7c5eed81d77ce20294feaab9e699dd1d458", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1260.010622] FAULT_INJECTION: forcing a failure. [ 1260.010622] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.023491] CPU: 1 PID: 32512 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1260.031386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1260.039294] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1260.040761] Call Trace: [ 1260.049233] dump_stack+0x1b2/0x281 [ 1260.052865] should_fail.cold+0x10a/0x149 [ 1260.057112] should_failslab+0xd6/0x130 [ 1260.061086] kmem_cache_alloc+0x28e/0x3c0 [ 1260.065230] ? shmem_destroy_callback+0xa0/0xa0 [ 1260.069895] shmem_alloc_inode+0x18/0x40 [ 1260.073957] ? shmem_destroy_callback+0xa0/0xa0 [ 1260.078631] alloc_inode+0x5d/0x170 [ 1260.082249] new_inode+0x1d/0xf0 [ 1260.085611] shmem_get_inode+0x8b/0x890 [ 1260.089574] __shmem_file_setup.part.0+0x104/0x3c0 [ 1260.094492] ? shmem_create+0x30/0x30 [ 1260.098280] ? __alloc_fd+0x1be/0x490 [ 1260.102071] SyS_memfd_create+0x1fc/0x3c0 [ 1260.106203] ? shmem_fcntl+0x120/0x120 [ 1260.110068] ? __do_page_fault+0x159/0xad0 [ 1260.114280] ? do_syscall_64+0x4c/0x640 [ 1260.118230] ? shmem_fcntl+0x120/0x120 [ 1260.122097] do_syscall_64+0x1d5/0x640 [ 1260.125987] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.131161] RIP: 0033:0x7fa9eab24279 [ 1260.134849] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1260.142534] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa9eab24279 [ 1260.149788] RDX: 00007fa9e9498fe0 RSI: 0000000000000000 RDI: 00007fa9eab7d2c4 [ 1260.157046] RBP: 0000000000000000 R08: 00007fa9e9498fd8 R09: 00007fa9e94991d0 [ 1260.164301] R10: 00007fa9e9498fdc R11: 0000000000000246 R12: 0000000020000080 [ 1260.171556] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:43:24 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) 14:43:24 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 4) 14:43:24 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 1) 14:43:24 executing program 5: syz_mount_image$romfs(0x0, &(0x7f00000013c0)='./file0\x00', 0x9, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="3473bb1eadf816c03f404da26d3bbbd406cce2ba122e64ca73c702f79ce0242adfc00bd7d0fcf6168c39fa39e6c3424afac81466d187b7bb2d308add8fdf6c6aafd5aed9be01e9c6d6d0e343b5c1872e5901ea8f118b935d7d6cd031d722db974414132e978bdfedaf1dff1b282f58cca3118ef3830277c66da41e1b901295962249d44b730f9e776e6e9b637b36cd409b5b7bdbf232aad9b83aa19dfaa6956a0820c64343376e369310d218a5e86a58a87ec9209e82556f2c36ef39f6a785a707849f6bf2225600e7799916a63836db7b73e98466ace61ed367b099a409ccff5ac047b306cd4eabfae7c5eed81d77ce20294feaab9e699dd1d458", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:24 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x6, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="3473bb1eadf816c03f404da26d3bbbd406cce2ba122e64ca73c702f79ce0242adfc00bd7d0fcf6168c39fa39e6c3424afac81466d187b7bb2d308add8fdf6c6aafd5aed9be01e9c6d6d0e343b5c1872e5901ea8f118b935d7d6cd031d722db974414132e978bdfedaf1dff1b282f58cca3118ef3830277c66da41e1b901295962249d44b730f9e776e6e9b637b36cd409b5b7bdbf232aad9b83aa19dfaa6956a0820c64343376e369310d218a5e86a58a87ec9209e82556f2c36ef39f6a785a707849f6bf2225600e7799916a63836db7b73e98466ace61ed367b099a409ccff5ac047b306cd4eabfae7c5eed81d77ce20294feaab9e699dd1d458", 0xfb, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1260.604939] FAULT_INJECTION: forcing a failure. [ 1260.604939] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.618945] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1260.630146] FAULT_INJECTION: forcing a failure. [ 1260.630146] name failslab, interval 1, probability 0, space 0, times 0 14:43:24 executing program 5: syz_mount_image$romfs(0x0, &(0x7f00000013c0)='./file0\x00', 0x9, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1260.679246] CPU: 0 PID: 32542 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1260.687166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1260.696508] Call Trace: [ 1260.699089] dump_stack+0x1b2/0x281 [ 1260.702716] should_fail.cold+0x10a/0x149 [ 1260.706857] should_failslab+0xd6/0x130 [ 1260.710840] __kmalloc+0x2c1/0x400 [ 1260.714365] ? SyS_memfd_create+0xbc/0x3c0 [ 1260.718585] SyS_memfd_create+0xbc/0x3c0 [ 1260.722631] ? shmem_fcntl+0x120/0x120 [ 1260.726501] ? __do_page_fault+0x159/0xad0 [ 1260.730719] ? do_syscall_64+0x4c/0x640 [ 1260.734683] ? shmem_fcntl+0x120/0x120 [ 1260.738580] do_syscall_64+0x1d5/0x640 [ 1260.742458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1260.747630] RIP: 0033:0x7f25db3db279 [ 1260.751335] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1260.759049] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f25db3db279 [ 1260.766324] RDX: 00007f25d9d4ffe0 RSI: 0000000000000000 RDI: 00007f25db4342c4 [ 1260.773582] RBP: 0000000000000000 R08: 00007f25d9d4ffd8 R09: 00007f25d9d501d0 [ 1260.780837] R10: 00007f25d9d4ffdc R11: 0000000000000246 R12: 0000000020000080 [ 1260.788245] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1260.795523] CPU: 1 PID: 32539 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1260.803412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1260.812759] Call Trace: [ 1260.815348] dump_stack+0x1b2/0x281 [ 1260.818968] should_fail.cold+0x10a/0x149 [ 1260.823101] should_failslab+0xd6/0x130 [ 1260.827154] kmem_cache_alloc+0x28e/0x3c0 [ 1260.831287] get_empty_filp+0x86/0x3f0 [ 1260.835155] alloc_file+0x23/0x440 [ 1260.838674] __shmem_file_setup.part.0+0x198/0x3c0 [ 1260.843580] ? shmem_create+0x30/0x30 [ 1260.847356] ? __alloc_fd+0x1be/0x490 [ 1260.851138] SyS_memfd_create+0x1fc/0x3c0 [ 1260.855286] ? shmem_fcntl+0x120/0x120 [ 1260.859154] ? __do_page_fault+0x159/0xad0 [ 1260.863464] ? do_syscall_64+0x4c/0x640 [ 1260.867421] ? shmem_fcntl+0x120/0x120 [ 1260.871301] do_syscall_64+0x1d5/0x640 [ 1260.875180] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 2) 14:43:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 5) [ 1260.880345] RIP: 0033:0x7fa9eab24279 [ 1260.884033] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1260.891721] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa9eab24279 [ 1260.899144] RDX: 00007fa9e9498fe0 RSI: 0000000000000000 RDI: 00007fa9eab7d2c4 [ 1260.906408] RBP: 0000000000000000 R08: 00007fa9e9498fd8 R09: 00007fa9e94991d0 [ 1260.913653] R10: 00007fa9e9498fdc R11: 0000000000000246 R12: 0000000020000080 [ 1260.920904] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:43:25 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x3, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1261.054440] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1261.066213] FAULT_INJECTION: forcing a failure. [ 1261.066213] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.090071] FAULT_INJECTION: forcing a failure. [ 1261.090071] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.115529] CPU: 1 PID: 32565 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1261.123428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1261.132771] Call Trace: [ 1261.135355] dump_stack+0x1b2/0x281 [ 1261.138971] should_fail.cold+0x10a/0x149 [ 1261.143108] should_failslab+0xd6/0x130 [ 1261.147065] kmem_cache_alloc+0x28e/0x3c0 [ 1261.151307] __d_alloc+0x2a/0xa20 [ 1261.154835] ? lock_downgrade+0x740/0x740 [ 1261.158974] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1261.163799] ? shmem_create+0x30/0x30 [ 1261.167576] ? __alloc_fd+0x1be/0x490 [ 1261.171410] SyS_memfd_create+0x1fc/0x3c0 [ 1261.175549] ? shmem_fcntl+0x120/0x120 [ 1261.179427] ? __do_page_fault+0x159/0xad0 [ 1261.183642] ? do_syscall_64+0x4c/0x640 [ 1261.187595] ? shmem_fcntl+0x120/0x120 [ 1261.191461] do_syscall_64+0x1d5/0x640 [ 1261.195335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.200504] RIP: 0033:0x7f25db3db279 [ 1261.204196] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 14:43:25 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x5, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1261.211894] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f25db3db279 [ 1261.219140] RDX: 00007f25d9d4ffe0 RSI: 0000000000000000 RDI: 00007f25db4342c4 [ 1261.226386] RBP: 0000000000000000 R08: 00007f25d9d4ffd8 R09: 00007f25d9d501d0 [ 1261.233636] R10: 00007f25d9d4ffdc R11: 0000000000000246 R12: 0000000020000080 [ 1261.240897] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1261.248266] CPU: 0 PID: 32563 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1261.256141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1261.265491] Call Trace: [ 1261.268078] dump_stack+0x1b2/0x281 [ 1261.271732] should_fail.cold+0x10a/0x149 [ 1261.275889] should_failslab+0xd6/0x130 [ 1261.279860] kmem_cache_alloc+0x28e/0x3c0 [ 1261.284008] get_empty_filp+0x86/0x3f0 [ 1261.287895] alloc_file+0x23/0x440 [ 1261.291435] __shmem_file_setup.part.0+0x198/0x3c0 [ 1261.296361] ? shmem_create+0x30/0x30 [ 1261.300153] ? __alloc_fd+0x1be/0x490 [ 1261.303957] SyS_memfd_create+0x1fc/0x3c0 [ 1261.308104] ? shmem_fcntl+0x120/0x120 [ 1261.311985] ? __do_page_fault+0x159/0xad0 [ 1261.316214] ? do_syscall_64+0x4c/0x640 [ 1261.320188] ? shmem_fcntl+0x120/0x120 [ 1261.324075] do_syscall_64+0x1d5/0x640 [ 1261.327963] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.333145] RIP: 0033:0x7fa9eab24279 [ 1261.336845] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1261.344550] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fa9eab24279 [ 1261.351812] RDX: 00007fa9e9498fe0 RSI: 0000000000000000 RDI: 00007fa9eab7d2c4 [ 1261.359072] RBP: 0000000000000000 R08: 00007fa9e9498fd8 R09: 00007fa9e94991d0 [ 1261.366334] R10: 00007fa9e9498fdc R11: 0000000000000246 R12: 0000000020000080 [ 1261.373611] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1261.392920] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:25 executing program 0: r0 = socket(0x8, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 3) 14:43:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 6) 14:43:25 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), 0x0, 0x9, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="3473bb1eadf816c03f404da26d3bbbd406cce2ba122e64ca73c702f79ce0242adfc00bd7d0fcf6168c39fa39e6c3424afac81466d187b7bb2d308add8fdf6c6aafd5aed9be01e9c6d6d0e343b5c1872e5901ea8f118b935d7d6cd031d722db974414132e978bdfedaf1dff1b282f58cca3118ef3830277c66da41e1b901295962249d44b730f9e776e6e9b637b36cd409b5b7bdbf232aad9b83aa19dfaa6956a0820c64343376e369310d218a5e86a58a87ec9209e82556f2c36ef39f6a785a707849f6bf2225600e7799916a63836db7b73e98466ace61ed367b099a409ccff5ac047b306cd4eabfae7c5eed81d77ce20294feaab9e699dd1d458", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:25 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1261.445874] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:25 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:25 executing program 0: r0 = socket(0x8, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x8, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1261.518419] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1261.540072] FAULT_INJECTION: forcing a failure. [ 1261.540072] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1261.551972] CPU: 0 PID: 32595 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1261.559851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1261.569199] Call Trace: [ 1261.571787] dump_stack+0x1b2/0x281 [ 1261.575416] should_fail.cold+0x10a/0x149 [ 1261.579568] __alloc_pages_nodemask+0x22c/0x2720 [ 1261.584331] ? __lock_acquire+0x5fc/0x3f20 [ 1261.588567] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.593923] ? __save_stack_trace+0xa0/0x160 [ 1261.598328] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.603168] ? depot_save_stack+0x10d/0x3f0 [ 1261.607523] cache_grow_begin+0x91/0x700 [ 1261.611580] ? fs_reclaim_release+0xd0/0x110 [ 1261.615991] ? check_preemption_disabled+0x35/0x240 [ 1261.621007] cache_alloc_refill+0x273/0x350 [ 1261.625328] kmem_cache_alloc+0x333/0x3c0 [ 1261.629475] __d_alloc+0x2a/0xa20 [ 1261.632927] ? lock_downgrade+0x740/0x740 [ 1261.637076] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1261.641914] ? shmem_create+0x30/0x30 [ 1261.645714] ? __alloc_fd+0x1be/0x490 [ 1261.649519] SyS_memfd_create+0x1fc/0x3c0 [ 1261.653663] ? shmem_fcntl+0x120/0x120 [ 1261.657548] ? __do_page_fault+0x159/0xad0 [ 1261.661780] ? do_syscall_64+0x4c/0x640 [ 1261.665746] ? shmem_fcntl+0x120/0x120 [ 1261.669629] do_syscall_64+0x1d5/0x640 [ 1261.673517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.678704] RIP: 0033:0x7f25db3db279 [ 1261.682405] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1261.690106] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f25db3db279 [ 1261.697365] RDX: 00007f25d9d4ffe0 RSI: 0000000000000000 RDI: 00007f25db4342c4 [ 1261.703470] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1261.704631] RBP: 0000000000000000 R08: 00007f25d9d4ffd8 R09: 00007f25d9d501d0 14:43:25 executing program 0: r0 = socket(0x8, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x8, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:25 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), 0x0, 0x9, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1261.704637] R10: 00007f25d9d4ffdc R11: 0000000000000246 R12: 0000000020000080 [ 1261.704643] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1261.721427] FAULT_INJECTION: forcing a failure. [ 1261.721427] name failslab, interval 1, probability 0, space 0, times 0 14:43:26 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:26 executing program 0: socket(0x1d, 0xf3de781b8e6ac7c4, 0x21) [ 1261.833236] CPU: 0 PID: 32596 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1261.841135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1261.850480] Call Trace: [ 1261.853067] dump_stack+0x1b2/0x281 [ 1261.856695] should_fail.cold+0x10a/0x149 [ 1261.860843] should_failslab+0xd6/0x130 [ 1261.864815] kmem_cache_alloc+0x28e/0x3c0 [ 1261.868959] getname_flags+0xc8/0x550 [ 1261.872760] do_sys_open+0x1ce/0x410 [ 1261.876470] ? filp_open+0x60/0x60 14:43:26 executing program 0: socket(0x1d, 0xf3de781b8e6ac7c4, 0x21) [ 1261.880010] ? do_syscall_64+0x4c/0x640 [ 1261.883979] ? SyS_open+0x30/0x30 [ 1261.887428] do_syscall_64+0x1d5/0x640 [ 1261.891317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.896521] RIP: 0033:0x7fa9eaad7194 [ 1261.897672] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1261.900217] RSP: 002b:00007fa9e9498eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1261.900228] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eaad7194 [ 1261.900234] RDX: 0000000000000002 RSI: 00007fa9e9498fe0 RDI: 00000000ffffff9c 14:43:26 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x3, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1261.900240] RBP: 00007fa9e9498fe0 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1261.900246] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1261.900251] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 4) 14:43:26 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), 0x0, 0x9, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:26 executing program 0: socket(0x1d, 0xf3de781b8e6ac7c4, 0x21) 14:43:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 7) 14:43:26 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:26 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1262.041809] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1262.056605] FAT-fs (loop4): bogus number of reserved sectors [ 1262.062555] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:26 executing program 0: r0 = socket(0x2a, 0x80003, 0x400c) socket(0xd19dab5df19c907f, 0x0, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1262.189069] FAULT_INJECTION: forcing a failure. [ 1262.189069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1262.200886] CPU: 0 PID: 32653 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1262.206488] FAULT_INJECTION: forcing a failure. [ 1262.206488] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.208757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1262.208762] Call Trace: [ 1262.208777] dump_stack+0x1b2/0x281 [ 1262.208794] should_fail.cold+0x10a/0x149 [ 1262.239613] __alloc_pages_nodemask+0x22c/0x2720 [ 1262.244369] ? static_obj+0x50/0x50 [ 1262.247988] ? trace_hardirqs_on+0x10/0x10 [ 1262.252223] ? __lock_acquire+0x5fc/0x3f20 [ 1262.256461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1262.261296] ? __lock_acquire+0x5fc/0x3f20 [ 1262.265521] ? simple_xattr_get+0xe5/0x160 [ 1262.269756] ? fsnotify+0x974/0x11b0 [ 1262.273461] ? shmem_setattr+0x241/0xbf0 [ 1262.277526] ? __fsnotify_inode_delete+0x20/0x20 [ 1262.282274] cache_grow_begin+0x91/0x700 [ 1262.286328] ? fs_reclaim_release+0xd0/0x110 [ 1262.290730] ? check_preemption_disabled+0x35/0x240 [ 1262.295737] cache_alloc_refill+0x273/0x350 [ 1262.300057] kmem_cache_alloc+0x333/0x3c0 [ 1262.304201] getname_flags+0xc8/0x550 [ 1262.308000] do_sys_open+0x1ce/0x410 [ 1262.311710] ? filp_open+0x60/0x60 [ 1262.315251] ? do_syscall_64+0x4c/0x640 [ 1262.315956] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1262.319216] ? SyS_open+0x30/0x30 [ 1262.328520] do_syscall_64+0x1d5/0x640 [ 1262.332405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1262.337585] RIP: 0033:0x7fa9eaad7194 [ 1262.341282] RSP: 002b:00007fa9e9498eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1262.348983] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eaad7194 [ 1262.356244] RDX: 0000000000000002 RSI: 00007fa9e9498fe0 RDI: 00000000ffffff9c [ 1262.363507] RBP: 00007fa9e9498fe0 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1262.370767] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1262.378027] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1262.385295] CPU: 1 PID: 32657 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1262.393180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1262.397136] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1262.402522] Call Trace: [ 1262.402538] dump_stack+0x1b2/0x281 [ 1262.402553] should_fail.cold+0x10a/0x149 [ 1262.402567] should_failslab+0xd6/0x130 [ 1262.402579] kmem_cache_alloc+0x28e/0x3c0 [ 1262.402591] get_empty_filp+0x86/0x3f0 [ 1262.402599] alloc_file+0x23/0x440 [ 1262.402612] __shmem_file_setup.part.0+0x198/0x3c0 [ 1262.415148] FAT-fs (loop2): bogus number of reserved sectors [ 1262.418776] ? shmem_create+0x30/0x30 [ 1262.418786] ? __alloc_fd+0x1be/0x490 [ 1262.418803] SyS_memfd_create+0x1fc/0x3c0 [ 1262.418813] ? shmem_fcntl+0x120/0x120 [ 1262.418823] ? __do_page_fault+0x159/0xad0 [ 1262.418832] ? do_syscall_64+0x4c/0x640 [ 1262.418842] ? shmem_fcntl+0x120/0x120 [ 1262.422950] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1262.426928] do_syscall_64+0x1d5/0x640 [ 1262.426945] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:26 executing program 0: r0 = socket(0x2a, 0x80003, 0x400c) socket(0xd19dab5df19c907f, 0x0, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x2a, 0x80003, 0x400c) (async) socket(0xd19dab5df19c907f, 0x0, 0x6) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:26 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1262.426953] RIP: 0033:0x7f25db3db279 [ 1262.426959] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1262.426970] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f25db3db279 [ 1262.426975] RDX: 00007f25d9d4ffe0 RSI: 0000000000000000 RDI: 00007f25db4342c4 [ 1262.426980] RBP: 0000000000000000 R08: 00007f25d9d4ffd8 R09: 00007f25d9d501d0 [ 1262.426987] R10: 00007f25d9d4ffdc R11: 0000000000000246 R12: 0000000020000080 [ 1262.527899] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 14:43:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 5) 14:43:26 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 8) 14:43:26 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1262.617828] FAULT_INJECTION: forcing a failure. [ 1262.617828] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.661850] CPU: 1 PID: 32685 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1262.669751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1262.677758] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1262.679095] Call Trace: [ 1262.679111] dump_stack+0x1b2/0x281 [ 1262.679125] should_fail.cold+0x10a/0x149 [ 1262.679139] should_failslab+0xd6/0x130 [ 1262.679156] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1262.694191] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1262.695359] apparmor_file_alloc_security+0x129/0x800 [ 1262.695378] security_file_alloc+0x66/0xa0 [ 1262.695386] ? selinux_is_enabled+0x5/0x50 [ 1262.695399] get_empty_filp+0x16b/0x3f0 [ 1262.711375] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1262.715050] alloc_file+0x23/0x440 [ 1262.715067] __shmem_file_setup.part.0+0x198/0x3c0 [ 1262.715077] ? shmem_create+0x30/0x30 [ 1262.715089] ? __alloc_fd+0x1be/0x490 [ 1262.733553] FAULT_INJECTION: forcing a failure. [ 1262.733553] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.736876] SyS_memfd_create+0x1fc/0x3c0 [ 1262.736888] ? shmem_fcntl+0x120/0x120 [ 1262.736899] ? __do_page_fault+0x159/0xad0 [ 1262.736908] ? do_syscall_64+0x4c/0x640 [ 1262.736918] ? shmem_fcntl+0x120/0x120 [ 1262.780676] do_syscall_64+0x1d5/0x640 [ 1262.784562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1262.789740] RIP: 0033:0x7f25db3db279 [ 1262.793435] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1262.801123] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f25db3db279 14:43:26 executing program 0: r0 = socket(0x2a, 0x80003, 0x400c) (async) socket(0xd19dab5df19c907f, 0x0, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1262.808373] RDX: 00007f25d9d4ffe0 RSI: 0000000000000000 RDI: 00007f25db4342c4 [ 1262.815629] RBP: 0000000000000000 R08: 00007f25d9d4ffd8 R09: 00007f25d9d501d0 [ 1262.822883] R10: 00007f25d9d4ffdc R11: 0000000000000246 R12: 0000000020000080 [ 1262.830132] R13: 00000000200000c0 R14: 0000000000000000 R15: 0000000020000240 [ 1262.837400] CPU: 0 PID: 32688 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1262.845279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1262.854627] Call Trace: [ 1262.857210] dump_stack+0x1b2/0x281 [ 1262.860839] should_fail.cold+0x10a/0x149 [ 1262.864985] should_failslab+0xd6/0x130 [ 1262.868961] kmem_cache_alloc+0x28e/0x3c0 [ 1262.873109] get_empty_filp+0x86/0x3f0 [ 1262.876992] path_openat+0x84/0x2970 [ 1262.880707] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1262.885544] ? path_lookupat+0x780/0x780 [ 1262.889604] ? trace_hardirqs_on+0x10/0x10 [ 1262.893838] ? fsnotify+0x974/0x11b0 [ 1262.897549] ? shmem_setattr+0x241/0xbf0 [ 1262.901612] do_filp_open+0x179/0x3c0 [ 1262.905409] ? may_open_dev+0xe0/0xe0 [ 1262.909213] ? __alloc_fd+0x1be/0x490 [ 1262.913010] ? lock_downgrade+0x740/0x740 [ 1262.917153] ? do_raw_spin_unlock+0x164/0x220 [ 1262.921642] ? _raw_spin_unlock+0x29/0x40 [ 1262.925783] ? __alloc_fd+0x1be/0x490 [ 1262.929581] do_sys_open+0x296/0x410 [ 1262.933293] ? filp_open+0x60/0x60 [ 1262.936836] ? do_syscall_64+0x4c/0x640 [ 1262.940804] ? SyS_open+0x30/0x30 [ 1262.944251] do_syscall_64+0x1d5/0x640 [ 1262.948136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1262.953313] RIP: 0033:0x7fa9eaad7194 14:43:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 6) 14:43:27 executing program 0: r0 = socket(0x29, 0x6, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:27 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:27 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1262.957016] RSP: 002b:00007fa9e9498eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1262.964720] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eaad7194 [ 1262.971981] RDX: 0000000000000002 RSI: 00007fa9e9498fe0 RDI: 00000000ffffff9c [ 1262.979230] RBP: 00007fa9e9498fe0 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1262.986492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1262.993739] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 9) 14:43:27 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:27 executing program 0: r0 = socket(0x29, 0x6, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x29, 0x6, 0x200) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:27 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1263.111894] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1263.118337] FAULT_INJECTION: forcing a failure. [ 1263.118337] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.134581] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1263.146624] FAULT_INJECTION: forcing a failure. [ 1263.146624] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.165295] CPU: 0 PID: 32727 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1263.166536] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1263.173185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.173190] Call Trace: [ 1263.173207] dump_stack+0x1b2/0x281 [ 1263.173222] should_fail.cold+0x10a/0x149 [ 1263.173237] should_failslab+0xd6/0x130 [ 1263.173251] kmem_cache_alloc+0x28e/0x3c0 [ 1263.173263] getname_flags+0xc8/0x550 [ 1263.173276] do_sys_open+0x1ce/0x410 [ 1263.173286] ? filp_open+0x60/0x60 [ 1263.173300] ? do_syscall_64+0x4c/0x640 [ 1263.173308] ? SyS_open+0x30/0x30 [ 1263.173317] do_syscall_64+0x1d5/0x640 [ 1263.173331] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.173339] RIP: 0033:0x7f25db38e194 [ 1263.173344] RSP: 002b:00007f25d9d4feb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1263.173354] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db38e194 [ 1263.173360] RDX: 0000000000000002 RSI: 00007f25d9d4ffe0 RDI: 00000000ffffff9c [ 1263.173366] RBP: 00007f25d9d4ffe0 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1263.173371] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1263.173376] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1263.179360] CPU: 0 PID: 32734 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1263.289984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.299331] Call Trace: [ 1263.301924] dump_stack+0x1b2/0x281 [ 1263.305553] should_fail.cold+0x10a/0x149 [ 1263.309707] should_failslab+0xd6/0x130 [ 1263.313682] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1263.318347] ? loop_get_status64+0x100/0x100 [ 1263.322753] __kthread_create_on_node+0xbe/0x3a0 [ 1263.324153] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1263.327525] ? kthread_park+0x130/0x130 [ 1263.327547] ? loop_get_status64+0x100/0x100 [ 1263.327558] kthread_create_on_node+0xa8/0xd0 [ 1263.346754] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1263.351769] ? __lockdep_init_map+0x100/0x560 [ 1263.356261] ? __lockdep_init_map+0x100/0x560 [ 1263.360755] lo_ioctl+0xcd9/0x1cd0 [ 1263.364296] ? loop_set_status64+0xe0/0xe0 [ 1263.368530] blkdev_ioctl+0x540/0x1830 [ 1263.372418] ? blkpg_ioctl+0x8d0/0x8d0 [ 1263.376298] ? trace_hardirqs_on+0x10/0x10 [ 1263.380531] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1263.385621] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1263.390630] block_ioctl+0xd9/0x120 [ 1263.394249] ? blkdev_fallocate+0x3a0/0x3a0 [ 1263.398599] do_vfs_ioctl+0x75a/0xff0 [ 1263.402378] ? lock_acquire+0x170/0x3f0 [ 1263.406343] ? ioctl_preallocate+0x1a0/0x1a0 [ 1263.410726] ? __fget+0x265/0x3e0 [ 1263.414167] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.418125] ? security_file_ioctl+0x83/0xb0 [ 1263.422510] SyS_ioctl+0x7f/0xb0 [ 1263.425865] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.429815] do_syscall_64+0x1d5/0x640 [ 1263.433696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.438866] RIP: 0033:0x7fa9eab24037 [ 1263.442576] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.450274] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1263.457521] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:27 executing program 0: r0 = socket(0x29, 0x6, 0x200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 7) 14:43:27 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, 0x0, 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:27 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 10) [ 1263.464809] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1263.472059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1263.479327] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:27 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:27 executing program 0: r0 = socket(0x10, 0x6, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1263.580218] FAULT_INJECTION: forcing a failure. [ 1263.580218] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.595900] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1263.603463] FAULT_INJECTION: forcing a failure. [ 1263.603463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1263.615222] CPU: 1 PID: 32759 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1263.623243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.632584] Call Trace: [ 1263.635162] dump_stack+0x1b2/0x281 [ 1263.638773] should_fail.cold+0x10a/0x149 [ 1263.642905] should_failslab+0xd6/0x130 [ 1263.646861] kmem_cache_alloc+0x28e/0x3c0 [ 1263.650993] __kernfs_new_node+0x6f/0x470 [ 1263.655123] kernfs_create_dir_ns+0x8c/0x200 [ 1263.659520] internal_create_group+0xe9/0x710 [ 1263.664002] lo_ioctl+0x1137/0x1cd0 [ 1263.667613] ? loop_set_status64+0xe0/0xe0 [ 1263.671831] blkdev_ioctl+0x540/0x1830 [ 1263.675701] ? blkpg_ioctl+0x8d0/0x8d0 [ 1263.679567] ? trace_hardirqs_on+0x10/0x10 [ 1263.683784] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1263.688866] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1263.693875] block_ioctl+0xd9/0x120 [ 1263.697482] ? blkdev_fallocate+0x3a0/0x3a0 [ 1263.701782] do_vfs_ioctl+0x75a/0xff0 [ 1263.705576] ? lock_acquire+0x170/0x3f0 [ 1263.709529] ? ioctl_preallocate+0x1a0/0x1a0 [ 1263.713929] ? __fget+0x265/0x3e0 [ 1263.717361] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.721314] ? security_file_ioctl+0x83/0xb0 [ 1263.725701] SyS_ioctl+0x7f/0xb0 [ 1263.729044] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.732997] do_syscall_64+0x1d5/0x640 [ 1263.736882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.742049] RIP: 0033:0x7fa9eab24037 [ 1263.745740] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1263.753428] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1263.760677] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1263.767929] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1263.775176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1263.782421] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1263.789860] CPU: 0 PID: 32766 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1263.797737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1263.807194] Call Trace: [ 1263.809780] dump_stack+0x1b2/0x281 [ 1263.813406] should_fail.cold+0x10a/0x149 [ 1263.817557] __alloc_pages_nodemask+0x22c/0x2720 [ 1263.822310] ? static_obj+0x50/0x50 [ 1263.825933] ? trace_hardirqs_on+0x10/0x10 14:43:28 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x6, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1263.830162] ? __lock_acquire+0x5fc/0x3f20 [ 1263.834395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.839229] ? __lock_acquire+0x5fc/0x3f20 [ 1263.843456] ? simple_xattr_get+0xe5/0x160 [ 1263.847694] ? fsnotify+0x974/0x11b0 [ 1263.851404] ? shmem_setattr+0x241/0xbf0 [ 1263.855467] ? __fsnotify_inode_delete+0x20/0x20 [ 1263.860225] cache_grow_begin+0x91/0x700 [ 1263.864281] ? fs_reclaim_release+0xd0/0x110 [ 1263.868684] ? check_preemption_disabled+0x35/0x240 [ 1263.873697] cache_alloc_refill+0x273/0x350 [ 1263.878019] kmem_cache_alloc+0x333/0x3c0 [ 1263.882165] getname_flags+0xc8/0x550 [ 1263.885961] do_sys_open+0x1ce/0x410 [ 1263.889667] ? filp_open+0x60/0x60 [ 1263.893203] ? do_syscall_64+0x4c/0x640 [ 1263.897168] ? SyS_open+0x30/0x30 [ 1263.900622] do_syscall_64+0x1d5/0x640 [ 1263.904516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.909695] RIP: 0033:0x7f25db38e194 [ 1263.913395] RSP: 002b:00007f25d9d4feb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1263.921097] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db38e194 [ 1263.924673] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1263.928357] RDX: 0000000000000002 RSI: 00007f25d9d4ffe0 RDI: 00000000ffffff9c [ 1263.928364] RBP: 00007f25d9d4ffe0 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1263.928368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1263.928374] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1263.976052] FAT-fs (loop2): bogus number of reserved sectors [ 1263.985232] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1263.990056] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1264.008961] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1264.020049] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1264.021685] FAT-fs (loop4): bogus number of reserved sectors 14:43:28 executing program 0: r0 = socket(0x10, 0x6, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:28 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x5, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 11) [ 1264.037742] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 8) 14:43:28 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 0: r0 = socket(0x10, 0x6, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1264.127988] FAULT_INJECTION: forcing a failure. [ 1264.127988] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.158843] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1264.180676] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1264.184763] CPU: 0 PID: 334 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1264.189279] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1264.194779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1264.194783] Call Trace: [ 1264.194799] dump_stack+0x1b2/0x281 [ 1264.194813] should_fail.cold+0x10a/0x149 [ 1264.194826] should_failslab+0xd6/0x130 [ 1264.194837] kmem_cache_alloc+0x28e/0x3c0 [ 1264.194850] __kernfs_new_node+0x6f/0x470 [ 1264.194862] kernfs_create_dir_ns+0x8c/0x200 [ 1264.194873] internal_create_group+0xe9/0x710 [ 1264.194888] lo_ioctl+0x1137/0x1cd0 [ 1264.194901] ? loop_set_status64+0xe0/0xe0 [ 1264.194915] blkdev_ioctl+0x540/0x1830 [ 1264.225334] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1264.228508] ? blkpg_ioctl+0x8d0/0x8d0 [ 1264.228520] ? trace_hardirqs_on+0x10/0x10 [ 1264.228534] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1264.228546] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1264.233124] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1264.237070] block_ioctl+0xd9/0x120 [ 1264.237080] ? blkdev_fallocate+0x3a0/0x3a0 [ 1264.237091] do_vfs_ioctl+0x75a/0xff0 [ 1264.237104] ? lock_acquire+0x170/0x3f0 [ 1264.267311] FAULT_INJECTION: forcing a failure. [ 1264.267311] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.272295] ? ioctl_preallocate+0x1a0/0x1a0 [ 1264.272309] ? __fget+0x265/0x3e0 [ 1264.272321] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.272332] ? security_file_ioctl+0x83/0xb0 [ 1264.272342] SyS_ioctl+0x7f/0xb0 [ 1264.272350] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.272361] do_syscall_64+0x1d5/0x640 [ 1264.272375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.272384] RIP: 0033:0x7fa9eab24037 [ 1264.346700] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.354405] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1264.361665] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1264.368927] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1264.376187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1264.383439] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1264.390708] CPU: 1 PID: 352 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1264.398412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1264.407762] Call Trace: [ 1264.410349] dump_stack+0x1b2/0x281 [ 1264.413977] should_fail.cold+0x10a/0x149 [ 1264.418128] should_failslab+0xd6/0x130 [ 1264.422102] kmem_cache_alloc+0x28e/0x3c0 [ 1264.426258] get_empty_filp+0x86/0x3f0 [ 1264.430144] path_openat+0x84/0x2970 [ 1264.433862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1264.438709] ? path_lookupat+0x780/0x780 [ 1264.442765] ? trace_hardirqs_on+0x10/0x10 [ 1264.446990] ? fsnotify+0x974/0x11b0 [ 1264.450693] ? shmem_setattr+0x241/0xbf0 [ 1264.454751] do_filp_open+0x179/0x3c0 [ 1264.457375] FAT-fs (loop2): bogus number of reserved sectors [ 1264.458542] ? may_open_dev+0xe0/0xe0 [ 1264.458554] ? __alloc_fd+0x1be/0x490 [ 1264.458568] ? lock_downgrade+0x740/0x740 [ 1264.458579] ? do_raw_spin_unlock+0x164/0x220 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x101, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x101, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x101, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe7a, 0x4) [ 1264.469278] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1264.471927] ? _raw_spin_unlock+0x29/0x40 [ 1264.471937] ? __alloc_fd+0x1be/0x490 [ 1264.471954] do_sys_open+0x296/0x410 [ 1264.471963] ? filp_open+0x60/0x60 [ 1264.471975] ? do_syscall_64+0x4c/0x640 [ 1264.471982] ? SyS_open+0x30/0x30 [ 1264.471994] do_syscall_64+0x1d5/0x640 [ 1264.512938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.518119] RIP: 0033:0x7f25db38e194 [ 1264.521820] RSP: 002b:00007f25d9d4feb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe7a, 0x4) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe7a, 0x4) (async) 14:43:28 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x5, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 12) [ 1264.529519] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db38e194 [ 1264.536780] RDX: 0000000000000002 RSI: 00007f25d9d4ffe0 RDI: 00000000ffffff9c [ 1264.544043] RBP: 00007f25d9d4ffe0 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1264.551304] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1264.558563] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:28 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 9) 14:43:28 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe7a, 0x4) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xe7a, 0x4) (async) 14:43:28 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1264.657106] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1264.657852] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1264.678606] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1264.691871] FAULT_INJECTION: forcing a failure. [ 1264.691871] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.722439] CPU: 0 PID: 390 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1264.730153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1264.739497] Call Trace: [ 1264.742083] dump_stack+0x1b2/0x281 [ 1264.745550] FAULT_INJECTION: forcing a failure. [ 1264.745550] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.745708] should_fail.cold+0x10a/0x149 [ 1264.761003] should_failslab+0xd6/0x130 [ 1264.764974] kmem_cache_alloc+0x28e/0x3c0 [ 1264.769131] __kernfs_new_node+0x6f/0x470 [ 1264.773274] kernfs_new_node+0x7b/0xe0 [ 1264.777143] __kernfs_create_file+0x3d/0x320 [ 1264.781544] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1264.786198] ? kernfs_create_dir_ns+0x171/0x200 [ 1264.790859] internal_create_group+0x22b/0x710 [ 1264.795426] lo_ioctl+0x1137/0x1cd0 [ 1264.799041] ? loop_set_status64+0xe0/0xe0 [ 1264.803261] blkdev_ioctl+0x540/0x1830 [ 1264.807131] ? blkpg_ioctl+0x8d0/0x8d0 [ 1264.811025] ? trace_hardirqs_on+0x10/0x10 [ 1264.815246] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1264.820329] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1264.825332] block_ioctl+0xd9/0x120 [ 1264.828939] ? blkdev_fallocate+0x3a0/0x3a0 [ 1264.833243] do_vfs_ioctl+0x75a/0xff0 [ 1264.837027] ? lock_acquire+0x170/0x3f0 [ 1264.840981] ? ioctl_preallocate+0x1a0/0x1a0 [ 1264.845372] ? __fget+0x265/0x3e0 [ 1264.848803] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.852758] ? security_file_ioctl+0x83/0xb0 [ 1264.857162] SyS_ioctl+0x7f/0xb0 [ 1264.860506] ? do_vfs_ioctl+0xff0/0xff0 [ 1264.864466] do_syscall_64+0x1d5/0x640 [ 1264.868340] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1264.873510] RIP: 0033:0x7fa9eab24037 [ 1264.877202] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1264.884894] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1264.889839] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1264.892198] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1264.892203] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1264.892207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x45a240) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) r1 = socket(0x10, 0x80003, 0x0) r2 = socket(0x1, 0x800, 0x30f) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x8001, 0x410482) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000180)={0x7, [[0x1, 0x7, 0x82, 0x8, 0x1, 0x79e, 0x1, 0x6], [0xe3, 0x12d18407, 0x1, 0x1ff, 0x400, 0x8, 0x3, 0xffff], [0x4, 0xdcd1, 0xfffffff7, 0x200, 0x5, 0xffff, 0x9, 0x3]], '\x00', [{0x4, 0x4, 0x1, 0x1}, {0xa0dc, 0x2e, 0x0, 0x0, 0x0, 0x1}, {0x278, 0x2, 0x0, 0x1}, {0xfffffc00, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xfffffffb, 0x0, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xf98, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x0, 0x1}, {0x6, 0x8000, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1f, 0xed3, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) [ 1264.892212] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1264.919908] FAT-fs (loop2): bogus number of reserved sectors [ 1264.921467] CPU: 1 PID: 400 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1264.937047] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1264.940751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1264.940755] Call Trace: [ 1264.940770] dump_stack+0x1b2/0x281 [ 1264.940785] should_fail.cold+0x10a/0x149 [ 1264.940799] should_failslab+0xd6/0x130 