasan_quarantine_put+0x87/0x1e0 [ 1920.513348] ? finish_automount+0xa20/0xa20 [ 1920.513363] ? kmem_cache_free+0xe0/0x420 [ 1920.513377] ? putname+0xfe/0x140 [ 1920.513398] __x64_sys_mount+0x27e/0x300 [ 1920.513414] ? path_mount+0x1f80/0x1f80 [ 1920.513431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.513455] do_syscall_64+0x3b/0x90 [ 1920.513469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1920.513485] RIP: 0033:0x7fa9c293504a [ 1920.513495] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.513506] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1920.513518] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1920.513526] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1920.513534] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1920.513541] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1920.513548] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1920.513568] [ 1920.528457] FAT-fs (loop6): bogus number of reserved sectors [ 1920.528468] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1920.568979] loop2: detected capacity change from 0 to 256 [ 1920.577965] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1920.586653] FAULT_INJECTION: forcing a failure. [ 1920.586653] name failslab, interval 1, probability 0, space 0, times 0 [ 1920.586671] CPU: 0 PID: 7801 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1920.586684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1920.586693] Call Trace: [ 1920.586696] [ 1920.586701] dump_stack_lvl+0x8b/0xb3 [ 1920.586721] should_fail.cold+0x5/0xa [ 1920.586733] ? create_object.isra.0+0x3a/0xa20 [ 1920.586753] should_failslab+0x5/0x10 [ 1920.586769] kmem_cache_alloc+0x5b/0x480 [ 1920.586784] create_object.isra.0+0x3a/0xa20 [ 1920.586800] ? kasan_unpoison+0x23/0x50 [ 1920.586818] __kmalloc_track_caller+0x25e/0x430 [ 1920.586837] ? vfs_parse_fs_string+0xc0/0x150 [ 1920.586858] kmemdup_nul+0x2d/0xa0 [ 1920.586875] vfs_parse_fs_string+0xc0/0x150 [ 1920.586890] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1920.586905] ? __kasan_kmalloc+0x81/0xa0 [ 1920.586920] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1920.586934] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1920.586954] ? alloc_fs_context+0x5ac/0x9d0 [ 1920.586975] path_mount+0x612/0x1f80 [ 1920.586993] ? kasan_quarantine_put+0x87/0x1e0 [ 1920.587010] ? finish_automount+0xa20/0xa20 [ 1920.587025] ? kmem_cache_free+0xe0/0x420 [ 1920.587039] ? putname+0xfe/0x140 [ 1920.587060] __x64_sys_mount+0x27e/0x300 [ 1920.587077] ? path_mount+0x1f80/0x1f80 [ 1920.587094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1920.587117] do_syscall_64+0x3b/0x90 [ 1920.587131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1920.587148] RIP: 0033:0x7faa30c9904a [ 1920.587158] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1920.587169] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1920.587182] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1920.587190] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1920.587197] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1920.587205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1920.587212] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1920.587232] [ 1920.588303] FAT-fs (loop4): bogus number of reserved sectors [ 1920.588313] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1920.590671] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1920.604768] 9pnet_fd: p9_fd_create_tcp (7800): problem connecting socket to 127.0.0.1 [ 1920.643018] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1933.560006] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:25:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfeffffff00000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:25:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:07 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:25:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 81) 00:25:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 83) 00:25:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb05) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1942.358175] FAULT_INJECTION: forcing a failure. [ 1942.358175] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.358197] CPU: 0 PID: 7817 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.358210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.358219] Call Trace: [ 1942.358223] [ 1942.358228] dump_stack_lvl+0x8b/0xb3 [ 1942.358247] should_fail.cold+0x5/0xa [ 1942.358260] ? create_object.isra.0+0x3a/0xa20 [ 1942.358284] should_failslab+0x5/0x10 [ 1942.358300] kmem_cache_alloc+0x5b/0x480 [ 1942.358315] create_object.isra.0+0x3a/0xa20 [ 1942.358331] ? kasan_unpoison+0x23/0x50 [ 1942.358349] __kmalloc_track_caller+0x25e/0x430 [ 1942.358368] ? vfs_parse_fs_string+0xc0/0x150 [ 1942.358389] kmemdup_nul+0x2d/0xa0 [ 1942.358406] vfs_parse_fs_string+0xc0/0x150 [ 1942.358421] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1942.358436] ? __kasan_kmalloc+0x81/0xa0 [ 1942.358451] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1942.358466] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.358486] ? alloc_fs_context+0x5ac/0x9d0 [ 1942.358506] path_mount+0x612/0x1f80 [ 1942.358524] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.358542] ? finish_automount+0xa20/0xa20 [ 1942.358556] ? kmem_cache_free+0xe0/0x420 [ 1942.358571] ? putname+0xfe/0x140 [ 1942.358592] __x64_sys_mount+0x27e/0x300 [ 1942.358608] ? path_mount+0x1f80/0x1f80 [ 1942.358625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.358649] do_syscall_64+0x3b/0x90 [ 1942.358663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.358680] RIP: 0033:0x7fa9c293504a [ 1942.358689] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.358701] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1942.358714] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1942.358722] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1942.358729] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1942.358737] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.358744] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1942.358764] [ 1942.370382] FAT-fs (loop0): bogus number of reserved sectors [ 1942.370393] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1942.371665] FAT-fs (loop6): bogus number of reserved sectors [ 1942.371673] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1942.380207] loop5: detected capacity change from 0 to 256 [ 1942.381983] loop7: detected capacity change from 0 to 256 [ 1942.383221] FAT-fs (loop7): bogus number of FAT sectors [ 1942.383242] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1942.388771] FAT-fs (loop0): bogus number of reserved sectors [ 1942.388781] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1942.392188] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1942.417265] 9pnet_fd: p9_fd_create_tcp (7819): problem connecting socket to 127.0.0.1 00:25:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 84) [ 1942.418997] loop2: detected capacity change from 0 to 256 [ 1942.424230] FAULT_INJECTION: forcing a failure. [ 1942.424230] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.424262] CPU: 1 PID: 7824 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.424295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.424311] Call Trace: [ 1942.424318] [ 1942.424326] dump_stack_lvl+0x8b/0xb3 [ 1942.424361] should_fail.cold+0x5/0xa 00:25:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x9, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:25:07 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1942.424386] ? create_object.isra.0+0x3a/0xa20 [ 1942.424424] should_failslab+0x5/0x10 [ 1942.424455] kmem_cache_alloc+0x5b/0x480 [ 1942.424486] create_object.isra.0+0x3a/0xa20 [ 1942.424517] ? kasan_unpoison+0x23/0x50 [ 1942.424554] kmem_cache_alloc+0x239/0x480 [ 1942.424596] getname_kernel+0x4e/0x370 [ 1942.424633] kern_path+0x1b/0x50 [ 1942.424667] lookup_bdev+0xc3/0x260 [ 1942.424705] ? bd_abort_claiming+0x90/0x90 [ 1942.424745] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.424783] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.424821] ? cred_has_capability.isra.0+0x14e/0x2b0 [ 1942.424862] blkdev_get_by_path+0x71/0x2e0 [ 1942.424886] ? blkdev_get_by_dev+0x80/0x80 [ 1942.424907] ? kfree+0x1d3/0x410 [ 1942.424957] mount_bdev+0x5b/0x3f0 [ 1942.424998] ? msdos_mount+0x40/0x40 [ 1942.425038] ? setup+0xd0/0xd0 [ 1942.425071] legacy_get_tree+0x105/0x220 [ 1942.425100] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.425143] vfs_get_tree+0x8e/0x2f0 [ 1942.425174] path_mount+0x131b/0x1f80 [ 1942.425210] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.425245] ? finish_automount+0xa20/0xa20 [ 1942.425274] ? kmem_cache_free+0xe0/0x420 [ 1942.425303] ? putname+0xfe/0x140 [ 1942.425344] __x64_sys_mount+0x27e/0x300 [ 1942.425376] ? path_mount+0x1f80/0x1f80 [ 1942.425410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.425456] do_syscall_64+0x3b/0x90 [ 1942.425483] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.425516] RIP: 0033:0x7faa30c9904a [ 1942.425534] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.425556] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 00:25:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfeffffffffffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1942.425579] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1942.425595] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1942.425611] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1942.425625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.425640] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1942.425680] [ 1942.433248] FAT-fs (loop4): bogus number of reserved sectors [ 1942.433269] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1942.443239] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:07 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 82) [ 1942.494738] FAULT_INJECTION: forcing a failure. [ 1942.494738] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.494758] CPU: 0 PID: 7830 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.494772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.494780] Call Trace: [ 1942.494784] [ 1942.494789] dump_stack_lvl+0x8b/0xb3 [ 1942.494810] should_fail.cold+0x5/0xa [ 1942.494822] ? create_object.isra.0+0x3a/0xa20 [ 1942.494842] should_failslab+0x5/0x10 [ 1942.494858] kmem_cache_alloc+0x5b/0x480 [ 1942.494874] create_object.isra.0+0x3a/0xa20 [ 1942.494890] ? kasan_unpoison+0x23/0x50 [ 1942.494909] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1942.494925] alloc_super+0x54/0x9d0 [ 1942.494943] ? test_bdev_super_fc+0x70/0x70 [ 1942.494961] sget+0x10b/0x550 [ 1942.494976] ? alloc_super+0x9d0/0x9d0 [ 1942.494995] mount_bdev+0xf8/0x3f0 [ 1942.495011] ? msdos_mount+0x40/0x40 00:25:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xa, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:25:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 85) 00:25:07 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb05) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1942.495031] ? setup+0xd0/0xd0 [ 1942.495047] legacy_get_tree+0x105/0x220 [ 1942.495063] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.495086] vfs_get_tree+0x8e/0x2f0 [ 1942.495102] path_mount+0x131b/0x1f80 [ 1942.495121] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.495139] ? finish_automount+0xa20/0xa20 [ 1942.495153] ? kmem_cache_free+0xe0/0x420 [ 1942.495168] ? putname+0xfe/0x140 [ 1942.495189] __x64_sys_mount+0x27e/0x300 [ 1942.495206] ? path_mount+0x1f80/0x1f80 [ 1942.495223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.495247] do_syscall_64+0x3b/0x90 [ 1942.495261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.495282] RIP: 0033:0x7fa9c293504a [ 1942.495291] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.495303] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1942.495316] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1942.495324] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1942.495331] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1942.495339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.495346] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1942.495367] [ 1942.500260] 9pnet_fd: p9_fd_create_tcp (7825): problem connecting socket to 127.0.0.1 [ 1942.503743] FAT-fs (loop0): bogus number of reserved sectors [ 1942.503756] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1942.503877] FAT-fs (loop6): bogus number of reserved sectors [ 1942.503884] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1942.505551] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1942.527378] FAT-fs (loop0): bogus number of reserved sectors [ 1942.527389] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1942.536770] loop7: detected capacity change from 0 to 256 [ 1942.552496] FAT-fs (loop7): bogus number of FAT sectors [ 1942.552517] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1942.584618] loop5: detected capacity change from 0 to 256 [ 1942.605565] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1942.622727] 9pnet_fd: p9_fd_create_tcp (7837): problem connecting socket to 127.0.0.1 [ 1942.633202] FAULT_INJECTION: forcing a failure. [ 1942.633202] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.633220] CPU: 0 PID: 7840 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.633233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.633242] Call Trace: [ 1942.633246] [ 1942.633250] dump_stack_lvl+0x8b/0xb3 [ 1942.633275] should_fail.cold+0x5/0xa [ 1942.633288] ? security_sb_alloc+0x107/0x250 [ 1942.633305] should_failslab+0x5/0x10 [ 1942.633323] __kmalloc+0x72/0x440 [ 1942.633332] ? _down_write_nest_lock+0x150/0x150 [ 1942.633351] security_sb_alloc+0x107/0x250 [ 1942.633369] alloc_super+0x1dd/0x9d0 [ 1942.633388] ? test_bdev_super_fc+0x70/0x70 [ 1942.633406] sget+0x10b/0x550 [ 1942.633422] ? alloc_super+0x9d0/0x9d0 [ 1942.633441] mount_bdev+0xf8/0x3f0 00:25:07 executing program 2: syz_io_uring_setup(0x46ac, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r3, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000007c0)="d3baea4c41d07dccc4058b5892b9a86139dd763e4b6be639266a14e41b617844eb0286767ba088665b020f44a7e6351fd2d17d56a22fe1ede841d316f6dabd4c94e4363555a27c24c0b9f777ca31ecec582a8b7e1c5a0c6f2c2d4f8eed20962baed8e6d932352eec2f220fb330272b6214a00e567bb68575606616902cce2b958018850ce72b5c96eaf25d5149893f437fa4ec1d5182ba1d0fbb92b6ed142eb4314dcb9a4d405d1af775f943440adbb9611f758f577ea93aa7683cd2a22db4d27c0768266aa62c1803f228007a8998ad0c924755135d2b22a786fc46c6910e49eda5182ba1e9535ca969a4057c3626e8297fe04ae63fd9e65350808ca8564568240ad1bcff2fa6e8d03e1eb4da33b58206305bfb95463c097d9451a3f9519a4975605582551012261c07bd28aa954bca99eb27de3c49d88e21ee8aba03e586c1115aa1b5050c98b2dc231313461f40ce849d7ecdb4a8f25cacc877f44ca879560e3e5ee2f975037ee1d83d00a1031c95dd12ac4bf7758e546a5f9e39cfe3415dd8f335b9cf245240ce311a43d5bd0ce7e4ae5a35ed5b140784095fddcafd26ed0cd1cae969d078c10f586744dcb775fbc1e67d753db27f58a981c1ab41467c553c0e67ce74fd0b0306bb194c50e0d7598904499082926c7865f529eb665bb07eb9019d59f79b31a9f99939bf02f15c4443e331361c2829eabd12a88b1db14d0662dfa74176168834354426c18319486250fd71b798297095938ae802359c328f71f7481e66c40579806175314c292142b6e9580427173e1091ea61a891f24d66ed6d75f364876718fbf7d122a9d0d27c09c83008eaf061db5f8d9977a4d90c13896ee9bf9e3174b762382109adf40ab333857ca94edfae29e9f6bc596119480897638828eb80dcea5679a3461f0503132f554ad8e9b1113a81a148101d9209a1cc1ae3afd86a7fd4c17c81290fb7e97f189750e6447640a5ef5ee7546573e323d4a7bfafaa6b9faf7bb935f1d26da991f64a65e384fa726b6a1c4c451b7c7657720f1130bbde29576ac2477375a59e2f23a51feedbb1b941648c5027d431a58e910f7d7f777a42205fb655ec96f96aae26d86ffebf20502f9c7116c9ef38ecc56ab823db5ec4427487bc8b628cce493e22b84c5c7b92e7ac007da73cc25a720fe8ce15faed7b73e77a36efdddfb7da77e5ceb75b323d6dba697c837978ef38f687db84303891d931197e4174ab5a5b1244e56a7f05da3af14bb3db1b5a483d7f138907d1ba6006ca31a71e67eface4e1f3bf42c471c40efed8e134a72ca6c7156dd00a50e48263ee5d94b48f305d618e3e4ae89758cbc62b9d3871ced1890ef7bd767a4a5c48f5227d2d5e89588109c13681f3b72539c0090e1af204d514ca81842b043507d63a409d845f210228635a06cc44fe8bcfe6ae61c9a011709c92aa01ed8f89bf5473c89acbd12ddf492d66740e85bb31f7d3eca220619733124fa7bd8ea7e3fbcb2357eab6be67aac79176cab448a66eca3da76ab1a8f1be3c4d0240bf1143f7ad3be145393caa2d1f9eb6f319053222166531f922c20d8f2cbe3d578c0f2d71ba72a3ff903e0693c05288f3f9921d59a8266cbb02807710dde9cd0a8c03d1440a54bb52c1e427447c8bf4696b8d2fe8f87198b5934fb0593c12d14f69b2a64cd8dd0af5a903dd77fe23d1dd9ed8f540455dc27cf70c59683c71ebfd280a86c9cc822963be421ec2db3c417c3920c8290b72df183a86bfa3a08aa025bfa9de3801231782b260120ad927f9d7cf03ede61911bce1e6947