14:43:29 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x45a240) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x1, 0x800, 0x30f) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x32) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) (async, rerun: 64) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x8001, 0x410482) (rerun: 64) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000180)={0x7, [[0x1, 0x7, 0x82, 0x8, 0x1, 0x79e, 0x1, 0x6], [0xe3, 0x12d18407, 0x1, 0x1ff, 0x400, 0x8, 0x3, 0xffff], [0x4, 0xdcd1, 0xfffffff7, 0x200, 0x5, 0xffff, 0x9, 0x3]], '\x00', [{0x4, 0x4, 0x1, 0x1}, {0xa0dc, 0x2e, 0x0, 0x0, 0x0, 0x1}, {0x278, 0x2, 0x0, 0x1}, {0xfffffc00, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xfffffffb, 0x0, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xf98, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x0, 0x1}, {0x6, 0x8000, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1f, 0xed3, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) [ 1264.940812] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1264.940826] apparmor_file_alloc_security+0x129/0x800 [ 1264.940840] security_file_alloc+0x66/0xa0 [ 1264.940851] ? selinux_is_enabled+0x5/0x50 [ 1264.988549] get_empty_filp+0x16b/0x3f0 [ 1264.992522] path_openat+0x84/0x2970 [ 1264.996235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.001075] ? path_lookupat+0x780/0x780 [ 1265.005135] ? trace_hardirqs_on+0x10/0x10 [ 1265.009366] ? fsnotify+0x974/0x11b0 [ 1265.013075] ? shmem_setattr+0x241/0xbf0 [ 1265.016811] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x45a240) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket(0x1, 0x800, 0x30f) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x8001, 0x410482) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000180)={0x7, [[0x1, 0x7, 0x82, 0x8, 0x1, 0x79e, 0x1, 0x6], [0xe3, 0x12d18407, 0x1, 0x1ff, 0x400, 0x8, 0x3, 0xffff], [0x4, 0xdcd1, 0xfffffff7, 0x200, 0x5, 0xffff, 0x9, 0x3]], '\x00', [{0x4, 0x4, 0x1, 0x1}, {0xa0dc, 0x2e, 0x0, 0x0, 0x0, 0x1}, {0x278, 0x2, 0x0, 0x1}, {0xfffffc00, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xfffffffb, 0x0, 0x1, 0x1}, {0x7, 0x5, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xf98, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x0, 0x1}, {0x6, 0x8000, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x1f, 0xed3, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1}) 14:43:29 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:29 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x40000) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1265.017128] do_filp_open+0x179/0x3c0 [ 1265.026776] ? may_open_dev+0xe0/0xe0 [ 1265.029729] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1265.030566] ? __alloc_fd+0x1be/0x490 [ 1265.030583] ? lock_downgrade+0x740/0x740 [ 1265.030595] ? do_raw_spin_unlock+0x164/0x220 [ 1265.030605] ? _raw_spin_unlock+0x29/0x40 [ 1265.030613] ? __alloc_fd+0x1be/0x490 [ 1265.030629] do_sys_open+0x296/0x410 [ 1265.061021] ? filp_open+0x60/0x60 [ 1265.064561] ? do_syscall_64+0x4c/0x640 [ 1265.068529] ? SyS_open+0x30/0x30 [ 1265.071978] do_syscall_64+0x1d5/0x640 [ 1265.075865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.081047] RIP: 0033:0x7f25db38e194 [ 1265.084751] RSP: 002b:00007f25d9d4feb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1265.092454] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db38e194 [ 1265.099721] RDX: 0000000000000002 RSI: 00007f25d9d4ffe0 RDI: 00000000ffffff9c [ 1265.101040] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1265.106979] RBP: 00007f25d9d4ffe0 R08: 0000000000000000 R09: 00007f25d9d501d0 14:43:29 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1265.106985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1265.106990] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 13) 14:43:29 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1265.229961] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1265.238266] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1265.264744] FAULT_INJECTION: forcing a failure. [ 1265.264744] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.265786] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1265.285622] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1265.311285] CPU: 1 PID: 445 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1265.318991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1265.328512] Call Trace: [ 1265.331095] dump_stack+0x1b2/0x281 [ 1265.334722] should_fail.cold+0x10a/0x149 [ 1265.338869] should_failslab+0xd6/0x130 [ 1265.342849] kmem_cache_alloc+0x28e/0x3c0 [ 1265.346996] __kernfs_new_node+0x6f/0x470 [ 1265.351143] kernfs_new_node+0x7b/0xe0 [ 1265.355027] __kernfs_create_file+0x3d/0x320 [ 1265.359446] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1265.364109] ? kernfs_create_dir_ns+0x171/0x200 [ 1265.368779] internal_create_group+0x22b/0x710 [ 1265.373361] lo_ioctl+0x1137/0x1cd0 [ 1265.376991] ? loop_set_status64+0xe0/0xe0 [ 1265.381225] blkdev_ioctl+0x540/0x1830 [ 1265.385111] ? blkpg_ioctl+0x8d0/0x8d0 [ 1265.388996] ? trace_hardirqs_on+0x10/0x10 [ 1265.393232] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1265.398330] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1265.403343] block_ioctl+0xd9/0x120 [ 1265.406963] ? blkdev_fallocate+0x3a0/0x3a0 [ 1265.411283] do_vfs_ioctl+0x75a/0xff0 [ 1265.415079] ? lock_acquire+0x170/0x3f0 [ 1265.419049] ? ioctl_preallocate+0x1a0/0x1a0 [ 1265.423452] ? __fget+0x265/0x3e0 [ 1265.426900] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.430856] ? security_file_ioctl+0x83/0xb0 [ 1265.435330] SyS_ioctl+0x7f/0xb0 [ 1265.438685] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.442648] do_syscall_64+0x1d5/0x640 [ 1265.446524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.451694] RIP: 0033:0x7fa9eab24037 [ 1265.455523] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.463216] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1265.470475] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 10) 14:43:29 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x40000) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:29 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x3, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:29 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:29 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1265.477858] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1265.485118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1265.492388] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1265.502841] FAT-fs (loop2): bogus number of reserved sectors [ 1265.508911] FAT-fs (loop2): Can't find a valid FAT filesystem 14:43:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 14) 14:43:29 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x40000) (async) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1265.622905] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1265.629619] FAULT_INJECTION: forcing a failure. [ 1265.629619] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.634380] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:29 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf250f00000005002f000000000005002d00000000000500290000000000050038010000000008003400b200000005002e00010000000500330002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r2, 0x0, r3], 0x8290, 0x3}) r4 = socket(0x3, 0x80003, 0x17c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) 14:43:29 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1265.667017] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1265.673776] FAULT_INJECTION: forcing a failure. [ 1265.673776] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.685738] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1265.687888] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1265.739841] CPU: 0 PID: 468 Comm: syz-executor.2 Not tainted 4.14.290-syzkaller #0 [ 1265.747566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1265.756912] Call Trace: [ 1265.759489] dump_stack+0x1b2/0x281 [ 1265.763112] should_fail.cold+0x10a/0x149 [ 1265.767241] should_failslab+0xd6/0x130 [ 1265.771197] kmem_cache_alloc+0x28e/0x3c0 [ 1265.775328] __kernfs_new_node+0x6f/0x470 [ 1265.779458] kernfs_new_node+0x7b/0xe0 [ 1265.783337] __kernfs_create_file+0x3d/0x320 [ 1265.787727] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1265.792392] ? kernfs_create_dir_ns+0x171/0x200 [ 1265.797062] internal_create_group+0x22b/0x710 [ 1265.801633] lo_ioctl+0x1137/0x1cd0 [ 1265.805247] ? loop_set_status64+0xe0/0xe0 [ 1265.809466] blkdev_ioctl+0x540/0x1830 [ 1265.813338] ? blkpg_ioctl+0x8d0/0x8d0 [ 1265.817207] ? trace_hardirqs_on+0x10/0x10 [ 1265.821423] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1265.826508] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1265.831506] block_ioctl+0xd9/0x120 [ 1265.835112] ? blkdev_fallocate+0x3a0/0x3a0 [ 1265.839414] do_vfs_ioctl+0x75a/0xff0 [ 1265.843192] ? lock_acquire+0x170/0x3f0 [ 1265.847158] ? ioctl_preallocate+0x1a0/0x1a0 [ 1265.851563] ? __fget+0x265/0x3e0 [ 1265.854995] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.858950] ? security_file_ioctl+0x83/0xb0 [ 1265.863335] SyS_ioctl+0x7f/0xb0 [ 1265.866682] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.870641] do_syscall_64+0x1d5/0x640 [ 1265.874516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.879696] RIP: 0033:0x7fa9eab24037 [ 1265.883384] RSP: 002b:00007fa9e9498f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.891071] RAX: ffffffffffffffda RBX: 00007fa9eab6da20 RCX: 00007fa9eab24037 [ 1265.898320] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1265.905570] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007fa9e94991d0 [ 1265.912990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1265.920239] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1265.954952] CPU: 0 PID: 484 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1265.958150] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1265.962668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1265.962673] Call Trace: [ 1265.962690] dump_stack+0x1b2/0x281 [ 1265.962705] should_fail.cold+0x10a/0x149 [ 1265.962719] should_failslab+0xd6/0x130 [ 1265.962733] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1265.962745] ? loop_get_status64+0x100/0x100 14:43:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf250f00000005002f000000000005002d00000000000500290000000000050038010000000008003400b200000005002e00010000000500330002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r2, 0x0, r3], 0x8290, 0x3}) (async) r4 = socket(0x3, 0x80003, 0x17c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) [ 1265.962756] __kthread_create_on_node+0xbe/0x3a0 [ 1265.962766] ? kthread_park+0x130/0x130 [ 1265.962784] ? loop_get_status64+0x100/0x100 [ 1266.014424] kthread_create_on_node+0xa8/0xd0 [ 1266.018920] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1266.023937] ? __lockdep_init_map+0x100/0x560 [ 1266.028427] ? __lockdep_init_map+0x100/0x560 [ 1266.032917] lo_ioctl+0xcd9/0x1cd0 [ 1266.036455] ? loop_set_status64+0xe0/0xe0 [ 1266.040686] blkdev_ioctl+0x540/0x1830 [ 1266.044760] ? blkpg_ioctl+0x8d0/0x8d0 [ 1266.048649] ? trace_hardirqs_on+0x10/0x10 14:43:30 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf250f00000005002f000000000005002d00000000000500290000000000050038010000000008003400b200000005002e00010000000500330002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 64) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async, rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) (rerun: 32) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02064c3, &(0x7f0000000240)={&(0x7f0000000200)=[r2, 0x0, r3], 0x8290, 0x3}) (async) r4 = socket(0x3, 0x80003, 0x17c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x0, 0x4) [ 1266.052887] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1266.058070] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1266.063174] block_ioctl+0xd9/0x120 [ 1266.066796] ? blkdev_fallocate+0x3a0/0x3a0 [ 1266.071112] do_vfs_ioctl+0x75a/0xff0 [ 1266.074912] ? lock_acquire+0x170/0x3f0 [ 1266.078880] ? ioctl_preallocate+0x1a0/0x1a0 [ 1266.083281] ? __fget+0x265/0x3e0 [ 1266.086732] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.090705] ? security_file_ioctl+0x83/0xb0 [ 1266.091066] FAT-fs (loop2): bogus number of reserved sectors [ 1266.095103] SyS_ioctl+0x7f/0xb0 14:43:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) [ 1266.095113] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.095125] do_syscall_64+0x1d5/0x640 [ 1266.095139] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.117243] RIP: 0033:0x7f25db3db037 [ 1266.120942] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.126817] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1266.128644] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1266.128650] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 11) 14:43:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 14:43:30 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:30 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:30 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1266.128656] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1266.128661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1266.128666] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1266.221058] FAULT_INJECTION: forcing a failure. [ 1266.221058] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.227887] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1266.245507] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1266.253462] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1266.259416] CPU: 0 PID: 525 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1266.267125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1266.276467] Call Trace: [ 1266.279070] dump_stack+0x1b2/0x281 [ 1266.282695] should_fail.cold+0x10a/0x149 [ 1266.286839] should_failslab+0xd6/0x130 [ 1266.290812] kmem_cache_alloc+0x28e/0x3c0 [ 1266.294962] __kernfs_new_node+0x6f/0x470 [ 1266.299111] kernfs_create_dir_ns+0x8c/0x200 [ 1266.303516] internal_create_group+0xe9/0x710 [ 1266.304236] romfs: VFS: Can't find a romfs filesystem on dev loop3. [ 1266.308097] lo_ioctl+0x1137/0x1cd0 [ 1266.308110] ? loop_set_status64+0xe0/0xe0 [ 1266.308123] blkdev_ioctl+0x540/0x1830 [ 1266.326213] ? blkpg_ioctl+0x8d0/0x8d0 [ 1266.330094] ? trace_hardirqs_on+0x10/0x10 [ 1266.334324] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1266.339438] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1266.344465] block_ioctl+0xd9/0x120 [ 1266.348087] ? blkdev_fallocate+0x3a0/0x3a0 [ 1266.352406] do_vfs_ioctl+0x75a/0xff0 [ 1266.356199] ? lock_acquire+0x170/0x3f0 [ 1266.360165] ? ioctl_preallocate+0x1a0/0x1a0 [ 1266.364576] ? __fget+0x265/0x3e0 [ 1266.368030] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.371992] ? security_file_ioctl+0x83/0xb0 [ 1266.377165] SyS_ioctl+0x7f/0xb0 [ 1266.380559] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.384513] do_syscall_64+0x1d5/0x640 [ 1266.388388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.393555] RIP: 0033:0x7f25db3db037 [ 1266.397242] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.404926] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1266.412174] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1266.419421] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1266.426671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1266.433923] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1266.446942] FAT-fs (loop4): bogus number of reserved sectors [ 1266.453553] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:30 executing program 2: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}}, 0x40c0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="712c004dbd86210d65fb125191bcafce7e35a1ba915236142e92fd67f6190000000000000000002dafd93bd7528af759b9249cd2d24a6619619ce99044a17e8e6c3a1c4467d76eaa1221595bb5ee2b3bb0be472fd5aaa63b39ed0d49f17b26f8273359f035f87adfd927714363fee031ea67acf4ec2224"]) 14:43:30 executing program 0: socket$nl_route(0x10, 0x3, 0x0) 14:43:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 12) 14:43:30 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:30 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) 14:43:30 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1266.547790] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1266.553258] FAT-fs (loop2): Unrecognized mount option "q" or missing value [ 1266.554531] FAULT_INJECTION: forcing a failure. [ 1266.554531] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.575830] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1266.577575] CPU: 0 PID: 566 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1266.589417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1266.598751] Call Trace: [ 1266.601329] dump_stack+0x1b2/0x281 [ 1266.604948] should_fail.cold+0x10a/0x149 [ 1266.609163] should_failslab+0xd6/0x130 [ 1266.613133] kmem_cache_alloc+0x28e/0x3c0 [ 1266.617261] __kernfs_new_node+0x6f/0x470 [ 1266.621411] kernfs_new_node+0x7b/0xe0 [ 1266.625290] __kernfs_create_file+0x3d/0x320 [ 1266.629682] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1266.634336] ? kernfs_create_dir_ns+0x171/0x200 [ 1266.638985] internal_create_group+0x22b/0x710 [ 1266.643562] lo_ioctl+0x1137/0x1cd0 [ 1266.647180] ? loop_set_status64+0xe0/0xe0 [ 1266.651400] blkdev_ioctl+0x540/0x1830 [ 1266.655286] ? blkpg_ioctl+0x8d0/0x8d0 [ 1266.659152] ? trace_hardirqs_on+0x10/0x10 [ 1266.663377] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1266.668468] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1266.673472] block_ioctl+0xd9/0x120 [ 1266.677077] ? blkdev_fallocate+0x3a0/0x3a0 [ 1266.681385] do_vfs_ioctl+0x75a/0xff0 [ 1266.685172] ? lock_acquire+0x170/0x3f0 [ 1266.689125] ? ioctl_preallocate+0x1a0/0x1a0 [ 1266.693511] ? __fget+0x265/0x3e0 [ 1266.696943] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.700902] ? security_file_ioctl+0x83/0xb0 [ 1266.705295] SyS_ioctl+0x7f/0xb0 [ 1266.708640] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.712594] do_syscall_64+0x1d5/0x640 [ 1266.716464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.721635] RIP: 0033:0x7f25db3db037 [ 1266.725347] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.733045] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1266.740296] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x4, 0x7ff, 0x0, 0x6], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1402, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x20005080) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:31 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) [ 1266.747564] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1266.754822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1266.762085] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1266.781573] romfs: VFS: Can't find a romfs filesystem on dev loop5. 14:43:31 executing program 2: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}}, 0x40c0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="712c004dbd86210d65fb125191bcafce7e35a1ba915236142e92fd67f6190000000000000000002dafd93bd7528af759b9249cd2d24a6619619ce99044a17e8e6c3a1c4467d76eaa1221595bb5ee2b3bb0be472fd5aaa63b39ed0d49f17b26f8273359f035f87adfd927714363fee031ea67acf4ec2224"]) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}}, 0x40c0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="712c004dbd86210d65fb125191bcafce7e35a1ba915236142e92fd67f6190000000000000000002dafd93bd7528af759b9249cd2d24a6619619ce99044a17e8e6c3a1c4467d76eaa1221595bb5ee2b3bb0be472fd5aaa63b39ed0d49f17b26f8273359f035f87adfd927714363fee031ea67acf4ec2224"]) (async) 14:43:31 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:31 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) [ 1266.794905] FAT-fs (loop4): bogus number of reserved sectors [ 1266.805376] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 13) 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x4, 0x7ff, 0x0, 0x6], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1402, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x20005080) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:31 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) [ 1266.896303] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1266.905807] FAT-fs (loop2): Unrecognized mount option "q" or missing value [ 1266.924043] FAULT_INJECTION: forcing a failure. [ 1266.924043] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.937692] CPU: 1 PID: 598 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x4, 0x7ff, 0x0, 0x6], 0xa, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1402, 0x8, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x20005080) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1266.945498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1266.954839] Call Trace: [ 1266.957409] dump_stack+0x1b2/0x281 [ 1266.961020] should_fail.cold+0x10a/0x149 [ 1266.965165] should_failslab+0xd6/0x130 [ 1266.969125] kmem_cache_alloc+0x28e/0x3c0 [ 1266.973252] __kernfs_new_node+0x6f/0x470 [ 1266.977384] kernfs_new_node+0x7b/0xe0 [ 1266.981255] __kernfs_create_file+0x3d/0x320 [ 1266.985642] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1266.990291] ? kernfs_create_dir_ns+0x171/0x200 [ 1266.994945] internal_create_group+0x22b/0x710 [ 1266.999517] lo_ioctl+0x1137/0x1cd0 [ 1267.003132] ? loop_set_status64+0xe0/0xe0 [ 1267.007355] blkdev_ioctl+0x540/0x1830 [ 1267.011227] ? blkpg_ioctl+0x8d0/0x8d0 [ 1267.015106] ? trace_hardirqs_on+0x10/0x10 [ 1267.019325] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1267.024417] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1267.029416] block_ioctl+0xd9/0x120 [ 1267.033020] ? blkdev_fallocate+0x3a0/0x3a0 [ 1267.037352] do_vfs_ioctl+0x75a/0xff0 [ 1267.041132] ? lock_acquire+0x170/0x3f0 [ 1267.045086] ? ioctl_preallocate+0x1a0/0x1a0 [ 1267.049475] ? __fget+0x265/0x3e0 [ 1267.052906] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.056866] ? security_file_ioctl+0x83/0xb0 [ 1267.061252] SyS_ioctl+0x7f/0xb0 [ 1267.064594] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.068555] do_syscall_64+0x1d5/0x640 [ 1267.072429] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1267.077595] RIP: 0033:0x7f25db3db037 [ 1267.081283] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.088987] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 14:43:31 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004004) [ 1267.096233] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1267.103480] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1267.110728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1267.118077] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1267.135822] romfs: VFS: Can't find a romfs filesystem on dev loop5. 14:43:31 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x0, &(0x7f00000018c0), 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004004) [ 1267.181727] FAT-fs (loop4): bogus number of reserved sectors [ 1267.195337] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:31 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:31 executing program 2: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}}, 0x40c0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="712c004dbd86210d65fb125191bcafce7e35a1ba915236142e92fd67f6190000000000000000002dafd93bd7528af759b9249cd2d24a6619619ce99044a17e8e6c3a1c4467d76eaa1221595bb5ee2b3bb0be472fd5aaa63b39ed0d49f17b26f8273359f035f87adfd927714363fee031ea67acf4ec2224"]) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x58}}, 0x40c0) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="712c004dbd86210d65fb125191bcafce7e35a1ba915236142e92fd67f6190000000000000000002dafd93bd7528af759b9249cd2d24a6619619ce99044a17e8e6c3a1c4467d76eaa1221595bb5ee2b3bb0be472fd5aaa63b39ed0d49f17b26f8273359f035f87adfd927714363fee031ea67acf4ec2224"]) (async) 14:43:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 14) 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x20004004) [ 1267.251303] FAT-fs (loop2): Unrecognized mount option "q" or missing value [ 1267.321949] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:31 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1267.368675] FAULT_INJECTION: forcing a failure. [ 1267.368675] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.370250] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1267.390519] CPU: 1 PID: 651 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1267.398235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1267.407571] Call Trace: [ 1267.410142] dump_stack+0x1b2/0x281 [ 1267.413755] should_fail.cold+0x10a/0x149 [ 1267.417886] should_failslab+0xd6/0x130 [ 1267.421841] kmem_cache_alloc+0x28e/0x3c0 [ 1267.425971] __kernfs_new_node+0x6f/0x470 [ 1267.430101] kernfs_new_node+0x7b/0xe0 [ 1267.434087] __kernfs_create_file+0x3d/0x320 [ 1267.438478] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1267.443122] ? kernfs_create_dir_ns+0x171/0x200 [ 1267.447797] internal_create_group+0x22b/0x710 [ 1267.452375] lo_ioctl+0x1137/0x1cd0 [ 1267.456008] ? loop_set_status64+0xe0/0xe0 [ 1267.460222] blkdev_ioctl+0x540/0x1830 [ 1267.464088] ? blkpg_ioctl+0x8d0/0x8d0 [ 1267.467955] ? trace_hardirqs_on+0x10/0x10 [ 1267.472169] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1267.477268] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1267.482362] block_ioctl+0xd9/0x120 [ 1267.485965] ? blkdev_fallocate+0x3a0/0x3a0 [ 1267.490270] do_vfs_ioctl+0x75a/0xff0 [ 1267.494059] ? lock_acquire+0x170/0x3f0 [ 1267.498013] ? ioctl_preallocate+0x1a0/0x1a0 [ 1267.502417] ? __fget+0x265/0x3e0 [ 1267.505857] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.509820] ? security_file_ioctl+0x83/0xb0 [ 1267.514208] SyS_ioctl+0x7f/0xb0 [ 1267.517569] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.521579] do_syscall_64+0x1d5/0x640 [ 1267.525461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1267.530638] RIP: 0033:0x7f25db3db037 [ 1267.534330] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.542025] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1267.549278] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1267.556527] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 14:43:31 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) [ 1267.563798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1267.571051] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1267.592062] romfs: VFS: Can't find a romfs filesystem on dev loop5. 14:43:31 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1267.617071] FAT-fs (loop2): Unrecognized mount option "q" or missing value [ 1267.635825] FAT-fs (loop4): bogus number of reserved sectors [ 1267.642021] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:31 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1267.697081] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 15) 14:43:31 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1267.748335] FAT-fs (loop2): Unrecognized mount option "q" or missing value 14:43:32 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1267.797836] FAULT_INJECTION: forcing a failure. [ 1267.797836] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.803032] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1267.816680] CPU: 0 PID: 697 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1267.824404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1267.833755] Call Trace: [ 1267.836341] dump_stack+0x1b2/0x281 [ 1267.839975] should_fail.cold+0x10a/0x149 [ 1267.844125] should_failslab+0xd6/0x130 [ 1267.848097] kmem_cache_alloc+0x28e/0x3c0 [ 1267.852263] __kernfs_new_node+0x6f/0x470 [ 1267.856421] kernfs_new_node+0x7b/0xe0 [ 1267.860309] __kernfs_create_file+0x3d/0x320 [ 1267.864717] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1267.869389] ? kernfs_create_dir_ns+0x171/0x200 [ 1267.874057] internal_create_group+0x22b/0x710 [ 1267.878644] lo_ioctl+0x1137/0x1cd0 [ 1267.882280] ? loop_set_status64+0xe0/0xe0 [ 1267.886519] blkdev_ioctl+0x540/0x1830 [ 1267.890407] ? blkpg_ioctl+0x8d0/0x8d0 [ 1267.894176] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1267.894299] ? trace_hardirqs_on+0x10/0x10 [ 1267.904391] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1267.909488] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1267.914495] block_ioctl+0xd9/0x120 [ 1267.918104] ? blkdev_fallocate+0x3a0/0x3a0 [ 1267.922408] do_vfs_ioctl+0x75a/0xff0 [ 1267.926194] ? lock_acquire+0x170/0x3f0 [ 1267.930149] ? ioctl_preallocate+0x1a0/0x1a0 [ 1267.934543] ? __fget+0x265/0x3e0 [ 1267.937982] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.941936] ? security_file_ioctl+0x83/0xb0 [ 1267.946331] SyS_ioctl+0x7f/0xb0 [ 1267.949677] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.953651] do_syscall_64+0x1d5/0x640 [ 1267.957522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1267.962694] RIP: 0033:0x7f25db3db037 [ 1267.966386] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.974073] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1267.981341] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1267.988623] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1267.995873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1268.003137] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:32 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:32 executing program 2: r0 = getuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffff80000001, 0x1, &(0x7f0000000240)=[{&(0x7f0000001640)="c386a389c832339abb4ba9e8add9845e5f06aaf6df2a023d0d1a9d5fbafe5046c448648485826f2d9ab89450ed8124116e09617ca27aace237e63c987e4dc9ecf93d99b55297cf8caf182b21a215a7547fe5c53b5cf2f1bd48c61bcc5b991aa90a46d35038e8a4667a21d742dbe4066682e9c0187461fc9995020647c4bfdf18da5b2583298e05cc021dc10ed30524395a128588578ef558e7acd87f904a60b11ddc9423e54fff7ae2099499309d60ed02c69dd7682bd07dc01e5bcdae60f82040c55e116dd305e0dad4d7d5c75a1b4819e873209cb38cbc6999ed75a0576863689af6b3", 0xe4, 0x1f}], 0x0, &(0x7f0000001500)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\xfe\xec\x91\f\xd8\"\xa6x\xc1\"\xa0\xd2u\xfd\xf0;u\xe7\x85\x9b\xca!\xd2M\xf6\xaa\x1dv*\xb9y2\xa4\xb9|\xd7\xb6M\xed\x05\x00\x00\x00\x00\x00\x00\x00\xe4\xec\xf1\x1b\xe0\x9b\xaa\xcbu\xb4\x91\xb7P\t\x11\xfd\xf4>\xdd\xd6\x9d\x93\xe3\xc7\xb3\xab\x86#\xbe\x00Y\xfe\x90\xa5\x94\x8d8\xf8^\xddN\xb5\xadz\x99\xabL/\xb2\xddh3\xe7\xa3B\xc3\x06n\xf6\xe5\x96\x01)\x15\x93v\x19\xc2BA8\xc8H\xd7\xcd'}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '-M^^+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '}/\xdcf.'}}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="0b733ea836c4eef045428225710382044e5d1ea861bbba13304dec2eca5846e9e5945873ebcc9cf47d2dddd0bed3719bc458d828686be67d219400af22fcb9563401cac2a515f7b1db1aa40f194784b51b1dd6c2cbbf937bd58b7a489627e7091380b37729b3275916c613b183b974302026be7278ac814c95db01cbc7654ea3b47276e802f73a867ed4394945ab201ce2050fa697241dd06dce91802288f0bfa99a841a5fa2813d8278dadc1db3ea9e96f52c8750ac6a3ae3", 0xb9, 0x7f}, {&(0x7f0000000280)="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", 0x1000, 0x80}], 0x2, &(0x7f0000001280)={[{'\\@-\\'}, {'*9'}, {'.&'}, {'uni_xlate=1'}, {}], [{@obj_user={'obj_user', 0x3d, '}\'{^\\\\#-##:{(}\xaf\v('}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '(^)(!&'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) 14:43:32 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1268.071495] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:32 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:32 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1268.129569] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1268.147088] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 1268.234115] FAT-fs (loop4): bogus number of reserved sectors [ 1268.247820] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1268.257235] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1268.281065] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1268.287493] romfs: VFS: Can't find a romfs filesystem on dev loop2. [ 1268.291283] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1268.299590] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1268.329871] print_req_error: I/O error, dev loop2, sector 2 [ 1268.335677] buffer_io_error: 3 callbacks suppressed [ 1268.335684] Buffer I/O error on dev loop2, logical block 1, async page read [ 1268.349402] print_req_error: I/O error, dev loop2, sector 4 [ 1268.355783] Buffer I/O error on dev loop2, logical block 2, async page read [ 1268.363005] print_req_error: I/O error, dev loop2, sector 6 [ 1268.368714] Buffer I/O error on dev loop2, logical block 3, async page read [ 1268.403755] romfs: VFS: Can't find a romfs filesystem on dev loop5. 14:43:32 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 16) 14:43:32 executing program 2: r0 = getuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffff80000001, 0x1, &(0x7f0000000240)=[{&(0x7f0000001640)="c386a389c832339abb4ba9e8add9845e5f06aaf6df2a023d0d1a9d5fbafe5046c448648485826f2d9ab89450ed8124116e09617ca27aace237e63c987e4dc9ecf93d99b55297cf8caf182b21a215a7547fe5c53b5cf2f1bd48c61bcc5b991aa90a46d35038e8a4667a21d742dbe4066682e9c0187461fc9995020647c4bfdf18da5b2583298e05cc021dc10ed30524395a128588578ef558e7acd87f904a60b11ddc9423e54fff7ae2099499309d60ed02c69dd7682bd07dc01e5bcdae60f82040c55e116dd305e0dad4d7d5c75a1b4819e873209cb38cbc6999ed75a0576863689af6b3", 0xe4, 0x1f}], 0x0, &(0x7f0000001500)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\xfe\xec\x91\f\xd8\"\xa6x\xc1\"\xa0\xd2u\xfd\xf0;u\xe7\x85\x9b\xca!\xd2M\xf6\xaa\x1dv*\xb9y2\xa4\xb9|\xd7\xb6M\xed\x05\x00\x00\x00\x00\x00\x00\x00\xe4\xec\xf1\x1b\xe0\x9b\xaa\xcbu\xb4\x91\xb7P\t\x11\xfd\xf4>\xdd\xd6\x9d\x93\xe3\xc7\xb3\xab\x86#\xbe\x00Y\xfe\x90\xa5\x94\x8d8\xf8^\xddN\xb5\xadz\x99\xabL/\xb2\xddh3\xe7\xa3B\xc3\x06n\xf6\xe5\x96\x01)\x15\x93v\x19\xc2BA8\xc8H\xd7\xcd'}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '-M^^+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '}/\xdcf.'}}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="0b733ea836c4eef045428225710382044e5d1ea861bbba13304dec2eca5846e9e5945873ebcc9cf47d2dddd0bed3719bc458d828686be67d219400af22fcb9563401cac2a515f7b1db1aa40f194784b51b1dd6c2cbbf937bd58b7a489627e7091380b37729b3275916c613b183b974302026be7278ac814c95db01cbc7654ea3b47276e802f73a867ed4394945ab201ce2050fa697241dd06dce91802288f0bfa99a841a5fa2813d8278dadc1db3ea9e96f52c8750ac6a3ae3", 0xb9, 0x7f}, {&(0x7f0000000280)="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", 0x1000, 0x80}], 0x2, &(0x7f0000001280)={[{'\\@-\\'}, {'*9'}, {'.&'}, {'uni_xlate=1'}, {}], [{@obj_user={'obj_user', 0x3d, '}\'{^\\\\#-##:{(}\xaf\v('}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '(^)(!&'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) getuid() (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffff80000001, 0x1, &(0x7f0000000240)=[{&(0x7f0000001640)="c386a389c832339abb4ba9e8add9845e5f06aaf6df2a023d0d1a9d5fbafe5046c448648485826f2d9ab89450ed8124116e09617ca27aace237e63c987e4dc9ecf93d99b55297cf8caf182b21a215a7547fe5c53b5cf2f1bd48c61bcc5b991aa90a46d35038e8a4667a21d742dbe4066682e9c0187461fc9995020647c4bfdf18da5b2583298e05cc021dc10ed30524395a128588578ef558e7acd87f904a60b11ddc9423e54fff7ae2099499309d60ed02c69dd7682bd07dc01e5bcdae60f82040c55e116dd305e0dad4d7d5c75a1b4819e873209cb38cbc6999ed75a0576863689af6b3", 0xe4, 0x1f}], 0x0, &(0x7f0000001500)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\xfe\xec\x91\f\xd8\"\xa6x\xc1\"\xa0\xd2u\xfd\xf0;u\xe7\x85\x9b\xca!\xd2M\xf6\xaa\x1dv*\xb9y2\xa4\xb9|\xd7\xb6M\xed\x05\x00\x00\x00\x00\x00\x00\x00\xe4\xec\xf1\x1b\xe0\x9b\xaa\xcbu\xb4\x91\xb7P\t\x11\xfd\xf4>\xdd\xd6\x9d\x93\xe3\xc7\xb3\xab\x86#\xbe\x00Y\xfe\x90\xa5\x94\x8d8\xf8^\xddN\xb5\xadz\x99\xabL/\xb2\xddh3\xe7\xa3B\xc3\x06n\xf6\xe5\x96\x01)\x15\x93v\x19\xc2BA8\xc8H\xd7\xcd'}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '-M^^+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '}/\xdcf.'}}]}) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="0b733ea836c4eef045428225710382044e5d1ea861bbba13304dec2eca5846e9e5945873ebcc9cf47d2dddd0bed3719bc458d828686be67d219400af22fcb9563401cac2a515f7b1db1aa40f194784b51b1dd6c2cbbf937bd58b7a489627e7091380b37729b3275916c613b183b974302026be7278ac814c95db01cbc7654ea3b47276e802f73a867ed4394945ab201ce2050fa697241dd06dce91802288f0bfa99a841a5fa2813d8278dadc1db3ea9e96f52c8750ac6a3ae3", 0xb9, 0x7f}, {&(0x7f0000000280)="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", 0x1000, 0x80}], 0x2, &(0x7f0000001280)={[{'\\@-\\'}, {'*9'}, {'.&'}, {'uni_xlate=1'}, {}], [{@obj_user={'obj_user', 0x3d, '}\'{^\\\\#-##:{(}\xaf\v('}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '(^)(!&'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x4}}, 0x26) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) (async) 14:43:32 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:32 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:32 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1268.508576] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1268.517852] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 1268.524045] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1268.530165] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1268.538985] romfs: VFS: Can't find a romfs filesystem on dev loop5. [ 1268.560773] FAULT_INJECTION: forcing a failure. [ 1268.560773] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.576061] CPU: 0 PID: 772 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1268.583780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1268.593129] Call Trace: [ 1268.595730] dump_stack+0x1b2/0x281 [ 1268.599364] should_fail.cold+0x10a/0x149 [ 1268.603403] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1268.603510] should_failslab+0xd6/0x130 [ 1268.610225] romfs: VFS: Can't find a romfs filesystem on dev loop2. [ 1268.613352] kmem_cache_alloc+0x28e/0x3c0 [ 1268.613365] __kernfs_new_node+0x6f/0x470 [ 1268.613378] kernfs_new_node+0x7b/0xe0 [ 1268.613389] __kernfs_create_file+0x3d/0x320 [ 1268.613401] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1268.613411] ? kernfs_create_dir_ns+0x171/0x200 [ 1268.613422] internal_create_group+0x22b/0x710 [ 1268.613436] lo_ioctl+0x1137/0x1cd0 [ 1268.613449] ? loop_set_status64+0xe0/0xe0 14:43:32 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1268.613462] blkdev_ioctl+0x540/0x1830 [ 1268.613471] ? blkpg_ioctl+0x8d0/0x8d0 [ 1268.613481] ? trace_hardirqs_on+0x10/0x10 [ 1268.613493] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1268.613504] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1268.680247] block_ioctl+0xd9/0x120 [ 1268.683875] ? blkdev_fallocate+0x3a0/0x3a0 [ 1268.688201] do_vfs_ioctl+0x75a/0xff0 [ 1268.689093] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1268.692023] ? lock_acquire+0x170/0x3f0 [ 1268.692034] ? ioctl_preallocate+0x1a0/0x1a0 [ 1268.692046] ? __fget+0x265/0x3e0 [ 1268.692057] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.692068] ? security_file_ioctl+0x83/0xb0 [ 1268.692078] SyS_ioctl+0x7f/0xb0 [ 1268.692088] ? do_vfs_ioctl+0xff0/0xff0 [ 1268.725403] do_syscall_64+0x1d5/0x640 [ 1268.729311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1268.734486] RIP: 0033:0x7f25db3db037 [ 1268.738183] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1268.745872] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1268.753129] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:33 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:33 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:33 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1268.760385] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1268.767636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1268.774883] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1268.785265] FAT-fs (loop4): bogus number of reserved sectors [ 1268.792264] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 17) 14:43:33 executing program 2: r0 = getuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffff80000001, 0x1, &(0x7f0000000240)=[{&(0x7f0000001640)="c386a389c832339abb4ba9e8add9845e5f06aaf6df2a023d0d1a9d5fbafe5046c448648485826f2d9ab89450ed8124116e09617ca27aace237e63c987e4dc9ecf93d99b55297cf8caf182b21a215a7547fe5c53b5cf2f1bd48c61bcc5b991aa90a46d35038e8a4667a21d742dbe4066682e9c0187461fc9995020647c4bfdf18da5b2583298e05cc021dc10ed30524395a128588578ef558e7acd87f904a60b11ddc9423e54fff7ae2099499309d60ed02c69dd7682bd07dc01e5bcdae60f82040c55e116dd305e0dad4d7d5c75a1b4819e873209cb38cbc6999ed75a0576863689af6b3", 0xe4, 0x1f}], 0x0, &(0x7f0000001500)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\xfe\xec\x91\f\xd8\"\xa6x\xc1\"\xa0\xd2u\xfd\xf0;u\xe7\x85\x9b\xca!\xd2M\xf6\xaa\x1dv*\xb9y2\xa4\xb9|\xd7\xb6M\xed\x05\x00\x00\x00\x00\x00\x00\x00\xe4\xec\xf1\x1b\xe0\x9b\xaa\xcbu\xb4\x91\xb7P\t\x11\xfd\xf4>\xdd\xd6\x9d\x93\xe3\xc7\xb3\xab\x86#\xbe\x00Y\xfe\x90\xa5\x94\x8d8\xf8^\xddN\xb5\xadz\x99\xabL/\xb2\xddh3\xe7\xa3B\xc3\x06n\xf6\xe5\x96\x01)\x15\x93v\x19\xc2BA8\xc8H\xd7\xcd'}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '-M^^+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '}/\xdcf.'}}]}) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="0b733ea836c4eef045428225710382044e5d1ea861bbba13304dec2eca5846e9e5945873ebcc9cf47d2dddd0bed3719bc458d828686be67d219400af22fcb9563401cac2a515f7b1db1aa40f194784b51b1dd6c2cbbf937bd58b7a489627e7091380b37729b3275916c613b183b974302026be7278ac814c95db01cbc7654ea3b47276e802f73a867ed4394945ab201ce2050fa697241dd06dce91802288f0bfa99a841a5fa2813d8278dadc1db3ea9e96f52c8750ac6a3ae3", 0xb9, 0x7f}, {&(0x7f0000000280)="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", 0x1000, 0x80}], 0x2, &(0x7f0000001280)={[{'\\@-\\'}, {'*9'}, {'.