db30cc92f75e97c1c680aa4a82ae2f3b0c95a1baa4251d4d400fff96227822036a0c36d020e34be2f26d0a64ea5d7123404dca345f123712cdd6e368e7436fbdae3201e0485dbe404859722a86ab1251d965c6c70a860aeecf5b1eea06e966110dbd2ae2fc671987dac6537c5e74f0f5807fadbe516c68bcf4ec2ea0f1415592e3e7f86bc4117d4f0e29c1dae2947640d45591c0c8556e87f632cb75438fafda782b78c73c37e657aaa5bdfebcea4702f6834b3f89f06c4e4e4b993478779237ccdb0f5aaac62ce108619767741be6bb7b3c44fb5d068a8106004bdcedc3fd99c67005b50cb840ada2830d5a48637a1766c87827d6067841aa34600fbf8b65a8cb8d1ee95cae21fe76f4a076f519675c5db149b087a5d81d4e72f3641e19bb0c439d752d821bc9b301cf521778f850b78b7a984a48301ece368e6d9b56998dce749cf5e2871f658790218aed412d457fe02467a25d0cad970d46c4683710bc396b929076e5d37ea6d41687a896c3fc3405a0839233e4b2cca747f52dae649e6426a56a19973bdaa879a711ad4c5d37c03f5d0f550718abe43bb1f44875fd1382249925c5dcb969ae02c9f0efd8e74a42ac7216d7f8dc8b188910f8dd90e91b2005c27710a85af34369f565c92d8c67fb63d1f38e8a33e8028b9ad863279c1357c959d915942d439ec1bb5bf108fc0671e19f2f5c5bc58b3f2d399c98a37d6e7fbb27f58d1e7120dd0f38151f5a5fc94d18adba2cb33a2d7602dcd0d84665df0dd014cff983085e34ba06a599a0023ba73a07619ce124184c53b8fd43ab11644ae18414aa9632ce024e58cfe5c68c9aae7c070c935f774e43e9214d490baa7510a0acc76f00f4ce6427b7814706665bb8cf0d4d44abf320bea6c3bcba10b8c756403c70a4857fc7b529b1bcef7b2f87eea1f0e9c92bce4e988f5d1ff8e0bc1ad602414d47a2b558e43dbddc7af3884eecf7fb60205bd7a838f921b3f7c93ef8580fd755134f026455deec9d574281ee9bafa370c87d1107f82f9896671a831f4be36c3dc7a00782f62c5d65baf79decf7ad5b2a916b02b539d19d209f80b8c68e9d5a566b84422d35d4eb385972fa805502f6677f8d7abf7f28a86c9d86fc97962817f864e2e02b35e79a3454e42d215a3a25002cf00d895444f5e3835d9dabf2274fcc6e4531c1cadf611345a71528cb1359abfaa11e747846ae588f613c25663b8af069318165c54899a8425272f6c2c1fa5d4f14d9020ce72b2baf50c1729f56342adf5075b6328df8eb25b2716042d0e886c8e4944e0e43974d037908fe0c7b97d370d89145deca0a4a6126363bfb0a69e39a44405c563af216139bafb1ba8f88724603ca8e7c4f80da5abbc5730df8937998f7f1cf0badd40a3bbbe0e6054109bd180447b971af4135e2b452535e98f2c144d04bebbea82095dbb81b201190c320f75ad4b0c803c27cf986db0b72f0a4324f381f5aa646ddb8c9329e2a86177a071fca80ce29749e719a19eee80b682ba68298dae2a6d0b00d6bf10774eaa4134aa45a33ac5b0fa0f6fc7f541f8d8146ac1823c060fef47bf9c6b30594d3f308e6ca6bd1fb83a05bcdb2df3a894e13e5b7b3936ef768a22961eea83170d6e791e3e057631dcc038cb4cba18c78bca6c7c11bf378c219fb8b4c863726cc51d6e5832cfbb2a68c67037d139013a76a13882b22e826d53f000753461b9b46ec97d1d8f48f12b4841dbc491c89e76870b7dccd1e493489254ffc4afb03731bb34a7947ff18cfb6f8bd5ac3856b33cf98063ad2e8d652e038debf3a26aedf38559fe64a73fa3920196c849b896406f8180cf0f37cdef30db9e9c7ba46288f231b5a55c771419c753982e4250b5b1129ca3998428420d278edb20af58c1d393adb67a5e3469a1bc10ef4467b0509ddff2245cea4b5b70f7d7df8204077a545e2acd7e7a2205a40f645ea2cc57cc1336a97da5a8874452b51142c1ce944af76c0a1661c4aaa93ce94ef02e67e460bd98bbb0bf7bed3ede0b762b1f71012694d8e900c6336064dc533918b1ec0f3ab6ff1dfab82e0344b702aed3abf82ee4fc589d2f503e16cb45dec2dc8a849b5c9026e18d6f510fdcd911fabbf395b99edfc86cea4e2ac1d840f67072e3b21fd6c73c5ec9bd1322c9356ddfa900a6e4c8e59403b3fd9abab7a2c31aa431920605ceaca32cf83709eb4569f5b1b7298373915b177908f46f7475d7f5d3ab422760b9b8d1baec3eebf731098130d8d1fd0ec41267ad3e6a056dbea54183ef7fdb9ee6087d3de38eac38275da792f9a22231029ef8ff576c60f8a67c781407519c752b0b8d3511a26ea4fa4f74d13a2f6080aebc97211e16a52f50344c5a2ada70333977238cd1caee385866575af10427f4d70c43fce469c19179a4bc703a8e38f7678db1fe6a87b59d6beb4380d84d574093043e4e8924d5c0636f3db38f8726228d9039dc8bcb784cbabc68e472a86f1e739e945bacad57850eb5d233864050d2666b92d8675feaf86562952926ac1591438c59cd22efe2ddf39d334fe1d1e0e6035c353b35b0c93c25f5b31b1966f3bfba3c7621498780fa178daad17549f121e919669545d9d802bc072bf5985af25e9274ed784e6c2f78f2a19557dd1127b14bbd92ca5a6cf76a9bc2322d7791e9c8916b627ba18ace50cb29f46fdcb13862a1831fc80e8e394f29811b1590abb424675cc1329189b7876b4de8a2148ae412934b5f30a64658b257df106c0a829b43c7e72e9deb053390f469569bc1a154c4d3ca309fe72fc4318951833e7442098c55925a2f798c8c5aadcf4ae54d2f1a6b763d81e3f71068277675b2fe8224d21d8f97a79aa13575b43509ac964c57082db72f4e53d799ec359184e1f2a48866e4aa506b580bc8c4c64c9e7a471536e6cc91608712fc25339ae0a170de4710b6dc3ea18b867a4c7b0e1be7d23da0b4c284e59bcae57358645a0c12489d672fe8d1ea5503b5bf07b219f92d7a0fa7b731ba9af13eaa8c713664e5d24a95fec1d90d464e7190651424992db66664c07d96b77435975bb3aa7513b9c1dbab985f24c9bdb9fd27bc7e03ae271e55c657b70c6ddd3916ae717d80e891ed7ec1741299a925fbf89e9babb317589962ffebe521824c4424112c983e5bed9bfc503de4d25663ccc9870b47276bae02658a9011b83598e2c76cd1e73187aa22a18414adb0c8280e5e9ffa9c40b95cc2d0dcd8f2580c95b22478648f6ecd1b8c649d9b734be039fa2b32bd982b65da4ef41c80dd7fce715b4ed5e0c1662fb28f1f52946d7679d0cfaf1036d1e6970a1d5500666d32446d777e1651f29836ca83cc44e60fd3362279f67692cade7210df45cfddb7014f3c7c2d6b14aa00187b8f56a0bbbd497447f4be609a6e4f290218212c67dfa7dd697b8aa6402e50498fe0d180cab33c50f4ea56e1e334a58da0649250f58a810ee3244e42019581bfb65213ed214a169ee2cab2651aa0f5738927455bd29cc4e467b8c6520a92154fd98bc6d990d5aeb2edaec0c69bfae80a84e10bd801754674da8394d816459750ecc917f63644351f915a1559f5886f9cd592c5b60ef9c04414883f05e5534f98996c2eda5f74351ff3c3500f7e981f63367228253ff0381fab699a126182c9b5b65d8c695e8a6ad460cc8bc8626d1c13fffc746d82afd9edb651b3a6219ff95c0cbd1bd824388bc1db14121f4cc6a6ce40771a189cef3c8b6570cdcd107f0070f7f1d1ea57449cac9fa7d53934d9704cb6f6d66cd7a189dad5ce06bb86ce092fcb73f7693c1ebbe57ef40105f3bc3c6b31611e71358d3722ecbed0c93a478eb19fe802f980de5b6c63e6d90d4ab4ae7aed3061bba55304b08f21743ed65005db46d4bc431caca90a33d8482b672f2c43053fef8656278c23e8850a7471110da1cb5f8da338263f042dd7ab505619f4be6f41906ead42b21359a80886d776710189535439c8a8a3e53f0c26dab0996aa7", 0x1000}], 0x1, 0x9, 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x19}) syz_io_uring_setup(0x6c21, &(0x7f00000006c0)={0x0, 0x15eb, 0x4, 0x6, 0x21b}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000680)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = gettid() process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file1\x00', 0x28) openat(r5, &(0x7f0000000540)='./file1\x00', 0x541000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) chown(&(0x7f0000000580)='./file1\x00', 0x0, r6) clone3(&(0x7f00000004c0)={0x1400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300), {0x23}, &(0x7f0000000340)=""/62, 0x3e, &(0x7f0000000380)=""/199, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, r4], 0x4}, 0x58) 00:25:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 86) 00:25:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xb, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1942.633457] ? msdos_mount+0x40/0x40 [ 1942.633476] ? setup+0xd0/0xd0 [ 1942.633493] legacy_get_tree+0x105/0x220 [ 1942.633508] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.633531] vfs_get_tree+0x8e/0x2f0 [ 1942.633547] path_mount+0x131b/0x1f80 [ 1942.633566] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.633584] ? finish_automount+0xa20/0xa20 [ 1942.633598] ? kmem_cache_free+0xe0/0x420 [ 1942.633613] ? putname+0xfe/0x140 [ 1942.633634] __x64_sys_mount+0x27e/0x300 [ 1942.633651] ? path_mount+0x1f80/0x1f80 [ 1942.633668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.633693] do_syscall_64+0x3b/0x90 [ 1942.633707] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.633723] RIP: 0033:0x7fa9c293504a [ 1942.633733] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.633744] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1942.633757] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1942.633765] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1942.633772] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1942.633779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.633786] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1942.633808] [ 1942.635112] FAT-fs (loop0): bogus number of reserved sectors [ 1942.635122] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1942.673892] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1942.680974] FAULT_INJECTION: forcing a failure. [ 1942.680974] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.681006] CPU: 1 PID: 7843 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.681031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.681046] Call Trace: [ 1942.681053] [ 1942.681062] dump_stack_lvl+0x8b/0xb3 [ 1942.681095] should_fail.cold+0x5/0xa [ 1942.681119] ? alloc_super+0x54/0x9d0 [ 1942.681152] should_failslab+0x5/0x10 [ 1942.681183] kmem_cache_alloc_trace+0x55/0x3c0 [ 1942.681204] ? do_raw_spin_lock+0x121/0x260 [ 1942.681244] alloc_super+0x54/0x9d0 [ 1942.681282] ? test_bdev_super_fc+0x70/0x70 [ 1942.681316] sget+0x10b/0x550 [ 1942.681346] ? alloc_super+0x9d0/0x9d0 [ 1942.681381] mount_bdev+0xf8/0x3f0 [ 1942.681410] ? msdos_mount+0x40/0x40 [ 1942.681445] ? setup+0xd0/0xd0 [ 1942.681476] legacy_get_tree+0x105/0x220 [ 1942.681504] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.681545] vfs_get_tree+0x8e/0x2f0 [ 1942.681575] path_mount+0x131b/0x1f80 [ 1942.681610] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.681644] ? finish_automount+0xa20/0xa20 [ 1942.681671] ? kmem_cache_free+0xe0/0x420 [ 1942.681699] ? putname+0xfe/0x140 [ 1942.681738] __x64_sys_mount+0x27e/0x300 [ 1942.681768] ? path_mount+0x1f80/0x1f80 [ 1942.681802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.681846] do_syscall_64+0x3b/0x90 [ 1942.681872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.681903] RIP: 0033:0x7faa30c9904a [ 1942.681920] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.681941] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1942.681963] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1942.681977] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1942.681991] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1942.682005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.682018] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1942.682058] [ 1942.687162] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1942.746722] FAULT_INJECTION: forcing a failure. [ 1942.746722] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.746755] CPU: 0 PID: 7849 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1942.746768] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1942.746777] Call Trace: [ 1942.746781] [ 1942.746785] dump_stack_lvl+0x8b/0xb3 [ 1942.746805] should_fail.cold+0x5/0xa [ 1942.746819] ? create_object.isra.0+0x3a/0xa20 [ 1942.746839] should_failslab+0x5/0x10 [ 1942.746855] kmem_cache_alloc+0x5b/0x480 [ 1942.746871] create_object.isra.0+0x3a/0xa20 [ 1942.746887] ? kasan_unpoison+0x23/0x50 [ 1942.746905] kmem_cache_alloc+0x239/0x480 [ 1942.746920] getname_kernel+0x4e/0x370 [ 1942.746939] kern_path+0x1b/0x50 [ 1942.746956] lookup_bdev+0xc3/0x260 [ 1942.746976] ? bd_abort_claiming+0x90/0x90 [ 1942.746996] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.747016] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.747035] ? cred_has_capability.isra.0+0x14e/0x2b0 [ 1942.747056] blkdev_get_by_path+0x71/0x2e0 [ 1942.747068] ? blkdev_get_by_dev+0x80/0x80 [ 1942.747079] ? kfree+0x1d3/0x410 [ 1942.747103] mount_bdev+0x5b/0x3f0 [ 1942.747119] ? msdos_mount+0x40/0x40 [ 1942.747139] ? setup+0xd0/0xd0 [ 1942.747155] legacy_get_tree+0x105/0x220 [ 1942.747170] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1942.747192] vfs_get_tree+0x8e/0x2f0 [ 1942.747208] path_mount+0x131b/0x1f80 [ 1942.747226] ? kasan_quarantine_put+0x87/0x1e0 [ 1942.747243] ? finish_automount+0xa20/0xa20 [ 1942.747258] ? kmem_cache_free+0xe0/0x420 [ 1942.747275] ? putname+0xfe/0x140 [ 1942.747296] __x64_sys_mount+0x27e/0x300 [ 1942.747312] ? path_mount+0x1f80/0x1f80 [ 1942.747329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1942.747352] do_syscall_64+0x3b/0x90 [ 1942.747367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1942.747384] RIP: 0033:0x7fa9c293504a [ 1942.747394] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1942.747406] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1942.747418] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1942.747426] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1942.747433] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1942.747440] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1942.747448] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1942.747468] [ 1942.750225] FAT-fs (loop6): bogus number of reserved sectors [ 1942.750237] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1954.668480] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:25:27 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) faccessat(r0, &(0x7f0000000200)='./file1\x00', 0x1b0) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x2000) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x40) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r3, r1, 0x0, 0xfffffdef) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x10000000) r6 = socket$inet6(0xa, 0x3, 0x2) r7 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7, {0x4}}, './file1\x00'}) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r6, 0x3, 0x0, 0x4}, 0x9) 00:25:27 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:27 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb05) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xd, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1961.785748] FAULT_INJECTION: forcing a failure. [ 1961.785748] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.785770] CPU: 1 PID: 7868 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1961.785784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1961.785793] Call Trace: [ 1961.785796] 00:25:27 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x0, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:25:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:25:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 83) 00:25:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 87) [ 1961.785802] dump_stack_lvl+0x8b/0xb3 [ 1961.785821] should_fail.cold+0x5/0xa [ 1961.785834] ? create_object.isra.0+0x3a/0xa20 [ 1961.785854] should_failslab+0x5/0x10 [ 1961.785871] kmem_cache_alloc+0x5b/0x480 [ 1961.785886] create_object.isra.0+0x3a/0xa20 [ 1961.785902] ? kasan_unpoison+0x23/0x50 [ 1961.785920] __kmalloc_track_caller+0x25e/0x430 [ 1961.785939] ? vfs_parse_fs_string+0xc0/0x150 [ 1961.785959] kmemdup_nul+0x2d/0xa0 [ 1961.785976] vfs_parse_fs_string+0xc0/0x150 00:25:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffffffff000, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1961.785992] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 1961.786007] ? __kasan_kmalloc+0x81/0xa0 [ 1961.786021] ? generic_parse_monolithic+0x1f0/0x1f0 [ 1961.786036] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.786056] ? alloc_fs_context+0x5ac/0x9d0 [ 1961.786077] path_mount+0x612/0x1f80 [ 1961.786095] ? kasan_quarantine_put+0x87/0x1e0 [ 1961.786112] ? finish_automount+0xa20/0xa20 00:25:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 84) [ 1961.786127] ? kmem_cache_free+0xe0/0x420 [ 1961.786141] ? putname+0xfe/0x140 [ 1961.786162] __x64_sys_mount+0x27e/0x300 [ 1961.786182] ? path_mount+0x1f80/0x1f80 [ 1961.786199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.786222] do_syscall_64+0x3b/0x90 [ 1961.786236] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:25:27 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb09) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1961.786253] RIP: 0033:0x7faa30c9904a [ 1961.786262] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.786274] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1961.786286] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1961.786295] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 00:25:27 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 88) [ 1961.786302] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1961.786310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1961.786317] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1961.786337] [ 1961.794714] loop2: detected capacity change from 0 to 256 [ 1961.798024] FAT-fs (loop4): bogus number of reserved sectors [ 1961.798036] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1961.803428] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:25:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 85) [ 1961.808191] loop7: detected capacity change from 0 to 256 [ 1961.822673] loop5: detected capacity change from 0 to 256 [ 1961.846537] FAT-fs (loop7): bogus number of FAT sectors [ 1961.846562] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1961.850559] FAULT_INJECTION: forcing a failure. [ 1961.850559] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.850581] CPU: 1 PID: 7875 