&'}, {'uni_xlate=1'}, {}], [{@obj_user={'obj_user', 0x3d, '}\'{^\\\\#-##:{(}\xaf\v('}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '(^)(!&'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) [ 1268.852950] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1268.861490] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1268.869347] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1268.892987] FAT-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 1268.917701] FAULT_INJECTION: forcing a failure. [ 1268.917701] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.954501] romfs: VFS: Can't find a romfs filesystem on dev loop5. [ 1268.975140] CPU: 1 PID: 822 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1268.982946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1268.992390] Call Trace: [ 1268.994975] dump_stack+0x1b2/0x281 [ 1268.998605] should_fail.cold+0x10a/0x149 [ 1269.002760] should_failslab+0xd6/0x130 [ 1269.006736] kmem_cache_alloc+0x28e/0x3c0 [ 1269.010890] __kernfs_new_node+0x6f/0x470 [ 1269.015040] kernfs_new_node+0x7b/0xe0 [ 1269.018930] __kernfs_create_file+0x3d/0x320 [ 1269.023342] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1269.028009] ? kernfs_create_dir_ns+0x171/0x200 [ 1269.032684] internal_create_group+0x22b/0x710 [ 1269.037270] lo_ioctl+0x1137/0x1cd0 [ 1269.040897] ? loop_set_status64+0xe0/0xe0 [ 1269.045396] blkdev_ioctl+0x540/0x1830 [ 1269.049288] ? blkpg_ioctl+0x8d0/0x8d0 [ 1269.053178] ? trace_hardirqs_on+0x10/0x10 [ 1269.057424] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1269.062523] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1269.067526] block_ioctl+0xd9/0x120 [ 1269.071134] ? blkdev_fallocate+0x3a0/0x3a0 [ 1269.075437] do_vfs_ioctl+0x75a/0xff0 [ 1269.079221] ? lock_acquire+0x170/0x3f0 [ 1269.083175] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.087566] ? __fget+0x265/0x3e0 [ 1269.091087] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.095046] ? security_file_ioctl+0x83/0xb0 [ 1269.099466] SyS_ioctl+0x7f/0xb0 [ 1269.102814] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.106770] do_syscall_64+0x1d5/0x640 [ 1269.110647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.115827] RIP: 0033:0x7f25db3db037 [ 1269.119520] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.127218] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1269.134472] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1269.141724] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1269.148975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1269.156230] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1269.175848] FAT-fs (loop4): bogus number of reserved sectors [ 1269.182523] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:33 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:33 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174655099330b"]) 14:43:33 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:33 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 18) [ 1269.366686] FAULT_INJECTION: forcing a failure. [ 1269.366686] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.378678] CPU: 1 PID: 851 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1269.379645] FAT-fs (loop2): Unrecognized mount option "uni_xlateP™3 " or missing value [ 1269.386384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1269.386389] Call Trace: [ 1269.386404] dump_stack+0x1b2/0x281 [ 1269.386418] should_fail.cold+0x10a/0x149 [ 1269.386432] should_failslab+0xd6/0x130 [ 1269.386445] kmem_cache_alloc+0x28e/0x3c0 [ 1269.386458] __kernfs_new_node+0x6f/0x470 [ 1269.386471] kernfs_new_node+0x7b/0xe0 [ 1269.386481] __kernfs_create_file+0x3d/0x320 [ 1269.386492] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1269.428991] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1269.430289] ? kernfs_create_dir_ns+0x171/0x200 [ 1269.449867] internal_create_group+0x22b/0x710 [ 1269.454450] lo_ioctl+0x1137/0x1cd0 [ 1269.454569] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1269.458070] ? loop_set_status64+0xe0/0xe0 [ 1269.468155] blkdev_ioctl+0x540/0x1830 [ 1269.472037] ? blkpg_ioctl+0x8d0/0x8d0 [ 1269.475923] ? trace_hardirqs_on+0x10/0x10 [ 1269.480156] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1269.485259] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1269.490395] block_ioctl+0xd9/0x120 [ 1269.494020] ? blkdev_fallocate+0x3a0/0x3a0 [ 1269.498332] do_vfs_ioctl+0x75a/0xff0 [ 1269.502209] ? lock_acquire+0x170/0x3f0 [ 1269.506182] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.510572] ? __fget+0x265/0x3e0 [ 1269.514005] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.517957] ? security_file_ioctl+0x83/0xb0 [ 1269.522343] SyS_ioctl+0x7f/0xb0 [ 1269.525687] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.529640] do_syscall_64+0x1d5/0x640 [ 1269.533508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.538687] RIP: 0033:0x7f25db3db037 [ 1269.542384] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.550073] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1269.557324] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174655099330b"]) [ 1269.564582] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1269.572101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1269.579356] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1269.599626] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1269.602393] FAT-fs (loop4): bogus number of reserved sectors 14:43:33 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) 14:43:33 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}]}) 14:43:33 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}]}) [ 1269.654484] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1269.675864] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1269.685433] FAT-fs (loop2): Unrecognized mount option "uni_xlateP™3 " or missing value 14:43:33 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}]}) 14:43:33 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) [ 1269.735236] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1269.778437] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174655099330b"]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174655099330b"]) (async) 14:43:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7952}}}, 0x32) 14:43:34 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}]}) 14:43:34 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) 14:43:34 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) 14:43:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 19) 14:43:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7952}}}, 0x32) socket(0x10, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7952}}}, 0x32) (async) [ 1270.233495] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1270.240712] FAULT_INJECTION: forcing a failure. [ 1270.240712] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.247193] FAT-fs (loop2): Unrecognized mount option "uni_xlateP™3 " or missing value [ 1270.258132] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7952}}}, 0x32) socket(0x10, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x3, {0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7952}}}, 0x32) (async) [ 1270.278033] CPU: 1 PID: 935 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1270.285750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1270.295181] Call Trace: [ 1270.297752] dump_stack+0x1b2/0x281 [ 1270.301377] should_fail.cold+0x10a/0x149 [ 1270.305512] should_failslab+0xd6/0x130 [ 1270.309467] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1270.314117] ? dev_uevent_filter+0xd0/0xd0 [ 1270.318331] kobject_uevent_env+0x20c/0xf30 [ 1270.322658] ? internal_create_group+0x48f/0x710 [ 1270.327411] lo_ioctl+0x11a6/0x1cd0 [ 1270.331019] ? loop_set_status64+0xe0/0xe0 [ 1270.335349] blkdev_ioctl+0x540/0x1830 [ 1270.339220] ? blkpg_ioctl+0x8d0/0x8d0 [ 1270.343099] ? trace_hardirqs_on+0x10/0x10 [ 1270.347329] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1270.352413] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1270.357412] block_ioctl+0xd9/0x120 [ 1270.361029] ? blkdev_fallocate+0x3a0/0x3a0 [ 1270.365348] do_vfs_ioctl+0x75a/0xff0 [ 1270.369138] ? lock_acquire+0x170/0x3f0 [ 1270.373113] ? ioctl_preallocate+0x1a0/0x1a0 [ 1270.377500] ? __fget+0x265/0x3e0 [ 1270.380942] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.384910] ? security_file_ioctl+0x83/0xb0 [ 1270.389311] SyS_ioctl+0x7f/0xb0 [ 1270.392671] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.396632] do_syscall_64+0x1d5/0x640 [ 1270.400512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1270.405687] RIP: 0033:0x7f25db3db037 [ 1270.409375] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.417067] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1270.424382] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:34 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1270.431630] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1270.438893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1270.446142] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:34 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x9, 0x80000, 0x7fff, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x88, 0x4) 14:43:34 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) [ 1270.514503] FAT-fs (loop4): bogus number of reserved sectors [ 1270.521600] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1270.550089] FAT-fs (loop2): Unrecognized mount option "uni_xlateP™3 " or missing value 14:43:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 20) 14:43:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0xa0000, &(0x7f0000000000)={[{@uni_xlate}]}) 14:43:34 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, 0x0) 14:43:34 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x9, 0x80000, 0x7fff, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x88, 0x4) [ 1270.633982] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1270.654096] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1270.662898] FAULT_INJECTION: forcing a failure. [ 1270.662898] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.675644] CPU: 0 PID: 984 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1270.683356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1270.692696] Call Trace: [ 1270.695268] dump_stack+0x1b2/0x281 [ 1270.698878] should_fail.cold+0x10a/0x149 [ 1270.703006] should_failslab+0xd6/0x130 [ 1270.706961] kmem_cache_alloc_node+0x263/0x410 [ 1270.711633] __alloc_skb+0x5c/0x510 [ 1270.715244] kobject_uevent_env+0x882/0xf30 [ 1270.719550] lo_ioctl+0x11a6/0x1cd0 [ 1270.723219] ? loop_set_status64+0xe0/0xe0 [ 1270.727443] blkdev_ioctl+0x540/0x1830 [ 1270.731318] ? blkpg_ioctl+0x8d0/0x8d0 [ 1270.735197] ? trace_hardirqs_on+0x10/0x10 [ 1270.739413] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1270.744500] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1270.749502] block_ioctl+0xd9/0x120 [ 1270.753105] ? blkdev_fallocate+0x3a0/0x3a0 [ 1270.757423] do_vfs_ioctl+0x75a/0xff0 [ 1270.761203] ? lock_acquire+0x170/0x3f0 [ 1270.765160] ? ioctl_preallocate+0x1a0/0x1a0 [ 1270.769557] ? __fget+0x265/0x3e0 [ 1270.772993] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.776948] ? security_file_ioctl+0x83/0xb0 [ 1270.781345] SyS_ioctl+0x7f/0xb0 [ 1270.784689] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.788646] do_syscall_64+0x1d5/0x640 [ 1270.792533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1270.797710] RIP: 0033:0x7f25db3db037 [ 1270.801403] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.809091] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1270.816351] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1270.823600] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x9, 0x80000, 0x7fff, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x88, 0x4) 14:43:35 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ef5a9444a497"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1270.830846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1270.838100] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 14:43:35 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0xa0000, &(0x7f0000000000)={[{@uni_xlate}]}) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ef5a9444a497"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:35 executing program 3: r0 = getuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xffffffff80000001, 0x1, &(0x7f0000000240)=[{&(0x7f0000001640)="c386a389c832339abb4ba9e8add9845e5f06aaf6df2a023d0d1a9d5fbafe5046c448648485826f2d9ab89450ed8124116e09617ca27aace237e63c987e4dc9ecf93d99b55297cf8caf182b21a215a7547fe5c53b5cf2f1bd48c61bcc5b991aa90a46d35038e8a4667a21d742dbe4066682e9c0187461fc9995020647c4bfdf18da5b2583298e05cc021dc10ed30524395a128588578ef558e7acd87f904a60b11ddc9423e54fff7ae2099499309d60ed02c69dd7682bd07dc01e5bcdae60f82040c55e116dd305e0dad4d7d5c75a1b4819e873209cb38cbc6999ed75a0576863689af6b3", 0xe4, 0x1f}], 0x0, &(0x7f0000001500)={[], [{@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, ']\xfe\xec\x91\f\xd8\"\xa6x\xc1\"\xa0\xd2u\xfd\xf0;u\xe7\x85\x9b\xca!\xd2M\xf6\xaa\x1dv*\xb9y2\xa4\xb9|\xd7\xb6M\xed\x05\x00\x00\x00\x00\x00\x00\x00\xe4\xec\xf1\x1b\xe0\x9b\xaa\xcbu\xb4\x91\xb7P\t\x11\xfd\xf4>\xdd\xd6\x9d\x93\xe3\xc7\xb3\xab\x86#\xbe\x00Y\xfe\x90\xa5\x94\x8d8\xf8^\xddN\xb5\xadz\x99\xabL/\xb2\xddh3\xe7\xa3B\xc3\x06n\xf6\xe5\x96\x01)\x15\x93v\x19\xc2BA8\xc8H\xd7\xcd'}}, {@fowner_lt={'fowner<', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@fsname={'fsname', 0x3d, '}'}}, {@subj_role={'subj_role', 0x3d, '-M^^+'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '}/\xdcf.'}}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="0b733ea836c4eef045428225710382044e5d1ea861bbba13304dec2eca5846e9e5945873ebcc9cf47d2dddd0bed3719bc458d828686be67d219400af22fcb9563401cac2a515f7b1db1aa40f194784b51b1dd6c2cbbf937bd58b7a489627e7091380b37729b3275916c613b183b974302026be7278ac814c95db01cbc7654ea3b47276e802f73a867ed4394945ab201ce2050fa697241dd06dce91802288f0bfa99a841a5fa2813d8278dadc1db3ea9e96f52c8750ac6a3ae3", 0xb9, 0x7f}, {&(0x7f0000000280)="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", 0x1000, 0x80}], 0x2, &(0x7f0000001280)={[{'\\@-\\'}, {'*9'}, {'.&'}, {'uni_xlate=1'}, {}], [{@obj_user={'obj_user', 0x3d, '}\'{^\\\\#-##:{(}\xaf\v('}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '(^)(!&'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x4}}, 0x26) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff0000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x80) [ 1270.937195] FAT-fs (loop4): bogus number of reserved sectors [ 1270.949732] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1270.964772] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:35 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 21) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ef5a9444a497"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1270.983926] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1271.005017] romfs: VFS: Can't find a romfs filesystem on dev loop1. [ 1271.023058] FAT-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value 14:43:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0xa0000, &(0x7f0000000000)={[{@uni_xlate}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0xa0000, &(0x7f0000000000)={[{@uni_xlate}]}) (async) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @bcast, 0x0, [@bcast, @null, @rose, @null, @netrom, @netrom]}, &(0x7f00000000c0)=0x40, 0xc0000) accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x54, 0x16, 0x22, 0x70bd2a, 0x25dfdbfe, {0xa, 0x38, 0x4, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x75}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000085) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) 14:43:35 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1271.050767] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:35 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @bcast, 0x0, [@bcast, @null, @rose, @null, @netrom, @netrom]}, &(0x7f00000000c0)=0x40, 0xc0000) accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x54, 0x16, 0x22, 0x70bd2a, 0x25dfdbfe, {0xa, 0x38, 0x4, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x75}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000085) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) socket(0x10, 0x80003, 0x0) (async) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @bcast, 0x0, [@bcast, @null, @rose, @null, @netrom, @netrom]}, &(0x7f00000000c0)=0x40, 0xc0000) (async) accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x54, 0x16, 0x22, 0x70bd2a, 0x25dfdbfe, {0xa, 0x38, 0x4, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x75}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000085) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) (async) [ 1271.106361] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1271.110221] FAULT_INJECTION: forcing a failure. [ 1271.110221] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.144751] CPU: 1 PID: 1041 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1271.152590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1271.161936] Call Trace: [ 1271.164519] dump_stack+0x1b2/0x281 [ 1271.168135] should_fail.cold+0x10a/0x149 [ 1271.172282] should_failslab+0xd6/0x130 [ 1271.176244] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1271.181334] __kmalloc_node_track_caller+0x38/0x70 [ 1271.186248] __alloc_skb+0x96/0x510 [ 1271.189862] kobject_uevent_env+0x882/0xf30 [ 1271.194172] lo_ioctl+0x11a6/0x1cd0 [ 1271.197786] ? loop_set_status64+0xe0/0xe0 [ 1271.202012] blkdev_ioctl+0x540/0x1830 [ 1271.205886] ? blkpg_ioctl+0x8d0/0x8d0 [ 1271.209753] ? trace_hardirqs_on+0x10/0x10 [ 1271.213971] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1271.219055] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1271.224059] block_ioctl+0xd9/0x120 [ 1271.227762] ? blkdev_fallocate+0x3a0/0x3a0 [ 1271.232065] do_vfs_ioctl+0x75a/0xff0 [ 1271.235847] ? lock_acquire+0x170/0x3f0 [ 1271.239802] ? ioctl_preallocate+0x1a0/0x1a0 [ 1271.244195] ? __fget+0x265/0x3e0 [ 1271.247628] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.251583] ? security_file_ioctl+0x83/0xb0 [ 1271.255979] SyS_ioctl+0x7f/0xb0 [ 1271.259341] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.263300] do_syscall_64+0x1d5/0x640 [ 1271.267172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1271.272339] RIP: 0033:0x7f25db3db037 [ 1271.276036] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.283724] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1271.290973] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1271.298222] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1271.305472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1271.312723] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1271.335644] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1271.335757] FAT-fs (loop4): bogus number of reserved sectors [ 1271.345982] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @bcast, 0x0, [@bcast, @null, @rose, @null, @netrom, @netrom]}, &(0x7f00000000c0)=0x40, 0xc0000) accept4$rose(r1, &(0x7f0000000000)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x80800) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x5080000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddr={0x54, 0x16, 0x22, 0x70bd2a, 0x25dfdbfe, {0xa, 0x38, 0x4, 0xfe}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x75}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}, @IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000085) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80001}, 0x20000000) [ 1271.363819] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1271.379400] romfs: VFS: Can't find a romfs filesystem on dev loop3. 14:43:35 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[{'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:35 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x5, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 22) 14:43:35 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:35 executing program 2: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:35 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1271.481960] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:35 executing program 0: r0 = socket(0x10, 0x80003, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x80003, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1271.568108] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1271.577487] FAT-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1271.577769] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1271.589333] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1271.598820] FAULT_INJECTION: forcing a failure. [ 1271.598820] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.611048] CPU: 0 PID: 1120 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1271.618943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1271.628281] Call Trace: [ 1271.630859] dump_stack+0x1b2/0x281 [ 1271.634479] should_fail.cold+0x10a/0x149 [ 1271.638629] should_failslab+0xd6/0x130 [ 1271.642585] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1271.647685] __kmalloc_node_track_caller+0x38/0x70 [ 1271.652594] __alloc_skb+0x96/0x510 [ 1271.656209] kobject_uevent_env+0x882/0xf30 [ 1271.660528] lo_ioctl+0x11a6/0x1cd0 [ 1271.664152] ? loop_set_status64+0xe0/0xe0 [ 1271.668381] blkdev_ioctl+0x540/0x1830 [ 1271.672266] ? blkpg_ioctl+0x8d0/0x8d0 [ 1271.676153] ? trace_hardirqs_on+0x10/0x10 [ 1271.680371] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1271.685458] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1271.690800] block_ioctl+0xd9/0x120 [ 1271.694408] ? blkdev_fallocate+0x3a0/0x3a0 [ 1271.698707] do_vfs_ioctl+0x75a/0xff0 [ 1271.702487] ? lock_acquire+0x170/0x3f0 [ 1271.706439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1271.710825] ? __fget+0x265/0x3e0 [ 1271.714256] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.718207] ? security_file_ioctl+0x83/0xb0 [ 1271.722595] SyS_ioctl+0x7f/0xb0 [ 1271.725937] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.729890] do_syscall_64+0x1d5/0x640 [ 1271.733758] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1271.738928] RIP: 0033:0x7f25db3db037 [ 1271.742645] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.750330] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1271.757579] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:36 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) 14:43:36 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) 14:43:36 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}, {@uid_lt}]}) [ 1271.764825] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1271.772074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1271.779319] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1271.795244] FAT-fs (loop4): bogus number of reserved sectors [ 1271.806120] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:36 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x7, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}, {&(0x7f0000001700)="4b9df1b4e050c4fe43dba154a21ab717b59bc4d1b5e3c8fea1d1bd025738be476fb5f2de0e11dacad51fc9223cf4219eef38a25f5e17a3531e34dd32c937d3a0aa8abffc1bb67d95e764d421ad8234f2f2d5309bb3", 0x55}, {&(0x7f0000001780)="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", 0xfb, 0x1}, {&(0x7f0000001880)="08aa2efbb9bbc36f19d483ab9436f65a62ef15a9e75b0a7b0ee00473a9f2e8294b1046aa97aa9dee252af37fbb89c7a6800bc88777", 0x35, 0x5}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:36 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) 14:43:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 23) 14:43:36 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) (async) accept4$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) (async) [ 1271.893070] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1271.905102] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1271.917998] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:36 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001400)="d8848606668cad0449677a5f33bfcfb828d21527b77c520645c41091abbd22d4c5e58c7bd3232f20cf51a8231489c948b82a3a3ed3c959b66f3ea105b2d3f7a6a126e0de6ea5df556f610bafaf00bda6c377f5860a19d8c9e7e9fa77a0274ebfd0e1315649b985d1c52547a7b3bc34ae8dcd01dce312960e94bb6710f53386e7c00072ee44a1a8e0f51732758f2e2588c8d158a042b53557be717dc3218081fbe21fcc918e078c671dcebd0c7c710a16c7f5d0d0d8bf0ce04feed237d9ea8acd45a07c44d81b74bdaf028e7ed051aa6f81300c31c697e830c49f1aa60cf8b1efcd62ce018e07ec1cfd9b070728a22e26b56ff444bc", 0xf5, 0x101}, {&(0x7f0000001500)="1e1cfca1986eaa48290e78e1b4e0dd16892073974c2d426393fb9a982cea2b4c7f302b23d0d8dfc1db6e7bad960be15a6986535ff1480adcba581e2672acfb34", 0x40, 0x8}, {&(0x7f0000001540)="279e5edc0c4827d951bd5ed695c5c0c3cbce41484e3ec2e9e28a2df63d3c6ac6ac66a6ce1c0c63ea355995fcaa274352584d50bf0e4e49630c28a71f272dc8a0382889c4147e70214937b87d78559f74f864a906b2e184b4da6dba3c15c4b64ea897651e791cb1c61e3c302bf5589fbfd934ac363783529267de16089a88ae4a84fe43f1ee5f17160af4dfded5b9a232c15f8be8428786753b08e38b27bceb9b6544e6bafa26ef34f6fbef45493ccd9361056e361422", 0xb6, 0x7}, {&(0x7f0000001600)="7b5e28fce2db659cc6c0fff1b67a3a38bcccef1671aaf3b622a02bc01a83210757cfc64b3694581512b44626f3dd714b14664e9fd66bc4db916f003e1503d2be3aa721cc45b4395e4e90ded919eba18c8f9e9933d118143389bbfe964796e35c9b2c4c71d017a8c3ad7181b89bb3000b64f3e618b3ac6adfadb7210d0a1e7a8826fb6782791da1673263d22d54e0d159650091faef97c8661a314418f0d8df5e57c444544dd40b1161918571813031319ccecf26717f4e18f0bcd915dd0d125d4ba15844abf9d17ddf360ec7166ce30a776cc0", 0xd3, 0x1}], 0x200800, &(0x7f0000001980)={[{'bond0\x00'}, {'romfs\x00'}, {'bond0\x00'}, {'[%{&'}, {'romfs\x00'}, {'bond0\x00'}], [{@euid_gt}, {@uid_lt}, {@uid_lt}]}) [ 1272.022714] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1272.029783] FAULT_INJECTION: forcing a failure. [ 1272.029783] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.048780] CPU: 0 PID: 1172 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1272.056590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1272.066028] Call Trace: [ 1272.068622] dump_stack+0x1b2/0x281 [ 1272.072262] should_fail.cold+0x10a/0x149 [ 1272.076410] should_failslab+0xd6/0x130 [ 1272.080382] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1272.085489] __kmalloc_node_track_caller+0x38/0x70 [ 1272.090420] __alloc_skb+0x96/0x510 [ 1272.094056] kobject_uevent_env+0x882/0xf30 [ 1272.098388] lo_ioctl+0x11a6/0x1cd0 [ 1272.102029] ? loop_set_status64+0xe0/0xe0 [ 1272.106261] blkdev_ioctl+0x540/0x1830 [ 1272.110152] ? blkpg_ioctl+0x8d0/0x8d0 [ 1272.114050] ? trace_hardirqs_on+0x10/0x10 [ 1272.118281] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1272.123398] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1272.128414] block_ioctl+0xd9/0x120 [ 1272.132038] ? blkdev_fallocate+0x3a0/0x3a0 [ 1272.136359] do_vfs_ioctl+0x75a/0xff0 [ 1272.140159] ? lock_acquire+0x170/0x3f0 [ 1272.144128] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.148535] ? __fget+0x265/0x3e0 [ 1272.151988] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.155961] ? security_file_ioctl+0x83/0xb0 [ 1272.160370] SyS_ioctl+0x7f/0xb0 [ 1272.163732] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.167704] do_syscall_64+0x1d5/0x640 [ 1272.171600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.176955] RIP: 0033:0x7f25db3db037 [ 1272.180655] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.188358] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1272.195621] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1272.202881] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1272.210149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1272.217414] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1272.247290] FAT-fs (loop4): bogus number of reserved sectors [ 1272.253583] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:36 executing program 2: r0 = getuid() (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) 14:43:36 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)={[], [{@euid_gt}]}) 14:43:36 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 1) 14:43:36 executing program 0: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) 14:43:36 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 1) 14:43:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (fail_nth: 24) [ 1272.421643] FAULT_INJECTION: forcing a failure. [ 1272.421643] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.435983] FAT-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1272.446046] FAULT_INJECTION: forcing a failure. [ 1272.446046] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.457633] FAULT_INJECTION: forcing a failure. [ 1272.457633] name failslab, interval 1, probability 0, space 0, times 0 14:43:36 executing program 0: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) [ 1272.468968] CPU: 1 PID: 1199 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1272.476977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1272.486324] Call Trace: [ 1272.488905] dump_stack+0x1b2/0x281 [ 1272.492530] should_fail.cold+0x10a/0x149 [ 1272.496703] should_failslab+0xd6/0x130 [ 1272.500676] __kmalloc+0x2c1/0x400 [ 1272.504209] ? SyS_memfd_create+0xbc/0x3c0 [ 1272.508433] SyS_memfd_create+0xbc/0x3c0 [ 1272.512486] ? shmem_fcntl+0x120/0x120 [ 1272.516361] ? __do_page_fault+0x159/0xad0 [ 1272.520585] ? do_syscall_64+0x4c/0x640 [ 1272.524547] ? shmem_fcntl+0x120/0x120 [ 1272.528421] do_syscall_64+0x1d5/0x640 [ 1272.532304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.537477] RIP: 0033:0x7f25b5a2a279 [ 1272.541172] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1272.548862] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2a279 [ 1272.556117] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f25b5a832c4 [ 1272.563370] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f25b439f1d0 [ 1272.570629] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1272.577883] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1272.585152] CPU: 0 PID: 1202 Comm: syz-executor.4 Not tainted 4.14.290-syzkaller #0 [ 1272.592946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1272.602301] Call Trace: [ 1272.604889] dump_stack+0x1b2/0x281 [ 1272.608513] should_fail.cold+0x10a/0x149 [ 1272.612665] should_failslab+0xd6/0x130 [ 1272.616648] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1272.621754] __kmalloc_node_track_caller+0x38/0x70 [ 1272.626681] __alloc_skb+0x96/0x510 [ 1272.630309] kobject_uevent_env+0x882/0xf30 [ 1272.634640] lo_ioctl+0x11a6/0x1cd0 [ 1272.638273] ? loop_set_status64+0xe0/0xe0 [ 1272.642511] blkdev_ioctl+0x540/0x1830 [ 1272.646397] ? blkpg_ioctl+0x8d0/0x8d0 [ 1272.650281] ? trace_hardirqs_on+0x10/0x10 [ 1272.654519] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1272.659617] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1272.664634] block_ioctl+0xd9/0x120 [ 1272.668259] ? blkdev_fallocate+0x3a0/0x3a0 [ 1272.672578] do_vfs_ioctl+0x75a/0xff0 [ 1272.676374] ? lock_acquire+0x170/0x3f0 [ 1272.680348] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.684756] ? __fget+0x265/0x3e0 [ 1272.688205] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.692263] ? security_file_ioctl+0x83/0xb0 [ 1272.696676] SyS_ioctl+0x7f/0xb0 [ 1272.700034] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.704015] do_syscall_64+0x1d5/0x640 [ 1272.707907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.713090] RIP: 0033:0x7f25db3db037 14:43:37 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 2) [ 1272.716789] RSP: 002b:00007f25d9d4ff28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.724490] RAX: ffffffffffffffda RBX: 00007f25db424a20 RCX: 00007f25db3db037 [ 1272.731756] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1272.739017] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25d9d501d0 [ 1272.746279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1272.753545] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 1272.777801] CPU: 0 PID: 1208 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1272.785708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1272.795059] Call Trace: [ 1272.797652] dump_stack+0x1b2/0x281 [ 1272.801288] should_fail.cold+0x10a/0x149 [ 1272.805453] should_failslab+0xd6/0x130 [ 1272.809429] __kmalloc+0x2c1/0x400 [ 1272.812969] ? SyS_memfd_create+0xbc/0x3c0 [ 1272.817208] SyS_memfd_create+0xbc/0x3c0 [ 1272.821265] ? shmem_fcntl+0x120/0x120 [ 1272.825149] ? __do_page_fault+0x159/0xad0 [ 1272.829380] ? do_syscall_64+0x4c/0x640 [ 1272.833359] ? shmem_fcntl+0x120/0x120 [ 1272.837255] do_syscall_64+0x1d5/0x640 [ 1272.841149] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.846333] RIP: 0033:0x7f5c08b6c279 [ 1272.850040] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1272.857757] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6c279 [ 1272.865027] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f5c08bc52c4 14:43:37 executing program 0: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) [ 1272.872296] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f5c074e11d0 [ 1272.879565] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1272.886828] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1272.930798] FAULT_INJECTION: forcing a failure. [ 1272.930798] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.956695] CPU: 1 PID: 1222 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1272.964508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1272.972599] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1272.973856] Call Trace: [ 1272.982304] dump_stack+0x1b2/0x281 [ 1272.985936] should_fail.cold+0x10a/0x149 [ 1272.990085] should_failslab+0xd6/0x130 [ 1272.994065] kmem_cache_alloc+0x28e/0x3c0 [ 1272.998214] __d_alloc+0x2a/0xa20 [ 1273.001678] ? lock_downgrade+0x740/0x740 [ 1273.005826] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1273.010674] ? shmem_create+0x30/0x30 [ 1273.014471] ? __alloc_fd+0x1be/0x490 [ 1273.018274] SyS_memfd_create+0x1fc/0x3c0 [ 1273.022420] ? shmem_fcntl+0x120/0x120 [ 1273.026302] ? __do_page_fault+0x159/0xad0 [ 1273.030535] ? do_syscall_64+0x4c/0x640 [ 1273.034503] ? shmem_fcntl+0x120/0x120 [ 1273.038394] do_syscall_64+0x1d5/0x640 [ 1273.042396] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1273.047579] RIP: 0033:0x7f25b5a2a279 [ 1273.051285] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1273.058991] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2a279 [ 1273.066260] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f25b5a832c4 [ 1273.073525] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f25b439f1d0 14:43:37 executing program 0: r0 = socket(0x6, 0x80003, 0x0) r1 = socket(0x9, 0x4, 0x96) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x3}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:37 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 2) [ 1273.080788] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1273.088052] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1273.094213] FAT-fs (loop4): bogus number of reserved sectors 14:43:37 executing program 5: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) [ 1273.128074] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1273.166962] FAULT_INJECTION: forcing a failure. [ 1273.166962] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.195988] CPU: 1 PID: 1241 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1273.203803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1273.213144] Call Trace: [ 1273.215717] dump_stack+0x1b2/0x281 [ 1273.219329] should_fail.cold+0x10a/0x149 [ 1273.223465] should_failslab+0xd6/0x130 [ 1273.227421] kmem_cache_alloc+0x28e/0x3c0 [ 1273.231552] __d_alloc+0x2a/0xa20 [ 1273.235006] ? lock_downgrade+0x740/0x740 [ 1273.239137] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1273.243961] ? shmem_create+0x30/0x30 [ 1273.247740] ? __alloc_fd+0x1be/0x490 [ 1273.251528] SyS_memfd_create+0x1fc/0x3c0 [ 1273.255663] ? shmem_fcntl+0x120/0x120 [ 1273.259534] ? __do_page_fault+0x159/0xad0 [ 1273.263754] ? do_syscall_64+0x4c/0x640 [ 1273.267709] ? shmem_fcntl+0x120/0x120 [ 1273.271576] do_syscall_64+0x1d5/0x640 [ 1273.275452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1273.280622] RIP: 0033:0x7f5c08b6c279 [ 1273.284317] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1273.292007] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6c279 [ 1273.299260] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f5c08bc52c4 [ 1273.306512] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f5c074e11d0 [ 1273.313780] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1273.321031] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 14:43:37 executing program 2: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) getuid() (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) (async) 14:43:37 executing program 0: r0 = socket(0x6, 0x80003, 0x0) r1 = socket(0x9, 0x4, 0x96) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x3}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x6, 0x80003, 0x0) (async) socket(0x9, 0x4, 0x96) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x3}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:37 executing program 4: r0 = getuid() geteuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@uni_xlate}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/&,!%#[c'}}, {@smackfsdef={'smackfsdef', 0x3d, ',}K'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise_type}, {@uid_lt={'uid<', r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_role}]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="91a492a77c4e21c66b443124899960e54bc2fbcfcfbf340b621af7e43fc4e1baca557ff58618d7eef606d8555edaba188af2b96b8a663d9cf22126a0e4ec3f33473493ac0febde473bc52fd7b08e726427a6be7b182d7a337117b99494f79ad94da74f5f918c3c503f4defcc1ac89832fbe6699d31549673f46afde33c3df23b7d299d50075c49cf4fedcd3c9921a21f620987c7f00a832eb385b6339f47225f4bde8bc6a2add64bb70f70eed64f655cdaeb3ea95132b908869bd4c470fac5ab450b92f8276ed582c918ac0285bf0ffa8f0fe9baffb2d737e377ac636dd7753c68c6e727") [ 1273.342228] MTD: Attempt to mount non-MTD device "/dev/loop5" 14:43:37 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 3) 14:43:37 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 3) 14:43:37 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) 14:43:37 executing program 0: r0 = socket(0x6, 0x80003, 0x0) (async) r1 = socket(0x9, 0x4, 0x96) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x3}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1273.435827] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1273.448153] FAULT_INJECTION: forcing a failure. [ 1273.448153] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.456247] FAT-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1273.474652] FAULT_INJECTION: forcing a failure. [ 1273.474652] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.495504] CPU: 1 PID: 1264 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1273.503318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1273.512666] Call Trace: [ 1273.515243] dump_stack+0x1b2/0x281 [ 1273.518869] should_fail.cold+0x10a/0x149 [ 1273.523024] should_failslab+0xd6/0x130 [ 1273.526999] kmem_cache_alloc+0x28e/0x3c0 [ 1273.531147] ? shmem_destroy_callback+0xa0/0xa0 [ 1273.535805] shmem_alloc_inode+0x18/0x40 [ 1273.539855] ? shmem_destroy_callback+0xa0/0xa0 [ 1273.544506] alloc_inode+0x5d/0x170 [ 1273.548131] new_inode+0x1d/0xf0 [ 1273.551482] shmem_get_inode+0x8b/0x890 [ 1273.555450] __shmem_file_setup.part.0+0x104/0x3c0 [ 1273.560365] ? shmem_create+0x30/0x30 [ 1273.564158] ? __alloc_fd+0x1be/0x490 [ 1273.567959] SyS_memfd_create+0x1fc/0x3c0 [ 1273.572094] ? shmem_fcntl+0x120/0x120 [ 1273.575966] ? __do_page_fault+0x159/0xad0 [ 1273.580276] ? do_syscall_64+0x4c/0x640 [ 1273.584238] ? shmem_fcntl+0x120/0x120 [ 1273.588108] do_syscall_64+0x1d5/0x640 [ 1273.591982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1273.597163] RIP: 0033:0x7f25b5a2a279 [ 1273.600861] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1273.608560] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2a279 [ 1273.615820] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f25b5a832c4 [ 1273.623187] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f25b439f1d0 [ 1273.630449] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1273.637708] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1273.644976] CPU: 0 PID: 1261 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1273.652774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1273.662121] Call Trace: [ 1273.664709] dump_stack+0x1b2/0x281 [ 1273.668346] should_fail.cold+0x10a/0x149 [ 1273.672493] should_failslab+0xd6/0x130 [ 1273.676469] kmem_cache_alloc+0x28e/0x3c0 [ 1273.680615] ? shmem_destroy_callback+0xa0/0xa0 [ 1273.685281] shmem_alloc_inode+0x18/0x40 [ 1273.689347] ? shmem_destroy_callback+0xa0/0xa0 [ 1273.694012] alloc_inode+0x5d/0x170 [ 1273.697640] new_inode+0x1d/0xf0 [ 1273.701010] shmem_get_inode+0x8b/0x890 [ 1273.704985] __shmem_file_setup.part.0+0x104/0x3c0 [ 1273.709915] ? shmem_create+0x30/0x30 [ 1273.713711] ? __alloc_fd+0x1be/0x490 [ 1273.717516] SyS_memfd_create+0x1fc/0x3c0 [ 1273.721661] ? shmem_fcntl+0x120/0x120 [ 1273.725544] ? __do_page_fault+0x159/0xad0 [ 1273.729775] ? do_syscall_64+0x4c/0x640 [ 1273.733745] ? shmem_fcntl+0x120/0x120 [ 1273.737632] do_syscall_64+0x1d5/0x640 [ 1273.741523] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:37 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) 14:43:37 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "89a1e5d9b7200c0864fcc4d5f2fbfbeb237c5c92ef4913c9ade29a1b8a04903d"}) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) socketpair(0xb, 0x80000, 0x8000, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800080}, 0xffffffffffffff01, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0xc880) 14:43:38 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 4) 14:43:38 executing program 4: r0 = getuid() geteuid() (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@uni_xlate}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/&,!