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1961.850595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:25:27 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1961.850604] Call Trace: [ 1961.850608] [ 1961.850613] dump_stack_lvl+0x8b/0xb3 00:25:27 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb09) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 1961.850634] should_fail.cold+0x5/0xa 00:25:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xe, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1961.850647] ? create_object.isra.0+0x3a/0xa20 [ 1961.850667] should_failslab+0x5/0x10 [ 1961.850683] kmem_cache_alloc+0x5b/0x480 [ 1961.850694] ? mark_held_locks+0x9e/0xe0 [ 1961.850714] create_object.isra.0+0x3a/0xa20 [ 1961.850736] kmemleak_alloc_percpu+0xa0/0x100 [ 1961.850760] pcpu_alloc+0x7bf/0x1060 [ 1961.850785] __percpu_init_rwsem+0x22/0x150 [ 1961.850801] alloc_super+0x222/0x9d0 [ 1961.850819] ? test_bdev_super_fc+0x70/0x70 [ 1961.850837] sget+0x10b/0x550 [ 1961.850853] ? alloc_super+0x9d0/0x9d0 [ 1961.850872] mount_bdev+0xf8/0x3f0 [ 1961.850887] ? msdos_mount+0x40/0x40 [ 1961.850906] ? setup+0xd0/0xd0 [ 1961.850923] legacy_get_tree+0x105/0x220 [ 1961.850938] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.850961] vfs_get_tree+0x8e/0x2f0 [ 1961.850977] path_mount+0x131b/0x1f80 [ 1961.850996] ? kasan_quarantine_put+0x87/0x1e0 [ 1961.851014] ? finish_automount+0xa20/0xa20 [ 1961.851028] ? kmem_cache_free+0xe0/0x420 [ 1961.851044] ? putname+0xfe/0x140 [ 1961.851069] __x64_sys_mount+0x27e/0x300 [ 1961.851085] ? path_mount+0x1f80/0x1f80 [ 1961.851103] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.851126] do_syscall_64+0x3b/0x90 [ 1961.851140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.851156] RIP: 0033:0x7fa9c293504a [ 1961.851166] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.851178] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1961.851190] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1961.851198] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1961.851205] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1961.851213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1961.851220] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1961.851242] [ 1961.852121] FAT-fs (loop6): bogus number of reserved sectors [ 1961.852132] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1961.860897] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1961.871914] FAT-fs (loop0): bogus number of reserved sectors [ 1961.871936] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1961.903981] FAT-fs (loop0): bogus number of reserved sectors [ 1961.904005] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1961.915866] 9pnet_fd: p9_fd_create_tcp (7874): problem connecting socket to 127.0.0.1 [ 1961.921026] FAULT_INJECTION: forcing a failure. [ 1961.921026] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.921048] CPU: 1 PID: 7880 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1961.921062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1961.921071] Call Trace: [ 1961.921075] [ 1961.921081] dump_stack_lvl+0x8b/0xb3 [ 1961.921101] should_fail.cold+0x5/0xa [ 1961.921114] ? security_sb_alloc+0x107/0x250 [ 1961.921132] should_failslab+0x5/0x10 [ 1961.921149] __kmalloc+0x72/0x440 [ 1961.921159] ? _down_write_nest_lock+0x150/0x150 [ 1961.921177] security_sb_alloc+0x107/0x250 [ 1961.921196] alloc_super+0x1dd/0x9d0 [ 1961.921215] ? test_bdev_super_fc+0x70/0x70 [ 1961.921237] sget+0x10b/0x550 [ 1961.921253] ? alloc_super+0x9d0/0x9d0 [ 1961.921273] mount_bdev+0xf8/0x3f0 [ 1961.921288] ? msdos_mount+0x40/0x40 [ 1961.921308] ? setup+0xd0/0xd0 [ 1961.921324] legacy_get_tree+0x105/0x220 [ 1961.921339] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.921362] vfs_get_tree+0x8e/0x2f0 [ 1961.921378] path_mount+0x131b/0x1f80 [ 1961.921396] ? kasan_quarantine_put+0x87/0x1e0 [ 1961.921414] ? finish_automount+0xa20/0xa20 [ 1961.921429] ? kmem_cache_free+0xe0/0x420 [ 1961.921444] ? putname+0xfe/0x140 [ 1961.921465] __x64_sys_mount+0x27e/0x300 [ 1961.921482] ? path_mount+0x1f80/0x1f80 [ 1961.921499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.921525] do_syscall_64+0x3b/0x90 [ 1961.921539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.921555] RIP: 0033:0x7faa30c9904a [ 1961.921564] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.921576] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1961.921589] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1961.921597] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1961.921604] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1961.921611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1961.921618] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1961.921641] [ 1961.977687] FAULT_INJECTION: forcing a failure. [ 1961.977687] name failslab, interval 1, probability 0, space 0, times 0 [ 1961.977708] CPU: 1 PID: 7885 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1961.977722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1961.977730] Call Trace: [ 1961.977733] [ 1961.977738] dump_stack_lvl+0x8b/0xb3 [ 1961.977758] should_fail.cold+0x5/0xa [ 1961.977771] ? create_object.isra.0+0x3a/0xa20 [ 1961.977791] should_failslab+0x5/0x10 [ 1961.977807] kmem_cache_alloc+0x5b/0x480 [ 1961.977823] create_object.isra.0+0x3a/0xa20 [ 1961.977844] kmemleak_alloc_percpu+0xa0/0x100 [ 1961.977869] pcpu_alloc+0x7bf/0x1060 [ 1961.977894] __percpu_init_rwsem+0x22/0x150 [ 1961.977912] alloc_super+0x222/0x9d0 [ 1961.977930] ? test_bdev_super_fc+0x70/0x70 [ 1961.977948] sget+0x10b/0x550 [ 1961.977967] ? alloc_super+0x9d0/0x9d0 [ 1961.977987] mount_bdev+0xf8/0x3f0 [ 1961.978002] ? msdos_mount+0x40/0x40 [ 1961.978022] ? setup+0xd0/0xd0 [ 1961.978038] legacy_get_tree+0x105/0x220 [ 1961.978053] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1961.978076] vfs_get_tree+0x8e/0x2f0 [ 1961.978092] path_mount+0x131b/0x1f80 [ 1961.978111] ? kasan_quarantine_put+0x87/0x1e0 [ 1961.978129] ? finish_automount+0xa20/0xa20 [ 1961.978144] ? kmem_cache_free+0xe0/0x420 [ 1961.978159] ? putname+0xfe/0x140 [ 1961.978180] __x64_sys_mount+0x27e/0x300 [ 1961.978197] ? path_mount+0x1f80/0x1f80 [ 1961.978214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1961.978238] do_syscall_64+0x3b/0x90 [ 1961.978252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1961.978268] RIP: 0033:0x7fa9c293504a [ 1961.978277] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1961.978289] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1961.978302] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1961.978310] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1961.978318] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1961.978325] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1961.978332] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1961.978355] [ 1961.985638] FAT-fs (loop6): bogus number of reserved sectors [ 1961.985667] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1962.091675] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1962.096527] loop7: detected capacity change from 0 to 256 [ 1962.096860] FAULT_INJECTION: forcing a failure. [ 1962.096860] name failslab, interval 1, probability 0, space 0, times 0 [ 1962.096892] CPU: 0 PID: 7891 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1962.096917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1962.096932] Call Trace: [ 1962.096938] [ 1962.096946] dump_stack_lvl+0x8b/0xb3 [ 1962.096979] should_fail.cold+0x5/0xa [ 1962.097008] ? alloc_super+0x54/0x9d0 [ 1962.097041] should_failslab+0x5/0x10 [ 1962.097071] kmem_cache_alloc_trace+0x55/0x3c0 [ 1962.097091] ? do_raw_spin_lock+0x121/0x260 [ 1962.097130] alloc_super+0x54/0x9d0 [ 1962.097162] ? test_bdev_super_fc+0x70/0x70 [ 1962.097195] sget+0x10b/0x550 [ 1962.097224] ? alloc_super+0x9d0/0x9d0 [ 1962.097260] mount_bdev+0xf8/0x3f0 [ 1962.097294] ? msdos_mount+0x40/0x40 [ 1962.097329] ? setup+0xd0/0xd0 [ 1962.097360] legacy_get_tree+0x105/0x220 [ 1962.097388] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1962.097430] vfs_get_tree+0x8e/0x2f0 [ 1962.097459] path_mount+0x131b/0x1f80 [ 1962.097494] ? kasan_quarantine_put+0x87/0x1e0 [ 1962.097527] ? finish_automount+0xa20/0xa20 [ 1962.097554] ? kmem_cache_free+0xe0/0x420 [ 1962.097582] ? putname+0xfe/0x140 [ 1962.097621] __x64_sys_mount+0x27e/0x300 [ 1962.097652] ? path_mount+0x1f80/0x1f80 [ 1962.097685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1962.097729] do_syscall_64+0x3b/0x90 [ 1962.097755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1962.097786] RIP: 0033:0x7faa30c9904a [ 1962.097803] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1962.097824] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1962.097846] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1962.097861] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1962.097875] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1962.097889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1962.097902] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1962.097942] [ 1962.106231] FAT-fs (loop7): bogus number of FAT sectors [ 1962.106262] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1962.185423] FAT-fs (loop0): bogus number of reserved sectors [ 1962.185446] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1962.197777] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1962.204332] FAT-fs (loop0): bogus number of reserved sectors [ 1962.204353] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1973.550122] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:25:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 86) 00:25:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xf, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:25:50 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 89) 00:25:50 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb09) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:50 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:50 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1985.659965] FAULT_INJECTION: forcing a failure. [ 1985.659965] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.659986] CPU: 1 PID: 7907 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1985.660000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1985.660009] Call Trace: [ 1985.660012] 00:25:50 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) faccessat(r0, &(0x7f0000000200)='./file1\x00', 0x1b0) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x2000) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x40) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r3, r1, 0x0, 0xfffffdef) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x10000000) r6 = socket$inet6(0xa, 0x3, 0x2) r7 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7, {0x4}}, './file1\x00'}) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x209, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r6, 0x3, 0x0, 0x4}, 0x9) [ 1985.660017] dump_stack_lvl+0x8b/0xb3 00:25:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1985.660039] should_fail.cold+0x5/0xa [ 1985.660052] ? alloc_super+0x54/0x9d0 [ 1985.660074] should_failslab+0x5/0x10 [ 1985.660092] kmem_cache_alloc_trace+0x55/0x3c0 [ 1985.660103] ? do_raw_spin_lock+0x121/0x260 [ 1985.660126] alloc_super+0x54/0x9d0 [ 1985.660144] ? test_bdev_super_fc+0x70/0x70 [ 1985.660161] sget+0x10b/0x550 [ 1985.660182] ? alloc_super+0x9d0/0x9d0 [ 1985.660201] mount_bdev+0xf8/0x3f0 [ 1985.660216] ? msdos_mount+0x40/0x40 [ 1985.660236] ? setup+0xd0/0xd0 [ 1985.660253] legacy_get_tree+0x105/0x220 [ 1985.660269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1985.660292] vfs_get_tree+0x8e/0x2f0 [ 1985.660308] path_mount+0x131b/0x1f80 [ 1985.660327] ? kasan_quarantine_put+0x87/0x1e0 00:25:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 87) [ 1985.660346] ? finish_automount+0xa20/0xa20 [ 1985.660360] ? kmem_cache_free+0xe0/0x420 [ 1985.660375] ? putname+0xfe/0x140 [ 1985.660397] __x64_sys_mount+0x27e/0x300 [ 1985.660413] ? path_mount+0x1f80/0x1f80 00:25:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1985.660431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.660456] do_syscall_64+0x3b/0x90 [ 1985.660470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.660488] RIP: 0033:0x7faa30c9904a [ 1985.660497] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.660508] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1985.660520] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1985.660528] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 00:25:51 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 90) [ 1985.660536] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1985.660543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1985.660551] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 00:25:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1985.660572] [ 1985.669128] loop2: detected capacity change from 0 to 256 [ 1985.687707] FAULT_INJECTION: forcing a failure. [ 1985.687707] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.687725] CPU: 1 PID: 7913 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1985.687737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:25:51 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1985.687745] Call Trace: [ 1985.687749] [ 1985.687753] dump_stack_lvl+0x8b/0xb3 [ 1985.687770] should_fail.cold+0x5/0xa [ 1985.687783] ? create_object.isra.0+0x3a/0xa20 [ 1985.687803] should_failslab+0x5/0x10 [ 1985.687820] kmem_cache_alloc+0x5b/0x480 [ 1985.687830] ? mark_held_locks+0x9e/0xe0 [ 1985.687850] create_object.isra.0+0x3a/0xa20 [ 1985.687872] kmemleak_alloc_percpu+0xa0/0x100 [ 1985.687895] pcpu_alloc+0x7bf/0x1060 [ 1985.687922] __percpu_init_rwsem+0x22/0x150 [ 1985.687938] alloc_super+0x222/0x9d0 [ 1985.687959] ? test_bdev_super_fc+0x70/0x70 [ 1985.687977] sget+0x10b/0x550 [ 1985.687993] ? alloc_super+0x9d0/0x9d0 [ 1985.688012] mount_bdev+0xf8/0x3f0 [ 1985.688028] ? msdos_mount+0x40/0x40 [ 1985.688047] ? setup+0xd0/0xd0 [ 1985.688064] legacy_get_tree+0x105/0x220 [ 1985.688079] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:25:51 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0b) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:25:51 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 91) [ 1985.688101] vfs_get_tree+0x8e/0x2f0 [ 1985.688118] path_mount+0x131b/0x1f80 [ 1985.688137] ? kasan_quarantine_put+0x87/0x1e0 [ 1985.688155] ? finish_automount+0xa20/0xa20 [ 1985.688169] ? kmem_cache_free+0xe0/0x420 [ 1985.688184] ? putname+0xfe/0x140 00:25:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 1985.688206] __x64_sys_mount+0x27e/0x300 00:25:51 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x0, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 1985.688222] ? path_mount+0x1f80/0x1f80 [ 1985.688240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.688264] do_syscall_64+0x3b/0x90 [ 1985.688278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.688294] RIP: 0033:0x7fa9c293504a [ 1985.688303] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.688315] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1985.688326] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1985.688334] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1985.688342] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1985.688349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1985.688357] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1985.688379] [ 1985.690925] FAT-fs (loop6): bogus number of reserved sectors [ 1985.690936] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1985.693425] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1985.707756] loop5: detected capacity change from 0 to 256 [ 1985.716202] FAT-fs (loop0): bogus number of reserved sectors [ 1985.716212] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1985.723499] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1985.732590] FAT-fs (loop0): bogus number of reserved sectors [ 1985.732602] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1985.744988] loop7: detected capacity change from 0 to 256 [ 1985.756219] 9pnet_fd: p9_fd_create_tcp (7917): problem connecting socket to 127.0.0.1 [ 1985.766214] FAT-fs (loop7): bogus number of FAT sectors [ 1985.766235] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1985.837910] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1985.843767] FAULT_INJECTION: forcing a failure. [ 1985.843767] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.843799] CPU: 0 PID: 7923 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1985.843824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1985.843838] Call Trace: [ 1985.843845] [ 1985.843853] dump_stack_lvl+0x8b/0xb3 [ 1985.843887] should_fail.cold+0x5/0xa [ 1985.843918] ? create_object.isra.0+0x3a/0xa20 [ 1985.843955] should_failslab+0x5/0x10 [ 1985.843985] kmem_cache_alloc+0x5b/0x480 [ 1985.844016] create_object.isra.0+0x3a/0xa20 [ 1985.844047] ? kasan_unpoison+0x23/0x50 [ 1985.844084] __kmalloc+0x25b/0x440 [ 1985.844113] security_sb_alloc+0x107/0x250 [ 1985.844165] alloc_super+0x1dd/0x9d0 [ 1985.844208] ? test_bdev_super_fc+0x70/0x70 [ 1985.844242] sget+0x10b/0x550 [ 1985.844272] ? alloc_super+0x9d0/0x9d0 [ 1985.844309] mount_bdev+0xf8/0x3f0 [ 1985.844339] ? msdos_mount+0x40/0x40 [ 1985.844375] ? setup+0xd0/0xd0 [ 1985.844407] legacy_get_tree+0x105/0x220 [ 1985.844435] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1985.844478] vfs_get_tree+0x8e/0x2f0 [ 1985.844509] path_mount+0x131b/0x1f80 [ 1985.844545] ? kasan_quarantine_put+0x87/0x1e0 [ 1985.844580] ? finish_automount+0xa20/0xa20 [ 1985.844610] ? kmem_cache_free+0xe0/0x420 [ 1985.844642] ? putname+0xfe/0x140 [ 1985.844684] __x64_sys_mount+0x27e/0x300 [ 1985.844716] ? path_mount+0x1f80/0x1f80 [ 1985.844749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.844795] do_syscall_64+0x3b/0x90 [ 1985.844822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.844854] RIP: 0033:0x7faa30c9904a [ 1985.844871] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.844891] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1985.844918] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 1985.844933] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 1985.844948] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 1985.844962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1985.844976] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 1985.845019] [ 1985.850743] FAULT_INJECTION: forcing a failure. [ 1985.850743] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.850786] CPU: 1 PID: 7926 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1985.850800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1985.850809] Call Trace: [ 1985.850813] [ 1985.850819] dump_stack_lvl+0x8b/0xb3 [ 1985.850840] should_fail.cold+0x5/0xa [ 1985.850854] ? create_object.isra.0+0x3a/0xa20 [ 1985.850877] should_failslab+0x5/0x10 [ 1985.850895] kmem_cache_alloc+0x5b/0x480 [ 1985.850912] create_object.isra.0+0x3a/0xa20 [ 1985.850937] kmemleak_alloc_percpu+0xa0/0x100 [ 1985.850967] pcpu_alloc+0x7bf/0x1060 [ 1985.850995] __percpu_init_rwsem+0x22/0x150 [ 1985.851013] alloc_super+0x222/0x9d0 [ 1985.851032] ? test_bdev_super_fc+0x70/0x70 [ 1985.851054] sget+0x10b/0x550 [ 1985.851072] ? alloc_super+0x9d0/0x9d0 [ 1985.851095] mount_bdev+0xf8/0x3f0 [ 1985.851112] ? msdos_mount+0x40/0x40 [ 1985.851135] ? setup+0xd0/0xd0 [ 1985.851159] legacy_get_tree+0x105/0x220 [ 1985.851184] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1985.851210] vfs_get_tree+0x8e/0x2f0 [ 1985.851228] path_mount+0x131b/0x1f80 [ 1985.851255] ? kasan_quarantine_put+0x87/0x1e0 [ 1985.851281] ? finish_automount+0xa20/0xa20 [ 1985.851297] ? kmem_cache_free+0xe0/0x420 [ 1985.851315] ? putname+0xfe/0x140 [ 1985.851341] __x64_sys_mount+0x27e/0x300 [ 1985.851359] ? path_mount+0x1f80/0x1f80 [ 1985.851378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.851406] do_syscall_64+0x3b/0x90 [ 1985.851423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.851441] RIP: 0033:0x7fa9c293504a [ 1985.851451] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.851464] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1985.851480] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1985.851488] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1985.851498] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1985.851506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1985.851513] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1985.851536] [ 1985.856113] FAT-fs (loop6): bogus number of reserved sectors [ 1985.856126] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1985.874955] FAT-fs (loop4): bogus number of reserved sectors [ 1985.874975] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1985.969724] FAULT_INJECTION: forcing a failure. [ 1985.969724] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.969756] CPU: 0 PID: 7934 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 1985.969780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1985.969795] Call Trace: [ 1985.969801] [ 1985.969809] dump_stack_lvl+0x8b/0xb3 [ 1985.969842] should_fail.cold+0x5/0xa [ 1985.969866] ? create_object.isra.0+0x3a/0xa20 [ 1985.969903] should_failslab+0x5/0x10 [ 1985.969933] kmem_cache_alloc+0x5b/0x480 [ 1985.969954] ? mark_held_locks+0x9e/0xe0 [ 1985.969993] create_object.isra.0+0x3a/0xa20 [ 1985.970035] kmemleak_alloc_percpu+0xa0/0x100 [ 1985.970085] pcpu_alloc+0x7bf/0x1060 [ 1985.970138] __percpu_init_rwsem+0x22/0x150 [ 1985.970173] alloc_super+0x222/0x9d0 [ 1985.970209] ? test_bdev_super_fc+0x70/0x70 [ 1985.970251] sget+0x10b/0x550 [ 1985.970292] ? alloc_super+0x9d0/0x9d0 [ 1985.970333] mount_bdev+0xf8/0x3f0 [ 1985.970367] ? msdos_mount+0x40/0x40 [ 1985.970414] ? setup+0xd0/0xd0 [ 1985.970457] legacy_get_tree+0x105/0x220 [ 1985.970492] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1985.970538] vfs_get_tree+0x8e/0x2f0 [ 1985.970572] path_mount+0x131b/0x1f80 [ 1985.970614] ? kasan_quarantine_put+0x87/0x1e0 [ 1985.970649] ? finish_automount+0xa20/0xa20 [ 1985.970683] ? kmem_cache_free+0xe0/0x420 [ 1985.970718] ? putname+0xfe/0x140 [ 1985.970769] __x64_sys_mount+0x27e/0x300 [ 1985.970804] ? path_mount+0x1f80/0x1f80 [ 1985.970840] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1985.970888] do_syscall_64+0x3b/0x90 [ 1985.970916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1985.970949] RIP: 0033:0x7fa9c293504a [ 1985.970967] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1985.970990] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1985.971016] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 1985.971033] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 1985.971049] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 1985.971066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1985.971082] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 1985.971126] [ 1985.978452] FAT-fs (loop0): bogus number of reserved sectors [ 1985.978472] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1986.011355] FAT-fs (loop0): bogus number of reserved sectors [ 1986.011376] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1986.011680] FAT-fs (loop6): bogus number of reserved sectors [ 1986.011696] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1986.029027] loop5: detected capacity change from 0 to 256 [ 1986.063447] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1986.067098] loop7: detected capacity change from 0 to 256 [ 1986.071984] FAT-fs (loop7): bogus number of FAT sectors [ 1986.072005] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1986.108456] 9pnet_fd: p9_fd_create_tcp (7939): problem connecting socket to 127.0.0.1 [ 1986.175989] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1986.197114] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1999.917149] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:26:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 88) 00:26:13 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb09) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:13 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:13 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:26:13 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:13 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0b) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x11, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:13 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 92) [ 2008.044121] loop5: detected capacity change from 0 to 256 [ 2008.054272] FAULT_INJECTION: forcing a failure. [ 2008.054272] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.054300] CPU: 0 PID: 7958 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2008.054313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2008.054322] Call Trace: [ 2008.054326] [ 2008.054331] dump_stack_lvl+0x8b/0xb3 [ 2008.054353] should_fail.cold+0x5/0xa [ 2008.054366] ? __list_lru_init+0xc7/0x590 [ 2008.054382] should_failslab+0x5/0x10 [ 2008.054399] __kmalloc+0x72/0x440 [ 2008.054415] __list_lru_init+0xc7/0x590 [ 2008.054432] alloc_super+0x814/0x9d0 [ 2008.054452] ? test_bdev_super_fc+0x70/0x70 [ 2008.054470] sget+0x10b/0x550 [ 2008.054488] ? alloc_super+0x9d0/0x9d0 [ 2008.054508] mount_bdev+0xf8/0x3f0 [ 2008.054523] ? msdos_mount+0x40/0x40 [ 2008.054543] ? setup+0xd0/0xd0 [ 2008.054560] legacy_get_tree+0x105/0x220 [ 2008.054576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2008.054600] vfs_get_tree+0x8e/0x2f0 [ 2008.054616] path_mount+0x131b/0x1f80 [ 2008.054636] ? kasan_quarantine_put+0x87/0x1e0 [ 2008.054654] ? finish_automount+0xa20/0xa20 00:26:13 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 93) [ 2008.054669] ? kmem_cache_free+0xe0/0x420 [ 2008.054684] ? putname+0xfe/0x140 [ 2008.054706] __x64_sys_mount+0x27e/0x300 [ 2008.054723] ? path_mount+0x1f80/0x1f80 [ 2008.054740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.054765] do_syscall_64+0x3b/0x90 [ 2008.054779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2008.054797] RIP: 0033:0x7fa9c293504a [ 2008.054806] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.054819] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2008.054830] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2008.054839] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2008.054846] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2008.054854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2008.054861] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2008.054884] [ 2008.060594] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2008.074383] FAT-fs (loop0): bogus number of reserved sectors [ 2008.074394] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2008.081172] FAT-fs (loop0): bogus number of reserved sectors [ 2008.081182] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2008.085589] loop7: detected capacity change from 0 to 256 [ 2008.090507] 9pnet_fd: p9_fd_create_tcp (7955): problem connecting socket to 127.0.0.1 [ 2008.094179] FAT-fs (loop7): bogus number of FAT sectors [ 2008.094200] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2008.123532] FAULT_INJECTION: forcing a failure. [ 2008.123532] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.123568] CPU: 1 PID: 7965 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2008.123594] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2008.123610] Call Trace: [ 2008.123617] [ 2008.123625] dump_stack_lvl+0x8b/0xb3 [ 2008.123661] should_fail.cold+0x5/0xa [ 2008.123688] ? create_object.isra.0+0x3a/0xa20 [ 2008.123727] should_failslab+0x5/0x10 [ 2008.123760] kmem_cache_alloc+0x5b/0x480 [ 2008.123792] create_object.isra.0+0x3a/0xa20 [ 2008.123834] kmemleak_alloc_percpu+0xa0/0x100 [ 2008.123881] pcpu_alloc+0x7bf/0x1060 [ 2008.123932] __percpu_init_rwsem+0x22/0x150 [ 2008.123966] alloc_super+0x222/0x9d0 [ 2008.124006] ? test_bdev_super_fc+0x70/0x70 [ 2008.124042] sget+0x10b/0x550 [ 2008.124074] ? alloc_super+0x9d0/0x9d0 [ 2008.124112] mount_bdev+0xf8/0x3f0 [ 2008.124143] ? msdos_mount+0x40/0x40 [ 2008.124181] ? setup+0xd0/0xd0 [ 2008.124215] legacy_get_tree+0x105/0x220 [ 2008.124245] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2008.124289] vfs_get_tree+0x8e/0x2f0 [ 2008.124322] path_mount+0x131b/0x1f80 [ 2008.124360] ? kasan_quarantine_put+0x87/0x1e0 [ 2008.124396] ? finish_automount+0xa20/0xa20 [ 2008.124425] ? kmem_cache_free+0xe0/0x420 [ 2008.124455] ? putname+0xfe/0x140 [ 2008.124498] __x64_sys_mount+0x27e/0x300 [ 2008.124532] ? path_mount+0x1f80/0x1f80 [ 2008.124567] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.124613] do_syscall_64+0x3b/0x90 [ 2008.124642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2008.124675] RIP: 0033:0x7faa30c9904a [ 2008.124693] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.124715] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2008.124739] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2008.124755] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2008.124770] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2008.124785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2008.124799] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2008.124843] [ 2008.149302] FAT-fs (loop4): bogus number of reserved sectors [ 2008.149325] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2008.174817] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2008.190673] FAULT_INJECTION: forcing a failure. [ 2008.190673] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.190693] CPU: 0 PID: 7967 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2008.190707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2008.190716] Call Trace: [ 2008.190719] [ 2008.190724] dump_stack_lvl+0x8b/0xb3 [ 2008.190746] should_fail.cold+0x5/0xa [ 2008.190760] ? create_object.isra.0+0x3a/0xa20 [ 2008.190782] should_failslab+0x5/0x10 [ 2008.190799] kmem_cache_alloc+0x5b/0x480 [ 2008.190816] create_object.isra.0+0x3a/0xa20 [ 2008.190838] kmemleak_alloc_percpu+0xa0/0x100 [ 2008.190862] pcpu_alloc+0x7bf/0x1060 [ 2008.190888] __percpu_init_rwsem+0x22/0x150 [ 2008.190905] alloc_super+0x222/0x9d0 [ 2008.190923] ? test_bdev_super_fc+0x70/0x70 [ 2008.190945] sget+0x10b/0x550 [ 2008.190961] ? alloc_super+0x9d0/0x9d0 [ 2008.190980] mount_bdev+0xf8/0x3f0 [ 2008.190996] ? msdos_mount+0x40/0x40 [ 2008.191016] ? setup+0xd0/0xd0 [ 2008.191033] legacy_get_tree+0x105/0x220 [ 2008.191049] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2008.191072] vfs_get_tree+0x8e/0x2f0 [ 2008.191088] path_mount+0x131b/0x1f80 [ 2008.191107] ? kasan_quarantine_put+0x87/0x1e0 [ 2008.191126] ? finish_automount+0xa20/0xa20 [ 2008.191140] ? kmem_cache_free+0xe0/0x420 [ 2008.191155] ? putname+0xfe/0x140 [ 2008.191177] __x64_sys_mount+0x27e/0x300 [ 2008.191194] ? path_mount+0x1f80/0x1f80 [ 2008.191211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2008.191235] do_syscall_64+0x3b/0x90 [ 2008.191249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2008.191266] RIP: 0033:0x7fa9c293504a [ 2008.191278] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2008.191290] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2008.191302] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2008.191310] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2008.191318] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2008.191326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2008.191333] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2008.191356] [ 2008.204318] FAT-fs (loop6): bogus number of reserved sectors [ 2008.204329] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2020.383656] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 2028.648099] FAULT_INJECTION: forcing a failure. [ 2028.648099] name failslab, interval 1, probability 0, space 0, times 0 00:26:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 89) 00:26:33 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 94) 00:26:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x48, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0b) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:33 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x5, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:33 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 2028.648133] CPU: 1 PID: 7985 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2028.648157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2028.648173] Call Trace: [ 2028.648178] [ 2028.648187] dump_stack_lvl+0x8b/0xb3 [ 2028.648222] should_fail.cold+0x5/0xa [ 2028.648253] ? __list_lru_init+0xc7/0x590 [ 2028.648280] should_failslab+0x5/0x10 [ 2028.648311] __kmalloc+0x72/0x440 [ 2028.648340] __list_lru_init+0xc7/0x590 [ 2028.648371] alloc_super+0x83e/0x9d0 [ 2028.648405] ? test_bdev_super_fc+0x70/0x70 [ 2028.648439] sget+0x10b/0x550 [ 2028.648468] ? alloc_super+0x9d0/0x9d0 [ 2028.648504] mount_bdev+0xf8/0x3f0 [ 2028.648533] ? msdos_mount+0x40/0x40 00:26:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2028.648569] ? setup+0xd0/0xd0 [ 2028.648601] legacy_get_tree+0x105/0x220 [ 2028.648629] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2028.648671] vfs_get_tree+0x8e/0x2f0 [ 2028.648701] path_mount+0x131b/0x1f80 [ 2028.648736] ? kasan_quarantine_put+0x87/0x1e0 00:26:33 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2028.648770] ? finish_automount+0xa20/0xa20 [ 2028.648797] ? kmem_cache_free+0xe0/0x420 [ 