%#[c'}}, {@smackfsdef={'smackfsdef', 0x3d, ',}K'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise_type}, {@uid_lt={'uid<', r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_role}]}) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="91a492a77c4e21c66b443124899960e54bc2fbcfcfbf340b621af7e43fc4e1baca557ff58618d7eef606d8555edaba188af2b96b8a663d9cf22126a0e4ec3f33473493ac0febde473bc52fd7b08e726427a6be7b182d7a337117b99494f79ad94da74f5f918c3c503f4defcc1ac89832fbe6699d31549673f46afde33c3df23b7d299d50075c49cf4fedcd3c9921a21f620987c7f00a832eb385b6339f47225f4bde8bc6a2add64bb70f70eed64f655cdaeb3ea95132b908869bd4c470fac5ab450b92f8276ed582c918ac0285bf0ffa8f0fe9baffb2d737e377ac636dd7753c68c6e727") [ 1273.746714] RIP: 0033:0x7f5c08b6c279 [ 1273.750417] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1273.758119] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6c279 [ 1273.765385] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f5c08bc52c4 [ 1273.772650] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f5c074e11d0 [ 1273.779917] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1273.787180] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 14:43:38 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:43:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "89a1e5d9b7200c0864fcc4d5f2fbfbeb237c5c92ef4913c9ade29a1b8a04903d"}) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) socketpair(0xb, 0x80000, 0x8000, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800080}, 0xffffffffffffff01, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0xc880) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "89a1e5d9b7200c0864fcc4d5f2fbfbeb237c5c92ef4913c9ade29a1b8a04903d"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000040), 0x80000) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) socketpair(0xb, 0x80000, 0x8000, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800080}, 0xffffffffffffff01, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0xc880) (async) 14:43:38 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x20000000) [ 1273.879930] FAULT_INJECTION: forcing a failure. [ 1273.879930] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.905337] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1273.927573] CPU: 1 PID: 1305 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1273.935387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1273.944733] Call Trace: [ 1273.947492] dump_stack+0x1b2/0x281 [ 1273.948324] FAT-fs (loop2): bogus number of reserved sectors [ 1273.951119] should_fail.cold+0x10a/0x149 [ 1273.951134] should_failslab+0xd6/0x130 [ 1273.951145] kmem_cache_alloc+0x28e/0x3c0 [ 1273.951157] get_empty_filp+0x86/0x3f0 [ 1273.951166] alloc_file+0x23/0x440 14:43:38 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10032cbd7000fddbdf2501000000000000002485ad5bb8f43592bceeb0b76f6d5e09410000004c00180000000862726f6164636173742d6c696e6b0000000000000700"/113], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40008084) 14:43:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "89a1e5d9b7200c0864fcc4d5f2fbfbeb237c5c92ef4913c9ade29a1b8a04903d"}) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) socketpair(0xb, 0x80000, 0x8000, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800080}, 0xffffffffffffff01, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0xc880) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1, "89a1e5d9b7200c0864fcc4d5f2fbfbeb237c5c92ef4913c9ade29a1b8a04903d"}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe2(&(0x7f0000000040), 0x80000) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) socketpair(0xb, 0x80000, 0x8000, &(0x7f00000000c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x8000) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40800080}, 0xffffffffffffff01, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x2c}}, 0xc880) (async) [ 1273.951180] __shmem_file_setup.part.0+0x198/0x3c0 [ 1273.951191] ? shmem_create+0x30/0x30 [ 1273.951198] ? __alloc_fd+0x1be/0x490 [ 1273.951211] SyS_memfd_create+0x1fc/0x3c0 [ 1273.951220] ? shmem_fcntl+0x120/0x120 [ 1273.951231] ? __do_page_fault+0x159/0xad0 [ 1273.951240] ? do_syscall_64+0x4c/0x640 [ 1273.951248] ? shmem_fcntl+0x120/0x120 [ 1273.951258] do_syscall_64+0x1d5/0x640 [ 1273.951272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1273.951280] RIP: 0033:0x7f25b5a2a279 [ 1273.951285] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 14:43:38 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 4) 14:43:38 executing program 0: r0 = socket(0x1a, 0x80003, 0x0) r1 = socket(0x11, 0xa, 0x6) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1273.951296] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2a279 [ 1273.951301] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f25b5a832c4 [ 1273.951307] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f25b439f1d0 [ 1273.951312] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1273.951318] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 14:43:38 executing program 0: r0 = socket(0x1a, 0x80003, 0x0) r1 = socket(0x11, 0xa, 0x6) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x1a, 0x80003, 0x0) (async) socket(0x11, 0xa, 0x6) (async) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:38 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1274.076008] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1274.094293] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.098895] FAULT_INJECTION: forcing a failure. [ 1274.098895] name failslab, interval 1, probability 0, space 0, times 0 14:43:38 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 5) [ 1274.123630] CPU: 0 PID: 1366 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1274.131430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1274.140776] Call Trace: [ 1274.143356] dump_stack+0x1b2/0x281 [ 1274.146982] should_fail.cold+0x10a/0x149 [ 1274.151128] should_failslab+0xd6/0x130 [ 1274.155102] kmem_cache_alloc+0x28e/0x3c0 [ 1274.159254] get_empty_filp+0x86/0x3f0 [ 1274.163138] alloc_file+0x23/0x440 [ 1274.166685] __shmem_file_setup.part.0+0x198/0x3c0 [ 1274.171612] ? shmem_create+0x30/0x30 [ 1274.173681] FAULT_INJECTION: forcing a failure. [ 1274.173681] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.175398] ? __alloc_fd+0x1be/0x490 [ 1274.175417] SyS_memfd_create+0x1fc/0x3c0 [ 1274.175427] ? shmem_fcntl+0x120/0x120 [ 1274.175437] ? __do_page_fault+0x159/0xad0 [ 1274.175447] ? do_syscall_64+0x4c/0x640 [ 1274.175454] ? shmem_fcntl+0x120/0x120 [ 1274.175467] do_syscall_64+0x1d5/0x640 [ 1274.214354] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.219540] RIP: 0033:0x7f5c08b6c279 [ 1274.223237] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 14:43:38 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) [ 1274.230933] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6c279 [ 1274.238190] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f5c08bc52c4 [ 1274.245447] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f5c074e11d0 [ 1274.252698] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1274.259951] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1274.285521] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.305891] CPU: 1 PID: 1372 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1274.313699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1274.323049] Call Trace: [ 1274.325631] dump_stack+0x1b2/0x281 [ 1274.329259] should_fail.cold+0x10a/0x149 [ 1274.333410] should_failslab+0xd6/0x130 [ 1274.337381] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1274.342052] apparmor_file_alloc_security+0x129/0x800 [ 1274.347243] security_file_alloc+0x66/0xa0 [ 1274.351470] ? selinux_is_enabled+0x5/0x50 [ 1274.352753] FAT-fs (loop2): bogus number of reserved sectors [ 1274.355699] get_empty_filp+0x16b/0x3f0 [ 1274.355711] alloc_file+0x23/0x440 [ 1274.355726] __shmem_file_setup.part.0+0x198/0x3c0 [ 1274.355736] ? shmem_create+0x30/0x30 [ 1274.355746] ? __alloc_fd+0x1be/0x490 [ 1274.361746] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1274.365493] SyS_memfd_create+0x1fc/0x3c0 [ 1274.365504] ? shmem_fcntl+0x120/0x120 [ 1274.365515] ? __do_page_fault+0x159/0xad0 [ 1274.365525] ? do_syscall_64+0x4c/0x640 [ 1274.365532] ? shmem_fcntl+0x120/0x120 [ 1274.365541] do_syscall_64+0x1d5/0x640 [ 1274.411325] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.416506] RIP: 0033:0x7f25b5a2a279 [ 1274.420207] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1274.427911] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2a279 [ 1274.435171] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f25b5a832c4 [ 1274.442431] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f25b439f1d0 [ 1274.449694] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1274.456958] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1274.485769] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.536235] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.578564] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.631824] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value 14:43:38 executing program 4: r0 = getuid() geteuid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)={[{@uni_xlate}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/&,!%#[c'}}, {@smackfsdef={'smackfsdef', 0x3d, ',}K'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise_type}, {@uid_lt={'uid<', r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_role}]}) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="91a492a77c4e21c66b443124899960e54bc2fbcfcfbf340b621af7e43fc4e1baca557ff58618d7eef606d8555edaba188af2b96b8a663d9cf22126a0e4ec3f33473493ac0febde473bc52fd7b08e726427a6be7b182d7a337117b99494f79ad94da74f5f918c3c503f4defcc1ac89832fbe6699d31549673f46afde33c3df23b7d299d50075c49cf4fedcd3c9921a21f620987c7f00a832eb385b6339f47225f4bde8bc6a2add64bb70f70eed64f655cdaeb3ea95132b908869bd4c470fac5ab450b92f8276ed582c918ac0285bf0ffa8f0fe9baffb2d737e377ac636dd7753c68c6e727") 14:43:38 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 5) 14:43:38 executing program 0: r0 = socket(0x1a, 0x80003, 0x0) r1 = socket(0x11, 0xa, 0x6) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x1a, 0x80003, 0x0) (async) socket(0x11, 0xa, 0x6) (async) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:38 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 14:43:38 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 6) 14:43:38 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000020}, 0x4) (async) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (rerun: 64) [ 1274.682592] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1274.753011] FAULT_INJECTION: forcing a failure. [ 1274.753011] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.764815] FAULT_INJECTION: forcing a failure. [ 1274.764815] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.766243] CPU: 1 PID: 1445 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1274.783884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1274.793231] Call Trace: [ 1274.795821] dump_stack+0x1b2/0x281 [ 1274.799441] should_fail.cold+0x10a/0x149 [ 1274.803575] should_failslab+0xd6/0x130 [ 1274.807550] kmem_cache_alloc+0x28e/0x3c0 [ 1274.811832] getname_flags+0xc8/0x550 [ 1274.815620] do_sys_open+0x1ce/0x410 [ 1274.819328] ? filp_open+0x60/0x60 [ 1274.822852] ? SyS_pwrite64+0xca/0x140 [ 1274.826727] ? do_syscall_64+0x4c/0x640 [ 1274.830689] ? SyS_open+0x30/0x30 [ 1274.834124] do_syscall_64+0x1d5/0x640 [ 1274.837997] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.843166] RIP: 0033:0x7f25b59dd194 [ 1274.846856] RSP: 002b:00007f25b439eeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1274.854550] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b59dd194 [ 1274.861807] RDX: 0000000000000002 RSI: 00007f25b439efe0 RDI: 00000000ffffff9c [ 1274.869057] RBP: 00007f25b439efe0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1274.876306] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1274.883584] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1274.890848] CPU: 0 PID: 1449 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 14:43:39 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 7) [ 1274.898638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1274.907983] Call Trace: [ 1274.910567] dump_stack+0x1b2/0x281 [ 1274.914195] should_fail.cold+0x10a/0x149 [ 1274.918342] should_failslab+0xd6/0x130 [ 1274.922317] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1274.926987] apparmor_file_alloc_security+0x129/0x800 [ 1274.932179] security_file_alloc+0x66/0xa0 [ 1274.936412] ? selinux_is_enabled+0x5/0x50 [ 1274.940642] get_empty_filp+0x16b/0x3f0 [ 1274.944614] alloc_file+0x23/0x440 [ 1274.948157] __shmem_file_setup.part.0+0x198/0x3c0 [ 1274.953084] ? shmem_create+0x30/0x30 [ 1274.956876] ? __alloc_fd+0x1be/0x490 [ 1274.960677] SyS_memfd_create+0x1fc/0x3c0 [ 1274.964825] ? shmem_fcntl+0x120/0x120 [ 1274.968714] ? __do_page_fault+0x159/0xad0 [ 1274.972941] ? do_syscall_64+0x4c/0x640 [ 1274.975995] FAT-fs (loop2): bogus number of reserved sectors [ 1274.976906] ? shmem_fcntl+0x120/0x120 [ 1274.976917] do_syscall_64+0x1d5/0x640 [ 1274.976931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.995608] RIP: 0033:0x7f5c08b6c279 [ 1274.999313] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1275.004320] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1275.007704] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6c279 [ 1275.007710] RDX: 0000000000000202 RSI: 0000000000000000 RDI: 00007f5c08bc52c4 [ 1275.007716] RBP: 0000000000000001 R08: 0000000000000101 R09: 00007f5c074e11d0 [ 1275.007721] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 1275.007729] R13: 00000000200013c0 R14: 0000000000000202 R15: 0000000020001980 [ 1275.040407] FAULT_INJECTION: forcing a failure. [ 1275.040407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1275.061642] CPU: 1 PID: 1465 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1275.069428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1275.078768] Call Trace: [ 1275.081362] dump_stack+0x1b2/0x281 [ 1275.085149] should_fail.cold+0x10a/0x149 [ 1275.089296] __alloc_pages_nodemask+0x22c/0x2720 [ 1275.094057] ? trace_hardirqs_on+0x10/0x10 [ 1275.098296] ? trace_hardirqs_on+0x10/0x10 [ 1275.102527] ? trace_hardirqs_on+0x10/0x10 [ 1275.106761] ? __lock_acquire+0x5fc/0x3f20 [ 1275.110997] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.114073] FAULT_INJECTION: forcing a failure. [ 1275.114073] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.115839] ? up_write+0x17/0x60 [ 1275.115852] ? generic_file_write_iter+0x2f8/0x650 [ 1275.115862] ? __fsnotify_inode_delete+0x20/0x20 [ 1275.115877] ? iov_iter_init+0xa6/0x1c0 [ 1275.144078] cache_grow_begin+0x91/0x700 [ 1275.148123] ? fs_reclaim_release+0xd0/0x110 [ 1275.152516] ? check_preemption_disabled+0x35/0x240 [ 1275.157522] cache_alloc_refill+0x273/0x350 [ 1275.161837] kmem_cache_alloc+0x333/0x3c0 [ 1275.165970] getname_flags+0xc8/0x550 [ 1275.169762] do_sys_open+0x1ce/0x410 [ 1275.173457] ? filp_open+0x60/0x60 [ 1275.176977] ? SyS_pwrite64+0xca/0x140 [ 1275.180845] ? do_syscall_64+0x4c/0x640 [ 1275.184802] ? SyS_open+0x30/0x30 [ 1275.188240] do_syscall_64+0x1d5/0x640 [ 1275.192114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.197284] RIP: 0033:0x7f25b59dd194 14:43:39 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 6) 14:43:39 executing program 5: r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1275.200972] RSP: 002b:00007f25b439eeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.208674] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b59dd194 [ 1275.215923] RDX: 0000000000000002 RSI: 00007f25b439efe0 RDI: 00000000ffffff9c [ 1275.223171] RBP: 00007f25b439efe0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1275.230420] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1275.237672] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1275.244941] CPU: 0 PID: 1472 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1275.252735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1275.254831] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1275.262077] Call Trace: [ 1275.262094] dump_stack+0x1b2/0x281 [ 1275.262110] should_fail.cold+0x10a/0x149 [ 1275.262122] should_failslab+0xd6/0x130 [ 1275.262134] kmem_cache_alloc+0x28e/0x3c0 [ 1275.262145] getname_flags+0xc8/0x550 [ 1275.262156] do_sys_open+0x1ce/0x410 [ 1275.262166] ? filp_open+0x60/0x60 [ 1275.262173] ? SyS_pwrite64+0xca/0x140 [ 1275.262187] ? do_syscall_64+0x4c/0x640 [ 1275.305264] ? SyS_open+0x30/0x30 [ 1275.308721] do_syscall_64+0x1d5/0x640 [ 1275.312610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.317799] RIP: 0033:0x7f5c08b1f194 [ 1275.321497] RSP: 002b:00007f5c074e0eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.329198] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b1f194 [ 1275.336445] RDX: 0000000000000002 RSI: 00007f5c074e0fe0 RDI: 00000000ffffff9c [ 1275.343689] RBP: 00007f5c074e0fe0 R08: 0000000000000000 R09: 00007f5c074e11d0 14:43:39 executing program 5: r0 = socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 14:43:39 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 7) [ 1275.350938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1275.358182] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:39 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000180)=0xeae, 0x4) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x592, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e24, 0x0, @remote, 0xfffffffa}}}, 0x3a) r4 = accept4$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) [ 1275.396061] FAT-fs (loop2): bogus number of reserved sectors [ 1275.422575] FAULT_INJECTION: forcing a failure. [ 1275.422575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1275.425598] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1275.434379] CPU: 0 PID: 1491 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1275.434387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1275.434391] Call Trace: [ 1275.434406] dump_stack+0x1b2/0x281 [ 1275.434420] should_fail.cold+0x10a/0x149 [ 1275.434434] __alloc_pages_nodemask+0x22c/0x2720 [ 1275.434446] ? trace_hardirqs_on+0x10/0x10 [ 1275.434457] ? trace_hardirqs_on+0x10/0x10 [ 1275.434465] ? trace_hardirqs_on+0x10/0x10 [ 1275.434477] ? __lock_acquire+0x5fc/0x3f20 [ 1275.434492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.434511] ? up_write+0x17/0x60 [ 1275.434520] ? generic_file_write_iter+0x2f8/0x650 [ 1275.434531] ? __fsnotify_inode_delete+0x20/0x20 [ 1275.434540] ? iov_iter_init+0xa6/0x1c0 [ 1275.434552] cache_grow_begin+0x91/0x700 [ 1275.434561] ? fs_reclaim_release+0xd0/0x110 [ 1275.434570] ? check_preemption_disabled+0x35/0x240 [ 1275.434580] cache_alloc_refill+0x273/0x350 [ 1275.434593] kmem_cache_alloc+0x333/0x3c0 [ 1275.434605] getname_flags+0xc8/0x550 [ 1275.434617] do_sys_open+0x1ce/0x410 [ 1275.434626] ? filp_open+0x60/0x60 [ 1275.434634] ? SyS_pwrite64+0xca/0x140 [ 1275.434644] ? do_syscall_64+0x4c/0x640 [ 1275.434653] ? SyS_open+0x30/0x30 [ 1275.555660] do_syscall_64+0x1d5/0x640 [ 1275.559549] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.564732] RIP: 0033:0x7f5c08b1f194 [ 1275.568434] RSP: 002b:00007f5c074e0eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.576136] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b1f194 [ 1275.583484] RDX: 0000000000000002 RSI: 00007f5c074e0fe0 RDI: 00000000ffffff9c [ 1275.590753] RBP: 00007f5c074e0fe0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1275.598017] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1275.601349] FAT-fs (loop4): Unrecognized mount option "smackfstransmute=/&" or missing value [ 1275.605279] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1275.616059] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:39 executing program 4: socketpair(0x22, 0x4, 0x6c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000100)="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", 0x1000, 0xe2}, {&(0x7f0000000040)="684028bd7c975e1b9f77882fe978ad72f411a8bb", 0x14}, {&(0x7f0000001100)="40ef6e9967f5663dc6e5704fd87015b802895fc9387c1b0ce79ed539a3e89259590f90560c4832349d6861851c4403f9120c080986705189de7ad456ddf3bdf08e56cb2aedd0c348db4b78311a4cbac501c53d5a945695e3c17cec60d4b9e0eeeb14170850175cf55473786c77cc9c081fec901a7fa3fd70fb25fe5b067d6f7873c8d7e4575ecc90c3fdb518273080c800617dea7c532e41f567fc770a8a04f90a17a2d31f032424502ec7ca6140e0e026f10f95aaf86b3199d9c60caf2fdb6e7e25dde94fa2546c95d01bf2e10f0375fb9dc80780942377cf", 0xd9, 0xbc}, {&(0x7f0000001200)="14951651a017e9cd64c4129eef94c189bcf9a1d2a145d1e1524ae17de21f094b013bc6081aea9788523f7386a553ad97b1c47e007a24634514bc993d44fc5cd396a1d9a38e28ff142b4c0760e906d9564d4e68b66ca5054c745769ce8caee72bb199918a0e6e1e4ad7765296508c7dfeb93ee73ede015911b313dce5cc6d7e8bd95728848bba991081e3b0cc1f258105aa320c6ca7f5ae664568bd81bdb20e19ab3ec8f79e3975005c2896611cb2329ebd1ef35e718584ff143e5a7ea2b1c46ac686144977e2de668835fd016703ca8f89966f53c4d00630f03f", 0xda, 0x3ff}, {&(0x7f0000001300)="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", 0x1000, 0x3f}, {&(0x7f0000002300)="fab3af0431a41462d7fbd9e834cba3061c70266b5805193c49a60b47cc33f3c21c792a71eeb66c7010a80562779578b2864dcd3ab31e15da7db0dcea98b64d85c5b6d093874d0f", 0x47, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) 14:43:39 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 8) 14:43:39 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 14:43:39 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000180)=0xeae, 0x4) (async) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x592, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x32) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e24, 0x0, @remote, 0xfffffffa}}}, 0x3a) (async) r4 = accept4$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) 14:43:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x20040080) 14:43:39 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 8) 14:43:40 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) [ 1275.743478] FAULT_INJECTION: forcing a failure. [ 1275.743478] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.745373] FAULT_INJECTION: forcing a failure. [ 1275.745373] name failslab, interval 1, probability 0, space 0, times 0 [ 1275.763798] FAT-fs (loop4): Unrecognized mount option "ð6¨*NA#tÇ•%Bž’p”ü‘%PôQVwTÒ¯e§x¡‹9O" or missing value [ 1275.787854] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1275.793279] CPU: 1 PID: 1532 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1275.803346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1275.812690] Call Trace: [ 1275.815274] dump_stack+0x1b2/0x281 [ 1275.818904] should_fail.cold+0x10a/0x149 [ 1275.823054] should_failslab+0xd6/0x130 [ 1275.827028] kmem_cache_alloc+0x28e/0x3c0 [ 1275.831184] get_empty_filp+0x86/0x3f0 [ 1275.835069] path_openat+0x84/0x2970 [ 1275.838796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.843631] ? path_lookupat+0x780/0x780 [ 1275.847698] ? trace_hardirqs_on+0x10/0x10 [ 1275.851937] do_filp_open+0x179/0x3c0 [ 1275.855731] ? may_open_dev+0xe0/0xe0 [ 1275.859529] ? __alloc_fd+0x1be/0x490 [ 1275.863330] ? lock_downgrade+0x740/0x740 [ 1275.867478] ? do_raw_spin_unlock+0x164/0x220 [ 1275.871963] ? _raw_spin_unlock+0x29/0x40 [ 1275.876098] ? __alloc_fd+0x1be/0x490 [ 1275.879900] do_sys_open+0x296/0x410 [ 1275.883609] ? filp_open+0x60/0x60 [ 1275.887141] ? SyS_pwrite64+0xca/0x140 [ 1275.891022] ? do_syscall_64+0x4c/0x640 [ 1275.894987] ? SyS_open+0x30/0x30 [ 1275.898433] do_syscall_64+0x1d5/0x640 [ 1275.902322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.907501] RIP: 0033:0x7f25b59dd194 [ 1275.911199] RSP: 002b:00007f25b439eeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1275.918903] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b59dd194 [ 1275.926165] RDX: 0000000000000002 RSI: 00007f25b439efe0 RDI: 00000000ffffff9c [ 1275.933420] RBP: 00007f25b439efe0 R08: 0000000000000000 R09: 00007f25b439f1d0 14:43:40 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000180)=0xeae, 0x4) (async) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x4, {0xa, 0x4e21, 0x592, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}}, 0x32) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (rerun: 32) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x4, 0x4, {0xa, 0x4e24, 0x0, @remote, 0xfffffffa}}}, 0x3a) (async) r4 = accept4$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) 14:43:40 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 14:43:40 executing program 5: r0 = socket(0x0, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 14:43:40 executing program 5: r0 = socket(0x0, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1275.940676] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1275.947936] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1275.955497] CPU: 0 PID: 1531 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1275.963295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1275.972641] Call Trace: [ 1275.975227] dump_stack+0x1b2/0x281 [ 1275.978852] should_fail.cold+0x10a/0x149 [ 1275.983002] should_failslab+0xd6/0x130 [ 1275.986974] kmem_cache_alloc+0x28e/0x3c0 [ 1275.991122] get_empty_filp+0x86/0x3f0 [ 1275.995017] path_openat+0x84/0x2970 [ 1275.998731] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.003573] ? path_lookupat+0x780/0x780 [ 1276.007629] ? trace_hardirqs_on+0x10/0x10 [ 1276.011864] do_filp_open+0x179/0x3c0 [ 1276.015662] ? may_open_dev+0xe0/0xe0 [ 1276.019456] ? __alloc_fd+0x1be/0x490 [ 1276.023257] ? lock_downgrade+0x740/0x740 [ 1276.027401] ? do_raw_spin_unlock+0x164/0x220 [ 1276.031893] ? _raw_spin_unlock+0x29/0x40 [ 1276.036034] ? __alloc_fd+0x1be/0x490 [ 1276.039836] do_sys_open+0x296/0x410 [ 1276.043547] ? filp_open+0x60/0x60 [ 1276.047096] ? SyS_pwrite64+0xca/0x140 [ 1276.050968] ? do_syscall_64+0x4c/0x640 [ 1276.054925] ? SyS_open+0x30/0x30 [ 1276.058357] do_syscall_64+0x1d5/0x640 [ 1276.062224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.067392] RIP: 0033:0x7f5c08b1f194 [ 1276.071089] RSP: 002b:00007f5c074e0eb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1276.078798] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b1f194 [ 1276.086043] RDX: 0000000000000002 RSI: 00007f5c074e0fe0 RDI: 00000000ffffff9c 14:43:40 executing program 5: r0 = socket(0x0, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 14:43:40 executing program 4: socketpair(0x22, 0x4, 0x6c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000100)="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", 0x1000, 0xe2}, {&(0x7f0000000040)="684028bd7c975e1b9f77882fe978ad72f411a8bb", 0x14}, {&(0x7f0000001100)="40ef6e9967f5663dc6e5704fd87015b802895fc9387c1b0ce79ed539a3e89259590f90560c4832349d6861851c4403f9120c080986705189de7ad456ddf3bdf08e56cb2aedd0c348db4b78311a4cbac501c53d5a945695e3c17cec60d4b9e0eeeb14170850175cf55473786c77cc9c081fec901a7fa3fd70fb25fe5b067d6f7873c8d7e4575ecc90c3fdb518273080c800617dea7c532e41f567fc770a8a04f90a17a2d31f032424502ec7ca6140e0e026f10f95aaf86b3199d9c60caf2fdb6e7e25dde94fa2546c95d01bf2e10f0375fb9dc80780942377cf", 0xd9, 0xbc}, {&(0x7f0000001200)="14951651a017e9cd64c4129eef94c189bcf9a1d2a145d1e1524ae17de21f094b013bc6081aea9788523f7386a553ad97b1c47e007a24634514bc993d44fc5cd396a1d9a38e28ff142b4c0760e906d9564d4e68b66ca5054c745769ce8caee72bb199918a0e6e1e4ad7765296508c7dfeb93ee73ede015911b313dce5cc6d7e8bd95728848bba991081e3b0cc1f258105aa320c6ca7f5ae664568bd81bdb20e19ab3ec8f79e3975005c2896611cb2329ebd1ef35e718584ff143e5a7ea2b1c46ac686144977e2de668835fd016703ca8f89966f53c4d00630f03f", 0xda, 0x3ff}, {&(0x7f0000001300)="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", 0x1000, 0x3f}, {&(0x7f0000002300)="fab3af0431a41462d7fbd9e834cba3061c70266b5805193c49a60b47cc33f3c21c792a71eeb66c7010a80562779578b2864dcd3ab31e15da7db0dcea98b64d85c5b6d093874d0f", 0x47, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) socketpair(0x22, 0x4, 0x6c, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000100)="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", 0x1000, 0xe2}, {&(0x7f0000000040)="684028bd7c975e1b9f77882fe978ad72f411a8bb", 0x14}, {&(0x7f0000001100)="40ef6e9967f5663dc6e5704fd87015b802895fc9387c1b0ce79ed539a3e89259590f90560c4832349d6861851c4403f9120c080986705189de7ad456ddf3bdf08e56cb2aedd0c348db4b78311a4cbac501c53d5a945695e3c17cec60d4b9e0eeeb14170850175cf55473786c77cc9c081fec901a7fa3fd70fb25fe5b067d6f7873c8d7e4575ecc90c3fdb518273080c800617dea7c532e41f567fc770a8a04f90a17a2d31f032424502ec7ca6140e0e026f10f95aaf86b3199d9c60caf2fdb6e7e25dde94fa2546c95d01bf2e10f0375fb9dc80780942377cf", 0xd9, 0xbc}, {&(0x7f0000001200)="14951651a017e9cd64c4129eef94c189bcf9a1d2a145d1e1524ae17de21f094b013bc6081aea9788523f7386a553ad97b1c47e007a24634514bc993d44fc5cd396a1d9a38e28ff142b4c0760e906d9564d4e68b66ca5054c745769ce8caee72bb199918a0e6e1e4ad7765296508c7dfeb93ee73ede015911b313dce5cc6d7e8bd95728848bba991081e3b0cc1f258105aa320c6ca7f5ae664568bd81bdb20e19ab3ec8f79e3975005c2896611cb2329ebd1ef35e718584ff143e5a7ea2b1c46ac686144977e2de668835fd016703ca8f89966f53c4d00630f03f", 0xda, 0x3ff}, {&(0x7f0000001300)="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", 0x1000, 0x3f}, {&(0x7f0000002300)="fab3af0431a41462d7fbd9e834cba3061c70266b5805193c49a60b47cc33f3c21c792a71eeb66c7010a80562779578b2864dcd3ab31e15da7db0dcea98b64d85c5b6d093874d0f", 0x47, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) (async) [ 1276.093293] RBP: 00007f5c074e0fe0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1276.100562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1276.107816] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:40 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 9) 14:43:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64]) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x20040080) 14:43:40 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 9) 14:43:40 executing program 5: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1276.201146] FAULT_INJECTION: forcing a failure. [ 1276.201146] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.225232] FAULT_INJECTION: forcing a failure. [ 1276.225232] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.229668] FAT-fs (loop4): Unrecognized mount option "ð6¨*NA#tÇ•%Bž’p”ü‘%PôQVwTÒ¯e§x¡‹9O" or missing value 14:43:40 executing program 5: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 14:43:40 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x202abf6a181f8648}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x20, 0x1ff], 0x8}) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2c80) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0), &(0x7f0000000200)=[0x5, 0x7, 0x4000000000000006, 0x3f, 0xa1db, 0x9, 0x5]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) [ 1276.237990] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1276.294932] CPU: 0 PID: 1588 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1276.299052] FAT-fs (loop4): Unrecognized mount option "ð6¨*NA#tÇ•%Bž’p”ü‘%PôQVwTÒ¯e§x¡‹9O" or missing value [ 1276.302738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1276.302742] Call Trace: [ 1276.302757] dump_stack+0x1b2/0x281 [ 1276.302771] should_fail.cold+0x10a/0x149 [ 1276.302786] should_failslab+0xd6/0x130 [ 1276.302800] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1276.302816] ? loop_get_status64+0x100/0x100 [ 1276.302828] __kthread_create_on_node+0xbe/0x3a0 [ 1276.302839] ? kthread_park+0x130/0x130 [ 1276.302861] ? loop_get_status64+0x100/0x100 [ 1276.302870] kthread_create_on_node+0xa8/0xd0 [ 1276.302881] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1276.302893] ? __lockdep_init_map+0x100/0x560 [ 1276.302903] ? __lockdep_init_map+0x100/0x560 [ 1276.302915] lo_ioctl+0xcd9/0x1cd0 [ 1276.302927] ? loop_set_status64+0xe0/0xe0 [ 1276.302938] blkdev_ioctl+0x540/0x1830 [ 1276.302948] ? blkpg_ioctl+0x8d0/0x8d0 [ 1276.302955] ? trace_hardirqs_on+0x10/0x10 [ 1276.302967] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1276.403118] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1276.408137] block_ioctl+0xd9/0x120 [ 1276.411768] ? blkdev_fallocate+0x3a0/0x3a0 [ 1276.416083] do_vfs_ioctl+0x75a/0xff0 [ 1276.419880] ? lock_acquire+0x170/0x3f0 [ 1276.423848] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.428254] ? __fget+0x265/0x3e0 [ 1276.431704] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.435694] ? security_file_ioctl+0x83/0xb0 [ 1276.440099] SyS_ioctl+0x7f/0xb0 [ 1276.443461] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.447431] do_syscall_64+0x1d5/0x640 [ 1276.451319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.456502] RIP: 0033:0x7f5c08b6c037 [ 1276.460315] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.468017] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1276.475280] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1276.482542] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 14:43:40 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x202abf6a181f8648}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x20, 0x1ff], 0x8}) (async) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2c80) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0), &(0x7f0000000200)=[0x5, 0x7, 0x4000000000000006, 0x3f, 0xa1db, 0x9, 0x5]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) 14:43:40 executing program 5: r0 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1276.489806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1276.497068] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1276.516797] CPU: 0 PID: 1592 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1276.524604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1276.533949] Call Trace: [ 1276.536530] dump_stack+0x1b2/0x281 [ 1276.540156] should_fail.cold+0x10a/0x149 [ 1276.544304] should_failslab+0xd6/0x130 [ 1276.548277] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1276.552946] apparmor_file_alloc_security+0x129/0x800 [ 1276.558143] security_file_alloc+0x66/0xa0 [ 1276.562386] ? selinux_is_enabled+0x5/0x50 [ 1276.566622] get_empty_filp+0x16b/0x3f0 [ 1276.570591] path_openat+0x84/0x2970 [ 1276.574306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.579150] ? path_lookupat+0x780/0x780 [ 1276.583214] ? trace_hardirqs_on+0x10/0x10 [ 1276.587451] do_filp_open+0x179/0x3c0 [ 1276.591246] ? may_open_dev+0xe0/0xe0 [ 1276.595042] ? __alloc_fd+0x1be/0x490 [ 1276.598842] ? lock_downgrade+0x740/0x740 [ 1276.602985] ? do_raw_spin_unlock+0x164/0x220 [ 1276.607474] ? _raw_spin_unlock+0x29/0x40 [ 1276.611633] ? __alloc_fd+0x1be/0x490 [ 1276.615434] do_sys_open+0x296/0x410 [ 1276.619144] ? filp_open+0x60/0x60 [ 1276.622681] ? SyS_pwrite64+0xca/0x140 [ 1276.626567] ? do_syscall_64+0x4c/0x640 [ 1276.630537] ? SyS_open+0x30/0x30 [ 1276.633981] do_syscall_64+0x1d5/0x640 [ 1276.637858] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:40 executing program 5: r0 = socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) 14:43:40 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x202abf6a181f8648}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x20, 0x1ff], 0x8}) (async) socket(0x10, 0x3, 0x0) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2c80) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000240)={&(0x7f00000001c0), &(0x7f0000000200)=[0x5, 0x7, 0x4000000000000006, 0x3f, 0xa1db, 0x9, 0x5]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) 14:43:40 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 10) [ 1276.643032] RIP: 0033:0x7f25b59dd194 [ 1276.646732] RSP: 002b:00007f25b439eeb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1276.654417] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b59dd194 [ 1276.661665] RDX: 0000000000000002 RSI: 00007f25b439efe0 RDI: 00000000ffffff9c [ 1276.668911] RBP: 00007f25b439efe0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1276.676162] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1276.683409] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:40 executing program 4: socketpair(0x22, 0x4, 0x6c, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000100)="f036a82a4e412374c79525429e927094fc912550f48f51567754d27faf65a77807a18b394f0300a065df3f0b0771551f67ef46180fe181c79c692442e35f492f0e1d4af51c00d18b135f9be2a01ba1b4a91035840f9dec5f672bb6d2a21af115f47a08ac33941170550030afc256ef5e12842aad20b74bccda93f722646dcb9c9ee0fef0474dfe08a1476ccdc0dcccd231ce430fcbd6a64c37e317c35d9360d5f61211263071b235f9555213d031da8e652261d64f2a6be3aa78b85aa50e3ae81e6931601bf62abcb1a0a8257daeb3bcac69c56d0d6871208670bc6679d6f6d8d332b34e7ca37ace56a363ca626b5c75b90357ba9ec5e4a3d1bb168231866ab806ea2c69912325944e0d8453550e7c2134bbe1953681d17a70dd028d28cb5d6782bde936f6cf1fdb106ddedc0f770119dfa6c3f60c36c02f068455a00e4bb58e4024f6845b6e445043df1e9e2b7fd7ab03f4519ce6bdc2e7c023a0f96969418fbae0dda45b966f804e1dd7cfd7abe4ee9043b08d09b7bfb1d284c9fd019dead3aebb92e62cece9051574f6ac998849d85c645abe6076d578f624d93e95807d7cb9a64f7d46a9a5c5c9cf7867f34139982492c47ba0c4fd6159f2587d8b909db1a93dec1b9c89937d6f38de70134b16a83861011e862305515611ee561f40a74ddaef8848ffab4e5d1ccc1003a7339d4465709c4f9fcd45dcc8bbad5d331ecf89668b1531765f7f2fba070de8ce1ecda1c330a980d810019e195390dce7ac57905be377b2a36517d14584d29906e369ded19defbb2934e24c2b396a67abac274ca61b34285f77c105a2c3f9f15c84faf6d7270ca35ba5e4eb71ddd09d2750ffc7e2ab1f9fdd0a31897de6663e8bd9fd3e21e031d134acede7d4209d86357f24ec8f1c7cff90095824901190d06f56bd52c3f4d3a2c8adb3856e3ab6d90be3b858f5a75a76bf3201e8d8910679593635268cef2b5f1b33090df080a11b81e4562d132c3ef810b13553628aa11bd37beeaf36d3eb0cd2e8556e10665a43dedfe7b4893652486b852ca699c3deaf33ec13d91b1dfe531fa5f8864133906d96080994577796ccc052023e311acf7d8f0eac34acc862645ce14329a77362b2f60806ec0af490c57703ccb23ec1790e8a9b6904f92051851b14859e4102ea4c70fcbc3c1184eb6b5fa30339f08e04cdd30721e04ffed5d2ed431a93c0b9452b78c73c01e103919dc6813a32f9f53126aca4713383c3405621af85a2677f738e09e94180fb0a1627a05388fe54b3fdadfd379903925213883650395ea9e6b29e1b24e4fd77b9792f110cfef7648dd9e259e28fbb4c47434134811ac10c788b70e29bc6f007699386f68bb3572bc74f79c666d2e771c3ba47afcf6207d72c88a2b8be4e9c6bc8b917f8bced6be30613f4cb27b74419e3f5b3be40fe23cb7201742fb168cd7f6a9b44fcc46bc255b99b83aed0a02d271cf33791beb35b308a975a0d2cbf557298e3feeef05eb26186e475fd0cb13f4d0b1216e87c5423c42d17994f32e843f3826950316a71a26b520592800e4122adadd48b38a480cbf49dec38eba290886c65304b326c72d59acda1134a466800318b846aadc71f53868ad119d30434cd17fb75e4bb3880ca263a187a7273c8131deac63f5c83a0b338bf1aa85924833f1fc67a7200f856db21a3d70f23161bbc25835dd4d4f5f86fd4352a003259a971676ce6214b650b97a772b6164ae0d9e8d0383bc833e3728878c84d84f8eb526103eec34a5107f4f31967fcf7f9751012913e6b82c5ac425ca599e01ed88380adeb735ab4e5c029d6b5d2ec5bab65d8f5bcabc9b67706d25b42f7d51d6704feb45a661403e8c61116e6d2a56bd5fcdcf6285ea5b6e7435e6e19bcc9c255e5c13b75a0547e9c1523ede6a3dd4b85620b0461f1d588f529f0b2d6fbbf9c9a89a29899447994dd3be3b2e5c31b7c4797d73c50ceca8c2c75961a49fc80981c513273f5c150fb6d7a7a5e14ff985cb43c082eed688091f841d7c2cc118689762fb0d998095525e35fbc90423c8cedaf7b05d33ef49968b61b8b169466cf4fd66017fdbfb72123550e28f265065cd7a4a38d2d34a8c208d0d00873171b01c0008c60d4f3e760db1bbce2c73b75754bbb91efe5b31677fa9b8a659dd9cb06181cdd7387cb0b6e7c8fc3a3a7e97e7b3901673fccf42eb48e360081354e4043cff67255e05f5031bf412a5dfd2392719c8339ec707714aec3d24bcee9426e755e29249947bfe2759e72d5af41752cb194ea0d29da1f6b5313bf9a38ef60e8170dfced2f8b6efc36d24d60eb466c727f6d6c3bb6c9b58c7b0b539197133c7d1e29a907ed4ad534cdb87c8b28f7a02d727ea5cd90807f08d83977c19e3e8b2c98e78e9c7ffcb057b8b1fb6ae34214d1a30697b7515d866c948eca632ab12d2f757790400371396e40ccd529f025e4367919963f6049884321cfeb7462ae7c371f2fdbd970a428aa8c7d41519b2eae30957433c89f7ebfba26bd5fbc701a86561dcf6f3fd10eac2e8977f2f1668641b1da292e3899980b29df4371873378dd147fae93abd9a639db4f00f4429728a805568dafcf5a25199a1865a3b4b2d6c570166987d69bef5e3b5fffcbc73fe7513f666ed33a362a862a653b4ab53154db554b89186aba154d791f39d4e970edc24c43c272d4e2eb3638b3add81fbc2e3d428fe6726bef1130c99063d264a77de6e2e8f42585fd16a87aeab4fcdbf942b469f0c76366080620d486744e9baf85e169771d4a9aa0e0ee86dfaedaeb1dba3dd46d3e903a50eaa1000172c9ad15107549acbc0f677d533f03fa6d426b43392164cf966ac8b2550bd83e8e4965d276ae1593d46be3075e0ca83b84bf1813674034b90ba3e4a2378815df0a1d1b4cb2571244cd4a7512100245963f927e08fbed1001b1894635594f2c4c34529a7a987e39eb235120d80d4efbe420d0fdb6ae44a9c5571910a44e0d79753421867bee4c3bbcd2fb76bb4f06d535fa8a306418b35757824c47c20235f4a6f4feed5c1bd3578f4df05737af4302085639551ebf2d051b3a34c7b4413b68f8f5d8361cdfc0aede13205fdb6725de8d63afa04eeaec5b401219becdbcf91e195d89ab1d6f6e65fedad48d41277173e8460f878a0f6df976740a7a250fdd24582d0fc6318a2cbd42da7a470405771d0b540360c1528d937255c3fdb252880dbb77f86a63e46794e37463fa48325ee311b650e8a45ea346fd2271eae0b7b6c55a37eea25a2839e43b51c3f44229a31da3aa6e48cc7ae2cc89d40d4ee74b7e43116b6883a3ec31672997f1ea8fbd9c71fc38a9b449f6cf9e68c6fcc2c400b8db7925716c2c64dfd91df91fb98f63083337d5f092a10145690b2b11cd84677e8f4c28ecf0b7a5c98e8086bae6e0ce2b1537187c3166392f520523f8c9fe708b9302fd98d07ec6c48493cb098fedcedb53cd9ca98b0ce250d71865e9bc4e3aa385de582aee889f2952c9144c4fe954e65e596312bb00f9c4baef16458fa28ea191acbc2f7f754c5cb1bbe949ed655c4890d2314ccbf56fccbba4b5466a5834cf0880deb9aadda735758797dbc1135acd72c1b853f2ad174e575b46db6c006806e4586052006d86c81b6347bd12cbce3e967334220c5d98fca722cb8b13dfe429a58f6c58845841c38e89993c8ba2264f79b054d7acbcc55100fd935fa33f9a96dbff459e7c2af70c6373d3aa0421d1a9f35f383d84d36c9998e5c0ddc2f01878e83e54f03c44f813893756a123dd87ad14cedfa6f4eba5b6ca400accf03f30fa784a8ab2f6cae5721b765743d1d74d6c6fb3d3fa4f7fc2708adbaddbaeddfa475188ef22247a581e0ca914dca50b550fd87f68898f073cf681d5165c0f521f498d5258516fd6d3505407df6e7c3fe691aae7e5114e3fa25277ebefb1fe2fa1c44085aa6769abb51eaacec41422d27e125c6b307e0794ca027687a155a87d0c79e6d04b6371611c7d4c3230d41c9372dbee2b68e7dc0fda7f3f8f6ec1e221a8f397c382fb549689553f819d128f19570135f992cd19d6e6d535e34c96efdd2a330bf1a9bf3a9024593475618ea7d59e7da792502d42dbcd3d0986e4be8bbcd796032a4edb97ad0c50d4e9a8b520eb94351c92ac9cbdb627c59d5e45a4886f5ccabf8036624ae11d0cdf6131f45baedca1f7b0f33efced9a84dae2731a08d18f28e594243f26b35e9b8e83fb666b11e52e7f267881c325bfc22938bae2600c89e45c016c594134d0ca770790fc3cdd7e3481a5ce8ab8a806255677ffa96dedca7993a780b690140327e543f47f9fcc0bf592dd2e36744cfb8d3710b881635c7503f1b5961f07a6be1dcc8ad4f03ffd646bd34ae206636a26d66c6377c077ab350388aa5ae75c296c8b3a28d95c273e6a39c5c8104df1c36245f9f4c8076bc3e85f8113b33dabc00c5b5dcdbe0daa4aab9cf5c3449b6c52df7cb57b51cd8f10dc82d607e4509bc8a3e8a15143f68959fa6d0a384d5a382faab373a075bb9404153ac588ea30f5ff7ab54e369bd046afbed57b1358e31f0f321e0a73c1d534f544b8a03c4e7068f3f9fef7ae8c773bd97a83881dd2a913934cf7814f61bd57838acd6dd317b4c6bc3948fa7fd9dec0e7ba9eb33ba76044e6ea9b0b81d3803c6cd8f77f0b58c4549d1b219cadbbd081ba593a2d66a2cf3652858e03921ea25c99145d7d810053b0cd6a08364cec5d8db86c4e83593e2526439d3ff2e2e6e3435e46f1bd2b9c52dd37bb7add4cd2f4ff5d3cdfea6dbca827ff7ce4772ad9d78bc903abbf6f3079f9a6e20c14be09ead9e9d644cbb292bbd275c382e3fe23678bb6c3916c4027b5fd88cf2caee54f6d6102ebcaae3eefc1607648e27810132618324c92308c33a1f0c285e93510b304d5eb054a3358560407dbd4b0999bcd8aae70e3cac624d29274436966946b0269abd273eb4af16a914b36300284db6c173413707eaed6f8695620e320e1290481a9ecb9a6601970d46bee82d6a73f24624d1cb2791fea9ef14162f2cafd3c752e2e180dcfa7734954b1ef21f6030fc7c3a211e33ecf52a6c98295ee1311fff98ab442c89383f503c3796f8f9440f02e4d6a169cc84fefb28059f60e144782de23c0c293c7978cb554fae35d11f2ddf640e2cad7d0876b244cbd2b2761276ba978a397be9588eda6a4c5f434191dcd3f6c464fedc8fa61d1996191928f0db8ef6264ef2296dc4f478b20235e3c9026a6c6199605747408264ceacc01830b516c3b65826b125a40da256553087edefd181ec8bd4b865ee79501c41337327d58a977d4590dd88d0bc03fe453c01ee1e538927987554af32f41065aef1fd253c8d2f6712e807ab6fb31319900d356c156e59985be267e2f4b4965d3e6a3d00d42106a110cf22d8d77cdbd017480fc3ebe12aa2372d1ae0cf6e3b247abed18a49087039d1d956b5ca1fbb95cce8c6f6273bd500d3e1035679baaca80b2b889141aceef3425b54f04f650f766449219961a031b8f99b912d2ef510af11505f9beadae78fb3b0504362a3a5a9f43b92af4460e0612b8f43c178841567230fc6a65092acc24b39d70213986f7ddffd08571f49b33c0abe1dfc178a125c2db9e3c88631aa5245576f0e230b14d4c67b078ade529f804682d2a818bbad3cc47601c3ce7e7f2089f021639f0a2687788951b30a0c0352e97eb7a19b4c0bdc7b47f6e0431529a9465510388e3f0a17ca2d298e267efea29bec0b107ea9d22f31eea0967755bba848a095ad6854f5041a8963d6cdaccbedbf4d6", 0x1000, 0xe2}, {&(0x7f0000000040)="684028bd7c975e1b9f77882fe978ad72f411a8bb", 0x14}, {&(0x7f0000001100)="40ef6e9967f5663dc6e5704fd87015b802895fc9387c1b0ce79ed539a3e89259590f90560c4832349d6861851c4403f9120c080986705189de7ad456ddf3bdf08e56cb2aedd0c348db4b78311a4cbac501c53d5a945695e3c17cec60d4b9e0eeeb14170850175cf55473786c77cc9c081fec901a7fa3fd70fb25fe5b067d6f7873c8d7e4575ecc90c3fdb518273080c800617dea7c532e41f567fc770a8a04f90a17a2d31f032424502ec7ca6140e0e026f10f95aaf86b3199d9c60caf2fdb6e7e25dde94fa2546c95d01bf2e10f0375fb9dc80780942377cf", 0xd9, 0xbc}, {&(0x7f0000001200)="14951651a017e9cd64c4129eef94c189bcf9a1d2a145d1e1524ae17de21f094b013bc6081aea9788523f7386a553ad97b1c47e007a24634514bc993d44fc5cd396a1d9a38e28ff142b4c0760e906d9564d4e68b66ca5054c745769ce8caee72bb199918a0e6e1e4ad7765296508c7dfeb93ee73ede015911b313dce5cc6d7e8bd95728848bba991081e3b0cc1f258105aa320c6ca7f5ae664568bd81bdb20e19ab3ec8f79e3975005c2896611cb2329ebd1ef35e718584ff143e5a7ea2b1c46ac686144977e2de668835fd016703ca8f89966f53c4d00630f03f", 0xda, 0x3ff}, {&(0x7f0000001300)="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", 0x1000, 0x3f}, {&(0x7f0000002300)="fab3af0431a41462d7fbd9e834cba3061c70266b5805193c49a60b47cc33f3c21c792a71eeb66c7010a80562779578b2864dcd3ab31e15da7db0dcea98b64d85c5b6d093874d0f", 0x47, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) socketpair(0x22, 0x4, 0x6c, &(0x7f0000000000)) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000002380)=[{&(0x7f0000000100)="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", 0x1000, 0xe2}, {&(0x7f0000000040)="684028bd7c975e1b9f77882fe978ad72f411a8bb", 0x14}, {&(0x7f0000001100)="40ef6e9967f5663dc6e5704fd87015b802895fc9387c1b0ce79ed539a3e89259590f90560c4832349d6861851c4403f9120c080986705189de7ad456ddf3bdf08e56cb2aedd0c348db4b78311a4cbac501c53d5a945695e3c17cec60d4b9e0eeeb14170850175cf55473786c77cc9c081fec901a7fa3fd70fb25fe5b067d6f7873c8d7e4575ecc90c3fdb518273080c800617dea7c532e41f567fc770a8a04f90a17a2d31f032424502ec7ca6140e0e026f10f95aaf86b3199d9c60caf2fdb6e7e25dde94fa2546c95d01bf2e10f0375fb9dc80780942377cf", 0xd9, 0xbc}, {&(0x7f0000001200)="14951651a017e9cd64c4129eef94c189bcf9a1d2a145d1e1524ae17de21f094b013bc6081aea9788523f7386a553ad97b1c47e007a24634514bc993d44fc5cd396a1d9a38e28ff142b4c0760e906d9564d4e68b66ca5054c745769ce8caee72bb199918a0e6e1e4ad7765296508c7dfeb93ee73ede015911b313dce5cc6d7e8bd95728848bba991081e3b0cc1f258105aa320c6ca7f5ae664568bd81bdb20e19ab3ec8f79e3975005c2896611cb2329ebd1ef35e718584ff143e5a7ea2b1c46ac686144977e2de668835fd016703ca8f89966f53c4d00630f03f", 0xda, 0x3ff}, {&(0x7f0000001300)="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", 0x1000, 0x3f}, {&(0x7f0000002300)="fab3af0431a41462d7fbd9e834cba3061c70266b5805193c49a60b47cc33f3c21c792a71eeb66c7010a80562779578b2864dcd3ab31e15da7db0dcea98b64d85c5b6d093874d0f", 0x47, 0xfff}], 0x0, &(0x7f0000000100)=ANY=[]) (async) 14:43:40 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 10) 14:43:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x20040080) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40024}, 0x20040080) (async) [ 1276.716394] print_req_error: I/O error, dev loop4, sector 0 [ 1276.757816] FAT-fs (loop4): Unrecognized mount option "ð6¨*NA#tÇ•%Bž’p”ü‘%PôQVwTÒ¯e§x¡‹9O" or missing value [ 1276.773058] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1276.781382] FAULT_INJECTION: forcing a failure. [ 1276.781382] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.794138] CPU: 0 PID: 1662 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1276.802103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1276.811448] Call Trace: [ 1276.814029] dump_stack+0x1b2/0x281 [ 1276.817678] should_fail.cold+0x10a/0x149 [ 1276.821825] should_failslab+0xd6/0x130 [ 1276.825796] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1276.830459] ? loop_get_status64+0x100/0x100 [ 1276.834952] __kthread_create_on_node+0xbe/0x3a0 [ 1276.839706] ? kthread_park+0x130/0x130 [ 1276.843688] ? loop_get_status64+0x100/0x100 [ 1276.848091] kthread_create_on_node+0xa8/0xd0 [ 1276.852580] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1276.857595] ? __lockdep_init_map+0x100/0x560 [ 1276.862089] ? __lockdep_init_map+0x100/0x560 [ 1276.866582] lo_ioctl+0xcd9/0x1cd0 [ 1276.870123] ? loop_set_status64+0xe0/0xe0 [ 1276.874355] blkdev_ioctl+0x540/0x1830 [ 1276.878237] ? blkpg_ioctl+0x8d0/0x8d0 [ 1276.882116] ? trace_hardirqs_on+0x10/0x10 [ 1276.884177] FAULT_INJECTION: forcing a failure. [ 1276.884177] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.886343] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1276.886355] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1276.886372] block_ioctl+0xd9/0x120 [ 1276.911246] ? blkdev_fallocate+0x3a0/0x3a0 [ 1276.915568] do_vfs_ioctl+0x75a/0xff0 [ 1276.919352] ? lock_acquire+0x170/0x3f0 [ 1276.923312] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.927713] ? __fget+0x265/0x3e0 [ 1276.931165] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.935129] ? security_file_ioctl+0x83/0xb0 [ 1276.939528] SyS_ioctl+0x7f/0xb0 [ 1276.942879] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.946846] do_syscall_64+0x1d5/0x640 [ 1276.950724] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.955905] RIP: 0033:0x7f5c08b6c037 [ 1276.959596] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.967294] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1276.974548] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1276.981802] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1276.989049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1276.996299] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1277.003565] CPU: 1 PID: 1673 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1277.011359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1277.020705] Call Trace: [ 1277.023364] dump_stack+0x1b2/0x281 [ 1277.026974] should_fail.cold+0x10a/0x149 [ 1277.031109] should_failslab+0xd6/0x130 [ 1277.035065] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1277.039716] ? loop_get_status64+0x100/0x100 [ 1277.044108] __kthread_create_on_node+0xbe/0x3a0 [ 1277.048841] ? kthread_park+0x130/0x130 [ 1277.052803] ? loop_get_status64+0x100/0x100 [ 1277.057188] kthread_create_on_node+0xa8/0xd0 [ 1277.061663] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1277.066663] ? __lockdep_init_map+0x100/0x560 [ 1277.071138] ? __lockdep_init_map+0x100/0x560 [ 1277.075615] lo_ioctl+0xcd9/0x1cd0 [ 1277.079146] ? loop_set_status64+0xe0/0xe0 [ 1277.083361] blkdev_ioctl+0x540/0x1830 [ 1277.087228] ? blkpg_ioctl+0x8d0/0x8d0 [ 1277.091100] ? trace_hardirqs_on+0x10/0x10 [ 1277.095317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1277.100398] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1277.105395] block_ioctl+0xd9/0x120 [ 1277.109003] ? blkdev_fallocate+0x3a0/0x3a0 [ 1277.113316] do_vfs_ioctl+0x75a/0xff0 [ 1277.117100] ? lock_acquire+0x170/0x3f0 [ 1277.121066] ? ioctl_preallocate+0x1a0/0x1a0 [ 1277.125452] ? __fget+0x265/0x3e0 [ 1277.128887] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.132842] ? security_file_ioctl+0x83/0xb0 [ 1277.137229] SyS_ioctl+0x7f/0xb0 [ 1277.140606] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.144570] do_syscall_64+0x1d5/0x640 [ 1277.148449] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1277.153623] RIP: 0033:0x7f25b5a2a037 14:43:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000040), 0x8, 0xffffffffffffffff, 0xf}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 14:43:41 executing program 5: r0 = socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) [ 1277.157315] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.165008] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1277.172258] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1277.179510] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1277.186758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1277.194006] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x422}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) 14:43:41 executing program 5: r0 = socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) 14:43:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000040), 0x8, 0xffffffffffffffff, 0xf}) (async) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 14:43:41 executing program 5: socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 14:43:41 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000040), 0x8, 0xffffffffffffffff, 0xf}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x5000, &(0x7f0000000040), 0x8, 0xffffffffffffffff, 0xf}) (async) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) 14:43:41 executing program 4: r0 = mq_open(&(0x7f0000000000)='@}/]:{{\x00', 0x80, 0x164, &(0x7f0000000040)={0x7, 0x3, 0x134f, 0x3}) mq_timedreceive(r0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000280)="6b8a5b45cbbec3afa0c578ebc1507abcbb62dc158991e2e5a1e23628bb366e1cf59ad24d75e834d80edc6901bb7dc3b6f685ba8f4964e3389fc726cdc8475f3e95ffdb97f6c46cbef474fbfb8b41d1e90acdf92821e53584e7fcc58ce42688eb973d46f07b7b159abccf26d0bbc9097b19026f0be455c0760abab0aa639ec1c85ee1320b6eb9955e6e5a1eaaa071a897751a21bec909cf8dfeaa6ddfe40d35e5f23ff3fec0dc68c514f78569c842a4c7f11ab0716c43d4550b19e6bd136188f21705f6a3279ce5976aaa49e4b7d281a15895ffd9496496f1281332015cafaf2db8590f56500250ac7ace", 0xea, 0x9}, {&(0x7f00000001c0)="b243ebc50708b286fe371e4cdb048c9508f03ddc45ef177cdd7e997fcc9afc9e0650c817571c9f29b46a7695b43da65c6976f55632eb0ac4bf3d215903ba", 0x3e, 0x5}, {&(0x7f0000000380)="35d67ba715caaad83241b7815086a73e3173a3c883d2744ee5a5fd9d38a1852c4b206be8a88f603096a793c2435a202e477a350d1158362acf6aa9de24d99ac5b48d4a33f767f44285da5a456c0523efc04e9910c878c787d6a8c954338c52696c4462a0fe330c776c8280a9e6c4c5e679f5f956b0871c2db4402dbf72e6c1dd55933702adf2d9d8ebaa2a69af2923f391a190be38fb98911265ddb0bb4328ec52b62bf2f759d7f52e832cad9cf7a5d5076475a42486", 0xb6, 0x400}, {&(0x7f0000000440)="76c7c5184b17f1ebda77db5a33bd363e595bf22987adefce9f49b7c91cc1bc9ca34e743c8804120d7b3e1d289442ec3215b4a594872ee4634e51161d2973bc7c24e5b9167032aa30e509fdcac7008e6c2b300c488148ee5f0f47f080fc9e7fd232cfde53bdd164463438503059e3046048dcebe5e3d36adfdbed510970d7cdec0314e95d6b36cc8fa546c4047b2c99c2cf9dc269b335b3e4b7f97c6014d4b66906285f15bfde90c027c56ba8a4eb2950bf2761b95d9b8a74dd61774f7ad208aafa6b61f2bee394aea4184c7e74afee62d67712625dd369bbe35305ac9a74947e", 0xe0, 0x1}, {&(0x7f0000000540)="9a5a5970460fbc2afdbd4ac110499c98ca808da39d4d6b66017563060fe38308943acb222763a0d9de493bdbbd9eb4df3490a268f60aa52a7913af660c0f44c151579160bcbfc0e858823ab91e856dbce58f1c97b2276e8c51c907dcb9c7898b93127c0a6f2c80c4beccd05f882a45b7defade48af0db3c69575ddb70b7f9f94c9639cdcf9713a7ac4c24a4cbbd1575131e130d7578122fb5b7ce805", 0x9c, 0x9}, {&(0x7f0000000600)="49bb80652effd70ed8a89b8d90d04955798e5d454f50f8a619697f7ee08c17f8b0feb09b7cf49b7acc28989253dea5cdc309e04571569cdf934962ecfcbb0a85f43993d4f337f175a06f03171abe7d0ec12aa24e4ab31664c2465ac4c7ac41bdae4b199f98843e3302ac24ba3023700222c47a9c0f936902ac610f7ca81036020d4d", 0x82, 0xff}, {&(0x7f00000006c0)="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", 0x1000}], 0x2800c, &(0x7f0000001780)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8no}], [{@pcr={'pcr', 0x3d, 0x39}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 14:43:41 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 11) 14:43:41 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 11) [ 1277.314768] FAT-fs (loop2): bogus number of reserved sectors [ 1277.335646] FAT-fs (loop2): Can't find a valid FAT filesystem 14:43:41 executing program 5: socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 14:43:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x422}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x422}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) (async) [ 1277.369711] FAT-fs (loop4): bogus number of reserved sectors [ 1277.381837] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1277.399473] FAULT_INJECTION: forcing a failure. [ 1277.399473] name failslab, interval 1, probability 0, space 0, times 0 14:43:41 executing program 5: socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) [ 1277.424386] FAULT_INJECTION: forcing a failure. [ 1277.424386] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.437192] CPU: 1 PID: 1725 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1277.444999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1277.454341] Call Trace: [ 1277.456926] dump_stack+0x1b2/0x281 [ 1277.460536] should_fail.cold+0x10a/0x149 [ 1277.464764] should_failslab+0xd6/0x130 [ 1277.468723] kmem_cache_alloc+0x28e/0x3c0 [ 1277.472864] __kernfs_new_node+0x6f/0x470 [ 1277.477090] kernfs_create_dir_ns+0x8c/0x200 [ 1277.481485] internal_create_group+0xe9/0x710 [ 1277.485968] lo_ioctl+0x1137/0x1cd0 [ 1277.489579] ? loop_set_status64+0xe0/0xe0 [ 1277.493796] blkdev_ioctl+0x540/0x1830 [ 1277.497756] ? blkpg_ioctl+0x8d0/0x8d0 [ 1277.501624] ? trace_hardirqs_on+0x10/0x10 [ 1277.505929] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1277.511013] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1277.516011] block_ioctl+0xd9/0x120 [ 1277.519615] ? blkdev_fallocate+0x3a0/0x3a0 [ 1277.523914] do_vfs_ioctl+0x75a/0xff0 [ 1277.527696] ? lock_acquire+0x170/0x3f0 [ 1277.531648] ? ioctl_preallocate+0x1a0/0x1a0 [ 1277.536123] ? __fget+0x265/0x3e0 [ 1277.539560] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.543522] ? security_file_ioctl+0x83/0xb0 [ 1277.547928] SyS_ioctl+0x7f/0xb0 [ 1277.551278] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.555244] do_syscall_64+0x1d5/0x640 [ 1277.559127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1277.564298] RIP: 0033:0x7f5c08b6c037 [ 1277.567992] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.575776] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1277.583109] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1277.590359] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1277.597630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1277.604877] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1277.612137] CPU: 0 PID: 1729 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 14:43:41 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socket(0x2a, 0x6, 0xffff837a) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05009caaae886c7c6b203a44", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3000, &(0x7f0000000140), 0x4, r3, 0x3}) 14:43:41 executing program 4: r0 = mq_open(&(0x7f0000000000)='@}/]:{{\x00', 0x80, 0x164, &(0x7f0000000040)={0x7, 0x3, 0x134f, 0x3}) mq_timedreceive(r0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x0) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000280)="6b8a5b45cbbec3afa0c578ebc1507abcbb62dc158991e2e5a1e23628bb366e1cf59ad24d75e834d80edc6901bb7dc3b6f685ba8f4964e3389fc726cdc8475f3e95ffdb97f6c46cbef474fbfb8b41d1e90acdf92821e53584e7fcc58ce42688eb973d46f07b7b159abccf26d0bbc9097b19026f0be455c0760abab0aa639ec1c85ee1320b6eb9955e6e5a1eaaa071a897751a21bec909cf8dfeaa6ddfe40d35e5f23ff3fec0dc68c514f78569c842a4c7f11ab0716c43d4550b19e6bd136188f21705f6a3279ce5976aaa49e4b7d281a15895ffd9496496f1281332015cafaf2db8590f56500250ac7ace", 0xea, 0x9}, {&(0x7f00000001c0)="b243ebc50708b286fe371e4cdb048c9508f03ddc45ef177cdd7e997fcc9afc9e0650c817571c9f29b46a7695b43da65c6976f55632eb0ac4bf3d215903ba", 0x3e, 0x5}, {&(0x7f0000000380)="35d67ba715caaad83241b7815086a73e3173a3c883d2744ee5a5fd9d38a1852c4b206be8a88f603096a793c2435a202e477a350d1158362acf6aa9de24d99ac5b48d4a33f767f44285da5a456c0523efc04e9910c878c787d6a8c954338c52696c4462a0fe330c776c8280a9e6c4c5e679f5f956b0871c2db4402dbf72e6c1dd55933702adf2d9d8ebaa2a69af2923f391a190be38fb98911265ddb0bb4328ec52b62bf2f759d7f52e832cad9cf7a5d5076475a42486", 0xb6, 0x400}, {&(0x7f0000000440)="76c7c5184b17f1ebda77db5a33bd363e595bf22987adefce9f49b7c91cc1bc9ca34e743c8804120d7b3e1d289442ec3215b4a594872ee4634e51161d2973bc7c24e5b9167032aa30e509fdcac7008e6c2b300c488148ee5f0f47f080fc9e7fd232cfde53bdd164463438503059e3046048dcebe5e3d36adfdbed510970d7cdec0314e95d6b36cc8fa546c4047b2c99c2cf9dc269b335b3e4b7f97c6014d4b66906285f15bfde90c027c56ba8a4eb2950bf2761b95d9b8a74dd61774f7ad208aafa6b61f2bee394aea4184c7e74afee62d67712625dd369bbe35305ac9a74947e", 0xe0, 0x1}, {&(0x7f0000000540)="9a5a5970460fbc2afdbd4ac110499c98ca808da39d4d6b66017563060fe38308943acb222763a0d9de493bdbbd9eb4df3490a268f60aa52a7913af660c0f44c151579160bcbfc0e858823ab91e856dbce58f1c97b2276e8c51c907dcb9c7898b93127c0a6f2c80c4beccd05f882a45b7defade48af0db3c69575ddb70b7f9f94c9639cdcf9713a7ac4c24a4cbbd1575131e130d7578122fb5b7ce805", 0x9c, 0x9}, {&(0x7f0000000600)="49bb80652effd70ed8a89b8d90d04955798e5d454f50f8a619697f7ee08c17f8b0feb09b7cf49b7acc28989253dea5cdc309e04571569cdf934962ecfcbb0a85f43993d4f337f175a06f03171abe7d0ec12aa24e4ab31664c2465ac4c7ac41bdae4b199f98843e3302ac24ba3023700222c47a9c0f936902ac610f7ca81036020d4d", 0x82, 0xff}, {&(0x7f00000006c0)="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", 0x1000}], 0x2800c, &(0x7f0000001780)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8no}], [{@pcr={'pcr', 0x3d, 0x39}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) [ 1277.619929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1277.629270] Call Trace: [ 1277.631857] dump_stack+0x1b2/0x281 [ 1277.635486] should_fail.cold+0x10a/0x149 [ 1277.637200] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1277.639632] should_failslab+0xd6/0x130 [ 1277.639652] kmem_cache_alloc+0x28e/0x3c0 [ 1277.639669] __kernfs_new_node+0x6f/0x470 [ 1277.657841] kernfs_new_node+0x7b/0xe0 [ 1277.661718] __kernfs_create_file+0x3d/0x320 [ 1277.666106] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1277.670757] ? kernfs_create_dir_ns+0x171/0x200 [ 1277.675402] internal_create_group+0x22b/0x710 [ 1277.679971] lo_ioctl+0x1137/0x1cd0 [ 1277.683667] ? loop_set_status64+0xe0/0xe0 [ 1277.687880] blkdev_ioctl+0x540/0x1830 [ 1277.691750] ? blkpg_ioctl+0x8d0/0x8d0 [ 1277.695629] ? trace_hardirqs_on+0x10/0x10 [ 1277.699848] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1277.704936] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1277.709936] block_ioctl+0xd9/0x120 [ 1277.713548] ? blkdev_fallocate+0x3a0/0x3a0 [ 1277.717866] do_vfs_ioctl+0x75a/0xff0 [ 1277.721649] ? lock_acquire+0x170/0x3f0 [ 1277.725626] ? ioctl_preallocate+0x1a0/0x1a0 [ 1277.730049] ? __fget+0x265/0x3e0 [ 1277.733489] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.737445] ? security_file_ioctl+0x83/0xb0 [ 1277.741827] SyS_ioctl+0x7f/0xb0 [ 1277.745259] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.749221] do_syscall_64+0x1d5/0x640 [ 1277.753111] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1277.758283] RIP: 0033:0x7f25b5a2a037 [ 1277.761984] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.769772] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1277.777026] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1277.784273] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1277.791534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1277.798796] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:42 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 12) 14:43:42 executing program 5: r0 = socket(0x10, 0x80003, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) [ 1277.826496] FAT-fs (loop2): bogus number of reserved sectors [ 1277.834511] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1277.852162] FAT-fs (loop2): Can't find a valid FAT filesystem 14:43:42 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 12) 14:43:42 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socket(0x2a, 0x6, 0xffff837a) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 32) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05009caaae886c7c6b203a44", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async, rerun: 32) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3000, &(0x7f0000000140), 0x4, r3, 0x3}) 14:43:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x422}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x422}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x80000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) (async) [ 1277.899742] FAULT_INJECTION: forcing a failure. [ 1277.899742] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.899753] FAT-fs (loop4): bogus number of reserved sectors [ 1277.942331] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1277.949484] CPU: 1 PID: 1765 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1277.957289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1277.966641] Call Trace: [ 1277.969225] dump_stack+0x1b2/0x281 [ 1277.972853] should_fail.cold+0x10a/0x149 [ 1277.977001] should_failslab+0xd6/0x130 [ 1277.980975] kmem_cache_alloc+0x28e/0x3c0 [ 1277.985123] __kernfs_new_node+0x6f/0x470 [ 1277.989269] kernfs_new_node+0x7b/0xe0 [ 1277.993155] __kernfs_create_file+0x3d/0x320 [ 1277.997644] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1277.997734] FAT-fs (loop2): bogus number of reserved sectors [ 1278.002299] ? kernfs_create_dir_ns+0x171/0x200 [ 1278.002311] internal_create_group+0x22b/0x710 [ 1278.002326] lo_ioctl+0x1137/0x1cd0 [ 1278.002338] ? loop_set_status64+0xe0/0xe0 [ 1278.002349] blkdev_ioctl+0x540/0x1830 [ 1278.013864] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1278.017345] ? blkpg_ioctl+0x8d0/0x8d0 [ 1278.017357] ? trace_hardirqs_on+0x10/0x10 [ 1278.017371] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1278.048101] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1278.053117] block_ioctl+0xd9/0x120 [ 1278.056739] ? blkdev_fallocate+0x3a0/0x3a0 [ 1278.061059] do_vfs_ioctl+0x75a/0xff0 [ 1278.064857] ? lock_acquire+0x170/0x3f0 [ 1278.068830] ? ioctl_preallocate+0x1a0/0x1a0 [ 1278.073239] ? __fget+0x265/0x3e0 [ 1278.076690] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.080666] ? security_file_ioctl+0x83/0xb0 [ 1278.085109] SyS_ioctl+0x7f/0xb0 [ 1278.088553] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.092526] do_syscall_64+0x1d5/0x640 [ 1278.096415] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1278.101684] RIP: 0033:0x7f5c08b6c037 [ 1278.105390] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.113093] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1278.120355] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1278.127615] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1278.134889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:42 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async, rerun: 32) socket(0x2a, 0x6, 0xffff837a) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05009caaae886c7c6b203a44", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3000, &(0x7f0000000140), 0x4, r3, 0x3}) [ 1278.136315] FAULT_INJECTION: forcing a failure. [ 1278.136315] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.142147] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1278.168168] CPU: 0 PID: 1778 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1278.175968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1278.184645] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1278.185335] Call Trace: [ 1278.185350] dump_stack+0x1b2/0x281 [ 1278.185365] should_fail.cold+0x10a/0x149 [ 1278.201536] should_failslab+0xd6/0x130 [ 1278.205509] kmem_cache_alloc+0x28e/0x3c0 [ 1278.209655] __kernfs_new_node+0x6f/0x470 [ 1278.213803] kernfs_new_node+0x7b/0xe0 [ 1278.217688] __kernfs_create_file+0x3d/0x320 [ 1278.222092] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1278.226754] ? kernfs_create_dir_ns+0x171/0x200 [ 1278.231425] internal_create_group+0x22b/0x710 [ 1278.236006] lo_ioctl+0x1137/0x1cd0 [ 1278.239633] ? loop_set_status64+0xe0/0xe0 [ 1278.243869] blkdev_ioctl+0x540/0x1830 [ 1278.247755] ? blkpg_ioctl+0x8d0/0x8d0 [ 1278.251636] ? trace_hardirqs_on+0x10/0x10 [ 1278.255870] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1278.261053] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1278.266070] block_ioctl+0xd9/0x120 [ 1278.269691] ? blkdev_fallocate+0x3a0/0x3a0 [ 1278.274007] do_vfs_ioctl+0x75a/0xff0 [ 1278.277802] ? lock_acquire+0x170/0x3f0 [ 1278.281769] ? ioctl_preallocate+0x1a0/0x1a0 [ 1278.286173] ? __fget+0x265/0x3e0 [ 1278.289645] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.293613] ? security_file_ioctl+0x83/0xb0 [ 1278.298019] SyS_ioctl+0x7f/0xb0 [ 1278.301380] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.305360] do_syscall_64+0x1d5/0x640 [ 1278.309246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1278.314431] RIP: 0033:0x7f25b5a2a037 [ 1278.318129] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.325833] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1278.333094] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:42 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) [ 1278.340450] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1278.347716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1278.354985] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:42 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 13) [ 1278.409141] FAT-fs (loop2): bogus number of reserved sectors [ 1278.418741] FAT-fs (loop4): bogus number of reserved sectors [ 1278.425463] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1278.432301] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1278.442766] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xl`te=1,\x00']) [ 1278.452762] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1278.473578] FAULT_INJECTION: forcing a failure. [ 1278.473578] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.481057] FAT-fs (loop4): bogus number of reserved sectors [ 1278.494703] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1278.505195] CPU: 0 PID: 1859 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1278.512992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1278.522340] Call Trace: [ 1278.524923] dump_stack+0x1b2/0x281 [ 1278.528552] should_fail.cold+0x10a/0x149 [ 1278.532707] should_failslab+0xd6/0x130 [ 1278.536684] kmem_cache_alloc+0x28e/0x3c0 [ 1278.540833] __kernfs_new_node+0x6f/0x470 [ 1278.544980] kernfs_new_node+0x7b/0xe0 [ 1278.548866] __kernfs_create_file+0x3d/0x320 [ 1278.549751] FAT-fs (loop2): Unrecognized mount option "uni_xl`te=1" or missing value [ 1278.553272] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1278.553282] ? kernfs_create_dir_ns+0x171/0x200 [ 1278.553292] internal_create_group+0x22b/0x710 [ 1278.553307] lo_ioctl+0x1137/0x1cd0 [ 1278.553318] ? loop_set_status64+0xe0/0xe0 [ 1278.553333] blkdev_ioctl+0x540/0x1830 [ 1278.586793] ? blkpg_ioctl+0x8d0/0x8d0 [ 1278.590677] ? trace_hardirqs_on+0x10/0x10 [ 1278.594915] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1278.600021] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1278.605070] block_ioctl+0xd9/0x120 [ 1278.608693] ? blkdev_fallocate+0x3a0/0x3a0 [ 1278.613006] do_vfs_ioctl+0x75a/0xff0 [ 1278.616799] ? lock_acquire+0x170/0x3f0 [ 1278.620773] ? ioctl_preallocate+0x1a0/0x1a0 [ 1278.625178] ? __fget+0x265/0x3e0 [ 1278.628642] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.632618] ? security_file_ioctl+0x83/0xb0 [ 1278.637010] SyS_ioctl+0x7f/0xb0 [ 1278.640366] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.644337] do_syscall_64+0x1d5/0x640 [ 1278.648324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1278.653491] RIP: 0033:0x7f5c08b6c037 14:43:42 executing program 0: r0 = socket(0x10, 0x6, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:42 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 13) [ 1278.657180] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.664867] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1278.672134] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1278.679395] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1278.686664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1278.693933] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:42 executing program 4: r0 = mq_open(&(0x7f0000000000)='@}/]:{{\x00', 0x80, 0x164, &(0x7f0000000040)={0x7, 0x3, 0x134f, 0x3}) mq_timedreceive(r0, &(0x7f0000000100)=""/53, 0x35, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000280)="6b8a5b45cbbec3afa0c578ebc1507abcbb62dc158991e2e5a1e23628bb366e1cf59ad24d75e834d80edc6901bb7dc3b6f685ba8f4964e3389fc726cdc8475f3e95ffdb97f6c46cbef474fbfb8b41d1e90acdf92821e53584e7fcc58ce42688eb973d46f07b7b159abccf26d0bbc9097b19026f0be455c0760abab0aa639ec1c85ee1320b6eb9955e6e5a1eaaa071a897751a21bec909cf8dfeaa6ddfe40d35e5f23ff3fec0dc68c514f78569c842a4c7f11ab0716c43d4550b19e6bd136188f21705f6a3279ce5976aaa49e4b7d281a15895ffd9496496f1281332015cafaf2db8590f56500250ac7ace", 0xea, 0x9}, {&(0x7f00000001c0)="b243ebc50708b286fe371e4cdb048c9508f03ddc45ef177cdd7e997fcc9afc9e0650c817571c9f29b46a7695b43da65c6976f55632eb0ac4bf3d215903ba", 0x3e, 0x5}, {&(0x7f0000000380)="35d67ba715caaad83241b7815086a73e3173a3c883d2744ee5a5fd9d38a1852c4b206be8a88f603096a793c2435a202e477a350d1158362acf6aa9de24d99ac5b48d4a33f767f44285da5a456c0523efc04e9910c878c787d6a8c954338c52696c4462a0fe330c776c8280a9e6c4c5e679f5f956b0871c2db4402dbf72e6c1dd55933702adf2d9d8ebaa2a69af2923f391a190be38fb98911265ddb0bb4328ec52b62bf2f759d7f52e832cad9cf7a5d5076475a42486", 0xb6, 0x400}, {&(0x7f0000000440)="76c7c5184b17f1ebda77db5a33bd363e595bf22987adefce9f49b7c91cc1bc9ca34e743c8804120d7b3e1d289442ec3215b4a594872ee4634e51161d2973bc7c24e5b9167032aa30e509fdcac7008e6c2b300c488148ee5f0f47f080fc9e7fd232cfde53bdd164463438503059e3046048dcebe5e3d36adfdbed510970d7cdec0314e95d6b36cc8fa546c4047b2c99c2cf9dc269b335b3e4b7f97c6014d4b66906285f15bfde90c027c56ba8a4eb2950bf2761b95d9b8a74dd61774f7ad208aafa6b61f2bee394aea4184c7e74afee62d67712625dd369bbe35305ac9a74947e", 0xe0, 0x1}, {&(0x7f0000000540)="9a5a5970460fbc2afdbd4ac110499c98ca808da39d4d6b66017563060fe38308943acb222763a0d9de493bdbbd9eb4df3490a268f60aa52a7913af660c0f44c151579160bcbfc0e858823ab91e856dbce58f1c97b2276e8c51c907dcb9c7898b93127c0a6f2c80c4beccd05f882a45b7defade48af0db3c69575ddb70b7f9f94c9639cdcf9713a7ac4c24a4cbbd1575131e130d7578122fb5b7ce805", 0x9c, 0x9}, {&(0x7f0000000600)="49bb80652effd70ed8a89b8d90d04955798e5d454f50f8a619697f7ee08c17f8b0feb09b7cf49b7acc28989253dea5cdc309e04571569cdf934962ecfcbb0a85f43993d4f337f175a06f03171abe7d0ec12aa24e4ab31664c2465ac4c7ac41bdae4b199f98843e3302ac24ba3023700222c47a9c0f936902ac610f7ca81036020d4d", 0x82, 0xff}, {&(0x7f00000006c0)="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", 0x1000}], 0x2800c, &(0x7f0000001780)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8no}], [{@pcr={'pcr', 0x3d, 0x39}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 14:43:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xl`te=1,\x00']) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xl`te=1,\x00']) (async) 14:43:43 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 14) [ 1278.728946] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:43 executing program 0: r0 = socket(0x10, 0x6, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1278.803249] FAULT_INJECTION: forcing a failure. [ 1278.803249] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.850894] FAT-fs (loop2): Unrecognized mount option "uni_xl`te=1" or missing value [ 1278.865245] FAT-fs (loop4): bogus number of reserved sectors [ 1278.873033] CPU: 0 PID: 1886 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1278.880830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1278.882469] FAULT_INJECTION: forcing a failure. [ 1278.882469] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.890171] Call Trace: [ 1278.890187] dump_stack+0x1b2/0x281 [ 1278.890201] should_fail.cold+0x10a/0x149 [ 1278.890214] should_failslab+0xd6/0x130 [ 1278.890227] kmem_cache_alloc+0x28e/0x3c0 [ 1278.890242] __kernfs_new_node+0x6f/0x470 [ 1278.923966] kernfs_new_node+0x7b/0xe0 [ 1278.927857] __kernfs_create_file+0x3d/0x320 [ 1278.932268] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1278.936942] ? kernfs_create_dir_ns+0x171/0x200 [ 1278.941613] internal_create_group+0x22b/0x710 [ 1278.946195] lo_ioctl+0x1137/0x1cd0 [ 1278.949815] ? loop_set_status64+0xe0/0xe0 [ 1278.954041] blkdev_ioctl+0x540/0x1830 [ 1278.957912] ? blkpg_ioctl+0x8d0/0x8d0 [ 1278.961785] ? trace_hardirqs_on+0x10/0x10 [ 1278.966021] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1278.971122] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1278.976144] block_ioctl+0xd9/0x120 [ 1278.979767] ? blkdev_fallocate+0x3a0/0x3a0 [ 1278.984081] do_vfs_ioctl+0x75a/0xff0 [ 1278.987880] ? lock_acquire+0x170/0x3f0 [ 1278.991852] ? ioctl_preallocate+0x1a0/0x1a0 [ 1278.996260] ? __fget+0x265/0x3e0 [ 1278.999717] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.003687] ? security_file_ioctl+0x83/0xb0 [ 1279.008093] SyS_ioctl+0x7f/0xb0 [ 1279.011500] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.015470] do_syscall_64+0x1d5/0x640 [ 1279.019348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.024525] RIP: 0033:0x7f25b5a2a037 [ 1279.028229] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.035927] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1279.043179] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1279.050462] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1279.057717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1279.064975] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1279.079875] CPU: 1 PID: 1902 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1279.087685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 14:43:43 executing program 0: r0 = socket(0x10, 0x6, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x6, 0x7) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "96fc0c24018c67f6bb79389f53f00bde92c34ec64fa1ca1ac3c1ea2b94c3c5b7"}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1279.092501] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1279.097030] Call Trace: [ 1279.097045] dump_stack+0x1b2/0x281 [ 1279.097061] should_fail.cold+0x10a/0x149 [ 1279.097075] should_failslab+0xd6/0x130 [ 1279.097087] kmem_cache_alloc+0x28e/0x3c0 [ 1279.097101] __kernfs_new_node+0x6f/0x470 [ 1279.097114] kernfs_new_node+0x7b/0xe0 [ 1279.097124] __kernfs_create_file+0x3d/0x320 [ 1279.118449] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1279.121419] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1279.121430] ? kernfs_create_dir_ns+0x171/0x200 14:43:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "96fc0c24018c67f6bb79389f53f00bde92c34ec64fa1ca1ac3c1ea2b94c3c5b7"}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "96fc0c24018c67f6bb79389f53f00bde92c34ec64fa1ca1ac3c1ea2b94c3c5b7"}) (async) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) [ 1279.121442] internal_create_group+0x22b/0x710 [ 1279.121458] lo_ioctl+0x1137/0x1cd0 [ 1279.121479] ? loop_set_status64+0xe0/0xe0 [ 1279.121491] blkdev_ioctl+0x540/0x1830 [ 1279.121503] ? blkpg_ioctl+0x8d0/0x8d0 [ 1279.169209] ? trace_hardirqs_on+0x10/0x10 [ 1279.173448] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1279.178557] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1279.183578] block_ioctl+0xd9/0x120 [ 1279.187205] ? blkdev_fallocate+0x3a0/0x3a0 [ 1279.191526] do_vfs_ioctl+0x75a/0xff0 [ 1279.195329] ? lock_acquire+0x170/0x3f0 [ 1279.199310] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.203717] ? __fget+0x265/0x3e0 [ 1279.207257] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.211227] ? security_file_ioctl+0x83/0xb0 [ 1279.215631] SyS_ioctl+0x7f/0xb0 [ 1279.219020] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.223012] do_syscall_64+0x1d5/0x640 [ 1279.226900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.232081] RIP: 0033:0x7f5c08b6c037 [ 1279.235786] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.243492] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 14:43:43 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) 14:43:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "96fc0c24018c67f6bb79389f53f00bde92c34ec64fa1ca1ac3c1ea2b94c3c5b7"}) r1 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1279.250755] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1279.258024] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1279.265291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1279.272615] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1279.291849] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value 14:43:43 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xb8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3abbfed766639d07}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008045) 14:43:43 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 14) 14:43:43 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 15) 14:43:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001800)=[{&(0x7f0000000100)="2b4125dc3f36e02ee319753deb62257f42faae9ea31bd0bc1834033feb7e696bb885f9a5eaf9d35e451882f00b522130e037655de490f0c6e5460d99eef38cb49fc528ad48a1e9364009c56ad00d3c503b50c1b8543c65d05f3e66090564647740a103952dc02d193553a84cf12ee3be9c2389291f7242272095dd8a4aafdf0c01cae6fdaf1aaf5369e5aad4cf921540b3a531c9ec2c28ea3b92a3d091bd121b31534966b3e15fb7675f177e4b41adb4d5b8e63e301b0f7ce6e6733cdbfdc5a58686a5ec8d567acbcb2153c00ea76700f7", 0xd1, 0x1}, {&(0x7f0000000000)="20f8d40688ebf1692307b91ba2a708183d2e8f8bd44fb6eefbce44d7af7b688753ef8f8286200c9ff47aecd251c8be6dcf1b5a6f6791000ddaedd30ab4ba0ac617a9fee066f1f5002c220f5880c744496c4a6f301cc5d7b003ae0894423448e75bdcd4", 0x63, 0x4}, {&(0x7f0000000280)="e48d2a895496ee5f6cb62107a6b18a2887dd6e3631d7f932229c5b4df6d03808e407ca88704c16843887120ad824af5837d7e50596739f8229093d04a4465a8a04a579ff1f5b2cd65e7bb58aa0612f878145dde686cbd992e77412ed0121c80331a3a54843b57f3714a5378a6b0cf7135f60008615687e1034c9ca476f1f472b9948023454c42d7b4f46ed025c311b2bac21e59ece4128a3f9ee67fcb8a9ce51d7b44845a076818603659e8e954b322d880388237e1462e0e7bfd7e1a2d39d574dfca82331aff245d5ac9251bfcb99203bf3ce9fe177b2cde8ee5e492acd2f3d0fbac32286f999bf43d65ef8048bc7715e3b0bcbece14a04", 0xf8}, {&(0x7f0000000380)="6be2ca626bcefeb39736c3eef9c10c384e8468cca8eaeb5d613f223d71d9d2f3af04c6134e6514f16e700dff80cd38cae7a688239b4488811ac324057c7690a9a9fd22d1b864dc8c2173355b5f35847dbfe8e9366ac605a2396f4c6f423e3f275734cae7c71cc6d59ffdb8814f3e3d7289bb86df0a19a3f4e5411a0a9c02acaefaa98d212e9f4abb265c26f7ad050b42d154b9ba445c755a0b059af5cd0f5efc02285c3b95f23726d377c8817c3c6b4fff1ac3e0712fdb0924579422b1aac69f7b943ce5e8dae574", 0xc8, 0x80}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="23e72b407c490bf0010087e3ebcf15b808c382fae17e43feaf82732d4bea212ad9beb26b567ba4e867679508f495bf01458b76b632d9f4d40f944c8c40d61a1a3110e89e408fd45cdf25ea63cca29402f66da9d20a7701467047d312155123d5e12bbea40ec1f4ac2fa2a085e2401dacf3ee919b173738faf1218e09e2d01cc095bf4a3bb3f660668a540294f9ce887100ed44ff8dde8699ec5d80751cc171aa236a4c02991d19f43c73b5ed64322be547375346670b8970809f2959d7d5dfe8737c7fbf9d1581ca0a3f8a306afbc0ff3198aa6653", 0xd5, 0x9}, {&(0x7f0000000200)="427b7bc2fa818ce0c5e8", 