2028.648826] ? putname+0xfe/0x140 [ 2028.648866] __x64_sys_mount+0x27e/0x300 [ 2028.648896] ? path_mount+0x1f80/0x1f80 [ 2028.648929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.648974] do_syscall_64+0x3b/0x90 [ 2028.649000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2028.649032] RIP: 0033:0x7fa9c293504a [ 2028.649048] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:26:34 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2028.649069] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2028.649090] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2028.649105] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2028.649119] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 00:26:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 90) [ 2028.649133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2028.649147] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2028.649188] [ 2028.649607] loop5: detected capacity change from 0 to 256 [ 2028.658768] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:26:34 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 2028.668060] 9pnet_fd: p9_fd_create_tcp (7981): problem connecting socket to 127.0.0.1 [ 2028.672646] loop2: detected capacity change from 0 to 256 [ 2028.674858] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:26:34 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 95) [ 2028.676735] FAULT_INJECTION: forcing a failure. [ 2028.676735] name failslab, interval 1, probability 0, space 0, times 0 00:26:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4c, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2028.676753] CPU: 0 PID: 7989 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2028.676767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2028.676775] Call Trace: [ 2028.676779] [ 2028.676784] dump_stack_lvl+0x8b/0xb3 [ 2028.676806] should_fail.cold+0x5/0xa [ 2028.676820] ? create_object.isra.0+0x3a/0xa20 [ 2028.676841] should_failslab+0x5/0x10 [ 2028.676859] kmem_cache_alloc+0x5b/0x480 [ 2028.676876] create_object.isra.0+0x3a/0xa20 [ 2028.676898] kmemleak_alloc_percpu+0xa0/0x100 [ 2028.676922] pcpu_alloc+0x7bf/0x1060 [ 2028.676948] __percpu_init_rwsem+0x22/0x150 [ 2028.676965] alloc_super+0x222/0x9d0 [ 2028.676983] ? test_bdev_super_fc+0x70/0x70 [ 2028.677001] sget+0x10b/0x550 [ 2028.677017] ? alloc_super+0x9d0/0x9d0 [ 2028.677036] mount_bdev+0xf8/0x3f0 [ 2028.677052] ? msdos_mount+0x40/0x40 00:26:34 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x7, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2028.677072] ? setup+0xd0/0xd0 [ 2028.677089] legacy_get_tree+0x105/0x220 [ 2028.677105] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2028.677128] vfs_get_tree+0x8e/0x2f0 [ 2028.677144] path_mount+0x131b/0x1f80 [ 2028.677164] ? kasan_quarantine_put+0x87/0x1e0 [ 2028.677183] ? finish_automount+0xa20/0xa20 [ 2028.677200] ? kmem_cache_free+0xe0/0x420 [ 2028.677217] ? putname+0xfe/0x140 [ 2028.677239] __x64_sys_mount+0x27e/0x300 [ 2028.677260] ? path_mount+0x1f80/0x1f80 [ 2028.677278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.677301] do_syscall_64+0x3b/0x90 [ 2028.677316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2028.677333] RIP: 0033:0x7faa30c9904a [ 2028.677343] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.677355] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2028.677367] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2028.677375] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2028.677382] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2028.677390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2028.677397] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2028.677419] [ 2028.681641] loop7: detected capacity change from 0 to 256 [ 2028.682518] FAT-fs (loop0): bogus number of reserved sectors 00:26:34 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 91) [ 2028.682539] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2028.682892] FAT-fs (loop7): bogus number of FAT sectors [ 2028.682911] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2028.683989] FAT-fs (loop4): bogus number of reserved sectors [ 2028.683998] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2028.707605] FAT-fs (loop0): bogus number of reserved sectors [ 2028.707626] FAT-fs (loop0): Can't find a valid FAT filesystem 00:26:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x8, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:34 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 96) [ 2028.714983] 9pnet_fd: p9_fd_create_tcp (7987): problem connecting socket to 127.0.0.1 [ 2028.752025] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2028.800064] loop5: detected capacity change from 0 to 256 [ 2028.818780] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2028.841228] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2028.855203] FAULT_INJECTION: forcing a failure. 00:26:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x68, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2028.855203] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.855221] CPU: 0 PID: 7997 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2028.855239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2028.855248] Call Trace: [ 2028.855252] [ 2028.855258] dump_stack_lvl+0x8b/0xb3 [ 2028.855279] should_fail.cold+0x5/0xa [ 2028.855292] ? create_object.isra.0+0x3a/0xa20 [ 2028.855314] should_failslab+0x5/0x10 [ 2028.855332] kmem_cache_alloc+0x5b/0x480 [ 2028.855343] ? mark_held_locks+0x9e/0xe0 [ 2028.855363] create_object.isra.0+0x3a/0xa20 [ 2028.855385] kmemleak_alloc_percpu+0xa0/0x100 [ 2028.855409] pcpu_alloc+0x7bf/0x1060 [ 2028.855435] __percpu_init_rwsem+0x22/0x150 [ 2028.855452] alloc_super+0x222/0x9d0 [ 2028.855470] ? test_bdev_super_fc+0x70/0x70 [ 2028.855488] sget+0x10b/0x550 [ 2028.855504] ? alloc_super+0x9d0/0x9d0 [ 2028.855523] mount_bdev+0xf8/0x3f0 [ 2028.855542] ? msdos_mount+0x40/0x40 [ 2028.855565] ? setup+0xd0/0xd0 [ 2028.855582] legacy_get_tree+0x105/0x220 [ 2028.855597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2028.855621] vfs_get_tree+0x8e/0x2f0 [ 2028.855638] path_mount+0x131b/0x1f80 [ 2028.855657] ? kasan_quarantine_put+0x87/0x1e0 [ 2028.855676] ? finish_automount+0xa20/0xa20 [ 2028.855691] ? kmem_cache_free+0xe0/0x420 [ 2028.855707] ? putname+0xfe/0x140 [ 2028.855728] __x64_sys_mount+0x27e/0x300 [ 2028.855745] ? path_mount+0x1f80/0x1f80 [ 2028.855762] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.855786] do_syscall_64+0x3b/0x90 [ 2028.855800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2028.855817] RIP: 0033:0x7faa30c9904a [ 2028.855827] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.855839] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2028.855851] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2028.855859] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2028.855867] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2028.855875] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2028.855883] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2028.855905] [ 2028.864547] FAT-fs (loop4): bogus number of reserved sectors [ 2028.864558] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2028.867045] 9pnet_fd: p9_fd_create_tcp (7995): problem connecting socket to 127.0.0.1 [ 2028.894359] FAULT_INJECTION: forcing a failure. [ 2028.894359] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.894376] CPU: 0 PID: 8002 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2028.894389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2028.894397] Call Trace: [ 2028.894401] [ 2028.894405] dump_stack_lvl+0x8b/0xb3 [ 2028.894423] should_fail.cold+0x5/0xa [ 2028.894436] ? create_object.isra.0+0x3a/0xa20 [ 2028.894457] should_failslab+0x5/0x10 [ 2028.894473] kmem_cache_alloc+0x5b/0x480 [ 2028.894489] create_object.isra.0+0x3a/0xa20 [ 2028.894505] ? kasan_unpoison+0x23/0x50 [ 2028.894524] __kmalloc+0x25b/0x440 [ 2028.894540] __list_lru_init+0xc7/0x590 [ 2028.894558] alloc_super+0x83e/0x9d0 [ 2028.894575] ? test_bdev_super_fc+0x70/0x70 [ 2028.894594] sget+0x10b/0x550 [ 2028.894610] ? alloc_super+0x9d0/0x9d0 [ 2028.894629] mount_bdev+0xf8/0x3f0 [ 2028.894645] ? msdos_mount+0x40/0x40 [ 2028.894664] ? setup+0xd0/0xd0 [ 2028.894681] legacy_get_tree+0x105/0x220 [ 2028.894696] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2028.894718] vfs_get_tree+0x8e/0x2f0 [ 2028.894735] path_mount+0x131b/0x1f80 [ 2028.894754] ? kasan_quarantine_put+0x87/0x1e0 [ 2028.894772] ? finish_automount+0xa20/0xa20 [ 2028.894787] ? kmem_cache_free+0xe0/0x420 [ 2028.894802] ? putname+0xfe/0x140 [ 2028.894824] __x64_sys_mount+0x27e/0x300 [ 2028.894841] ? path_mount+0x1f80/0x1f80 [ 2028.894859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.894882] do_syscall_64+0x3b/0x90 [ 2028.894897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2028.894913] RIP: 0033:0x7fa9c293504a [ 2028.894922] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.894934] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2028.894945] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2028.894954] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2028.894961] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2028.894969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2028.894976] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2028.894998] [ 2028.904699] loop2: detected capacity change from 0 to 256 [ 2028.906515] loop7: detected capacity change from 0 to 256 [ 2028.909737] FAT-fs (loop6): bogus number of reserved sectors [ 2028.909747] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2028.911364] FAT-fs (loop0): bogus number of reserved sectors [ 2028.911385] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2028.914062] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2028.925366] FAT-fs (loop7): bogus number of FAT sectors [ 2028.925470] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2028.932739] FAT-fs (loop0): bogus number of reserved sectors [ 2028.932758] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2028.941887] 9pnet_fd: p9_fd_create_tcp (8005): problem connecting socket to 127.0.0.1 [ 2028.952316] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2029.027398] FAULT_INJECTION: forcing a failure. [ 2029.027398] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.027419] CPU: 0 PID: 8012 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2029.027433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2029.027442] Call Trace: [ 2029.027445] [ 2029.027450] dump_stack_lvl+0x8b/0xb3 [ 2029.027472] should_fail.cold+0x5/0xa [ 2029.027486] ? create_object.isra.0+0x3a/0xa20 [ 2029.027507] should_failslab+0x5/0x10 [ 2029.027525] kmem_cache_alloc+0x5b/0x480 [ 2029.027542] create_object.isra.0+0x3a/0xa20 [ 2029.027559] ? _raw_spin_unlock_irqrestore+0x2e/0x50 [ 2029.027580] kmemleak_alloc_percpu+0xa0/0x100 [ 2029.027604] pcpu_alloc+0x7bf/0x1060 [ 2029.027630] __percpu_init_rwsem+0x22/0x150 [ 2029.027647] alloc_super+0x222/0x9d0 [ 2029.027666] ? test_bdev_super_fc+0x70/0x70 [ 2029.027683] sget+0x10b/0x550 [ 2029.027699] ? alloc_super+0x9d0/0x9d0 [ 2029.027719] mount_bdev+0xf8/0x3f0 [ 2029.027734] ? msdos_mount+0x40/0x40 [ 2029.027755] ? setup+0xd0/0xd0 [ 2029.027772] legacy_get_tree+0x105/0x220 [ 2029.027787] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2029.027810] vfs_get_tree+0x8e/0x2f0 [ 2029.027827] path_mount+0x131b/0x1f80 [ 2029.027846] ? kasan_quarantine_put+0x87/0x1e0 [ 2029.027868] ? finish_automount+0xa20/0xa20 [ 2029.027882] ? kmem_cache_free+0xe0/0x420 [ 2029.027898] ? putname+0xfe/0x140 [ 2029.027919] __x64_sys_mount+0x27e/0x300 [ 2029.027936] ? path_mount+0x1f80/0x1f80 [ 2029.027954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2029.027978] do_syscall_64+0x3b/0x90 [ 2029.027992] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2029.028009] RIP: 0033:0x7faa30c9904a [ 2029.028018] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2029.028031] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2029.028043] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2029.028051] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2029.028059] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2029.028067] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2029.028075] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2029.028097] [ 2029.034103] loop5: detected capacity change from 0 to 256 [ 2029.041032] FAT-fs (loop4): bogus number of reserved sectors [ 2029.041044] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2029.041064] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2029.047481] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2029.093189] 9pnet_fd: p9_fd_create_tcp (8014): problem connecting socket to 127.0.0.1 [ 2029.114187] FAULT_INJECTION: forcing a failure. [ 2029.114187] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.114206] CPU: 0 PID: 8019 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2029.114220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2029.114229] Call Trace: [ 2029.114233] [ 2029.114238] dump_stack_lvl+0x8b/0xb3 [ 2029.114262] should_fail.cold+0x5/0xa [ 2029.114276] ? create_object.isra.0+0x3a/0xa20 [ 2029.114298] should_failslab+0x5/0x10 [ 2029.114315] kmem_cache_alloc+0x5b/0x480 [ 2029.114332] create_object.isra.0+0x3a/0xa20 [ 2029.114348] ? kasan_unpoison+0x23/0x50 [ 2029.114368] __kmalloc+0x25b/0x440 [ 2029.114383] __list_lru_init+0xc7/0x590 [ 2029.114401] alloc_super+0x83e/0x9d0 [ 2029.114419] ? test_bdev_super_fc+0x70/0x70 [ 2029.114437] sget+0x10b/0x550 [ 2029.114453] ? alloc_super+0x9d0/0x9d0 [ 2029.114472] mount_bdev+0xf8/0x3f0 [ 2029.114488] ? msdos_mount+0x40/0x40 [ 2029.114508] ? setup+0xd0/0xd0 [ 2029.114524] legacy_get_tree+0x105/0x220 [ 2029.114540] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2029.114564] vfs_get_tree+0x8e/0x2f0 [ 2029.114580] path_mount+0x131b/0x1f80 [ 2029.114600] ? kasan_quarantine_put+0x87/0x1e0 [ 2029.114617] ? finish_automount+0xa20/0xa20 [ 2029.114632] ? kmem_cache_free+0xe0/0x420 [ 2029.114648] ? putname+0xfe/0x140 [ 2029.114670] __x64_sys_mount+0x27e/0x300 [ 2029.114686] ? path_mount+0x1f80/0x1f80 [ 2029.114704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2029.114730] do_syscall_64+0x3b/0x90 [ 2029.114744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2029.114761] RIP: 0033:0x7fa9c293504a [ 2029.114771] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2029.114783] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2029.114795] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2029.114803] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2029.114810] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2029.114818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2029.114825] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2029.114848] [ 2029.118347] FAT-fs (loop6): bogus number of reserved sectors [ 2029.118358] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2029.121596] FAT-fs (loop0): bogus number of reserved sectors [ 2029.121606] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2029.129551] FAT-fs (loop0): bogus number of reserved sectors [ 2029.129562] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2029.184228] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2043.194867] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:26:56 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:26:56 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:56 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:26:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6c, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x18, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:26:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 92) 00:26:56 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 97) 00:26:56 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2051.415509] FAT-fs (loop0): bogus number of reserved sectors [ 2051.415530] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2051.434376] FAT-fs (loop0): bogus number of reserved sectors [ 2051.434394] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2051.437708] loop5: detected capacity change from 0 to 256 [ 2051.449708] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.459624] loop7: detected capacity change from 0 to 256 [ 2051.465393] FAT-fs (loop7): bogus number of FAT sectors [ 2051.465409] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2051.470186] FAULT_INJECTION: forcing a failure. [ 2051.470186] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.470212] CPU: 1 PID: 8039 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2051.470232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2051.470248] Call