0xa}, {&(0x7f0000001580)="a8e57f442e0fe6db9198266854075a1df469b11ac9312e220f6bd6e36db43a19984f925390ae83d1f78b4d3a63a7aeac6410e8cc309f582c0690dddc5b9e3d734ed25fa05f4fa6a4032611b2daa4c3282c39ec3d31f3ea0e929f4a45ca3e37f3afac2c59ddf273f6c9cac38eb0aec6c79bb181ce888b1d88d6af6191b5786d60f403f8bb5665ef713f4100fb04b29f222617e0a99d4204cb0197e0120532f8bb5bfa8e0c730ff2a4c5dff6fe2ebf485c81a4f7437684d5511743c9cd06527a", 0xbf, 0x3f}, {&(0x7f0000001640)="156f6e57d39ec21bb0c5818152bb711be2615109a6d03ff590bf14fb73999889539d90dfed6813855efc791bd37796cba363702368c1fb57d0fb225c49cb3c271fded70c306b5a87382d42599f57d691eab4cf128a3dbfc8d56d32c95afdd212306ec7c53e02683a2cb1497c6a971f96118a5cc76c938bd1d6495a2a112bcfa98a4df8026695c3227868b4d4356e0e943c6285443252f7fb672b8cb2e1eb749b12be1027c4fbcc7e9c", 0xa9, 0x8415}, {&(0x7f0000001700)="15949995dd53ba4450836d9bccd45ee305e3c457811eddb76ec2bb6b1528a968910ca634e2285c6b1f5475ddbfd5a6755f9273ced5752b9ef41250827821be1ce9928cebf1849b65ec498f4c525db410a11968cc6e1b2748c4e646519ec19e10f7598003385db96f12eed2a954dc537298b0b210115055d445af4d8eeaba28e5e28162e20ed0fd6760d20574523d50cea3deddbdc97a1e8da84b655a40131b4ac11ecf8db21e757aade5bee21a5a346f3ce31494a8bee1ae48199ae894fa7807506f6c", 0xc3, 0x8}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) [ 1279.309289] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1279.336115] FAT-fs (loop2): Unrecognized mount option "uni_xl`te=1" or missing value 14:43:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xl`te=1,\x00']) 14:43:43 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xb8, 0x4) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3abbfed766639d07}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008045) [ 1279.435651] FAULT_INJECTION: forcing a failure. [ 1279.435651] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.440434] FAT-fs (loop4): invalid media value (0xd4) [ 1279.458648] FAULT_INJECTION: forcing a failure. [ 1279.458648] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.475334] FAT-fs (loop2): Unrecognized mount option "uni_xl`te=1" or missing value [ 1279.475506] CPU: 1 PID: 1970 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1279.491132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1279.500485] Call Trace: [ 1279.503074] dump_stack+0x1b2/0x281 [ 1279.506706] should_fail.cold+0x10a/0x149 [ 1279.510854] should_failslab+0xd6/0x130 [ 1279.514913] kmem_cache_alloc+0x28e/0x3c0 [ 1279.519060] __kernfs_new_node+0x6f/0x470 [ 1279.523229] kernfs_new_node+0x7b/0xe0 [ 1279.527110] __kernfs_create_file+0x3d/0x320 [ 1279.531510] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1279.536172] ? kernfs_create_dir_ns+0x171/0x200 [ 1279.540844] internal_create_group+0x22b/0x710 [ 1279.545423] lo_ioctl+0x1137/0x1cd0 [ 1279.549063] ? loop_set_status64+0xe0/0xe0 [ 1279.553293] blkdev_ioctl+0x540/0x1830 [ 1279.557174] ? blkpg_ioctl+0x8d0/0x8d0 [ 1279.561055] ? trace_hardirqs_on+0x10/0x10 [ 1279.565283] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1279.570470] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1279.575488] block_ioctl+0xd9/0x120 [ 1279.579113] ? blkdev_fallocate+0x3a0/0x3a0 [ 1279.583433] do_vfs_ioctl+0x75a/0xff0 [ 1279.587239] ? lock_acquire+0x170/0x3f0 [ 1279.591209] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.595622] ? __fget+0x265/0x3e0 [ 1279.599099] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.603075] ? security_file_ioctl+0x83/0xb0 [ 1279.607479] SyS_ioctl+0x7f/0xb0 [ 1279.610839] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.614815] do_syscall_64+0x1d5/0x640 [ 1279.618731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.623942] RIP: 0033:0x7f5c08b6c037 [ 1279.627643] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.635350] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1279.642620] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1279.649888] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1279.657147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1279.664413] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1279.675364] CPU: 0 PID: 1968 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1279.683184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1279.691129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1279.692532] Call Trace: [ 1279.692550] dump_stack+0x1b2/0x281 [ 1279.692565] should_fail.cold+0x10a/0x149 [ 1279.692579] should_failslab+0xd6/0x130 [ 1279.692590] kmem_cache_alloc+0x28e/0x3c0 [ 1279.692607] __kernfs_new_node+0x6f/0x470 [ 1279.720998] kernfs_new_node+0x7b/0xe0 [ 1279.724887] __kernfs_create_file+0x3d/0x320 [ 1279.727231] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1279.729294] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1279.729305] ? kernfs_create_dir_ns+0x171/0x200 [ 1279.729317] internal_create_group+0x22b/0x710 [ 1279.729333] lo_ioctl+0x1137/0x1cd0 [ 1279.729346] ? loop_set_status64+0xe0/0xe0 [ 1279.729361] blkdev_ioctl+0x540/0x1830 [ 1279.760788] ? blkpg_ioctl+0x8d0/0x8d0 [ 1279.764661] ? trace_hardirqs_on+0x10/0x10 [ 1279.768884] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1279.773972] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1279.778976] block_ioctl+0xd9/0x120 [ 1279.782587] ? blkdev_fallocate+0x3a0/0x3a0 [ 1279.786917] do_vfs_ioctl+0x75a/0xff0 [ 1279.790701] ? lock_acquire+0x170/0x3f0 [ 1279.794664] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.799057] ? __fget+0x265/0x3e0 [ 1279.802525] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.806497] ? security_file_ioctl+0x83/0xb0 [ 1279.810898] SyS_ioctl+0x7f/0xb0 [ 1279.814257] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.818220] do_syscall_64+0x1d5/0x640 [ 1279.822099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.827270] RIP: 0033:0x7f25b5a2a037 14:43:44 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xb8, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3abbfed766639d07}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4008045) 14:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001800)=[{&(0x7f0000000100)="2b4125dc3f36e02ee319753deb62257f42faae9ea31bd0bc1834033feb7e696bb885f9a5eaf9d35e451882f00b522130e037655de490f0c6e5460d99eef38cb49fc528ad48a1e9364009c56ad00d3c503b50c1b8543c65d05f3e66090564647740a103952dc02d193553a84cf12ee3be9c2389291f7242272095dd8a4aafdf0c01cae6fdaf1aaf5369e5aad4cf921540b3a531c9ec2c28ea3b92a3d091bd121b31534966b3e15fb7675f177e4b41adb4d5b8e63e301b0f7ce6e6733cdbfdc5a58686a5ec8d567acbcb2153c00ea76700f7", 0xd1, 0x1}, {&(0x7f0000000000)="20f8d40688ebf1692307b91ba2a708183d2e8f8bd44fb6eefbce44d7af7b688753ef8f8286200c9ff47aecd251c8be6dcf1b5a6f6791000ddaedd30ab4ba0ac617a9fee066f1f5002c220f5880c744496c4a6f301cc5d7b003ae0894423448e75bdcd4", 0x63, 0x4}, {&(0x7f0000000280)="e48d2a895496ee5f6cb62107a6b18a2887dd6e3631d7f932229c5b4df6d03808e407ca88704c16843887120ad824af5837d7e50596739f8229093d04a4465a8a04a579ff1f5b2cd65e7bb58aa0612f878145dde686cbd992e77412ed0121c80331a3a54843b57f3714a5378a6b0cf7135f60008615687e1034c9ca476f1f472b9948023454c42d7b4f46ed025c311b2bac21e59ece4128a3f9ee67fcb8a9ce51d7b44845a076818603659e8e954b322d880388237e1462e0e7bfd7e1a2d39d574dfca82331aff245d5ac9251bfcb99203bf3ce9fe177b2cde8ee5e492acd2f3d0fbac32286f999bf43d65ef8048bc7715e3b0bcbece14a04", 0xf8}, {&(0x7f0000000380)="6be2ca626bcefeb39736c3eef9c10c384e8468cca8eaeb5d613f223d71d9d2f3af04c6134e6514f16e700dff80cd38cae7a688239b4488811ac324057c7690a9a9fd22d1b864dc8c2173355b5f35847dbfe8e9366ac605a2396f4c6f423e3f275734cae7c71cc6d59ffdb8814f3e3d7289bb86df0a19a3f4e5411a0a9c02acaefaa98d212e9f4abb265c26f7ad050b42d154b9ba445c755a0b059af5cd0f5efc02285c3b95f23726d377c8817c3c6b4fff1ac3e0712fdb0924579422b1aac69f7b943ce5e8dae574", 0xc8, 0x80}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="23e72b407c490bf0010087e3ebcf15b808c382fae17e43feaf82732d4bea212ad9beb26b567ba4e867679508f495bf01458b76b632d9f4d40f944c8c40d61a1a3110e89e408fd45cdf25ea63cca29402f66da9d20a7701467047d312155123d5e12bbea40ec1f4ac2fa2a085e2401dacf3ee919b173738faf1218e09e2d01cc095bf4a3bb3f660668a540294f9ce887100ed44ff8dde8699ec5d80751cc171aa236a4c02991d19f43c73b5ed64322be547375346670b8970809f2959d7d5dfe8737c7fbf9d1581ca0a3f8a306afbc0ff3198aa6653", 0xd5, 0x9}, {&(0x7f0000000200)="427b7bc2fa818ce0c5e8", 0xa}, {&(0x7f0000001580)="a8e57f442e0fe6db9198266854075a1df469b11ac9312e220f6bd6e36db43a19984f925390ae83d1f78b4d3a63a7aeac6410e8cc309f582c0690dddc5b9e3d734ed25fa05f4fa6a4032611b2daa4c3282c39ec3d31f3ea0e929f4a45ca3e37f3afac2c59ddf273f6c9cac38eb0aec6c79bb181ce888b1d88d6af6191b5786d60f403f8bb5665ef713f4100fb04b29f222617e0a99d4204cb0197e0120532f8bb5bfa8e0c730ff2a4c5dff6fe2ebf485c81a4f7437684d5511743c9cd06527a", 0xbf, 0x3f}, {&(0x7f0000001640)="156f6e57d39ec21bb0c5818152bb711be2615109a6d03ff590bf14fb73999889539d90dfed6813855efc791bd37796cba363702368c1fb57d0fb225c49cb3c271fded70c306b5a87382d42599f57d691eab4cf128a3dbfc8d56d32c95afdd212306ec7c53e02683a2cb1497c6a971f96118a5cc76c938bd1d6495a2a112bcfa98a4df8026695c3227868b4d4356e0e943c6285443252f7fb672b8cb2e1eb749b12be1027c4fbcc7e9c", 0xa9, 0x8415}, {&(0x7f0000001700)="15949995dd53ba4450836d9bccd45ee305e3c457811eddb76ec2bb6b1528a968910ca634e2285c6b1f5475ddbfd5a6755f9273ced5752b9ef41250827821be1ce9928cebf1849b65ec498f4c525db410a11968cc6e1b2748c4e646519ec19e10f7598003385db96f12eed2a954dc537298b0b210115055d445af4d8eeaba28e5e28162e20ed0fd6760d20574523d50cea3deddbdc97a1e8da84b655a40131b4ac11ecf8db21e757aade5bee21a5a346f3ce31494a8bee1ae48199ae894fa7807506f6c", 0xc3, 0x8}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) [ 1279.830961] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.838654] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1279.845912] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1279.853184] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1279.860540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1279.867791] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000000)="476437fef25f637b09518bca7ec03669a1f90f26c209b27a10add32927841d1d619074ade6bae5a86c45d7c61d6f9e4cff9c27e5f6250cb99470554b83bf7a048d64a89fca8c3ee28456dd326f7e3a250776e71368e2f2862a40a23b8edaf26c0920af36c0c5bb1937043c", &(0x7f0000000100)="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", &(0x7f0000000280)="a4d9e344fdf86b60a7c66c0409211f9ac0cf2c3c43ee06690c946940e700899747a500c00aa04b582956ac2f75c2aff93ffe7438eb4ac658f3de4065d65c36c504eb298be2ef7b0c8cda967b8128f59b3f9fa1a50bc4cf5b5806711392f3e898b8aca34ded4b9420", &(0x7f0000000200)="f046d0207c930c0ee59abeb548dcc7995df6545e7b46bc30cb65ae9b86bf2f08904885e415d753aede6c1e3b0216808cf3d7a7219a26", &(0x7f0000000300)="c7b2baf7651a7929e6b4ebfd26a8eabb53c853c791b3a470fe07e49cc38c294062b326361ba1351bfee522c80764875dda75315ea326bab058d93253eafa8ae071fdcf1a25962fdf175c6da8fcf317c846a0", &(0x7f0000000380)="7252d09d9415764420de185d7192d99c468da2db9ccde4ca344e902ab8de14cced9e322278c06b995cf6123368fabffe7deab4c3a67b8d24ab4da08b96de2edc7f33de9ff3fdd400b5e687a1cd3c4d8234817bf4b04ea3ce259a5f4ca7ab94449117f3e37f224fcdaabc2e365a3593292eb37387"], 0x7fffffff}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7fff, 0x800, 0x3, 0x7, 0xfffff000, 0xa4, 0x1ff, 0x7], [0x0, 0x4, 0xfffffff8, 0x9, 0x200, 0x1000, 0x0, 0xfc], [0x10000, 0xd2e, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x729]], '\x00', [{0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xb73, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x1}, {0x2, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xa6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x1}, {0x7fffffff, 0x4e9, 0x1, 0x1, 0x1}, {0x64, 0x80000001, 0x0, 0x1, 0x1}, {0x100, 0x5, 0x0, 0x1}], '\x00', 0x6}) 14:43:44 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 16) [ 1279.951469] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1279.978728] FAT-fs (loop4): invalid media value (0xd4) [ 1279.995822] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1280.029904] FAT-fs (loop2): bogus number of reserved sectors [ 1280.042701] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1280.053915] FAULT_INJECTION: forcing a failure. [ 1280.053915] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.105948] CPU: 0 PID: 2010 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1280.113760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1280.123110] Call Trace: [ 1280.125703] dump_stack+0x1b2/0x281 [ 1280.129336] should_fail.cold+0x10a/0x149 [ 1280.133494] should_failslab+0xd6/0x130 [ 1280.137473] kmem_cache_alloc+0x28e/0x3c0 [ 1280.141635] __kernfs_new_node+0x6f/0x470 [ 1280.145788] kernfs_new_node+0x7b/0xe0 [ 1280.149682] __kernfs_create_file+0x3d/0x320 [ 1280.154097] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1280.158763] ? kernfs_create_dir_ns+0x171/0x200 [ 1280.163435] internal_create_group+0x22b/0x710 [ 1280.168024] lo_ioctl+0x1137/0x1cd0 [ 1280.171654] ? loop_set_status64+0xe0/0xe0 [ 1280.175889] blkdev_ioctl+0x540/0x1830 [ 1280.179775] ? blkpg_ioctl+0x8d0/0x8d0 [ 1280.183658] ? trace_hardirqs_on+0x10/0x10 [ 1280.187892] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1280.192993] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1280.198007] block_ioctl+0xd9/0x120 [ 1280.201636] ? blkdev_fallocate+0x3a0/0x3a0 [ 1280.205956] do_vfs_ioctl+0x75a/0xff0 [ 1280.209777] ? lock_acquire+0x170/0x3f0 [ 1280.213746] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.218152] ? __fget+0x265/0x3e0 [ 1280.221606] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.225345] FAULT_INJECTION: forcing a failure. [ 1280.225345] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.225581] ? security_file_ioctl+0x83/0xb0 [ 1280.225594] SyS_ioctl+0x7f/0xb0 [ 1280.225602] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.225617] do_syscall_64+0x1d5/0x640 14:43:44 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r3, 0xc01064c1, &(0x7f00000003c0)={r4}) 14:43:44 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 15) 14:43:44 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf2500000000060006000400000008000100", @ANYRES32=r2, @ANYBLOB="08000400e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x894) r3 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) 14:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000001800)=[{&(0x7f0000000100)="2b4125dc3f36e02ee319753deb62257f42faae9ea31bd0bc1834033feb7e696bb885f9a5eaf9d35e451882f00b522130e037655de490f0c6e5460d99eef38cb49fc528ad48a1e9364009c56ad00d3c503b50c1b8543c65d05f3e66090564647740a103952dc02d193553a84cf12ee3be9c2389291f7242272095dd8a4aafdf0c01cae6fdaf1aaf5369e5aad4cf921540b3a531c9ec2c28ea3b92a3d091bd121b31534966b3e15fb7675f177e4b41adb4d5b8e63e301b0f7ce6e6733cdbfdc5a58686a5ec8d567acbcb2153c00ea76700f7", 0xd1, 0x1}, {&(0x7f0000000000)="20f8d40688ebf1692307b91ba2a708183d2e8f8bd44fb6eefbce44d7af7b688753ef8f8286200c9ff47aecd251c8be6dcf1b5a6f6791000ddaedd30ab4ba0ac617a9fee066f1f5002c220f5880c744496c4a6f301cc5d7b003ae0894423448e75bdcd4", 0x63, 0x4}, {&(0x7f0000000280)="e48d2a895496ee5f6cb62107a6b18a2887dd6e3631d7f932229c5b4df6d03808e407ca88704c16843887120ad824af5837d7e50596739f8229093d04a4465a8a04a579ff1f5b2cd65e7bb58aa0612f878145dde686cbd992e77412ed0121c80331a3a54843b57f3714a5378a6b0cf7135f60008615687e1034c9ca476f1f472b9948023454c42d7b4f46ed025c311b2bac21e59ece4128a3f9ee67fcb8a9ce51d7b44845a076818603659e8e954b322d880388237e1462e0e7bfd7e1a2d39d574dfca82331aff245d5ac9251bfcb99203bf3ce9fe177b2cde8ee5e492acd2f3d0fbac32286f999bf43d65ef8048bc7715e3b0bcbece14a04", 0xf8}, {&(0x7f0000000380)="6be2ca626bcefeb39736c3eef9c10c384e8468cca8eaeb5d613f223d71d9d2f3af04c6134e6514f16e700dff80cd38cae7a688239b4488811ac324057c7690a9a9fd22d1b864dc8c2173355b5f35847dbfe8e9366ac605a2396f4c6f423e3f275734cae7c71cc6d59ffdb8814f3e3d7289bb86df0a19a3f4e5411a0a9c02acaefaa98d212e9f4abb265c26f7ad050b42d154b9ba445c755a0b059af5cd0f5efc02285c3b95f23726d377c8817c3c6b4fff1ac3e0712fdb0924579422b1aac69f7b943ce5e8dae574", 0xc8, 0x80}, {&(0x7f0000000480)="957d17b89f17966582b0a958f746513e0cc84a496bad99058df696c64a22ba46149dbaaf86a6f16dc5ccc150612792818c01e213e42a0fda90df080fa965b80c439246caf321ed4319bde4fb99b6872520d6318a16b907b7d0a6b33e7eb4bfc6bab9811e157cbdf04ed7fff480fa5bda3f264f67e4b1d2f14be0eadd2c7a3eb23d3f5619a0bfb9602ce54a78f5857c624c13728a00b5640ef0915416f3c968af34a201189f16f9f73b5805781f76465791860e50562f272c6d5424e2c0b104e6d18e92b8a23fcde4309a2b9bf45f964676ceb8daa0884cb887ba24962f3ee57d470643c160cbca0e4789b5839e046e80a2bf0c2427ae131dca8f1f8ebea1daffdc94c2fa5059f6a943297a70a4dda326cc97b26c7dcd92e5ac70b306891371fe5ff267198a945092f4f4f24e6f187391fa5de25b26072df4d3645a569b94551b8514246028470bf79a68c1abe347bc0509ebb6777ae667c3efac0ea3c732d6c218ef751302c886efa52fefdd0cadf1cf807ddb0717ae3b01c6adcf047f476bb9154bf23c482fb5ddaaa39b54c7f4e5217ca0ab25185357ef231bde0c852dd301cb18bb5d765e16a4302e022ee8e7786d7648f0662d90846a043bd9d2b1e95eecdfb42153d8d84aeb5173d19b726a5a0208a247f7942e6141198bf9601f721e7e2fac397fdf42c2bb05f7fc63d6579519482fcd6088356bc8c6c8d8f3c1108e2a0682ca25c71c945537d42b213b6d9c838cfdc362450b7f52d03ad77f7ce6aef8df87dc0ee2d7d89880a13dc26486159a5b9b875951b067c75a76702fb9bf178e55dacf11362f2c8489f616041d3b10e9576afdff469cc16a2a9bed572370cb528320a3558e104be974990506ea1971e28b6338e0c09bce14e63bf539ffc6f4056c3b2c61ae081c01cd87fd312c12c9f7baf75ed767580946bcb3b244b9800128b4c36b9f47069671ac081677c20c52f4d7fda2d2167d15e64ae36c81e2a7ad3226f76606e3eb80d341042f59cc0cc39e132f1c0604abc995cb3b50fd15b11c98425fbce7b64d8e8d276404eee59cd46a91a23739344451b24d5a0df02c3e06cabb49486d76822da721cb40f86a07671fb015d22155ee4901aa5cb7ecd340536e121fb566a213efb0ecfbd6cbde122d25c798617d962e906053a5376d0049035da09e5ce8251bbeae5110f90e34283fb94d61fff6c04a4df613a885d4a6f73aec7e1a644d583c450494a40b9135c69697ea358d202221f6f75a279f8f195c17d0d5f37cc274102dc209d98a65517358ee624e965369dbfdf06628de99c5812d4e0cde58861e7250a4ae7e5e968b76860a146a3ae585aec9861dbbacdeaa99cf6be44d10a49a9d6cbb163ac1782fd3762eaf02fe7eb41fec47811108afa138c5d8e9066b6435ba897338668f18f2fad39938ed84d53b0e3db2a80571891cb99ea0834dffae974be881e14f88f5d7a4ab7c12acb075fdfaec32e2fa9ef1e1c9f446d4d268abf99fd99a747bf829562d425c11591649940354093be65bf63efd915cd2001741bf59ea955750080ec496624c8c6efee51e90e484762a03bb1fc253463b1786c61254a085cb3fc9c141437bc7ea427daa58d88e163f6b248778e4be761fc6436ff8fbb9769998e904152ef6736c5c4dcd73dbd88739790843246901adc93160cd83956086e67c2dfcd5d56a85b809dd9e23e0dc7a3f9bd5810656c8092bb8bfc9f5d1983e1f23c196f71b7c5acf1c2ed03f69b153f70b74c03f23d8e369dc64ac86d120bacf7f4234c16b2f7fd048ddd3bd3f004627ebaa4999f423875ca38dccdbd17fe9babf7d33956fae759d251f152bad3133654dd16a9d85d7d17478b293617ece2e3611546bfda5670775f0d96d57c234a5d5c5790ddb72c684bbce41cd9723917b6d40d54193126822ff09394b85110c37f06540354cca601e96d4db75674b370550b6226ec286e1045c0e39dcb55b564ae2822b9c0195b18de79fa81fbd48887b111637039aa509860e8144da9e895b0d1bd105ea4d198b9612c94472e9318a2a9733883c6c64224f0fc8282017d18b742e6c50d3f410c2e99f1d5635da69e4701f4b2d0b489deeb23eb9d9e2eaebc9f265bfb2dbf20fec514d4bdfa3e16d2cba2c8170c63397123b31ff30cd8884c187e2ad1908b6efb93c5e28cefc450de3aec4858136bf1fff38f19689127ba5579da5679e28cc64db92c3adcabab29868486d27c6003d14b387d373f767b24ec54f403fc1f5a3c37d510ee1540f27e0366d0b65de6c08ae0cff7240a37cdcd4d63a81dfc9f2fa31b3eb70feb8d1966d92ed87785a18daf84773cb4749d96f547d1affefa80437b7cdb5d6c5b9327b8ef6cbc6daac82ca44f2c2e7fee93d231251c4626d0c75002b02dc8626c20434881eb35d24dfc981b065180411ae6203ceb600559beea8febfab5e67968f3b74b85656b3f82d92176fd8ac2b1cc7af0d697f24dc43d3a5ef07130e798228d1dea462628a4fc3c709e98258ae9a19527fbaf4653434c5942f3545db6d91ccb362e80aa8030faaeede217472463cc7f1dc2288224a9a06888d88282bf0b15f7ee413e477c067fd954348bfaaaff17e0a2364ec5f53e2e7052416f71d6338207d39d30895cf82748361d3434e99ebb4124e28275d58b6ae77602c3568a3000c7f4d5bbe91faff125f62a9a650109014e37ec8a0f83a58e2f89eb1c9bcec7edaab573e83b42c545aa6a99fbe43a5b03210f5af33cc903fe787f491c9ae9028cc8060b58dbf0438ae9f88694e01e6bf71471540c00e189e592c94e2cffcece08616ae3bd307b77809b12ee0c3076ca0724497ca0339d8df952e28c8fdc04bd43c85f796e4903a14476d4bf98d228fbd5dc75a3ab17d33903911e1957f9521f30d038309e58c98bd7131f8528454a396b2e484ee5c391454e39efea00a14909d72a15bc093a76e77a64e257c3a67e4c9944a6aad0649377342f0a5309a0df68e9460774f1e18e0c4a81b9c3652291c9405a802fa5aeb43e88b2a721a10a17767e7fa1f32d7ebe3daed6e96606427ff2c128825a5f964f89827dfc43d3c69fedb4bc77ce7100e1f00591f0c52389d2fe3e68df91d8dc3f3ed4afe6927f0cc25fabf5af12c1c3f316eacf03501903bee34a4a85536f00f9ece2aa9d13b54bfff9e9108b5a72d478773b73324dc559a4336b9f56b2b55d3f6607c4168fc969acc26d2eed38d96c91384615f731a8be4be35116097495a47fe478a47984dd5134852c2915079ed0ea2135abbc147ad84a6d05611d13a093a28876570f1a3b1ebeb32d1269cdb44103141e7fa0dd74c3630574c7f0adae56feb411d9555398bb4ea0d9b72efcc109198fa3b4cd9288848a810e0131a6cb5534da558d851e212bfbbe94767910da25efbedd6694be68d56dd3e59c31ca8552186ea637af6bf8b54d95fabf79c091cbacbf62e6b2884e7eb5b7ce56f2b684664f007067e36046f9cd550611f6101b25d466770abd2ac7689b8d90d0d82188a75f5e0e60c1c6b69333bfbb3f20413c8ea0fb12d8c53778c654f14820fd155a068a0696b55e4ed9841181ee11034efdf8127510626e027403c4afe36c89d07592609fb0c56f13cc81c0d8bb5721525085f7face712b0e74fbbd2ba9ad7d2108806acfb3fee9d904399642ce6044ca541c1b232389450b5ab1d8b5e7769f1a0141df0c6700fc30b97980a6ddd4316ef6a208432ae688fe35c1a7247d4f6aca04a4422d20b1ce159bdaa3bb513641c00f94d10bed7512bd537b5556dcecc55ee46b7b3df8bd50956fa1df34fe0b484af50c3992c3988f73126701e6ea915a4a252542d0de6d39bc291de79efdd5dbe4a8127289923a3b5882d8c30dbf8631abcecf645d192e2c6e24eedf19fd32c405a046d50e24e7c6d809369604e84d997fd77c0833690f2ca8fe18a409adbfef7e264c069fa8978a71d8bc824feabda2ec2b2d36e714f6f4dd0f465360a5928f5ba468b95b5eb42578178b750b1340aa80534a72daa56b84e05a64f5964c34f7f00580f79632e63cbf22a86d01d22522fa27937212f73a190e74f77445e4c4af6876a28a25126e32a4eef56ce1ccd748d703768670e7a46b664f6a56d34d924709aafec577c8dcd638fdd637a91c6e59e263a21d4752fc9f5dcc122e827946ba79aff78f89ada99ac568c2b753fcfea8f6a1f3b04b7c28fc282e6107dbae198e2b534eb4e695abffb240a39ee5902f8c9749dcecd81717485c748e97678438a70bc1ae8e31b3bddc953382b2b4b63f0d5957b8b57b35d453bf8d56dc80b4620e2b4b843b6b1a2b976b27a3d07260907673d4654c77079bf7c17ba6118851e0cdce11ff93adf1d221cc35aac3e4318dc407f303c6b7cc208adc1b5b4b304a4391e70f043585b37a930db6af563db7495a51f69f879e5b91351633443a4b12e56410f24a188275654c8d0239a767a27ea5150ae7324aea81720f26bfde1848ee29996cfb6154f202b2e0520c960070bab35f9a15ce8976b2b5da72942906195138bdfe8ed530d09807ea0fa4c806090850bbcb8ef3f69aa9da443ef97995283e5daf98aa36eb22051721f9d585852b18e392df956bd5a853b18b8cf46ef01bd1ff8c2c1ad8da4d29d4abc7d9e5644449878b774cdc76ef14533c4712b7b0bffe7a0255815b7913b54766268f4db7221eac23508e5509c853e7b0890f32ce483c851e8656feeeb132e48aaa4ea3c11e938c8c9d764cbcdc1e3046ab14b4c1270583645ed801fbaf82f88402a150337dd3c379531737ae94d01381265ab903eda6b7709dfd2f3025d6130dc2c5842508b5d18f4e29312d897a324bc3659a4cfa31ca498db442910f0ff9998aabbae168e37e8ce3dfd616c076f30d4547a2d23568bac8d091ac017fa361d882df95fb2b3c5b60417091dc7ae9a67cd183eabccaa870d75e55a41664dd4ec949abdb366c710561162f2b1e8f9d6b668c40a8d32772228e81a50d34b27e9cbf61c49d7b6e75c4633e49623bc6dc7790bde66c5eaafec33782f6c68a1079e9cc0f0e76b4bf68e52c0605ccc7a20fed75d73e6aebc0b049ff720574eab5c806286417e4d2fdc4d3deeb732f0606098f591931a637f9b59f5e3b1ba8006aa8b363c95dd96b00346edb2d045337dff34285eaef2214957bff1efd8e7251da2c4b3b34f6dd19a4542a8bd5ea7426cc2d978ea3e44de615d683e37ed1d722ffab3677e69749dbdace39bd4d547c0ec189ec14e4d5dbf534fada8d81296589815374a9bc9b755a1b8fcaa15858200792a4b9a52ccd2ab8e09f5d4daa5a031731b766a8a688eb9d2b6fcd7bce90909e97e6dc757917b41424961a726c87841d21427dbd631241199deac1bc94502e83e768590f438acab6dca733c2e2038a42c3cec6873585fc65570bba9eb676ed6123face28b57893aef31d188dc63cf0feccb921d74b6cb38604b4431994edeb2d4e6753931cc31800b4fd510fe9c44d7c3fdaa54732fe95fa718141069b17829714cde4fa86811e89698a36b45c788d66fd175979052896543341af5f9d42984aa5b1ecc43a77c525563972b0d2d4c93559b0a831dd57a55c7992631159bb9ea3413ff1d19cab6870e15e2288955f401b91ca1dfeb6450959d8f8643d94c8d80a6994e4ab0475af6300c2f068ae879855dda5b28c6aa0f2337eb21e9b76db879c8174033a0e40d5e5cee5b95b3001319fae9170671134092d0793230e4232ae4494244fb30505e4768248a3925e40519e274940ebeed985f5f32807753373eff52c6a3ba80b104", 0x1000}, {&(0x7f0000001480)="23e72b407c490bf0010087e3ebcf15b808c382fae17e43feaf82732d4bea212ad9beb26b567ba4e867679508f495bf01458b76b632d9f4d40f944c8c40d61a1a3110e89e408fd45cdf25ea63cca29402f66da9d20a7701467047d312155123d5e12bbea40ec1f4ac2fa2a085e2401dacf3ee919b173738faf1218e09e2d01cc095bf4a3bb3f660668a540294f9ce887100ed44ff8dde8699ec5d80751cc171aa236a4c02991d19f43c73b5ed64322be547375346670b8970809f2959d7d5dfe8737c7fbf9d1581ca0a3f8a306afbc0ff3198aa6653", 0xd5, 0x9}, {&(0x7f0000000200)="427b7bc2fa818ce0c5e8", 0xa}, {&(0x7f0000001580)="a8e57f442e0fe6db9198266854075a1df469b11ac9312e220f6bd6e36db43a19984f925390ae83d1f78b4d3a63a7aeac6410e8cc309f582c0690dddc5b9e3d734ed25fa05f4fa6a4032611b2daa4c3282c39ec3d31f3ea0e929f4a45ca3e37f3afac2c59ddf273f6c9cac38eb0aec6c79bb181ce888b1d88d6af6191b5786d60f403f8bb5665ef713f4100fb04b29f222617e0a99d4204cb0197e0120532f8bb5bfa8e0c730ff2a4c5dff6fe2ebf485c81a4f7437684d5511743c9cd06527a", 0xbf, 0x3f}, {&(0x7f0000001640)="156f6e57d39ec21bb0c5818152bb711be2615109a6d03ff590bf14fb73999889539d90dfed6813855efc791bd37796cba363702368c1fb57d0fb225c49cb3c271fded70c306b5a87382d42599f57d691eab4cf128a3dbfc8d56d32c95afdd212306ec7c53e02683a2cb1497c6a971f96118a5cc76c938bd1d6495a2a112bcfa98a4df8026695c3227868b4d4356e0e943c6285443252f7fb672b8cb2e1eb749b12be1027c4fbcc7e9c", 0xa9, 0x8415}, {&(0x7f0000001700)="15949995dd53ba4450836d9bccd45ee305e3c457811eddb76ec2bb6b1528a968910ca634e2285c6b1f5475ddbfd5a6755f9273ced5752b9ef41250827821be1ce9928cebf1849b65ec498f4c525db410a11968cc6e1b2748c4e646519ec19e10f7598003385db96f12eed2a954dc537298b0b210115055d445af4d8eeaba28e5e28162e20ed0fd6760d20574523d50cea3deddbdc97a1e8da84b655a40131b4ac11ecf8db21e757aade5bee21a5a346f3ce31494a8bee1ae48199ae894fa7807506f6c", 0xc3, 0x8}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:43:44 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000000)="476437fef25f637b09518bca7ec03669a1f90f26c209b27a10add32927841d1d619074ade6bae5a86c45d7c61d6f9e4cff9c27e5f6250cb99470554b83bf7a048d64a89fca8c3ee28456dd326f7e3a250776e71368e2f2862a40a23b8edaf26c0920af36c0c5bb1937043c", &(0x7f0000000100)="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", &(0x7f0000000280)="a4d9e344fdf86b60a7c66c0409211f9ac0cf2c3c43ee06690c946940e700899747a500c00aa04b582956ac2f75c2aff93ffe7438eb4ac658f3de4065d65c36c504eb298be2ef7b0c8cda967b8128f59b3f9fa1a50bc4cf5b5806711392f3e898b8aca34ded4b9420", &(0x7f0000000200)="f046d0207c930c0ee59abeb548dcc7995df6545e7b46bc30cb65ae9b86bf2f08904885e415d753aede6c1e3b0216808cf3d7a7219a26", &(0x7f0000000300)="c7b2baf7651a7929e6b4ebfd26a8eabb53c853c791b3a470fe07e49cc38c294062b326361ba1351bfee522c80764875dda75315ea326bab058d93253eafa8ae071fdcf1a25962fdf175c6da8fcf317c846a0", &(0x7f0000000380)="7252d09d9415764420de185d7192d99c468da2db9ccde4ca344e902ab8de14cced9e322278c06b995cf6123368fabffe7deab4c3a67b8d24ab4da08b96de2edc7f33de9ff3fdd400b5e687a1cd3c4d8234817bf4b04ea3ce259a5f4ca7ab94449117f3e37f224fcdaabc2e365a3593292eb37387"], 0x7fffffff}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7fff, 0x800, 0x3, 0x7, 0xfffff000, 0xa4, 0x1ff, 0x7], [0x0, 0x4, 0xfffffff8, 0x9, 0x200, 0x1000, 0x0, 0xfc], [0x10000, 0xd2e, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x729]], '\x00', [{0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xb73, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x1}, {0x2, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xa6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x1}, {0x7fffffff, 0x4e9, 0x1, 0x1, 0x1}, {0x64, 0x80000001, 0x0, 0x1, 0x1}, {0x100, 0x5, 0x0, 0x1}], '\x00', 0x6}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000000)="476437fef25f637b09518bca7ec03669a1f90f26c209b27a10add32927841d1d619074ade6bae5a86c45d7c61d6f9e4cff9c27e5f6250cb99470554b83bf7a048d64a89fca8c3ee28456dd326f7e3a250776e71368e2f2862a40a23b8edaf26c0920af36c0c5bb1937043c", &(0x7f0000000100)="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", &(0x7f0000000280)="a4d9e344fdf86b60a7c66c0409211f9ac0cf2c3c43ee06690c946940e700899747a500c00aa04b582956ac2f75c2aff93ffe7438eb4ac658f3de4065d65c36c504eb298be2ef7b0c8cda967b8128f59b3f9fa1a50bc4cf5b5806711392f3e898b8aca34ded4b9420", &(0x7f0000000200)="f046d0207c930c0ee59abeb548dcc7995df6545e7b46bc30cb65ae9b86bf2f08904885e415d753aede6c1e3b0216808cf3d7a7219a26", &(0x7f0000000300)="c7b2baf7651a7929e6b4ebfd26a8eabb53c853c791b3a470fe07e49cc38c294062b326361ba1351bfee522c80764875dda75315ea326bab058d93253eafa8ae071fdcf1a25962fdf175c6da8fcf317c846a0", &(0x7f0000000380)="7252d09d9415764420de185d7192d99c468da2db9ccde4ca344e902ab8de14cced9e322278c06b995cf6123368fabffe7deab4c3a67b8d24ab4da08b96de2edc7f33de9ff3fdd400b5e687a1cd3c4d8234817bf4b04ea3ce259a5f4ca7ab94449117f3e37f224fcdaabc2e365a3593292eb37387"], 0x7fffffff}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7fff, 0x800, 0x3, 0x7, 0xfffff000, 0xa4, 0x1ff, 0x7], [0x0, 0x4, 0xfffffff8, 0x9, 0x200, 0x1000, 0x0, 0xfc], [0x10000, 0xd2e, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x729]], '\x00', [{0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xb73, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x1}, {0x2, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xa6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x1}, {0x7fffffff, 0x4e9, 0x1, 0x1, 0x1}, {0x64, 0x80000001, 0x0, 0x1, 0x1}, {0x100, 0x5, 0x0, 0x1}], '\x00', 0x6}) (async) [ 1280.252351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.257536] RIP: 0033:0x7f5c08b6c037 [ 1280.261240] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.268947] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1280.276205] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1280.283460] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1280.290721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1280.297982] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1280.299355] FAT-fs (loop2): bogus number of reserved sectors [ 1280.318566] CPU: 1 PID: 2027 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1280.326370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1280.335719] Call Trace: [ 1280.338312] dump_stack+0x1b2/0x281 [ 1280.341949] should_fail.cold+0x10a/0x149 [ 1280.344951] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1280.346093] should_failslab+0xd6/0x130 [ 1280.346107] kmem_cache_alloc+0x28e/0x3c0 [ 1280.360244] __kernfs_new_node+0x6f/0x470 [ 1280.364406] kernfs_new_node+0x7b/0xe0 [ 1280.368291] __kernfs_create_file+0x3d/0x320 [ 1280.371935] FAT-fs (loop4): invalid media value (0xd4) [ 1280.372692] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1280.377985] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1280.382599] ? kernfs_create_dir_ns+0x171/0x200 [ 1280.382609] internal_create_group+0x22b/0x710 [ 1280.382624] lo_ioctl+0x1137/0x1cd0 [ 1280.382637] ? loop_set_status64+0xe0/0xe0 [ 1280.382652] blkdev_ioctl+0x540/0x1830 [ 1280.403753] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1280.405559] ? blkpg_ioctl+0x8d0/0x8d0 [ 1280.405571] ? trace_hardirqs_on+0x10/0x10 [ 1280.405585] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1280.431648] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1280.436674] block_ioctl+0xd9/0x120 [ 1280.440295] ? blkdev_fallocate+0x3a0/0x3a0 [ 1280.444614] do_vfs_ioctl+0x75a/0xff0 [ 1280.448413] ? lock_acquire+0x170/0x3f0 [ 1280.452383] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.456798] ? __fget+0x265/0x3e0 [ 1280.460249] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.464217] ? security_file_ioctl+0x83/0xb0 [ 1280.468619] SyS_ioctl+0x7f/0xb0 [ 1280.471983] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.475957] do_syscall_64+0x1d5/0x640 [ 1280.479846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.485036] RIP: 0033:0x7f25b5a2a037 [ 1280.488743] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.496450] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1280.503720] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1280.510987] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1280.518250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1280.525532] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1280.545747] FAT-fs (loop2): Can't find a valid FAT filesystem 14:43:44 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf2500000000060006000400000008000100", @ANYRES32=r2, @ANYBLOB="08000400e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x894) r3 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) 14:43:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x14002, &(0x7f0000000240)={[{@uni_xlate}]}) 14:43:44 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 17) [ 1280.555248] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:44 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 16) [ 1280.605523] FAT-fs (loop2): bogus number of reserved sectors [ 1280.622654] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1280.638163] FAT-fs (loop4): bogus number of reserved sectors [ 1280.656325] FAULT_INJECTION: forcing a failure. [ 1280.656325] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.659459] FAULT_INJECTION: forcing a failure. [ 1280.659459] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.673033] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1280.697428] CPU: 1 PID: 2075 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1280.705235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1280.714585] Call Trace: [ 1280.717173] dump_stack+0x1b2/0x281 [ 1280.720803] should_fail.cold+0x10a/0x149 [ 1280.724952] should_failslab+0xd6/0x130 [ 1280.728929] kmem_cache_alloc+0x28e/0x3c0 [ 1280.733072] __kernfs_new_node+0x6f/0x470 [ 1280.737218] kernfs_new_node+0x7b/0xe0 [ 1280.741107] __kernfs_create_file+0x3d/0x320 [ 1280.745511] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1280.750173] ? kernfs_create_dir_ns+0x171/0x200 [ 1280.754842] internal_create_group+0x22b/0x710 [ 1280.759420] lo_ioctl+0x1137/0x1cd0 [ 1280.763176] ? loop_set_status64+0xe0/0xe0 [ 1280.767419] blkdev_ioctl+0x540/0x1830 [ 1280.771306] ? blkpg_ioctl+0x8d0/0x8d0 [ 1280.775197] ? trace_hardirqs_on+0x10/0x10 [ 1280.779430] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1280.784532] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1280.789555] block_ioctl+0xd9/0x120 [ 1280.793180] ? blkdev_fallocate+0x3a0/0x3a0 [ 1280.797508] do_vfs_ioctl+0x75a/0xff0 [ 1280.801306] ? lock_acquire+0x170/0x3f0 [ 1280.805268] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.809841] ? __fget+0x265/0x3e0 [ 1280.813293] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.817263] ? security_file_ioctl+0x83/0xb0 [ 1280.821671] SyS_ioctl+0x7f/0xb0 [ 1280.825036] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.829005] do_syscall_64+0x1d5/0x640 [ 1280.832896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.838080] RIP: 0033:0x7f25b5a2a037 [ 1280.841785] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.849485] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 14:43:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000000)="476437fef25f637b09518bca7ec03669a1f90f26c209b27a10add32927841d1d619074ade6bae5a86c45d7c61d6f9e4cff9c27e5f6250cb99470554b83bf7a048d64a89fca8c3ee28456dd326f7e3a250776e71368e2f2862a40a23b8edaf26c0920af36c0c5bb1937043c", &(0x7f0000000100)="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", &(0x7f0000000280)="a4d9e344fdf86b60a7c66c0409211f9ac0cf2c3c43ee06690c946940e700899747a500c00aa04b582956ac2f75c2aff93ffe7438eb4ac658f3de4065d65c36c504eb298be2ef7b0c8cda967b8128f59b3f9fa1a50bc4cf5b5806711392f3e898b8aca34ded4b9420", &(0x7f0000000200)="f046d0207c930c0ee59abeb548dcc7995df6545e7b46bc30cb65ae9b86bf2f08904885e415d753aede6c1e3b0216808cf3d7a7219a26", &(0x7f0000000300)="c7b2baf7651a7929e6b4ebfd26a8eabb53c853c791b3a470fe07e49cc38c294062b326361ba1351bfee522c80764875dda75315ea326bab058d93253eafa8ae071fdcf1a25962fdf175c6da8fcf317c846a0", &(0x7f0000000380)="7252d09d9415764420de185d7192d99c468da2db9ccde4ca344e902ab8de14cced9e322278c06b995cf6123368fabffe7deab4c3a67b8d24ab4da08b96de2edc7f33de9ff3fdd400b5e687a1cd3c4d8234817bf4b04ea3ce259a5f4ca7ab94449117f3e37f224fcdaabc2e365a3593292eb37387"], 0x7fffffff}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7fff, 0x800, 0x3, 0x7, 0xfffff000, 0xa4, 0x1ff, 0x7], [0x0, 0x4, 0xfffffff8, 0x9, 0x200, 0x1000, 0x0, 0xfc], [0x10000, 0xd2e, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x729]], '\x00', [{0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xb73, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x1}, {0x2, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xa6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x1}, {0x7fffffff, 0x4e9, 0x1, 0x1, 0x1}, {0x64, 0x80000001, 0x0, 0x1, 0x1}, {0x100, 0x5, 0x0, 0x1}], '\x00', 0x6}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000000)="476437fef25f637b09518bca7ec03669a1f90f26c209b27a10add32927841d1d619074ade6bae5a86c45d7c61d6f9e4cff9c27e5f6250cb99470554b83bf7a048d64a89fca8c3ee28456dd326f7e3a250776e71368e2f2862a40a23b8edaf26c0920af36c0c5bb1937043c", &(0x7f0000000100)="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", &(0x7f0000000280)="a4d9e344fdf86b60a7c66c0409211f9ac0cf2c3c43ee06690c946940e700899747a500c00aa04b582956ac2f75c2aff93ffe7438eb4ac658f3de4065d65c36c504eb298be2ef7b0c8cda967b8128f59b3f9fa1a50bc4cf5b5806711392f3e898b8aca34ded4b9420", &(0x7f0000000200)="f046d0207c930c0ee59abeb548dcc7995df6545e7b46bc30cb65ae9b86bf2f08904885e415d753aede6c1e3b0216808cf3d7a7219a26", &(0x7f0000000300)="c7b2baf7651a7929e6b4ebfd26a8eabb53c853c791b3a470fe07e49cc38c294062b326361ba1351bfee522c80764875dda75315ea326bab058d93253eafa8ae071fdcf1a25962fdf175c6da8fcf317c846a0", &(0x7f0000000380)="7252d09d9415764420de185d7192d99c468da2db9ccde4ca344e902ab8de14cced9e322278c06b995cf6123368fabffe7deab4c3a67b8d24ab4da08b96de2edc7f33de9ff3fdd400b5e687a1cd3c4d8234817bf4b04ea3ce259a5f4ca7ab94449117f3e37f224fcdaabc2e365a3593292eb37387"], 0x7fffffff}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x2, [[0x7fff, 0x800, 0x3, 0x7, 0xfffff000, 0xa4, 0x1ff, 0x7], [0x0, 0x4, 0xfffffff8, 0x9, 0x200, 0x1000, 0x0, 0xfc], [0x10000, 0xd2e, 0x1, 0x0, 0x1000, 0x1, 0x5, 0x729]], '\x00', [{0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xb73, 0x80000000, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xd1, 0x0, 0x1}, {0x2, 0x401, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x80, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xa6, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x1}, {0x7fffffff, 0x4e9, 0x1, 0x1, 0x1}, {0x64, 0x80000001, 0x0, 0x1, 0x1}, {0x100, 0x5, 0x0, 0x1}], '\x00', 0x6}) (async) 14:43:45 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="040028bd7000fedbdf2500000000060006000400000008000100", @ANYRES32=r2, @ANYBLOB="08000400e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x894) (async) r3 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x0, 0x4) 14:43:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x14002, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x14002, &(0x7f0000000240)={[{@uni_xlate}]}) (async) [ 1280.856736] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1280.863995] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1280.871254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1280.878507] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1280.924069] CPU: 0 PID: 2072 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1280.931880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1280.941236] Call Trace: [ 1280.943824] dump_stack+0x1b2/0x281 [ 1280.947453] should_fail.cold+0x10a/0x149 [ 1280.951603] should_failslab+0xd6/0x130 [ 1280.952505] FAT-fs (loop2): bogus number of reserved sectors [ 1280.955575] kmem_cache_alloc+0x28e/0x3c0 [ 1280.955590] __kernfs_new_node+0x6f/0x470 [ 1280.955602] kernfs_new_node+0x7b/0xe0 [ 1280.967300] FAT-fs (loop4): bogus number of reserved sectors [ 1280.969646] __kernfs_create_file+0x3d/0x320 [ 1280.969659] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1280.969668] ? kernfs_create_dir_ns+0x171/0x200 [ 1280.969678] internal_create_group+0x22b/0x710 [ 1280.969692] lo_ioctl+0x1137/0x1cd0 [ 1280.969704] ? loop_set_status64+0xe0/0xe0 [ 1280.969718] blkdev_ioctl+0x540/0x1830 [ 1280.973935] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1280.979388] ? blkpg_ioctl+0x8d0/0x8d0 [ 1280.979400] ? trace_hardirqs_on+0x10/0x10 [ 1280.979411] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1280.979423] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1280.988375] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1280.988489] block_ioctl+0xd9/0x120 [ 1281.042560] ? blkdev_fallocate+0x3a0/0x3a0 [ 1281.046879] do_vfs_ioctl+0x75a/0xff0 [ 1281.050679] ? lock_acquire+0x170/0x3f0 [ 1281.054652] ? ioctl_preallocate+0x1a0/0x1a0 [ 1281.059063] ? __fget+0x265/0x3e0 [ 1281.062516] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.066489] ? security_file_ioctl+0x83/0xb0 [ 1281.070896] SyS_ioctl+0x7f/0xb0 [ 1281.074259] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.078230] do_syscall_64+0x1d5/0x640 [ 1281.082119] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1281.087304] RIP: 0033:0x7f5c08b6c037 [ 1281.091012] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.096890] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1281.098713] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1281.098718] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1281.098724] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1281.098730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1281.098736] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:45 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) 14:43:45 executing program 0: r0 = socket(0x1e, 0x3, 0x20000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x9, 0xa, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000040)=0x7fff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x3, 