Trace: [ 2051.470253] [ 2051.470260] dump_stack_lvl+0x8b/0xb3 [ 2051.470289] should_fail.cold+0x5/0xa [ 2051.470308] ? __list_lru_init+0xc7/0x590 [ 2051.470331] should_failslab+0x5/0x10 [ 2051.470354] __kmalloc+0x72/0x440 [ 2051.470378] __list_lru_init+0xc7/0x590 [ 2051.470404] alloc_super+0x814/0x9d0 [ 2051.470432] ? test_bdev_super_fc+0x70/0x70 [ 2051.470459] sget+0x10b/0x550 [ 2051.470483] ? alloc_super+0x9d0/0x9d0 [ 2051.470512] mount_bdev+0xf8/0x3f0 [ 2051.470537] ? msdos_mount+0x40/0x40 [ 2051.470565] ? setup+0xd0/0xd0 [ 2051.470591] legacy_get_tree+0x105/0x220 [ 2051.470613] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 00:26:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x74, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2051.470648] vfs_get_tree+0x8e/0x2f0 [ 2051.470673] path_mount+0x131b/0x1f80 [ 2051.470701] ? kasan_quarantine_put+0x87/0x1e0 [ 2051.470729] ? finish_automount+0xa20/0xa20 [ 2051.470750] ? kmem_cache_free+0xe0/0x420 [ 2051.470774] ? putname+0xfe/0x140 [ 2051.470806] __x64_sys_mount+0x27e/0x300 [ 2051.470832] ? path_mount+0x1f80/0x1f80 [ 2051.470858] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2051.470895] do_syscall_64+0x3b/0x90 [ 2051.470916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2051.470941] RIP: 0033:0x7faa30c9904a [ 2051.470955] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.470972] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2051.470990] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2051.471002] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2051.471014] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 00:26:56 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2051.471025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2051.471036] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2051.471070] [ 2051.474582] FAULT_INJECTION: forcing a failure. [ 2051.474582] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.474605] CPU: 1 PID: 8040 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2051.474623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2051.474635] Call Trace: [ 2051.474638] [ 2051.474645] dump_stack_lvl+0x8b/0xb3 [ 2051.474667] should_fail.cold+0x5/0xa [ 2051.474686] ? fat_fill_super+0xd1/0x37f0 [ 2051.474712] should_failslab+0x5/0x10 [ 2051.474735] kmem_cache_alloc_trace+0x55/0x3c0 [ 2051.474753] ? vfat_rename+0xf50/0xf50 [ 2051.474783] fat_fill_super+0xd1/0x37f0 [ 2051.474808] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2051.474836] ? vsnprintf+0x4e2/0x1770 [ 2051.474869] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2051.474892] ? sget+0x44c/0x550 [ 2051.474916] ? lock_downgrade+0x6d0/0x6d0 [ 2051.474949] ? snprintf+0xbb/0xf0 [ 2051.474971] ? vsprintf+0x30/0x30 [ 2051.474991] ? bit_wait_io_timeout+0x160/0x160 [ 2051.475011] ? up_write+0x148/0x460 [ 2051.475031] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2051.475058] ? set_blocksize+0x2ee/0x380 [ 2051.475088] mount_bdev+0x331/0x3f0 [ 2051.475111] ? msdos_mount+0x40/0x40 [ 2051.475138] ? setup+0xd0/0xd0 [ 2051.475163] legacy_get_tree+0x105/0x220 [ 2051.475185] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2051.475216] vfs_get_tree+0x8e/0x2f0 [ 2051.475246] path_mount+0x131b/0x1f80 [ 2051.475273] ? kasan_quarantine_put+0x87/0x1e0 [ 2051.475300] ? finish_automount+0xa20/0xa20 [ 2051.475321] ? kmem_cache_free+0xe0/0x420 [ 2051.475344] ? putname+0xfe/0x140 [ 2051.475375] __x64_sys_mount+0x27e/0x300 [ 2051.475400] ? path_mount+0x1f80/0x1f80 [ 2051.475426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2051.475460] do_syscall_64+0x3b/0x90 [ 2051.475481] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2051.475505] RIP: 0033:0x7fa9c293504a [ 2051.475518] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2051.475534] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2051.475551] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2051.475563] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2051.475574] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2051.475586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2051.475597] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2051.475629] [ 2051.488980] 9pnet_fd: p9_fd_create_tcp (8032): problem connecting socket to 127.0.0.1 [ 2051.494771] loop2: detected capacity change from 0 to 256 [ 2051.518024] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.585429] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.593457] FAT-fs (loop0): bogus number of reserved sectors [ 2051.593471] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2051.602484] 9pnet_fd: p9_fd_create_tcp (8041): problem connecting socket to 127.0.0.1 [ 2051.605218] FAT-fs (loop0): bogus number of reserved sectors [ 2051.605320] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2051.647790] loop5: detected capacity change from 0 to 256 [ 2051.662483] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.678097] 9pnet_fd: p9_fd_create_tcp (8048): problem connecting socket to 127.0.0.1 [ 2051.720116] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2051.721209] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2065.075911] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:27:18 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 98) 00:27:18 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:18 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:27:18 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:27:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 93) 00:27:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x64, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:27:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7a, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2073.437826] loop7: detected capacity change from 0 to 256 [ 2073.439320] FAT-fs (loop7): bogus number of FAT sectors [ 2073.439340] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2073.440012] FAULT_INJECTION: forcing a failure. [ 2073.440012] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.440030] CPU: 0 PID: 8060 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.440044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.440053] Call Trace: [ 2073.440057] [ 2073.440062] dump_stack_lvl+0x8b/0xb3 [ 2073.440084] should_fail.cold+0x5/0xa [ 2073.440097] ? create_object.isra.0+0x3a/0xa20 [ 2073.440119] should_failslab+0x5/0x10 [ 2073.440137] kmem_cache_alloc+0x5b/0x480 [ 2073.440148] ? mark_held_locks+0x9e/0xe0 [ 2073.440169] create_object.isra.0+0x3a/0xa20 [ 2073.440191] kmemleak_alloc_percpu+0xa0/0x100 [ 2073.440216] pcpu_alloc+0x7bf/0x1060 [ 2073.440246] __percpu_init_rwsem+0x22/0x150 [ 2073.440263] alloc_super+0x222/0x9d0 [ 2073.440281] ? test_bdev_super_fc+0x70/0x70 [ 2073.440300] sget+0x10b/0x550 [ 2073.440316] ? alloc_super+0x9d0/0x9d0 [ 2073.440336] mount_bdev+0xf8/0x3f0 [ 2073.440352] ? msdos_mount+0x40/0x40 [ 2073.440373] ? setup+0xd0/0xd0 [ 2073.440390] legacy_get_tree+0x105/0x220 [ 2073.440406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.440430] vfs_get_tree+0x8e/0x2f0 [ 2073.440446] path_mount+0x131b/0x1f80 00:27:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 94) 00:27:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:18 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 2073.440466] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.440485] ? finish_automount+0xa20/0xa20 [ 2073.440500] ? kmem_cache_free+0xe0/0x420 [ 2073.440515] ? putname+0xfe/0x140 [ 2073.440537] __x64_sys_mount+0x27e/0x300 [ 2073.440554] ? path_mount+0x1f80/0x1f80 [ 2073.440573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.440597] do_syscall_64+0x3b/0x90 [ 2073.440612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.440630] RIP: 0033:0x7faa30c9904a [ 2073.440640] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.440653] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.440665] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2073.440673] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2073.440681] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2073.440690] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.440697] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2073.440719] [ 2073.441254] FAT-fs (loop4): bogus number of reserved sectors 00:27:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0xf0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:27:18 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 99) [ 2073.441264] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2073.446065] loop2: detected capacity change from 0 to 256 [ 2073.450705] FAT-fs (loop2): bogus number of FAT sectors 00:27:18 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() r0 = getgid() syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, r0}}]}) r1 = getgid() syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@gid={'gid', 0x3d, r1}}]}) setregid(r0, r1) [ 2073.450726] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2073.491502] FAULT_INJECTION: forcing a failure. [ 2073.491502] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.491523] CPU: 0 PID: 8069 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.491537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.491546] Call Trace: [ 2073.491550] [ 2073.491555] dump_stack_lvl+0x8b/0xb3 [ 2073.491578] should_fail.cold+0x5/0xa 00:27:18 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:18 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2073.491591] ? create_object.isra.0+0x3a/0xa20 [ 2073.491613] should_failslab+0x5/0x10 [ 2073.491631] kmem_cache_alloc+0x5b/0x480 [ 2073.491648] create_object.isra.0+0x3a/0xa20 00:27:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfe, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2073.491664] ? kasan_unpoison+0x23/0x50 [ 2073.491684] __kmalloc+0x25b/0x440 [ 2073.491699] __list_lru_init+0xc7/0x590 [ 2073.491717] alloc_super+0x814/0x9d0 [ 2073.491736] ? test_bdev_super_fc+0x70/0x70 00:27:18 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 2073.491754] sget+0x10b/0x550 [ 2073.491770] ? alloc_super+0x9d0/0x9d0 [ 2073.491789] mount_bdev+0xf8/0x3f0 [ 2073.491805] ? msdos_mount+0x40/0x40 [ 2073.491825] ? setup+0xd0/0xd0 [ 2073.491842] legacy_get_tree+0x105/0x220 [ 2073.491858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.491881] vfs_get_tree+0x8e/0x2f0 [ 2073.491897] path_mount+0x131b/0x1f80 [ 2073.491916] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.491934] ? finish_automount+0xa20/0xa20 [ 2073.491949] ? kmem_cache_free+0xe0/0x420 [ 2073.491964] ? putname+0xfe/0x140 [ 2073.491986] __x64_sys_mount+0x27e/0x300 [ 2073.492003] ? path_mount+0x1f80/0x1f80 [ 2073.492020] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.492046] do_syscall_64+0x3b/0x90 [ 2073.492061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.492078] RIP: 0033:0x7fa9c293504a [ 2073.492087] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:27:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 95) 00:27:18 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0xfe, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2073.492099] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.492111] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2073.492119] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2073.492127] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2073.492134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.492142] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2073.492164] [ 2073.503630] loop5: detected capacity change from 0 to 256 [ 2073.505335] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.506977] FAT-fs (loop6): bogus number of reserved sectors [ 2073.506988] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2073.508072] FAT-fs (loop0): bogus number of reserved sectors [ 2073.508096] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2073.527743] FAT-fs (loop0): bogus number of reserved sectors 00:27:19 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2073.527765] FAT-fs (loop0): Can't find a valid FAT filesystem 00:27:19 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2073.529781] 9pnet_fd: p9_fd_create_tcp (8071): problem connecting socket to 127.0.0.1 [ 2073.589339] FAULT_INJECTION: forcing a failure. [ 2073.589339] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.589413] CPU: 1 PID: 8075 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.589439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.589455] Call Trace: [ 2073.589461] [ 2073.589470] dump_stack_lvl+0x8b/0xb3 [ 2073.589509] should_fail.cold+0x5/0xa [ 2073.589535] ? __list_lru_init+0xc7/0x590 00:27:19 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:27:19 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2073.589563] should_failslab+0x5/0x10 [ 2073.589595] __kmalloc+0x72/0x440 [ 2073.589626] __list_lru_init+0xc7/0x590 [ 2073.589661] alloc_super+0x83e/0x9d0 [ 2073.589697] ? test_bdev_super_fc+0x70/0x70 [ 2073.589733] sget+0x10b/0x550 [ 2073.589765] ? alloc_super+0x9d0/0x9d0 [ 2073.589804] mount_bdev+0xf8/0x3f0 [ 2073.589835] ? msdos_mount+0x40/0x40 [ 2073.589874] ? setup+0xd0/0xd0 [ 2073.589907] legacy_get_tree+0x105/0x220 00:27:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 96) 00:27:19 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x112, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2073.589937] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.589982] vfs_get_tree+0x8e/0x2f0 [ 2073.590015] path_mount+0x131b/0x1f80 [ 2073.590053] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.590090] ? finish_automount+0xa20/0xa20 [ 2073.590119] ? kmem_cache_free+0xe0/0x420 [ 2073.590150] ? putname+0xfe/0x140 [ 2073.590194] __x64_sys_mount+0x27e/0x300 [ 2073.590227] ? path_mount+0x1f80/0x1f80 [ 2073.590263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.590310] do_syscall_64+0x3b/0x90 [ 2073.590339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.590373] RIP: 0033:0x7faa30c9904a [ 2073.590391] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.590414] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.590438] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2073.590486] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2073.590504] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2073.590524] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.590542] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2073.590597] [ 2073.596389] loop7: detected capacity change from 0 to 256 [ 2073.606365] FAT-fs (loop7): bogus number of FAT sectors [ 2073.606416] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2073.622409] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.703623] loop5: detected capacity change from 0 to 256 [ 2073.724007] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.740919] FAULT_INJECTION: forcing a failure. [ 2073.740919] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.740956] CPU: 1 PID: 8094 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.740984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.741001] Call Trace: [ 2073.741008] [ 2073.741017] dump_stack_lvl+0x8b/0xb3 [ 2073.741062] should_fail.cold+0x5/0xa [ 2073.741090] ? fat_fill_super+0xd1/0x37f0 [ 2073.741130] should_failslab+0x5/0x10 [ 2073.741166] kmem_cache_alloc_trace+0x55/0x3c0 [ 2073.741194] ? vfat_rename+0xf50/0xf50 [ 2073.741238] fat_fill_super+0xd1/0x37f0 [ 2073.741279] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2073.741322] ? vsnprintf+0x4e2/0x1770 [ 2073.741370] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2073.741404] ? sget+0x44c/0x550 [ 2073.741440] ? lock_downgrade+0x6d0/0x6d0 [ 2073.741488] ? snprintf+0xbb/0xf0 [ 2073.741521] ? vsprintf+0x30/0x30 [ 2073.741550] ? bit_wait_io_timeout+0x160/0x160 [ 2073.741580] ? up_write+0x148/0x460 [ 2073.741609] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2073.741649] ? set_blocksize+0x2ee/0x380 [ 2073.741692] mount_bdev+0x331/0x3f0 [ 2073.741735] loop7: detected capacity change from 0 to 256 [ 2073.741727] ? msdos_mount+0x40/0x40 [ 2073.741768] ? setup+0xd0/0xd0 [ 2073.741805] legacy_get_tree+0x105/0x220 [ 2073.741838] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.741885] vfs_get_tree+0x8e/0x2f0 [ 2073.741921] path_mount+0x131b/0x1f80 [ 2073.741962] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.742002] ? finish_automount+0xa20/0xa20 [ 2073.742034] ? kmem_cache_free+0xe0/0x420 [ 2073.742067] ? putname+0xfe/0x140 [ 2073.742114] __x64_sys_mount+0x27e/0x300 [ 2073.742152] ? path_mount+0x1f80/0x1f80 [ 2073.742190] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.742241] do_syscall_64+0x3b/0x90 [ 2073.742272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.742308] RIP: 0033:0x7fa9c293504a [ 2073.742327] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.742353] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.742378] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2073.742396] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2073.742412] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2073.742429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.742444] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2073.742518] [ 2073.743627] 9pnet_fd: p9_fd_create_tcp (8087): problem connecting socket to 127.0.0.1 [ 2073.744550] FAT-fs (loop7): bogus number of FAT sectors [ 2073.744568] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2073.755469] FAT-fs (loop0): bogus number of reserved sectors [ 2073.755493] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2073.773819] FAT-fs (loop0): bogus number of reserved sectors [ 2073.773841] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2073.776632] FAULT_INJECTION: forcing a failure. [ 2073.776632] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.776653] CPU: 0 PID: 8097 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.776667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.776677] Call Trace: [ 2073.776681] [ 2073.776686] dump_stack_lvl+0x8b/0xb3 [ 2073.776709] should_fail.cold+0x5/0xa [ 2073.776722] ? __list_lru_init+0xc7/0x590 [ 2073.776739] should_failslab+0x5/0x10 [ 2073.776756] __kmalloc+0x72/0x440 [ 2073.776773] __list_lru_init+0xc7/0x590 [ 2073.776790] alloc_super+0x814/0x9d0 [ 2073.776809] ? test_bdev_super_fc+0x70/0x70 [ 2073.776828] sget+0x10b/0x550 [ 2073.776844] ? alloc_super+0x9d0/0x9d0 [ 2073.776863] mount_bdev+0xf8/0x3f0 [ 2073.776879] ? msdos_mount+0x40/0x40 [ 2073.776900] ? setup+0xd0/0xd0 [ 2073.776917] legacy_get_tree+0x105/0x220 [ 2073.776933] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.776957] vfs_get_tree+0x8e/0x2f0 [ 2073.776973] path_mount+0x131b/0x1f80 [ 2073.776994] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.777013] ? finish_automount+0xa20/0xa20 [ 2073.777027] ? kmem_cache_free+0xe0/0x420 [ 2073.777043] ? putname+0xfe/0x140 [ 2073.777065] __x64_sys_mount+0x27e/0x300 [ 2073.777082] ? path_mount+0x1f80/0x1f80 [ 2073.777100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.777125] do_syscall_64+0x3b/0x90 [ 2073.777139] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.777157] RIP: 0033:0x7faa30c9904a [ 2073.777167] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.777179] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.777191] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2073.777200] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2073.777208] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2073.777215] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.777223] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2073.777249] [ 2073.824698] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.875913] loop2: detected capacity change from 0 to 256 [ 2073.884184] loop7: detected capacity change from 0 to 256 [ 2073.888167] FAT-fs (loop7): bogus number of FAT sectors [ 2073.888208] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2073.888823] loop5: detected capacity change from 0 to 256 [ 2073.916283] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.920566] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2073.931182] 9pnet_fd: p9_fd_create_tcp (8106): problem connecting socket to 127.0.0.1 [ 2073.940578] FAULT_INJECTION: forcing a failure. [ 2073.940578] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.940598] CPU: 0 PID: 8108 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2073.940611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2073.940620] Call Trace: [ 2073.940624] [ 2073.940629] dump_stack_lvl+0x8b/0xb3 [ 2073.940650] should_fail.cold+0x5/0xa [ 2073.940664] ? create_object.isra.0+0x3a/0xa20 [ 2073.940685] should_failslab+0x5/0x10 [ 2073.940703] kmem_cache_alloc+0x5b/0x480 [ 2073.940720] create_object.isra.0+0x3a/0xa20 [ 2073.940736] ? kasan_unpoison+0x23/0x50 [ 2073.940756] __kmalloc+0x25b/0x440 [ 2073.940771] __list_lru_init+0xc7/0x590 [ 2073.940789] alloc_super+0x814/0x9d0 [ 2073.940807] ? test_bdev_super_fc+0x70/0x70 [ 2073.940825] sget+0x10b/0x550 [ 2073.940841] ? alloc_super+0x9d0/0x9d0 [ 2073.940864] mount_bdev+0xf8/0x3f0 [ 2073.940880] ? msdos_mount+0x40/0x40 [ 2073.940900] ? setup+0xd0/0xd0 [ 2073.940917] legacy_get_tree+0x105/0x220 [ 2073.940932] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2073.940956] vfs_get_tree+0x8e/0x2f0 [ 2073.940973] path_mount+0x131b/0x1f80 [ 2073.940992] ? kasan_quarantine_put+0x87/0x1e0 [ 2073.941010] ? finish_automount+0xa20/0xa20 [ 2073.941025] ? kmem_cache_free+0xe0/0x420 [ 2073.941040] ? putname+0xfe/0x140 [ 2073.941062] __x64_sys_mount+0x27e/0x300 [ 2073.941079] ? path_mount+0x1f80/0x1f80 [ 2073.941097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.941121] do_syscall_64+0x3b/0x90 [ 2073.941136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2073.941153] RIP: 0033:0x7faa30c9904a [ 2073.941162] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.941174] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2073.941186] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2073.941195] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2073.941202] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2073.941210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2073.941218] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2073.941240] [ 2073.946136] FAT-fs (loop4): bogus number of reserved sectors [ 2073.946147] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2073.955997] 9pnet_fd: p9_fd_create_tcp (8101): problem connecting socket to 127.0.0.1 [ 2073.968652] FAT-fs (loop0): bogus number of reserved sectors [ 2073.968671] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2073.986213] FAT-fs (loop0): bogus number of reserved sectors [ 2073.986279] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2073.998658] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2074.077176] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2086.516742] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:27:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x300, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:27:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 100) 00:27:40 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 97) [ 2095.602629] loop0: detected capacity change from 0 to 1 00:27:40 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa96) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:27:40 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:27:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x300, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2095.613982] FAULT_INJECTION: forcing a failure. [ 2095.613982] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.613998] CPU: 1 PID: 8119 Comm: syz-executor.6 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2095.614012] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 00:27:40 executing program 2: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x8001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='system.sockprotoname\x00') ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000001c0)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000000)={0x1}, r0, 0x3, 0x0, 0x1}, 0x3e) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) syz_io_uring_setup(0x8001, &(0x7f0000000240)={0x0, 0xd988, 0x1, 0x0, 0x109}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x9) [ 2095.614021] Call Trace: [ 2095.614024] [ 2095.614029] dump_stack_lvl+0x8b/0xb3 [ 2095.614050] should_fail.cold+0x5/0xa [ 2095.614063] ? fat_fill_super+0xd1/0x37f0 [ 2095.614084] should_failslab+0x5/0x10 [ 2095.614102] kmem_cache_alloc_trace+0x55/0x3c0 [ 2095.614115] ? vfat_rename+0xf50/0xf50 [ 2095.614135] fat_fill_super+0xd1/0x37f0 [ 2095.614152] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2095.614172] ? vsnprintf+0x4e2/0x1770 [ 2095.614196] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2095.614212] ? sget+0x44c/0x550 [ 2095.614235] ? lock_downgrade+0x6d0/0x6d0 [ 2095.614258] ? snprintf+0xbb/0xf0 [ 2095.614273] ? vsprintf+0x30/0x30 [ 2095.614286] ? bit_wait_io_timeout+0x160/0x160 [ 2095.614300] ? up_write+0x148/0x460 [ 2095.614313] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2095.614332] ? set_blocksize+0x2ee/0x380 [ 2095.614352] mount_bdev+0x331/0x3f0 00:27:40 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2095.614368] ? msdos_mount+0x40/0x40 [ 2095.614387] ? setup+0xd0/0xd0 [ 2095.614403] legacy_get_tree+0x105/0x220 [ 2095.614419] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2095.614441] vfs_get_tree+0x8e/0x2f0 [ 2095.614457] path_mount+0x131b/0x1f80 [ 2095.614477] ? kasan_quarantine_put+0x87/0x1e0 [ 2095.614495] ? finish_automount+0xa20/0xa20 [ 2095.614510] ? kmem_cache_free+0xe0/0x420 [ 2095.614525] ? putname+0xfe/0x140 00:27:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x430, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2095.614547] __x64_sys_mount+0x27e/0x300 [ 2095.614564] ? path_mount+0x1f80/0x1f80 [ 2095.614581] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.614605] do_syscall_64+0x3b/0x90 [ 2095.614619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2095.614636] RIP: 0033:0x7fa9c293504a [ 2095.614646] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.614658] RSP: 002b:00007fa9bfea8fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2095.614670] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007fa9c293504a [ 2095.614678] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007fa9bfea9000 [ 2095.614686] RBP: 00007fa9bfea9040 R08: 00007fa9bfea9040 R09: 0000000020000000 [ 2095.614694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2095.614701] R13: 0000000020000080 R14: 00007fa9bfea9000 R15: 0000000020001a00 [ 2095.614722] [ 2095.626902] FAT-fs (loop0): bogus number of reserved sectors [ 2095.626912] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.645887] loop0: detected capacity change from 0 to 1 [ 2095.654020] FAT-fs (loop0): bogus number of reserved sectors [ 2095.654031] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.655195] loop5: detected capacity change from 0 to 256 00:27:41 executing program 2: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0x8001) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) removexattr(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=@known='system.sockprotoname\x00') ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000001c0)) syz_io_uring_setup(0xeb3, &(0x7f00000003c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6800}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r0, &(0x7f0000000000)={0x1}, r0, 0x3, 0x0, 0x1}, 0x3e) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) syz_io_uring_setup(0x8001, &(0x7f0000000240)={0x0, 0xd988, 0x1, 0x0, 0x109}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x9) [ 2095.678042] loop7: detected capacity change from 0 to 256 [ 2095.685869] FAULT_INJECTION: forcing a failure. [ 2095.685869] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.685901] CPU: 0 PID: 8133 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2095.685926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2095.685942] Call Trace: [ 2095.685948] [ 2095.685957] dump_stack_lvl+0x8b/0xb3 [ 2095.685993] should_fail.cold+0x5/0xa [ 2095.686019] ? create_object.isra.0+0x3a/0xa20 00:27:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 98) [ 2095.686058] should_failslab+0x5/0x10 [ 2095.686091] kmem_cache_alloc+0x5b/0x480 [ 2095.686123] create_object.isra.0+0x3a/0xa20 [ 2095.686154] ? kasan_unpoison+0x23/0x50 [ 2095.686192] kmem_cache_alloc_trace+0x22e/0x3c0 [ 2095.686222] ? vfat_rename+0xf50/0xf50 [ 2095.686263] fat_fill_super+0xd1/0x37f0 [ 2095.686297] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2095.686336] ? vsnprintf+0x4e2/0x1770 [ 2095.686379] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2095.686410] ? sget+0x44c/0x550 [ 2095.686442] ? lock_downgrade+0x6d0/0x6d0 00:27:41 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) [ 2095.686486] ? snprintf+0xbb/0xf0 [ 2095.686515] ? vsprintf+0x30/0x30 [ 2095.686541] ? bit_wait_io_timeout+0x160/0x160 [ 2095.686569] ? up_write+0x148/0x460 [ 2095.686595] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2095.686632] ? set_blocksize+0x2ee/0x380 [ 2095.686672] mount_bdev+0x331/0x3f0 [ 2095.686703] ? msdos_mount+0x40/0x40 [ 2095.686740] ? setup+0xd0/0xd0 [ 2095.686799] legacy_get_tree+0x105/0x220 [ 2095.686830] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2095.686873] vfs_get_tree+0x8e/0x2f0 [ 2095.686905] path_mount+0x131b/0x1f80 [ 2095.686943] ? kasan_quarantine_put+0x87/0x1e0 [ 2095.686978] ? finish_automount+0xa20/0xa20 [ 2095.687007] ? kmem_cache_free+0xe0/0x420 [ 2095.687037] ? putname+0xfe/0x140 [ 2095.687080] __x64_sys_mount+0x27e/0x300 [ 2095.687113] ? path_mount+0x1f80/0x1f80 [ 2095.687147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.687194] do_syscall_64+0x3b/0x90 [ 2095.687222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2095.687255] RIP: 0033:0x7faa30c9904a [ 2095.687273] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.687296] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2095.687319] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2095.687334] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2095.687349] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2095.687364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2095.687378] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2095.687420] [ 2095.696581] FAT-fs (loop4): bogus number of reserved sectors [ 2095.696601] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2095.696930] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:27:41 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:27:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x500, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:27:41 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x480, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2095.702900] FAT-fs (loop7): bogus number of FAT sectors [ 2095.702918] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2095.719774] 9pnet_fd: p9_fd_create_tcp (8130): problem connecting socket to 127.0.0.1 [ 2095.769867] loop0: detected capacity change from 0 to 2 [ 2095.773541] FAT-fs (loop6): bogus number of reserved sectors [ 2095.773562] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2095.779118] FAT-fs (loop0): bogus number of reserved sectors [ 2095.779129] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.784718] loop0: detected capacity change from 0 to 2 [ 2095.787999] FAT-fs (loop0): bogus number of reserved sectors [ 2095.788010] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.789576] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2095.874707] loop5: detected capacity change from 0 to 256 [ 2095.887164] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2095.905968] loop0: detected capacity change from 0 to 2 [ 2095.910155] FAULT_INJECTION: forcing a failure. [ 2095.910155] name failslab, interval 1, probability 0, space 0, times 0 [ 2095.910186] CPU: 0 PID: 8145 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2095.910212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2095.910234] Call Trace: [ 2095.910240] [ 2095.910251] dump_stack_lvl+0x8b/0xb3 [ 2095.910286] should_fail.cold+0x5/0xa [ 2095.910311] ? create_object.isra.0+0x3a/0xa20 [ 2095.910349] should_failslab+0x5/0x10 [ 2095.910382] kmem_cache_alloc+0x5b/0x480 [ 2095.910413] create_object.isra.0+0x3a/0xa20 [ 2095.910445] ? kasan_unpoison+0x23/0x50 [ 2095.910483] kmem_cache_alloc_trace+0x22e/0x3c0 [ 2095.910507] ? vfat_rename+0xf50/0xf50 [ 2095.910547] fat_fill_super+0xd1/0x37f0 [ 2095.910581] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2095.910621] ? vsnprintf+0x4e2/0x1770 [ 2095.910664] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2095.910696] ? sget+0x44c/0x550 [ 2095.910727] ? lock_downgrade+0x6d0/0x6d0 [ 2095.910797] ? snprintf+0xbb/0xf0 [ 2095.910827] ? vsprintf+0x30/0x30 [ 2095.910853] ? bit_wait_io_timeout+0x160/0x160 [ 2095.910881] ? up_write+0x148/0x460 [ 2095.910907] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2095.910943] ? set_blocksize+0x2ee/0x380 [ 2095.910983] mount_bdev+0x331/0x3f0 [ 2095.911015] ? msdos_mount+0x40/0x40 [ 2095.911051] ? setup+0xd0/0xd0 [ 2095.911084] legacy_get_tree+0x105/0x220 [ 2095.911114] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2095.911157] vfs_get_tree+0x8e/0x2f0 [ 2095.911189] path_mount+0x131b/0x1f80 [ 2095.911226] ? kasan_quarantine_put+0x87/0x1e0 [ 2095.911262] ? finish_automount+0xa20/0xa20 [ 2095.911291] ? kmem_cache_free+0xe0/0x420 [ 2095.911321] ? putname+0xfe/0x140 [ 2095.911363] __x64_sys_mount+0x27e/0x300 [ 2095.911396] ? path_mount+0x1f80/0x1f80 [ 2095.911431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2095.911477] do_syscall_64+0x3b/0x90 [ 2095.911505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2095.911538] RIP: 0033:0x7faa30c9904a [ 2095.911556] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2095.911578] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2095.911601] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2095.911617] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2095.911633] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2095.911648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2095.911662] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2095.911705] [ 2095.911894] FAT-fs (loop0): bogus number of reserved sectors [ 2095.911911] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.912893] loop7: detected capacity change from 0 to 256 [ 2095.914748] 9pnet_fd: p9_fd_create_tcp (8146): problem connecting socket to 127.0.0.1 [ 2095.920374] FAT-fs (loop4): bogus number of reserved sectors [ 2095.920394] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2095.922964] loop0: detected capacity change from 0 to 2 [ 2095.925805] FAT-fs (loop7): bogus number of FAT sectors [ 2095.925825] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2095.931278] FAT-fs (loop0): bogus number of reserved sectors [ 2095.931298] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2095.958601] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2110.418189] kmemleak: 4 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 00:28:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x500, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:28:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x506, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:28:04 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa0c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:28:04 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464d887acfeba46c64e613e1b68700ba3e5c9a61c4c909a811da9b604bb96a415a6325b75df66501d6afd5a40c3d3f91743c4804ccc7feb16bc32e8a0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb0c) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 00:28:04 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2da}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfc0000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x4040881) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:28:04 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) 00:28:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 99) [ 2119.031995] loop7: detected capacity change from 0 to 256 [ 2119.044910] loop5: detected capacity change from 0 to 256 [ 2119.050004] loop0: detected capacity change from 0 to 2 [ 2119.054706] FAT-fs (loop7): bogus number of FAT sectors [ 2119.054725] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2119.061073] FAT-fs (loop0): bogus number of reserved sectors [ 2119.061093] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2119.063872] FAULT_INJECTION: forcing a failure. [ 2119.063872] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.063903] CPU: 0 PID: 8173 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2119.063928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2119.063944] Call Trace: [ 2119.063950] [ 2119.063959] dump_stack_lvl+0x8b/0xb3 [ 2119.063994] should_fail.cold+0x5/0xa [ 2119.064020] ? create_object.isra.0+0x3a/0xa20 [ 2119.064057] should_failslab+0x5/0x10 [ 2119.064088] kmem_cache_alloc+0x5b/0x480 [ 2119.064119] create_object.isra.0+0x3a/0xa20 [ 2119.064150] ? kasan_unpoison+0x23/0x50 [ 2119.064187] kmem_cache_alloc_trace+0x22e/0x3c0 [ 2119.064217] ? vfat_rename+0xf50/0xf50 [ 2119.064256] fat_fill_super+0xd1/0x37f0 [ 2119.064288] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2119.064327] ? vsnprintf+0x4e2/0x1770 [ 2119.064368] ? fat_get_block_bmap+0x3f0/0x3f0 [ 2119.064398] ? sget+0x44c/0x550 [ 2119.064429] ? lock_downgrade+0x6d0/0x6d0 [ 2119.064471] ? snprintf+0xbb/0xf0 [ 2119.064500] ? vsprintf+0x30/0x30 [ 2119.064525] ? bit_wait_io_timeout+0x160/0x160 [ 2119.064551] ? up_write+0x148/0x460 [ 2119.064577] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2119.064612] ? set_blocksize+0x2ee/0x380 [ 2119.064650] mount_bdev+0x331/0x3f0 [ 2119.064680] ? msdos_mount+0x40/0x40 [ 2119.064715] ? setup+0xd0/0xd0 [ 2119.064747] legacy_get_tree+0x105/0x220 [ 2119.064775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2119.064816] vfs_get_tree+0x8e/0x2f0 [ 2119.064847] path_mount+0x131b/0x1f80 [ 2119.064882] ? kasan_quarantine_put+0x87/0x1e0 [ 2119.064916] ? finish_automount+0xa20/0xa20 [ 2119.064943] ? kmem_cache_free+0xe0/0x420 [ 2119.064971] ? putname+0xfe/0x140 [ 2119.065012] __x64_sys_mount+0x27e/0x300 [ 2119.065043] ? path_mount+0x1f80/0x1f80 [ 2119.065077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2119.065121] do_syscall_64+0x3b/0x90 [ 2119.065148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2119.065180] RIP: 0033:0x7faa30c9904a [ 2119.065197] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:28:04 executing program 6: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) 00:28:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) (fail_nth: 100) 00:28:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x507, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001a00)={[{@fat=@nfs_nostale_ro}]}) [ 2119.065218] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 00:28:04 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000", 0x1c}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, ')'}}, {@version_9p2000}], [{@uid_gt={'uid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a4", 0x1, 0x0) syz_io_uring_complete(0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x2, 0x9, 0x1db, 0xad, 0x200, 0x1d, 0x5}, "c304069cab434f8bea7b8d99a2831795ea9151619b9a9831b87e492815bffa69196a33741b0c6803b38d826e8554e4c3ff96b7a8b5f91d535aab162dfb4c19028a481233d8226130f1a9b0c666482d6c7fd8fd7312d791bab5cdc2b7d50681e225bc1ef5b9f146d705baeb05f3fb31cc32e2dada8200240c23ba6e9f6bdf482bcd1773003a40deb340dde834d764be6cafde915fe602df7e4854ce2683ddc1aca806d632aa899a0413d40f0dd8a296f464", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000400100000000000000"]) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', 0xc0000, 0x43) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) [ 2119.065241] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2119.065256] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2119.065270] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2119.065284] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2119.065298] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2119.065339] [ 2119.071799] FAT-fs (loop6): bogus number of reserved sectors [ 2119.071818] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2119.077586] loop0: detected capacity change from 0 to 2 00:28:04 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) shutdown(r2, 0x0) recvmmsg(r3, &(0x7f0000003040)=[{{&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/101, 0x65}, {&(0x7f00000001c0)=""/149, 0x95}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000000340)=""/160, 0xa0}], 0x4, &(0x7f0000000440)=""/40, 0x28}}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000480)=""/50, 0x32}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/116, 0x74}, {&(0x7f0000000740)=""/180, 0xb4}], 0x5}}, {{&(0x7f0000000880)=@qipcrtr, 0x2b0fe5809c6545f0, &(0x7f0000000980)=[{&(0x7f0000000900)=""/111, 0x6f}], 0x1, &(0x7f00000009c0)=""/11, 0xb}}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000000a80)=""/56, 0x38}, {&(0x7f0000000ac0)=""/85, 0x55}, {&(0x7f0000000b40)=""/143, 0xb6}, {&(0x7f0000001c40)=""/115, 0x73}, {&(0x7f0000001cc0)=""/113, 0x71}, {&(0x7f0000001d40)=""/19, 0x13}, {&(0x7f0000001d80)=""/25, 0x19}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/82, 0x52}, {&(0x7f0000002e40)=""/162, 0xa2}], 0xa, &(0x7f0000002fc0)=""/106, 0x6a}}], 0x4, 0x0, &(0x7f0000003140)={0x0, 0x3938700}) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) [ 2119.080579] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2119.081421] FAT-fs (loop4): bogus number of reserved sectors [ 2119.081441] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2119.088056] FAT-fs (loop0): bogus number of reserved sectors [ 2119.088074] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2119.090962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2119.092656] FAT-fs (loop6): bogus number of reserved sectors [ 2119.092674] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2119.111795] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2119.114830] syz-executor.2 (8170) used greatest stack depth: 22544 bytes left [ 2119.129836] 9pnet_fd: p9_fd_create_tcp (8166): problem connecting socket to 127.0.0.1 [ 2119.235779] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2119.320119] loop7: detected capacity change from 0 to 256 [ 2119.324975] FAULT_INJECTION: forcing a failure. [ 2119.324975] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.325015] CPU: 0 PID: 8181 Comm: syz-executor.4 Not tainted 5.18.0-rc4-next-20220428 #1 [ 2119.325044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2119.325061] Call Trace: [ 2119.325069] [ 2119.325079] dump_stack_lvl+0x8b/0xb3 [ 2119.325118] should_fail.cold+0x5/0xa [ 2119.325147] ? create_object.isra.0+0x3a/0xa20 [ 2119.325190] should_failslab+0x5/0x10 [ 2119.325232] kmem_cache_alloc+0x5b/0x480 [ 2119.325268] create_object.isra.0+0x3a/0xa20 [ 2119.325303] ? kasan_unpoison+0x23/0x50 [ 2119.325346] __kmalloc+0x25b/0x440 [ 2119.325379] __list_lru_init+0xc7/0x590 [ 2119.325417] alloc_super+0x83e/0x9d0 [ 2119.325456] ? test_bdev_super_fc+0x70/0x70 [ 2119.325495] sget+0x10b/0x550 [ 2119.325531] ? alloc_super+0x9d0/0x9d0 [ 2119.325573] mount_bdev+0xf8/0x3f0 [ 2119.325607] ? msdos_mount+0x40/0x40 [ 2119.325649] ? setup+0xd0/0xd0 [ 2119.325686] legacy_get_tree+0x105/0x220 [ 2119.325718] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2119.325767] vfs_get_tree+0x8e/0x2f0 [ 2119.325803] path_mount+0x131b/0x1f80 [ 2119.325843] ? kasan_quarantine_put+0x87/0x1e0 [ 2119.325883] ? finish_automount+0xa20/0xa20 [ 2119.325915] ? kmem_cache_free+0xe0/0x420 [ 2119.325949] ? putname+0xfe/0x140 [ 2119.325996] __x64_sys_mount+0x27e/0x300 [ 2119.326033] ? path_mount+0x1f80/0x1f80 [ 2119.326071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2119.326123] do_syscall_64+0x3b/0x90 [ 2119.326154] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2119.326191] RIP: 0033:0x7faa30c9904a [ 2119.326211] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2119.326235] RSP: 002b:00007faa2e20cfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2119.326261] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 00007faa30c9904a [ 2119.326278] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007faa2e20d000 [ 2119.326294] RBP: 00007faa2e20d040 R08: 00007faa2e20d040 R09: 0000000020000000 [ 2119.326309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2119.326325] R13: 0000000020000080 R14: 00007faa2e20d000 R15: 0000000020001a00 [ 2119.326372] [ 2119.332798] FAT-fs (loop4): bogus number of reserved sectors [ 2119.332822] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2119.333088] FAT-fs (loop6): bogus number of reserved sectors [ 2119.333104] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2119.334415] loop0: detected capacity change from 0 to 2 [ 2119.337649] FAT-fs (loop7): bogus number of FAT sectors [ 2119.337669] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2119.349888] FAT-fs (loop0): bogus number of reserved sectors [ 2119.349911] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2119.350282] FAT-fs (loop6): bogus number of reserved sectors [ 2119.350300] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2119.361596] loop0: detected capacity change from 0 to 2 [ 2119.374018] FAT-fs (loop0): bogus number of reserved sectors [ 2119.374048] FAT-fs (loop0): Can't find a valid FAT filesystem [ 2132.390369] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888043a30800 (size 176): comm "syz-executor.2", pid 8170, jiffies 4296785881 (age 20.261s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000a427a162>] prepare_kernel_cred+0x25/0x660 [<0000000006b8492b>] _request_firmware+0x7e5/0x11e0 [<00000000843de4b3>] request_firmware+0x32/0x50 [<00000000fe6fb224>] reg_reload_regdb+0x7c/0x440 [<0000000035a9d5f3>] genl_family_rcv_msg_doit+0x22d/0x330 [<000000004105d693>] genl_rcv_msg+0x33c/0x5a0 [<000000003c0d8345>] netlink_rcv_skb+0x14b/0x430 [<00000000bd21e917>] genl_rcv+0x24/0x40 [<000000004caff4af>] netlink_unicast+0x54a/0x800 [<00000000dbf44949>] netlink_sendmsg+0x904/0xe00 [<0000000043ad325d>] sock_sendmsg+0x150/0x190 [<000000004d93716e>] ____sys_sendmsg+0x703/0x870 [<0000000071eb9e3a>] ___sys_sendmsg+0xf3/0x170 [<0000000099a5aaa4>] __sys_sendmsg+0xe5/0x1b0 [<00000000f430b981>] do_syscall_64+0x3b/0x90 [<000000009d170af7>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff88800803e880 (size 32): comm "syz-executor.2", pid 8170, jiffies 4296785881 (age 20.261s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000e209031b>] security_prepare_creds+0x10a/0x180 [<0000000041660f2c>] prepare_kernel_cred+0x42d/0x660 [<0000000006b8492b>] _request_firmware+0x7e5/0x11e0 [<00000000843de4b3>] request_firmware+0x32/0x50 [<00000000fe6fb224>] reg_reload_regdb+0x7c/0x440 [<0000000035a9d5f3>] genl_family_rcv_msg_doit+0x22d/0x330 [<000000004105d693>] genl_rcv_msg+0x33c/0x5a0 [<000000003c0d8345>] netlink_rcv_skb+0x14b/0x430 [<00000000bd21e917>] genl_rcv+0x24/0x40 [<000000004caff4af>] netlink_unicast+0x54a/0x800 [<00000000dbf44949>] netlink_sendmsg+0x904/0xe00 [<0000000043ad325d>] sock_sendmsg+0x150/0x190 [<000000004d93716e>] ____sys_sendmsg+0x703/0x870 [<0000000071eb9e3a>] ___sys_sendmsg+0xf3/0x170 [<0000000099a5aaa4>] __sys_sendmsg+0xe5/0x1b0 [<00000000f430b981>] do_syscall_64+0x3b/0x90 BUG: memory leak unreferenced object 0xffff88800d12e400 (size 176): comm "syz-executor.2", pid 8176, jiffies 4296785939 (age 20.203s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000a427a162>] prepare_kernel_cred+0x25/0x660 [<0000000006b8492b>] _request_firmware+0x7e5/0x11e0 [<00000000843de4b3>] request_firmware+0x32/0x50 [<00000000fe6fb224>] reg_reload_regdb+0x7c/0x440 [<0000000035a9d5f3>] genl_family_rcv_msg_doit+0x22d/0x330 [<000000004105d693>] genl_rcv_msg+0x33c/0x5a0 [<000000003c0d8345>] netlink_rcv_skb+0x14b/0x430 [<00000000bd21e917>] genl_rcv+0x24/0x40 [<000000004caff4af>] netlink_unicast+0x54a/0x800 [<00000000dbf44949>] netlink_sendmsg+0x904/0xe00 [<0000000043ad325d>] sock_sendmsg+0x150/0x190 [<000000004d93716e>] ____sys_sendmsg+0x703/0x870 [<0000000071eb9e3a>] ___sys_sendmsg+0xf3/0x170 [<0000000099a5aaa4>] __sys_sendmsg+0xe5/0x1b0 [<00000000f430b981>] do_syscall_64+0x3b/0x90 [<000000009d170af7>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: leak checking failed VM DIAGNOSIS: 00:28:25 Registers: info registers vcpu 0 RAX=ffffffff8419ac20 RBX=ffffffff85032800 RCX=ffffffff8417d0b1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85007e18 R8 =0000000000000001 R9 =ffff88806ce38d13 R10=ffffed100d9c71a2 R11=0000000000000001 R12=fffffbfff0a06500 R13=ffffffff858ef1d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8419ac2b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd0391ff98 CR3=000000000d572000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=c4d6550000000000 401d FPR7=8800000000000000 4003 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 656a626f20646563 6e6572656665726e YMM02=0000000000000000 0000000000000000 2936373120657a69 7328203030383033 YMM03=0000000000000000 0000000000000000 3820646970202c22 322e726f74756365 YMM04=0000000000000000 0000000000000000 2e2e2e2e2e2e2e2e 2020303020303020 YMM05=0000000000000000 0000000000000000 3020303020303020 3030203030203030 YMM06=0000000000000000 0000000000000000 7365747962203233 2074737269662820 YMM07=0000000000000000 0000000000000000 2e30322065676128 2031383835383736 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff8419ac20 RBX=ffff8880081ed040 RCX=ffffffff8417d0b1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff88800821fe58 R8 =0000000000000001 R9 =ffff88806cf38d13 R10=ffffed100d9e71a2 R11=0000000000000001 R12=ffffed100103da08 R13=ffffffff858ef1d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8419ac2b RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6904b479d0 CR3=0000000009164000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4184009700000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000