0x2, 0x3, &(0x7f0000000300)) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair(0x1f, 0x6, 0x1, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'sit0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25040000000500350009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 1281.168552] FAT-fs (loop2): bogus number of reserved sectors [ 1281.179074] FAT-fs (loop4): bogus number of reserved sectors [ 1281.190273] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1281.196259] FAT-fs (loop2): Can't find a valid FAT filesystem 14:43:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x14002, &(0x7f0000000240)={[{@uni_xlate}]}) 14:43:45 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 18) 14:43:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x920, 0x70bd29, 0x3f, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'vfat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x26, 0x1, '/proc/sys/net/ipv4/vs/am_droprate\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404a041}, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xc029, 0x3}) 14:43:45 executing program 0: r0 = socket(0x1e, 0x3, 0x20000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x9, 0xa, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000040)=0x7fff, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x3, 0x2, 0x3, &(0x7f0000000300)) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair(0x1f, 0x6, 0x1, &(0x7f0000000080)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'sit0\x00'}) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25040000000500350009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 1281.225837] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x920, 0x70bd29, 0x3f, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'vfat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x26, 0x1, '/proc/sys/net/ipv4/vs/am_droprate\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404a041}, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xc029, 0x3}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x920, 0x70bd29, 0x3f, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'vfat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x26, 0x1, '/proc/sys/net/ipv4/vs/am_droprate\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404a041}, 0x800) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xc029, 0x3}) (async) 14:43:45 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 17) [ 1281.314649] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1281.317724] FAULT_INJECTION: forcing a failure. [ 1281.317724] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.335073] FAT-fs (loop2): bogus number of reserved sectors [ 1281.335080] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1281.347381] FAT-fs (loop4): bogus number of reserved sectors 14:43:45 executing program 0: r0 = socket(0x1e, 0x3, 0x20000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x9, 0xa, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000040)=0x7fff, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x3, 0x2, 0x3, &(0x7f0000000300)) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) socketpair(0x1f, 0x6, 0x1, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'sit0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25040000000500350009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 1281.396588] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1281.413583] FAULT_INJECTION: forcing a failure. [ 1281.413583] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.432411] CPU: 0 PID: 2155 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1281.440213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1281.449556] Call Trace: [ 1281.452493] dump_stack+0x1b2/0x281 [ 1281.456131] should_fail.cold+0x10a/0x149 [ 1281.460274] should_failslab+0xd6/0x130 [ 1281.464247] kmem_cache_alloc+0x28e/0x3c0 [ 1281.468390] __kernfs_new_node+0x6f/0x470 [ 1281.472537] kernfs_new_node+0x7b/0xe0 [ 1281.476421] __kernfs_create_file+0x3d/0x320 [ 1281.480922] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1281.485592] ? kernfs_create_dir_ns+0x171/0x200 [ 1281.490344] internal_create_group+0x22b/0x710 [ 1281.494924] lo_ioctl+0x1137/0x1cd0 [ 1281.498550] ? loop_set_status64+0xe0/0xe0 [ 1281.502786] blkdev_ioctl+0x540/0x1830 [ 1281.506672] ? blkpg_ioctl+0x8d0/0x8d0 [ 1281.510558] ? trace_hardirqs_on+0x10/0x10 [ 1281.514790] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1281.519891] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1281.524907] block_ioctl+0xd9/0x120 [ 1281.528530] ? blkdev_fallocate+0x3a0/0x3a0 [ 1281.532860] do_vfs_ioctl+0x75a/0xff0 [ 1281.536650] ? lock_acquire+0x170/0x3f0 [ 1281.540612] ? ioctl_preallocate+0x1a0/0x1a0 [ 1281.545017] ? __fget+0x265/0x3e0 [ 1281.548467] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.552440] ? security_file_ioctl+0x83/0xb0 [ 1281.556848] SyS_ioctl+0x7f/0xb0 [ 1281.560203] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.564165] do_syscall_64+0x1d5/0x640 [ 1281.568043] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1281.573222] RIP: 0033:0x7f25b5a2a037 [ 1281.576923] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.584622] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1281.591877] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1281.603826] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1281.611092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1281.618353] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1281.625634] CPU: 1 PID: 2131 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1281.633432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1281.642774] Call Trace: [ 1281.645053] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1281.645354] dump_stack+0x1b2/0x281 [ 1281.654839] should_fail.cold+0x10a/0x149 [ 1281.658992] should_failslab+0xd6/0x130 [ 1281.662963] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1281.667631] ? dev_uevent_filter+0xd0/0xd0 [ 1281.671865] kobject_uevent_env+0x20c/0xf30 [ 1281.676185] ? internal_create_group+0x48f/0x710 [ 1281.680941] lo_ioctl+0x11a6/0x1cd0 [ 1281.684566] ? loop_set_status64+0xe0/0xe0 [ 1281.688794] blkdev_ioctl+0x540/0x1830 [ 1281.692677] ? blkpg_ioctl+0x8d0/0x8d0 [ 1281.696563] ? trace_hardirqs_on+0x10/0x10 [ 1281.700798] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1281.705892] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1281.710905] block_ioctl+0xd9/0x120 [ 1281.714522] ? blkdev_fallocate+0x3a0/0x3a0 [ 1281.718836] do_vfs_ioctl+0x75a/0xff0 [ 1281.722639] ? lock_acquire+0x170/0x3f0 [ 1281.726715] ? ioctl_preallocate+0x1a0/0x1a0 [ 1281.731125] ? __fget+0x265/0x3e0 [ 1281.734575] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.738550] ? security_file_ioctl+0x83/0xb0 [ 1281.742954] SyS_ioctl+0x7f/0xb0 [ 1281.746315] ? do_vfs_ioctl+0xff0/0xff0 [ 1281.750290] do_syscall_64+0x1d5/0x640 [ 1281.754181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1281.759363] RIP: 0033:0x7f5c08b6c037 [ 1281.763063] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.770762] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1281.778020] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1281.785280] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1281.792546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:46 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x8) 14:43:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x920, 0x70bd29, 0x3f, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'vfat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x26, 0x1, '/proc/sys/net/ipv4/vs/am_droprate\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404a041}, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xc029, 0x3}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x920, 0x70bd29, 0x3f, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'vfat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x26, 0x1, '/proc/sys/net/ipv4/vs/am_droprate\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x404a041}, 0x800) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000000)={0xc029, 0x3}) (async) [ 1281.799814] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1281.814772] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:46 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 18) 14:43:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) [ 1281.926658] FAT-fs (loop2): bogus number of reserved sectors [ 1281.939250] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1281.940612] FAULT_INJECTION: forcing a failure. [ 1281.940612] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.957266] FAT-fs (loop4): bogus number of reserved sectors [ 1281.981058] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1281.985723] CPU: 0 PID: 2192 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1281.994736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1282.004167] Call Trace: [ 1282.006750] dump_stack+0x1b2/0x281 [ 1282.010383] should_fail.cold+0x10a/0x149 [ 1282.014528] should_failslab+0xd6/0x130 [ 1282.018498] kmem_cache_alloc+0x28e/0x3c0 [ 1282.022649] __kernfs_new_node+0x6f/0x470 [ 1282.026803] kernfs_new_node+0x7b/0xe0 [ 1282.030691] __kernfs_create_file+0x3d/0x320 [ 1282.035219] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1282.039889] ? kernfs_create_dir_ns+0x171/0x200 [ 1282.044556] internal_create_group+0x22b/0x710 [ 1282.049139] lo_ioctl+0x1137/0x1cd0 [ 1282.052764] ? loop_set_status64+0xe0/0xe0 [ 1282.056997] blkdev_ioctl+0x540/0x1830 [ 1282.060882] ? blkpg_ioctl+0x8d0/0x8d0 [ 1282.064770] ? trace_hardirqs_on+0x10/0x10 [ 1282.069005] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.074101] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1282.079114] block_ioctl+0xd9/0x120 [ 1282.082738] ? blkdev_fallocate+0x3a0/0x3a0 [ 1282.087054] do_vfs_ioctl+0x75a/0xff0 [ 1282.090850] ? lock_acquire+0x170/0x3f0 [ 1282.094820] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.099228] ? __fget+0x265/0x3e0 [ 1282.102678] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.106650] ? security_file_ioctl+0x83/0xb0 [ 1282.111053] SyS_ioctl+0x7f/0xb0 [ 1282.114427] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.118394] do_syscall_64+0x1d5/0x640 [ 1282.122282] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.127461] RIP: 0033:0x7f25b5a2a037 14:43:46 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) 14:43:46 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x8) 14:43:46 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 19) [ 1282.131162] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.138865] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1282.142431] FAT-fs (loop2): bogus number of reserved sectors [ 1282.146123] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1282.146129] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1282.146135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1282.146140] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) [ 1282.202727] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1282.233849] FAULT_INJECTION: forcing a failure. [ 1282.233849] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.250286] CPU: 1 PID: 2220 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1282.258088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1282.267434] Call Trace: [ 1282.270016] dump_stack+0x1b2/0x281 [ 1282.274510] should_fail.cold+0x10a/0x149 [ 1282.278660] should_failslab+0xd6/0x130 [ 1282.282632] __kmalloc+0x2c1/0x400 [ 1282.286169] ? kobject_get_path+0xb5/0x230 [ 1282.290402] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1282.295852] kobject_get_path+0xb5/0x230 [ 1282.299915] kobject_uevent_env+0x230/0xf30 [ 1282.304242] ? internal_create_group+0x48f/0x710 [ 1282.308996] lo_ioctl+0x11a6/0x1cd0 [ 1282.312621] ? loop_set_status64+0xe0/0xe0 [ 1282.316858] blkdev_ioctl+0x540/0x1830 [ 1282.320745] ? blkpg_ioctl+0x8d0/0x8d0 [ 1282.322717] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1282.324626] ? trace_hardirqs_on+0x10/0x10 [ 1282.324641] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.324653] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1282.324668] block_ioctl+0xd9/0x120 [ 1282.324676] ? blkdev_fallocate+0x3a0/0x3a0 [ 1282.324687] do_vfs_ioctl+0x75a/0xff0 [ 1282.346733] FAT-fs (loop4): bogus number of reserved sectors [ 1282.347978] ? lock_acquire+0x170/0x3f0 [ 1282.347991] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.348004] ? __fget+0x265/0x3e0 [ 1282.348016] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.348027] ? security_file_ioctl+0x83/0xb0 [ 1282.348037] SyS_ioctl+0x7f/0xb0 [ 1282.351769] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1282.355941] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.355954] do_syscall_64+0x1d5/0x640 14:43:46 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x8) 14:43:46 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000280)={0x5}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25ac8de778b9eb3601000000001365"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010d2cbd7000fddbdf2502000001bea0a8b2c89a870d00060028000400000008003a00080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) [ 1282.355970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.355979] RIP: 0033:0x7f5c08b6c037 [ 1282.355984] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.355996] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1282.426674] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1282.433941] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1282.441219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:46 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 19) [ 1282.448482] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1282.464193] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1282.480444] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1282.488231] FAT-fs (loop4): bogus number of reserved sectors 14:43:46 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async, rerun: 64) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000280)={0x5}, 0x4) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25ac8de778b9eb3601000000001365"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010d2cbd7000fddbdf2502000001bea0a8b2c89a870d00060028000400000008003a00080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) (rerun: 64) 14:43:46 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 20) [ 1282.502146] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174653d312c01"]) [ 1282.534305] FAULT_INJECTION: forcing a failure. [ 1282.534305] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.554044] CPU: 1 PID: 2252 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1282.561843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1282.571178] Call Trace: [ 1282.573763] dump_stack+0x1b2/0x281 [ 1282.577371] should_fail.cold+0x10a/0x149 [ 1282.581498] should_failslab+0xd6/0x130 [ 1282.585452] __kmalloc+0x2c1/0x400 [ 1282.588970] ? kobject_get_path+0xb5/0x230 [ 1282.593184] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1282.598612] kobject_get_path+0xb5/0x230 [ 1282.602656] kobject_uevent_env+0x230/0xf30 [ 1282.606957] ? internal_create_group+0x48f/0x710 [ 1282.611696] lo_ioctl+0x11a6/0x1cd0 [ 1282.615306] ? loop_set_status64+0xe0/0xe0 [ 1282.619523] blkdev_ioctl+0x540/0x1830 [ 1282.623393] ? blkpg_ioctl+0x8d0/0x8d0 [ 1282.627259] ? trace_hardirqs_on+0x10/0x10 [ 1282.631477] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.636645] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1282.641641] block_ioctl+0xd9/0x120 [ 1282.645246] ? blkdev_fallocate+0x3a0/0x3a0 [ 1282.649549] do_vfs_ioctl+0x75a/0xff0 [ 1282.653328] ? lock_acquire+0x170/0x3f0 [ 1282.657281] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.661670] ? __fget+0x265/0x3e0 [ 1282.665102] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.669056] ? security_file_ioctl+0x83/0xb0 [ 1282.673442] SyS_ioctl+0x7f/0xb0 [ 1282.676783] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.680755] do_syscall_64+0x1d5/0x640 [ 1282.684623] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.689795] RIP: 0033:0x7f25b5a2a037 [ 1282.693490] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.701180] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1282.708437] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1282.715686] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1282.722935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000280)={0x5}, 0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000425bd7000ffdbdf25ac8de778b9eb3601000000001365"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010d2cbd7000fddbdf2502000001bea0a8b2c89a870d00060028000400000008003a00080000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) [ 1282.730184] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1282.784046] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1282.784231] FAULT_INJECTION: forcing a failure. [ 1282.784231] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.807505] CPU: 1 PID: 2266 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1282.815302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1282.824651] Call Trace: [ 1282.827239] dump_stack+0x1b2/0x281 [ 1282.830865] should_fail.cold+0x10a/0x149 [ 1282.835011] should_failslab+0xd6/0x130 [ 1282.838982] kmem_cache_alloc_node+0x263/0x410 [ 1282.843560] __alloc_skb+0x5c/0x510 [ 1282.847182] kobject_uevent_env+0x882/0xf30 [ 1282.851507] lo_ioctl+0x11a6/0x1cd0 [ 1282.855132] ? loop_set_status64+0xe0/0xe0 [ 1282.859364] blkdev_ioctl+0x540/0x1830 [ 1282.863247] ? blkpg_ioctl+0x8d0/0x8d0 [ 1282.867131] ? trace_hardirqs_on+0x10/0x10 [ 1282.871365] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.876459] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1282.881477] block_ioctl+0xd9/0x120 [ 1282.885101] ? blkdev_fallocate+0x3a0/0x3a0 [ 1282.889421] do_vfs_ioctl+0x75a/0xff0 [ 1282.893218] ? lock_acquire+0x170/0x3f0 [ 1282.897186] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.901592] ? __fget+0x265/0x3e0 [ 1282.905041] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.909006] ? security_file_ioctl+0x83/0xb0 [ 1282.913410] SyS_ioctl+0x7f/0xb0 [ 1282.916766] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.920737] do_syscall_64+0x1d5/0x640 [ 1282.924630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.929809] RIP: 0033:0x7f5c08b6c037 [ 1282.933510] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.941213] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1282.948480] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1282.956087] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1282.963351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1282.970612] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) [ 1282.991825] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1283.009602] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174653d312c01"]) 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:43:47 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 20) 14:43:47 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 14:43:47 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 21) [ 1283.067747] FAT-fs (loop4): bogus number of reserved sectors [ 1283.084042] FAT-fs (loop4): Can't find a valid FAT filesystem 14:43:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x220004, &(0x7f0000000040)={[{@uni_xlate}], [{@obj_role}, {@appraise_type}]}) syz_mount_image$romfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xc4c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="08906808194c3cb06fcaaf59279c725224f00ad265fbb4ef69890e795dcf67d77eaeb35786939ebda3c3967ba71a190657b116b9d34034ef58a5906b0d0a9f5cc9e33853126de0b957a42bdee386051473ec35241cb81b0a57201e282303e58060c439f57acaaf6beee884398052349fc8361f01a0436c64db3f7cd8a554bcb95448e0a3ee8624da667064f5cb607548b659bd9c8e52dac7d49ce4cda6026ff58da7f319109627967ec92b8d8d9a4a514c3abaad3354fd7655170b56455996e2a152b7223ef1ceafe0804439411717", 0xcf, 0xad0}], 0x8001, &(0x7f00000002c0)=ANY=[@ANYBLOB="1048698771dd0ca2b1b708c8557d96defd8bf28ce9f5a990ff03956e8da9ae09bde8d246039c5ddca8895e32eecba2a86bb279a1972021fd9ed90c4e5a24b1"]) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000800) 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1283.144928] FAULT_INJECTION: forcing a failure. [ 1283.144928] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.156903] CPU: 0 PID: 2297 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1283.164709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1283.174064] Call Trace: [ 1283.176652] dump_stack+0x1b2/0x281 [ 1283.180285] should_fail.cold+0x10a/0x149 [ 1283.184431] should_failslab+0xd6/0x130 [ 1283.188411] kmem_cache_alloc_node+0x263/0x410 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2000) recvfrom$rose(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x12022, &(0x7f0000001040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2000) recvfrom$rose(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x12022, &(0x7f0000001040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x80003, 0x0) (async) pipe2(&(0x7f0000000000), 0x2000) (async) recvfrom$rose(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x12022, &(0x7f0000001040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1283.192994] __alloc_skb+0x5c/0x510 [ 1283.196620] kobject_uevent_env+0x882/0xf30 [ 1283.200943] lo_ioctl+0x11a6/0x1cd0 [ 1283.204568] ? loop_set_status64+0xe0/0xe0 [ 1283.208802] blkdev_ioctl+0x540/0x1830 [ 1283.212685] ? blkpg_ioctl+0x8d0/0x8d0 [ 1283.216569] ? trace_hardirqs_on+0x10/0x10 [ 1283.220799] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1283.225903] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1283.230923] block_ioctl+0xd9/0x120 [ 1283.234553] ? blkdev_fallocate+0x3a0/0x3a0 [ 1283.238870] do_vfs_ioctl+0x75a/0xff0 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2000) recvfrom$rose(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x12022, &(0x7f0000001040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1283.242664] ? lock_acquire+0x170/0x3f0 [ 1283.246630] ? ioctl_preallocate+0x1a0/0x1a0 [ 1283.251041] ? __fget+0x265/0x3e0 [ 1283.254492] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.258465] ? security_file_ioctl+0x83/0xb0 [ 1283.262866] SyS_ioctl+0x7f/0xb0 [ 1283.266236] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.270215] do_syscall_64+0x1d5/0x640 [ 1283.274101] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1283.279275] RIP: 0033:0x7f5c08b6c037 [ 1283.282965] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250100000005002a00010000000500300001000000050033000000000005002e000000000008002c000400"/62], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044100) [ 1283.290656] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1283.297921] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1283.305186] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1283.312450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1283.319711] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1283.346531] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value [ 1283.349625] FAULT_INJECTION: forcing a failure. [ 1283.349625] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.366384] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1283.374019] CPU: 0 PID: 2303 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1283.381816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1283.391165] Call Trace: [ 1283.393754] dump_stack+0x1b2/0x281 [ 1283.397386] should_fail.cold+0x10a/0x149 [ 1283.401529] should_failslab+0xd6/0x130 [ 1283.405498] kmem_cache_alloc_node+0x263/0x410 [ 1283.410081] __alloc_skb+0x5c/0x510 [ 1283.413710] kobject_uevent_env+0x882/0xf30 [ 1283.418038] lo_ioctl+0x11a6/0x1cd0 [ 1283.421660] ? loop_set_status64+0xe0/0xe0 [ 1283.425889] blkdev_ioctl+0x540/0x1830 [ 1283.429772] ? blkpg_ioctl+0x8d0/0x8d0 [ 1283.433651] ? trace_hardirqs_on+0x10/0x10 [ 1283.437889] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1283.442987] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1283.448000] block_ioctl+0xd9/0x120 [ 1283.451619] ? blkdev_fallocate+0x3a0/0x3a0 [ 1283.455931] do_vfs_ioctl+0x75a/0xff0 [ 1283.459727] ? lock_acquire+0x170/0x3f0 [ 1283.463693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1283.468099] ? __fget+0x265/0x3e0 [ 1283.471553] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.475524] ? security_file_ioctl+0x83/0xb0 [ 1283.479925] SyS_ioctl+0x7f/0xb0 [ 1283.483284] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.487259] do_syscall_64+0x1d5/0x640 [ 1283.491164] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1283.496347] RIP: 0033:0x7f25b5a2a037 [ 1283.500051] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.507750] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1283.515022] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1283.522286] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1283.529551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1283.536814] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1283.562062] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1283.562295] FAT-fs (loop2): Unrecognized mount option "" or missing value 14:43:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e695f786c6174653d312c01"]) 14:43:47 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250100000005002a00010000000500300001000000050033000000000005002e000000000008002c000400"/62], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044100) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250100000005002a00010000000500300001000000050033000000000005002e000000000008002c000400"/62], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044100) (async) 14:43:47 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 22) [ 1283.681533] FAULT_INJECTION: forcing a failure. [ 1283.681533] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.704523] CPU: 1 PID: 2353 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1283.712335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1283.721687] Call Trace: [ 1283.724276] dump_stack+0x1b2/0x281 [ 1283.727907] should_fail.cold+0x10a/0x149 [ 1283.732057] should_failslab+0xd6/0x130 [ 1283.736033] kmem_cache_alloc_node+0x263/0x410 [ 1283.740623] __alloc_skb+0x5c/0x510 [ 1283.744257] kobject_uevent_env+0x882/0xf30 [ 1283.748582] lo_ioctl+0x11a6/0x1cd0 [ 1283.752320] ? loop_set_status64+0xe0/0xe0 [ 1283.756583] blkdev_ioctl+0x540/0x1830 [ 1283.760469] ? blkpg_ioctl+0x8d0/0x8d0 [ 1283.764353] ? trace_hardirqs_on+0x10/0x10 [ 1283.768586] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1283.773686] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1283.778705] block_ioctl+0xd9/0x120 [ 1283.782325] ? blkdev_fallocate+0x3a0/0x3a0 [ 1283.786642] do_vfs_ioctl+0x75a/0xff0 [ 1283.790441] ? lock_acquire+0x170/0x3f0 [ 1283.794419] ? ioctl_preallocate+0x1a0/0x1a0 [ 1283.798824] ? __fget+0x265/0x3e0 [ 1283.802275] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.806244] ? security_file_ioctl+0x83/0xb0 [ 1283.810646] SyS_ioctl+0x7f/0xb0 [ 1283.814002] ? do_vfs_ioctl+0xff0/0xff0 [ 1283.817973] do_syscall_64+0x1d5/0x640 [ 1283.821863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1283.827039] RIP: 0033:0x7f5c08b6c037 [ 1283.830751] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1283.838435] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1283.845680] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1283.852928] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1283.860173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1283.867417] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1283.906033] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1283.923917] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:48 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, r2], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:48 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 21) 14:43:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x220004, &(0x7f0000000040)={[{@uni_xlate}], [{@obj_role}, {@appraise_type}]}) syz_mount_image$romfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xc4c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="08906808194c3cb06fcaaf59279c725224f00ad265fbb4ef69890e795dcf67d77eaeb35786939ebda3c3967ba71a190657b116b9d34034ef58a5906b0d0a9f5cc9e33853126de0b957a42bdee386051473ec35241cb81b0a57201e282303e58060c439f57acaaf6beee884398052349fc8361f01a0436c64db3f7cd8a554bcb95448e0a3ee8624da667064f5cb607548b659bd9c8e52dac7d49ce4cda6026ff58da7f319109627967ec92b8d8d9a4a514c3abaad3354fd7655170b56455996e2a152b7223ef1ceafe0804439411717", 0xcf, 0xad0}], 0x8001, &(0x7f00000002c0)=ANY=[@ANYBLOB="1048698771dd0ca2b1b708c8557d96defd8bf28ce9f5a990ff03956e8da9ae09bde8d246039c5ddca8895e32eecba2a86bb279a1972021fd9ed90c4e5a24b1"]) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000800) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x220004, &(0x7f0000000040)={[{@uni_xlate}], [{@obj_role}, {@appraise_type}]}) (async) syz_mount_image$romfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xc4c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="08906808194c3cb06fcaaf59279c725224f00ad265fbb4ef69890e795dcf67d77eaeb35786939ebda3c3967ba71a190657b116b9d34034ef58a5906b0d0a9f5cc9e33853126de0b957a42bdee386051473ec35241cb81b0a57201e282303e58060c439f57acaaf6beee884398052349fc8361f01a0436c64db3f7cd8a554bcb95448e0a3ee8624da667064f5cb607548b659bd9c8e52dac7d49ce4cda6026ff58da7f319109627967ec92b8d8d9a4a514c3abaad3354fd7655170b56455996e2a152b7223ef1ceafe0804439411717", 0xcf, 0xad0}], 0x8001, &(0x7f00000002c0)=ANY=[@ANYBLOB="1048698771dd0ca2b1b708c8557d96defd8bf28ce9f5a990ff03956e8da9ae09bde8d246039c5ddca8895e32eecba2a86bb279a1972021fd9ed90c4e5a24b1"]) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000800) (async) 14:43:48 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250100000005002a00010000000500300001000000050033000000000005002e000000000008002c000400"/62], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044100) 14:43:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e0100786c6174653d312c003583be699fdd0c35ebd2485cc74a5556619dd8c316ddb3981c7ee39f2207c86e31c43ec7d4f29aba07f855b5c0877512e7d487ce1d365e1b08c26a941029dcfe00bd2ad3a46d899c1384db96330a8f331aaf13c15ed6ef81af4a2b436e4801312cbf50f1f063f8a74b460f3b9f1baa5ddc"]) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="0f19201b9eb7d36b3528ea18cb841ac52eb58df5ad57a290da0e35ea3ea499917d9ed5be0c531ff75e58f75ffa4fd8e3eb0a", 0x32, 0x7f}], 0x10024, &(0x7f0000000200)={[{@nonumtail}, {@shortname_winnt}, {@utf8}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x1], 0x1, 0x0, 0x0, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) accept$phonet_pipe(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x7, 0x9, 0x1, 0x302, r0, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 14:43:48 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 23) 14:43:48 executing program 0: r0 = socket(0x1e, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="060006000000000008000700", @ANYRES32, @ANYBLOB="080004007f00000106000600000000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd3d9e495e83e3ca6}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x4, 0x2, 0x2, 0x2}}, 0x26) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x80, 0xdba7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x7, 0x0, 0x6}}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x3, 0x6}) [ 1284.020985] FAT-fs (loop2): Unrecognized mount option "un" or missing value [ 1284.023894] FAULT_INJECTION: forcing a failure. [ 1284.023894] name failslab, interval 1, probability 0, space 0, times 0 14:43:48 executing program 0: r0 = socket(0x1e, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="060006000000000008000700", @ANYRES32, @ANYBLOB="080004007f00000106000600000000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd3d9e495e83e3ca6}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x4, 0x2, 0x2, 0x2}}, 0x26) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x80, 0xdba7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x7, 0x0, 0x6}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x3, 0x6}) 14:43:48 executing program 0: r0 = socket(0x1e, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000054}, 0x4040) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="060006000000000008000700", @ANYRES32, @ANYBLOB="080004007f00000106000600000000000800040000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd3d9e495e83e3ca6}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x4, 0x2, 0x2, 0x2}}, 0x26) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x80, 0xdba7, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x7, 0x0, 0x6}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={0x0, 0x0, 0x400, 0x3, 0x6}) [ 1284.065247] CPU: 0 PID: 2373 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1284.073064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1284.082507] Call Trace: [ 1284.085090] dump_stack+0x1b2/0x281 [ 1284.088727] should_fail.cold+0x10a/0x149 [ 1284.092878] should_failslab+0xd6/0x130 [ 1284.096852] kmem_cache_alloc_node+0x263/0x410 [ 1284.101433] __alloc_skb+0x5c/0x510 [ 1284.105060] kobject_uevent_env+0x882/0xf30 [ 1284.109390] lo_ioctl+0x11a6/0x1cd0 14:43:48 executing program 0: r0 = socket(0x10, 0xa, 0x9) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0xfffffffffffffd97) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="411d2da1c645d35efbfa84e3aa7045e726cd045eb23a4c9053edd3c4411e00f29bacd515043f740b23c8845005149c697e23fe6bf47f0b0bc852e563bed0ced7a0b36bc6af840e87950c5f19b9c05bceb8b47acf04da6cbd97454af17066c370dfaf7788480b44cc0eb95e6dcfda3c04d57e3966ce0eb7067bc491341d7e21c03abdb201b26fd0c4dee8c0") [ 1284.113016] ? loop_set_status64+0xe0/0xe0 [ 1284.117248] blkdev_ioctl+0x540/0x1830 [ 1284.121134] ? blkpg_ioctl+0x8d0/0x8d0 [ 1284.125015] ? trace_hardirqs_on+0x10/0x10 [ 1284.129246] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1284.134347] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1284.139364] block_ioctl+0xd9/0x120 [ 1284.142988] ? blkdev_fallocate+0x3a0/0x3a0 [ 1284.147304] do_vfs_ioctl+0x75a/0xff0 [ 1284.151118] ? lock_acquire+0x170/0x3f0 [ 1284.155088] ? ioctl_preallocate+0x1a0/0x1a0 [ 1284.159493] ? __fget+0x265/0x3e0 14:43:48 executing program 0: r0 = socket(0x10, 0xa, 0x9) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0xfffffffffffffd97) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="411d2da1c645d35efbfa84e3aa7045e726cd045eb23a4c9053edd3c4411e00f29bacd515043f740b23c8845005149c697e23fe6bf47f0b0bc852e563bed0ced7a0b36bc6af840e87950c5f19b9c05bceb8b47acf04da6cbd97454af17066c370dfaf7788480b44cc0eb95e6dcfda3c04d57e3966ce0eb7067bc491341d7e21c03abdb201b26fd0c4dee8c0") socket(0x10, 0xa, 0x9) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0xfffffffffffffd97) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="411d2da1c645d35efbfa84e3aa7045e726cd045eb23a4c9053edd3c4411e00f29bacd515043f740b23c8845005149c697e23fe6bf47f0b0bc852e563bed0ced7a0b36bc6af840e87950c5f19b9c05bceb8b47acf04da6cbd97454af17066c370dfaf7788480b44cc0eb95e6dcfda3c04d57e3966ce0eb7067bc491341d7e21c03abdb201b26fd0c4dee8c0") (async) 14:43:48 executing program 0: r0 = socket(0x10, 0xa, 0x9) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0xfffffffffffffd97) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="411d2da1c645d35efbfa84e3aa7045e726cd045eb23a4c9053edd3c4411e00f29bacd515043f740b23c8845005149c697e23fe6bf47f0b0bc852e563bed0ced7a0b36bc6af840e87950c5f19b9c05bceb8b47acf04da6cbd97454af17066c370dfaf7788480b44cc0eb95e6dcfda3c04d57e3966ce0eb7067bc491341d7e21c03abdb201b26fd0c4dee8c0") socket(0x10, 0xa, 0x9) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0xfffffffffffffd97) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000000)="411d2da1c645d35efbfa84e3aa7045e726cd045eb23a4c9053edd3c4411e00f29bacd515043f740b23c8845005149c697e23fe6bf47f0b0bc852e563bed0ced7a0b36bc6af840e87950c5f19b9c05bceb8b47acf04da6cbd97454af17066c370dfaf7788480b44cc0eb95e6dcfda3c04d57e3966ce0eb7067bc491341d7e21c03abdb201b26fd0c4dee8c0") (async) [ 1284.162948] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.166920] ? security_file_ioctl+0x83/0xb0 [ 1284.171326] SyS_ioctl+0x7f/0xb0 [ 1284.174687] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.178661] do_syscall_64+0x1d5/0x640 [ 1284.182551] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.188426] RIP: 0033:0x7f25b5a2a037 [ 1284.192137] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.199839] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1284.207103] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1284.214372] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1284.221630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1284.229002] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1284.261995] FAULT_INJECTION: forcing a failure. [ 1284.261995] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.263911] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1284.281283] CPU: 0 PID: 2385 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1284.289087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1284.298434] Call Trace: [ 1284.301015] dump_stack+0x1b2/0x281 [ 1284.304650] should_fail.cold+0x10a/0x149 [ 1284.308794] should_failslab+0xd6/0x130 [ 1284.312763] kmem_cache_alloc_node+0x263/0x410 [ 1284.317344] __alloc_skb+0x5c/0x510 [ 1284.320968] kobject_uevent_env+0x882/0xf30 [ 1284.325293] lo_ioctl+0x11a6/0x1cd0 [ 1284.328918] ? loop_set_status64+0xe0/0xe0 [ 1284.333150] blkdev_ioctl+0x540/0x1830 [ 1284.337027] ? blkpg_ioctl+0x8d0/0x8d0 [ 1284.340909] ? trace_hardirqs_on+0x10/0x10 [ 1284.345138] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1284.350238] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1284.355518] block_ioctl+0xd9/0x120 [ 1284.359133] ? blkdev_fallocate+0x3a0/0x3a0 [ 1284.363451] do_vfs_ioctl+0x75a/0xff0 [ 1284.367245] ? lock_acquire+0x170/0x3f0 [ 1284.371210] ? ioctl_preallocate+0x1a0/0x1a0 [ 1284.375610] ? __fget+0x265/0x3e0 [ 1284.379055] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.383026] ? security_file_ioctl+0x83/0xb0 [ 1284.387428] SyS_ioctl+0x7f/0xb0 [ 1284.390783] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.394750] do_syscall_64+0x1d5/0x640 [ 1284.398640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.403817] RIP: 0033:0x7f5c08b6c037 [ 1284.407519] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.415248] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1284.422508] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1284.429769] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1284.437027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1284.444293] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1284.473023] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value [ 1284.495618] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:49 executing program 5: getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r0, 0x0, 0x0, r1], 0x4}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x1f, 0x5, 0x6, 0x6], 0x4, 0x94a8c9f0d77baec5}) r1 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd26, 0x2866, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x1) 14:43:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x220004, &(0x7f0000000040)={[{@uni_xlate}], [{@obj_role}, {@appraise_type}]}) (async) syz_mount_image$romfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xc4c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="08906808194c3cb06fcaaf59279c725224f00ad265fbb4ef69890e795dcf67d77eaeb35786939ebda3c3967ba71a190657b116b9d34034ef58a5906b0d0a9f5cc9e33853126de0b957a42bdee386051473ec35241cb81b0a57201e282303e58060c439f57acaaf6beee884398052349fc8361f01a0436c64db3f7cd8a554bcb95448e0a3ee8624da667064f5cb607548b659bd9c8e52dac7d49ce4cda6026ff58da7f319109627967ec92b8d8d9a4a514c3abaad3354fd7655170b56455996e2a152b7223ef1ceafe0804439411717", 0xcf, 0xad0}], 0x8001, &(0x7f00000002c0)=ANY=[@ANYBLOB="1048698771dd0ca2b1b708c8557d96defd8bf28ce9f5a990ff03956e8da9ae09bde8d246039c5ddca8895e32eecba2a86bb279a1972021fd9ed90c4e5a24b1"]) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000800) 14:43:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e0100786c6174653d312c003583be699fdd0c35ebd2485cc74a5556619dd8c316ddb3981c7ee39f2207c86e31c43ec7d4f29aba07f855b5c0877512e7d487ce1d365e1b08c26a941029dcfe00bd2ad3a46d899c1384db96330a8f331aaf13c15ed6ef81af4a2b436e4801312cbf50f1f063f8a74b460f3b9f1baa5ddc"]) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="0f19201b9eb7d36b3528ea18cb841ac52eb58df5ad57a290da0e35ea3ea499917d9ed5be0c531ff75e58f75ffa4fd8e3eb0a", 0x32, 0x7f}], 0x10024, &(0x7f0000000200)={[{@nonumtail}, {@shortname_winnt}, {@utf8}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x1], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) accept$phonet_pipe(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x7, 0x9, 0x1, 0x302, r0, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 14:43:49 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 22) 14:43:49 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 24) [ 1284.949289] FAULT_INJECTION: forcing a failure. [ 1284.949289] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.978192] CPU: 1 PID: 2451 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1284.986006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1284.995355] Call Trace: [ 1284.997947] dump_stack+0x1b2/0x281 [ 1285.001669] should_fail.cold+0x10a/0x149 [ 1285.005815] should_failslab+0xd6/0x130 [ 1285.009788] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1285.014890] __kmalloc_node_track_caller+0x38/0x70 [ 1285.019812] __alloc_skb+0x96/0x510 [ 1285.023439] kobject_uevent_env+0x882/0xf30 [ 1285.027764] lo_ioctl+0x11a6/0x1cd0 [ 1285.031398] ? loop_set_status64+0xe0/0xe0 [ 1285.035632] blkdev_ioctl+0x540/0x1830 [ 1285.039517] ? blkpg_ioctl+0x8d0/0x8d0 [ 1285.043398] ? trace_hardirqs_on+0x10/0x10 [ 1285.047631] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1285.052726] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1285.057747] block_ioctl+0xd9/0x120 [ 1285.061369] ? blkdev_fallocate+0x3a0/0x3a0 [ 1285.065686] do_vfs_ioctl+0x75a/0xff0 [ 1285.069481] ? lock_acquire+0x170/0x3f0 [ 1285.073446] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.077851] ? __fget+0x265/0x3e0 [ 1285.081302] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.085269] ? security_file_ioctl+0x83/0xb0 [ 1285.089673] SyS_ioctl+0x7f/0xb0 [ 1285.093029] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.097000] do_syscall_64+0x1d5/0x640 [ 1285.100887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.106074] RIP: 0033:0x7f25b5a2a037 [ 1285.109773] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.117473] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1285.124735] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1285.131993] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1285.139257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1285.146518] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1285.162077] FAULT_INJECTION: forcing a failure. [ 1285.162077] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.173135] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1285.206630] CPU: 1 PID: 2465 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1285.214451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1285.223798] Call Trace: [ 1285.226384] dump_stack+0x1b2/0x281 [ 1285.230012] should_fail.cold+0x10a/0x149 [ 1285.234158] should_failslab+0xd6/0x130 [ 1285.238130] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1285.243234] __kmalloc_node_track_caller+0x38/0x70 [ 1285.248163] __alloc_skb+0x96/0x510 [ 1285.251790] kobject_uevent_env+0x882/0xf30 [ 1285.256116] lo_ioctl+0x11a6/0x1cd0 [ 1285.259742] ? loop_set_status64+0xe0/0xe0 [ 1285.263976] blkdev_ioctl+0x540/0x1830 [ 1285.267855] ? blkpg_ioctl+0x8d0/0x8d0 [ 1285.271736] ? trace_hardirqs_on+0x10/0x10 [ 1285.275970] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1285.281078] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1285.286092] block_ioctl+0xd9/0x120 [ 1285.289712] ? blkdev_fallocate+0x3a0/0x3a0 [ 1285.294032] do_vfs_ioctl+0x75a/0xff0 [ 1285.297827] ? lock_acquire+0x170/0x3f0 [ 1285.301796] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.306200] ? __fget+0x265/0x3e0 [ 1285.309645] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.313617] ? security_file_ioctl+0x83/0xb0 [ 1285.318017] SyS_ioctl+0x7f/0xb0 [ 1285.321375] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.325344] do_syscall_64+0x1d5/0x640 [ 1285.329229] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.334412] RIP: 0033:0x7f5c08b6c037 [ 1285.338114] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.345819] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 14:43:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x1f, 0x5, 0x6, 0x6], 0x4, 0x94a8c9f0d77baec5}) (async) r1 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd26, 0x2866, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x1) 14:43:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e02da776c6174653d062c00"]) [ 1285.353076] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1285.360334] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1285.367595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1285.374857] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:49 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 23) [ 1285.414743] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1285.424910] FAT-fs (loop2): Unrecognized mount option "un" or missing value 14:43:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e0100786c6174653d312c003583be699fdd0c35ebd2485cc74a5556619dd8c316ddb3981c7ee39f2207c86e31c43ec7d4f29aba07f855b5c0877512e7d487ce1d365e1b08c26a941029dcfe00bd2ad3a46d899c1384db96330a8f331aaf13c15ed6ef81af4a2b436e4801312cbf50f1f063f8a74b460f3b9f1baa5ddc"]) (async) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="0f19201b9eb7d36b3528ea18cb841ac52eb58df5ad57a290da0e35ea3ea499917d9ed5be0c531ff75e58f75ffa4fd8e3eb0a", 0x32, 0x7f}], 0x10024, &(0x7f0000000200)={[{@nonumtail}, {@shortname_winnt}, {@utf8}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}], [{@context={'context', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x1], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) accept$phonet_pipe(r1, &(0x7f0000000400), &(0x7f0000000440)=0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x7, 0x9, 0x1, 0x302, r0, 0xfffffffc, '\x00', 0x0, r2, 0x5, 0x4, 0x3}, 0x48) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 14:43:49 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 25) [ 1285.484535] FAULT_INJECTION: forcing a failure. [ 1285.484535] name failslab, interval 1, probability 0, space 0, times 0 14:43:49 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x1f, 0x5, 0x6, 0x6], 0x4, 0x94a8c9f0d77baec5}) r1 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd26, 0x2866, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x1f, 0x5, 0x6, 0x6], 0x4, 0x94a8c9f0d77baec5}) (async) socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r3, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) (async) accept$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x8, 0x70bd26, 0x2866, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x1) (async) [ 1285.527945] CPU: 1 PID: 2491 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1285.535759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1285.545105] Call Trace: [ 1285.547690] dump_stack+0x1b2/0x281 [ 1285.551317] should_fail.cold+0x10a/0x149 [ 1285.555472] should_failslab+0xd6/0x130 [ 1285.559449] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1285.564558] __kmalloc_node_track_caller+0x38/0x70 [ 1285.569521] __alloc_skb+0x96/0x510 [ 1285.573150] kobject_uevent_env+0x882/0xf30 [ 1285.577478] lo_ioctl+0x11a6/0x1cd0 [ 1285.581133] ? loop_set_status64+0xe0/0xe0 [ 1285.585369] blkdev_ioctl+0x540/0x1830 [ 1285.589254] ? blkpg_ioctl+0x8d0/0x8d0 [ 1285.593161] ? trace_hardirqs_on+0x10/0x10 [ 1285.597394] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1285.602493] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1285.607517] block_ioctl+0xd9/0x120 [ 1285.611142] ? blkdev_fallocate+0x3a0/0x3a0 [ 1285.615463] do_vfs_ioctl+0x75a/0xff0 [ 1285.619259] ? lock_acquire+0x170/0x3f0 [ 1285.623225] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.627631] ? __fget+0x265/0x3e0 [ 1285.631080] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.635057] ? security_file_ioctl+0x83/0xb0 [ 1285.639458] SyS_ioctl+0x7f/0xb0 [ 1285.642827] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.646797] do_syscall_64+0x1d5/0x640 [ 1285.650683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.655863] RIP: 0033:0x7f25b5a2a037 [ 1285.659571] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.667280] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1285.674542] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1285.681806] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1285.689070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1285.696332] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1285.721572] FAT-fs (loop4): Unrecognized mount option "unÚwlate=" or missing value [ 1285.729722] FAULT_INJECTION: forcing a failure. [ 1285.729722] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.737378] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1285.762425] CPU: 0 PID: 2506 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1285.770238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1285.779582] Call Trace: [ 1285.782174] dump_stack+0x1b2/0x281 [ 1285.785801] should_fail.cold+0x10a/0x149 [ 1285.789949] should_failslab+0xd6/0x130 [ 1285.793930] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1285.799050] __kmalloc_node_track_caller+0x38/0x70 [ 1285.803998] __alloc_skb+0x96/0x510 [ 1285.807628] kobject_uevent_env+0x882/0xf30 [ 1285.811957] lo_ioctl+0x11a6/0x1cd0 [ 1285.815585] ? loop_set_status64+0xe0/0xe0 [ 1285.819828] blkdev_ioctl+0x540/0x1830 [ 1285.823727] ? blkpg_ioctl+0x8d0/0x8d0 [ 1285.827609] ? trace_hardirqs_on+0x10/0x10 [ 1285.831929] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1285.837038] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1285.842056] block_ioctl+0xd9/0x120 [ 1285.845678] ? blkdev_fallocate+0x3a0/0x3a0 [ 1285.849997] do_vfs_ioctl+0x75a/0xff0 [ 1285.854231] ? lock_acquire+0x170/0x3f0 [ 1285.858207] ? ioctl_preallocate+0x1a0/0x1a0 [ 1285.862615] ? __fget+0x265/0x3e0 [ 1285.866068] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.870044] ? security_file_ioctl+0x83/0xb0 [ 1285.874445] SyS_ioctl+0x7f/0xb0 [ 1285.877817] ? do_vfs_ioctl+0xff0/0xff0 [ 1285.881790] do_syscall_64+0x1d5/0x640 [ 1285.885682] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1285.890869] RIP: 0033:0x7f5c08b6c037 [ 1285.894570] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.902275] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 14:43:49 executing program 5: getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r0, 0x0, 0x0, r1], 0x4}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:49 executing program 0: ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r0 = socket(0x10, 0x80003, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1285.909539] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1285.916805] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1285.924072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1285.931334] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1285.943290] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:50 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 24) 14:43:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e02da776c6174653d062c00"]) 14:43:50 executing program 0: ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r0 = socket(0x10, 0x80003, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:50 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 26) [ 1285.956816] FAT-fs (loop2): Unrecognized mount option "un" or missing value [ 1286.021618] FAULT_INJECTION: forcing a failure. [ 1286.021618] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.045137] CPU: 0 PID: 2548 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1286.052948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1286.062300] Call Trace: [ 1286.064895] dump_stack+0x1b2/0x281 [ 1286.068521] should_fail.cold+0x10a/0x149 [ 1286.072671] should_failslab+0xd6/0x130 [ 1286.076651] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1286.081755] __kmalloc_node_track_caller+0x38/0x70 [ 1286.086685] __alloc_skb+0x96/0x510 [ 1286.090314] kobject_uevent_env+0x882/0xf30 [ 1286.094646] lo_ioctl+0x11a6/0x1cd0 [ 1286.098274] ? loop_set_status64+0xe0/0xe0 [ 1286.102512] blkdev_ioctl+0x540/0x1830 [ 1286.106401] ? blkpg_ioctl+0x8d0/0x8d0 [ 1286.110285] ? trace_hardirqs_on+0x10/0x10 [ 1286.114516] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1286.119619] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1286.124639] block_ioctl+0xd9/0x120 [ 1286.128260] ? blkdev_fallocate+0x3a0/0x3a0 [ 1286.132575] do_vfs_ioctl+0x75a/0xff0 [ 1286.136368] ? lock_acquire+0x170/0x3f0 [ 1286.140338] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.144746] ? __fget+0x265/0x3e0 [ 1286.148198] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.152174] ? security_file_ioctl+0x83/0xb0 [ 1286.156575] SyS_ioctl+0x7f/0xb0 [ 1286.159941] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.163911] do_syscall_64+0x1d5/0x640 [ 1286.167798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.172986] RIP: 0033:0x7f25b5a2a037 [ 1286.176690] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.184397] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1286.191660] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1286.198922] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1286.206191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1286.213455] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:50 executing program 0: ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r0 = socket(0x10, 0x80003, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async) socket(0x10, 0x80003, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) fanotify_mark(r0, 0x4d, 0x8000001, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') [ 1286.226417] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1286.234613] FAULT_INJECTION: forcing a failure. [ 1286.234613] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.272260] CPU: 0 PID: 2551 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1286.280070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1286.289417] Call Trace: [ 1286.292003] dump_stack+0x1b2/0x281 [ 1286.295642] should_fail.cold+0x10a/0x149 [ 1286.299795] should_failslab+0xd6/0x130 [ 1286.303772] kmem_cache_alloc_node+0x263/0x410 [ 1286.308354] __alloc_skb+0x5c/0x510 [ 1286.311980] kobject_uevent_env+0x882/0xf30 [ 1286.316314] lo_ioctl+0x11a6/0x1cd0 [ 1286.319939] ? loop_set_status64+0xe0/0xe0 [ 1286.324169] blkdev_ioctl+0x540/0x1830 [ 1286.328054] ? blkpg_ioctl+0x8d0/0x8d0 [ 1286.331938] ? trace_hardirqs_on+0x10/0x10 [ 1286.336175] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1286.341273] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1286.346295] block_ioctl+0xd9/0x120 [ 1286.349918] ? blkdev_fallocate+0x3a0/0x3a0 [ 1286.354236] do_vfs_ioctl+0x75a/0xff0 [ 1286.358037] ? lock_acquire+0x170/0x3f0 [ 1286.362020] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.366429] ? __fget+0x265/0x3e0 [ 1286.369876] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.373846] ? security_file_ioctl+0x83/0xb0 [ 1286.378256] SyS_ioctl+0x7f/0xb0 [ 1286.381624] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.385603] do_syscall_64+0x1d5/0x640 [ 1286.389504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.394686] RIP: 0033:0x7f5c08b6c037 [ 1286.398395] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.406101] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1286.413369] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 14:43:50 executing program 0: r0 = socket(0xb, 0x800, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) [ 1286.420632] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1286.427899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1286.435168] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:50 executing program 0: r0 = socket(0xb, 0x800, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) socket(0xb, 0x800, 0x8) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) (async) 14:43:50 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 25) [ 1286.512914] FAT-fs (loop4): Unrecognized mount option "unÚwlate=" or missing value [ 1286.524829] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1286.524844] FAT-fs (loop2): bogus number of reserved sectors [ 1286.541138] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1286.561266] FAULT_INJECTION: forcing a failure. [ 1286.561266] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.583429] CPU: 0 PID: 2578 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1286.591246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1286.600599] Call Trace: [ 1286.603191] dump_stack+0x1b2/0x281 [ 1286.606821] should_fail.cold+0x10a/0x149 [ 1286.610967] should_failslab+0xd6/0x130 [ 1286.614938] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1286.620048] __kmalloc_node_track_caller+0x38/0x70 [ 1286.624978] __alloc_skb+0x96/0x510 [ 1286.628610] kobject_uevent_env+0x882/0xf30 [ 1286.632943] lo_ioctl+0x11a6/0x1cd0 [ 1286.637613] ? loop_set_status64+0xe0/0xe0 [ 1286.641846] blkdev_ioctl+0x540/0x1830 [ 1286.645732] ? blkpg_ioctl+0x8d0/0x8d0 [ 1286.649615] ? trace_hardirqs_on+0x10/0x10 [ 1286.653857] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1286.658969] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1286.663993] block_ioctl+0xd9/0x120 [ 1286.667617] ? blkdev_fallocate+0x3a0/0x3a0 [ 1286.671933] do_vfs_ioctl+0x75a/0xff0 [ 1286.675731] ? lock_acquire+0x170/0x3f0 [ 1286.679698] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.684105] ? __fget+0x265/0x3e0 [ 1286.687561] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.691531] ? security_file_ioctl+0x83/0xb0 [ 1286.695950] SyS_ioctl+0x7f/0xb0 [ 1286.699309] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.703283] do_syscall_64+0x1d5/0x640 [ 1286.707171] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:50 executing program 5: getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r0, 0x0, 0x0, r1], 0x4}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:50 executing program 0: r0 = socket(0xb, 0x800, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) socket(0xb, 0x800, 0x8) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) (async) [ 1286.712352] RIP: 0033:0x7f25b5a2a037 [ 1286.716168] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.723882] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1286.731152] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1286.738417] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1286.745679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1286.752943] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e02da776c6174653d062c00"]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="756e02da776c6174653d062c00"]) (async) 14:43:51 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 27) 14:43:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) fanotify_mark(r0, 0x4d, 0x8000001, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') [ 1286.811673] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:51 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 26) 14:43:51 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1286.872661] FAULT_INJECTION: forcing a failure. [ 1286.872661] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.909920] CPU: 1 PID: 2604 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 14:43:51 executing program 0: socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:51 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1286.917731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1286.927255] Call Trace: [ 1286.929847] dump_stack+0x1b2/0x281 [ 1286.933479] should_fail.cold+0x10a/0x149 [ 1286.937632] should_failslab+0xd6/0x130 [ 1286.941612] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1286.946746] __kmalloc_node_track_caller+0x38/0x70 [ 1286.952112] __alloc_skb+0x96/0x510 [ 1286.955834] kobject_uevent_env+0x882/0xf30 [ 1286.960163] lo_ioctl+0x11a6/0x1cd0 [ 1286.963789] ? loop_set_status64+0xe0/0xe0 [ 1286.968029] blkdev_ioctl+0x540/0x1830 [ 1286.971916] ? blkpg_ioctl+0x8d0/0x8d0 [ 1286.975799] ? trace_hardirqs_on+0x10/0x10 [ 1286.980039] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1286.985140] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1286.990155] block_ioctl+0xd9/0x120 [ 1286.993783] ? blkdev_fallocate+0x3a0/0x3a0 [ 1286.998110] do_vfs_ioctl+0x75a/0xff0 [ 1287.001911] ? lock_acquire+0x170/0x3f0 [ 1287.005882] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.010322] ? __fget+0x265/0x3e0 [ 1287.013772] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.017744] ? security_file_ioctl+0x83/0xb0 [ 1287.022150] SyS_ioctl+0x7f/0xb0 [ 1287.025509] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.029477] do_syscall_64+0x1d5/0x640 [ 1287.033363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.038546] RIP: 0033:0x7f5c08b6c037 [ 1287.042248] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.049952] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1287.057217] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1287.064480] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1287.071745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1287.079008] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1287.109007] FAT-fs (loop4): Unrecognized mount option "unÚwlate=" or missing value [ 1287.111495] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1287.126721] FAULT_INJECTION: forcing a failure. [ 1287.126721] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.129887] FAT-fs (loop2): bogus number of reserved sectors [ 1287.141745] CPU: 1 PID: 2616 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1287.151543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1287.160891] Call Trace: [ 1287.161434] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1287.163471] dump_stack+0x1b2/0x281 [ 1287.163486] should_fail.cold+0x10a/0x149 [ 1287.163500] should_failslab+0xd6/0x130 [ 1287.163511] kmem_cache_alloc_node+0x263/0x410 [ 1287.163524] __alloc_skb+0x5c/0x510 [ 1287.189256] kobject_uevent_env+0x882/0xf30 [ 1287.193588] lo_ioctl+0x11a6/0x1cd0 [ 1287.197217] ? loop_set_status64+0xe0/0xe0 [ 1287.201450] blkdev_ioctl+0x540/0x1830 [ 1287.205337] ? blkpg_ioctl+0x8d0/0x8d0 [ 1287.209219] ? trace_hardirqs_on+0x10/0x10 [ 1287.213454] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1287.218551] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1287.223571] block_ioctl+0xd9/0x120 [ 1287.227192] ? blkdev_fallocate+0x3a0/0x3a0 [ 1287.231507] do_vfs_ioctl+0x75a/0xff0 [ 1287.235306] ? lock_acquire+0x170/0x3f0 [ 1287.239272] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.243676] ? __fget+0x265/0x3e0 [ 1287.247127] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.251099] ? security_file_ioctl+0x83/0xb0 [ 1287.255505] SyS_ioctl+0x7f/0xb0 [ 1287.258869] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.262844] do_syscall_64+0x1d5/0x640 [ 1287.266738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.271922] RIP: 0033:0x7f25b5a2a037 [ 1287.275623] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.283324] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1287.290586] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1287.297850] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1287.305118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1287.312380] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:51 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 28) 14:43:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"d85e15646f5bc8476a894462ecfc9a41994c57d1d248ea151a39a3618edd3bea", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0f837d1ca4b26dc629c19b10f4b4d606ecf1b69b46f0b5b5455165578757ad5e", r0}) 14:43:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) fanotify_mark(r0, 0x4d, 0x8000001, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') [ 1287.351079] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1287.432059] FAULT_INJECTION: forcing a failure. [ 1287.432059] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.463156] CPU: 1 PID: 2645 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1287.470966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 14:43:51 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:51 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf25010000000000000009410000004c001800000008756470000000000000000000000000000000000000000000036afaae2f6bd02ef20000000000000000000000000000000000006be4b3c84e910e1e0000"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) 14:43:51 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 27) [ 1287.480319] Call Trace: [ 1287.482908] dump_stack+0x1b2/0x281 [ 1287.486535] should_fail.cold+0x10a/0x149 [ 1287.490681] should_failslab+0xd6/0x130 [ 1287.494660] kmem_cache_alloc_node+0x263/0x410 [ 1287.499244] __alloc_skb+0x5c/0x510 [ 1287.502879] kobject_uevent_env+0x882/0xf30 [ 1287.507207] lo_ioctl+0x11a6/0x1cd0 [ 1287.510834] ? loop_set_status64+0xe0/0xe0 [ 1287.515079] blkdev_ioctl+0x540/0x1830 [ 1287.518964] ? blkpg_ioctl+0x8d0/0x8d0 [ 1287.522848] ? trace_hardirqs_on+0x10/0x10 [ 1287.527092] ? _raw_spin_unlock_irqrestore+0x66/0xe0 14:43:51 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf25010000000000000009410000004c001800000008756470000000000000000000000000000000000000000000036afaae2f6bd02ef20000000000000000000000000000000000006be4b3c84e910e1e0000"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf25010000000000000009410000004c001800000008756470000000000000000000000000000000000000000000036afaae2f6bd02ef20000000000000000000000000000000000006be4b3c84e910e1e0000"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) [ 1287.532190] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1287.537209] block_ioctl+0xd9/0x120 [ 1287.540833] ? blkdev_fallocate+0x3a0/0x3a0 [ 1287.545149] do_vfs_ioctl+0x75a/0xff0 [ 1287.548951] ? lock_acquire+0x170/0x3f0 [ 1287.552924] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.557341] ? __fget+0x265/0x3e0 [ 1287.560784] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.564744] ? security_file_ioctl+0x83/0xb0 [ 1287.569146] SyS_ioctl+0x7f/0xb0 [ 1287.572492] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.576446] do_syscall_64+0x1d5/0x640 [ 1287.580320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.585496] RIP: 0033:0x7f5c08b6c037 [ 1287.589193] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.596988] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1287.604240] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1287.611503] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1287.618775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:51 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf25010000000000000009410000004c001800000008756470000000000000000000000000000000000000000000036afaae2f6bd02ef20000000000000000000000000000000000006be4b3c84e910e1e0000"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) [ 1287.626038] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1287.645864] FAT-fs (loop2): bogus number of reserved sectors [ 1287.649934] FAULT_INJECTION: forcing a failure. [ 1287.649934] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.652418] FAT-fs (loop4): bogus number of reserved sectors [ 1287.672002] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1287.680402] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1287.692029] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1287.705054] CPU: 0 PID: 2655 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1287.712885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1287.722245] Call Trace: [ 1287.724819] dump_stack+0x1b2/0x281 [ 1287.728434] should_fail.cold+0x10a/0x149 [ 1287.732564] should_failslab+0xd6/0x130 [ 1287.736522] kmem_cache_alloc_node+0x263/0x410 [ 1287.741090] __alloc_skb+0x5c/0x510 [ 1287.744703] kobject_uevent_env+0x882/0xf30 [ 1287.749018] lo_ioctl+0x11a6/0x1cd0 [ 1287.752630] ? loop_set_status64+0xe0/0xe0 [ 1287.756852] blkdev_ioctl+0x540/0x1830 [ 1287.760723] ? blkpg_ioctl+0x8d0/0x8d0 [ 1287.764590] ? trace_hardirqs_on+0x10/0x10 [ 1287.768807] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1287.773894] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1287.778897] block_ioctl+0xd9/0x120 [ 1287.782505] ? blkdev_fallocate+0x3a0/0x3a0 [ 1287.786808] do_vfs_ioctl+0x75a/0xff0 [ 1287.790594] ? lock_acquire+0x170/0x3f0 [ 1287.794556] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.798948] ? __fget+0x265/0x3e0 [ 1287.802435] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.806408] ? security_file_ioctl+0x83/0xb0 [ 1287.810806] SyS_ioctl+0x7f/0xb0 [ 1287.814171] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.818133] do_syscall_64+0x1d5/0x640 [ 1287.822013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.827187] RIP: 0033:0x7f25b5a2a037 14:43:52 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) socket$can_raw(0x1d, 0x3, 0x1) 14:43:52 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) socket$can_raw(0x1d, 0x3, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) socket(0x10, 0x2, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) [ 1287.830879] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.838573] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1287.845838] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1287.853350] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1287.860601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1287.867872] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:52 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) r1 = socket(0x10, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) socket$can_raw(0x1d, 0x3, 0x1) 14:43:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"d85e15646f5bc8476a894462ecfc9a41994c57d1d248ea151a39a3618edd3bea", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0f837d1ca4b26dc629c19b10f4b4d606ecf1b69b46f0b5b5455165578757ad5e", r0}) 14:43:52 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 29) 14:43:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c61746500312c00a14da175ab9079ced512276960fd65e5168a344a4505d5d6f34d70509692b8b7222a46161329b8f80f0bda56c9850549d97c5960ab6ac89052aa7c13"]) r0 = fanotify_init(0x20, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) fanotify_mark(r0, 0x98, 0x60000002, r1, &(0x7f0000000000)='./file0\x00') [ 1287.932010] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value 14:43:52 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x2b, 0xa, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1287.991823] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1288.071237] FAULT_INJECTION: forcing a failure. [ 1288.071237] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.075069] FAT-fs (loop4): bogus number of reserved sectors [ 1288.082651] FAT-fs (loop2): bogus number of reserved sectors [ 1288.103005] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1288.108253] CPU: 1 PID: 2712 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1288.116686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1288.126043] Call Trace: [ 1288.128638] dump_stack+0x1b2/0x281 [ 1288.132266] should_fail.cold+0x10a/0x149 [ 1288.136418] should_failslab+0xd6/0x130 [ 1288.140398] kmem_cache_alloc_node+0x263/0x410 [ 1288.144982] __alloc_skb+0x5c/0x510 [ 1288.148612] kobject_uevent_env+0x882/0xf30 [ 1288.152936] lo_ioctl+0x11a6/0x1cd0 [ 1288.156565] ? loop_set_status64+0xe0/0xe0 [ 1288.160798] blkdev_ioctl+0x540/0x1830 [ 1288.164680] ? blkpg_ioctl+0x8d0/0x8d0 [ 1288.168566] ? trace_hardirqs_on+0x10/0x10 [ 1288.172800] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1288.177903] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1288.182921] block_ioctl+0xd9/0x120 [ 1288.186538] ? blkdev_fallocate+0x3a0/0x3a0 [ 1288.190861] do_vfs_ioctl+0x75a/0xff0 [ 1288.194654] ? lock_acquire+0x170/0x3f0 [ 1288.198620] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.203024] ? __fget+0x265/0x3e0 [ 1288.206472] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.210446] ? security_file_ioctl+0x83/0xb0 [ 1288.214853] SyS_ioctl+0x7f/0xb0 [ 1288.218304] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.222273] do_syscall_64+0x1d5/0x640 [ 1288.226162] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.231342] RIP: 0033:0x7f5c08b6c037 [ 1288.235041] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.242745] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1288.250007] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1288.257266] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1288.264529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1288.271790] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1288.280031] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1288.300596] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:43:52 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:52 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 28) 14:43:52 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x2b, 0xa, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"d85e15646f5bc8476a894462ecfc9a41994c57d1d248ea151a39a3618edd3bea", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0f837d1ca4b26dc629c19b10f4b4d606ecf1b69b46f0b5b5455165578757ad5e", r0}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"d85e15646f5bc8476a894462ecfc9a41994c57d1d248ea151a39a3618edd3bea"}) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"0f837d1ca4b26dc629c19b10f4b4d606ecf1b69b46f0b5b5455165578757ad5e", r0}) (async) 14:43:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c61746500312c00a14da175ab9079ced512276960fd65e5168a344a4505d5d6f34d70509692b8b7222a46161329b8f80f0bda56c9850549d97c5960ab6ac89052aa7c13"]) r0 = fanotify_init(0x20, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) fanotify_mark(r0, 0x98, 0x60000002, r1, &(0x7f0000000000)='./file0\x00') 14:43:52 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 30) 14:43:52 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x2b, 0xa, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1288.448227] FAT-fs (loop2): bogus number of reserved sectors [ 1288.466706] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1288.480245] FAT-fs (loop4): bogus number of reserved sectors [ 1288.492579] FAULT_INJECTION: forcing a failure. [ 1288.492579] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.493555] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1288.506211] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1288.520935] CPU: 1 PID: 2746 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1288.528731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1288.538072] Call Trace: [ 1288.540646] dump_stack+0x1b2/0x281 [ 1288.544259] should_fail.cold+0x10a/0x149 [ 1288.548393] should_failslab+0xd6/0x130 [ 1288.552615] kmem_cache_alloc_node+0x263/0x410 [ 1288.557186] __alloc_skb+0x5c/0x510 [ 1288.560797] kobject_uevent_env+0x882/0xf30 [ 1288.565107] lo_ioctl+0x11a6/0x1cd0 [ 1288.568723] ? loop_set_status64+0xe0/0xe0 [ 1288.572956] blkdev_ioctl+0x540/0x1830 [ 1288.576833] ? blkpg_ioctl+0x8d0/0x8d0 [ 1288.580701] ? trace_hardirqs_on+0x10/0x10 [ 1288.584927] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1288.590012] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1288.595017] block_ioctl+0xd9/0x120 [ 1288.598627] ? blkdev_fallocate+0x3a0/0x3a0 [ 1288.602933] do_vfs_ioctl+0x75a/0xff0 [ 1288.606716] ? lock_acquire+0x170/0x3f0 [ 1288.610670] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.615092] ? __fget+0x265/0x3e0 [ 1288.618526] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.622486] ? security_file_ioctl+0x83/0xb0 [ 1288.626889] SyS_ioctl+0x7f/0xb0 [ 1288.630251] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.634207] do_syscall_64+0x1d5/0x640 [ 1288.638096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.643272] RIP: 0033:0x7f25b5a2a037 14:43:52 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1288.646968] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.654665] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1288.661916] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1288.669172] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1288.676445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1288.683700] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1288.709920] FAULT_INJECTION: forcing a failure. [ 1288.709920] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.743169] CPU: 1 PID: 2748 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1288.746137] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1288.750978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1288.750983] Call Trace: [ 1288.751000] dump_stack+0x1b2/0x281 [ 1288.751016] should_fail.cold+0x10a/0x149 [ 1288.751030] should_failslab+0xd6/0x130 [ 1288.751043] kmem_cache_alloc_node+0x263/0x410 [ 1288.751057] __alloc_skb+0x5c/0x510 [ 1288.751073] kobject_uevent_env+0x882/0xf30 [ 1288.793043] lo_ioctl+0x11a6/0x1cd0 [ 1288.796670] ? loop_set_status64+0xe0/0xe0 [ 1288.800902] blkdev_ioctl+0x540/0x1830 [ 1288.804784] ? blkpg_ioctl+0x8d0/0x8d0 [ 1288.808663] ? trace_hardirqs_on+0x10/0x10 [ 1288.812904] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1288.818011] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1288.823030] block_ioctl+0xd9/0x120 [ 1288.826655] ? blkdev_fallocate+0x3a0/0x3a0 [ 1288.830976] do_vfs_ioctl+0x75a/0xff0 [ 1288.834771] ? lock_acquire+0x170/0x3f0 [ 1288.838743] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.843152] ? __fget+0x265/0x3e0 [ 1288.846610] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.850582] ? security_file_ioctl+0x83/0xb0 [ 1288.854988] SyS_ioctl+0x7f/0xb0 [ 1288.858357] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.862329] do_syscall_64+0x1d5/0x640 [ 1288.866225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.871439] RIP: 0033:0x7f5c08b6c037 [ 1288.875141] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.882845] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1288.890104] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1288.897367] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1288.904630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1288.911893] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="3fcdb9e44d0708e49bc7524258b341ba465b0b8fe07e2b69d6b6baeae6bafe16a9dcf89e901e32fa0c83f9c411a18be46354c771dc088a6cef838ef70097895272743756a8dc6e6205aee8c6b6cd08b0d1c8de", 0x53, 0x211}, {&(0x7f0000000180)="a57ca181c1d7cf8718098fa05adcd6190c744bd9fb1e349ae034f364ab2e10d1f3babd8e8d0b5edb26da13d0456345b808aab6b15390b07122e36c301ce4a53e0052a519849b3b1700c95b8e4ca9aa324cb81876fb55be2809d37c4109c1f18c494b97e6a31d79c5497b0d478a5118c2fcf9fec1a2b9fe145415722809611f5ba9eeedcb574c9f9292f7f40165609f73dd6c9430963a02494ac9fe9698", 0x9d, 0x1}, {&(0x7f0000000280)="7eb8d683f4fdb4a5c3ddfa93e2235aa865ccdfef212007aa9e2a9879d30af75deeb9b12e1ad9c35f230420e562681d5be946180b3f5c3a48bbedc522e118100b0e7bbbeb85ef34bbda9bed3983cec6a34ea8f223dc086b05eedfff951eee73b18e436025f55736826a527572dcd0abe6c8cc6262c481c9f2e9c36348f7", 0x7d, 0x3}], 0x1000000, &(0x7f0000000380)={[{@nonumtail}, {@shortname_win95}], [{@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x65, 0x38, 0x63, 0x33, 0x36, 0x33], 0x2d, [0x65, 0x38, 0x37, 0x35], 0x2d, [0x31, 0x65, 0x37], 0x2d, [0x31, 0x37, 0x33, 0x31], 0x2d, [0x65, 0x36, 0x64, 0x39, 0x31, 0x66, 0x31, 0x37]}}}, {@fowner_gt={'fowner>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'uni_xlate=1'}}]}) 14:43:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c61746500312c00a14da175ab9079ced512276960fd65e5168a344a4505d5d6f34d70509692b8b7222a46161329b8f80f0bda56c9850549d97c5960ab6ac89052aa7c13"]) r0 = fanotify_init(0x20, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) fanotify_mark(r0, 0x98, 0x60000002, r1, &(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c61746500312c00a14da175ab9079ced512276960fd65e5168a344a4505d5d6f34d70509692b8b7222a46161329b8f80f0bda56c9850549d97c5960ab6ac89052aa7c13"]) (async) fanotify_init(0x20, 0x800) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) fanotify_mark(r0, 0x98, 0x60000002, r1, &(0x7f0000000000)='./file0\x00') (async) 14:43:53 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 29) [ 1288.957850] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1289.051874] FAULT_INJECTION: forcing a failure. [ 1289.051874] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.068098] FAT-fs (loop4): bogus number of reserved sectors [ 1289.071266] CPU: 1 PID: 2776 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1289.074305] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1289.081711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1289.081716] Call Trace: [ 1289.081732] dump_stack+0x1b2/0x281 [ 1289.081745] should_fail.cold+0x10a/0x149 [ 1289.081758] should_failslab+0xd6/0x130 [ 1289.081770] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1289.081782] __kmalloc_node_track_caller+0x38/0x70 [ 1289.081794] __alloc_skb+0x96/0x510 [ 1289.124890] kobject_uevent_env+0x882/0xf30 [ 1289.129220] lo_ioctl+0x11a6/0x1cd0 [ 1289.132868] ? loop_set_status64+0xe0/0xe0 [ 1289.137103] blkdev_ioctl+0x540/0x1830 [ 1289.140986] ? blkpg_ioctl+0x8d0/0x8d0 [ 1289.144870] ? trace_hardirqs_on+0x10/0x10 [ 1289.149111] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1289.154215] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1289.159236] block_ioctl+0xd9/0x120 [ 1289.162861] ? blkdev_fallocate+0x3a0/0x3a0 [ 1289.167188] do_vfs_ioctl+0x75a/0xff0 [ 1289.170986] ? lock_acquire+0x170/0x3f0 [ 1289.174955] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.179363] ? __fget+0x265/0x3e0 [ 1289.182817] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.186790] ? security_file_ioctl+0x83/0xb0 [ 1289.191204] SyS_ioctl+0x7f/0xb0 [ 1289.194564] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.198533] do_syscall_64+0x1d5/0x640 [ 1289.202425] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.207608] RIP: 0033:0x7f25b5a2a037 [ 1289.211320] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.219023] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1289.226285] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1289.233646] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1289.240910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1289.248174] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:53 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000002c0)={0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (rerun: 32) 14:43:53 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 31) 14:43:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="3fcdb9e44d0708e49bc7524258b341ba465b0b8fe07e2b69d6b6baeae6bafe16a9dcf89e901e32fa0c83f9c411a18be46354c771dc088a6cef838ef70097895272743756a8dc6e6205aee8c6b6cd08b0d1c8de", 0x53, 0x211}, {&(0x7f0000000180)="a57ca181c1d7cf8718098fa05adcd6190c744bd9fb1e349ae034f364ab2e10d1f3babd8e8d0b5edb26da13d0456345b808aab6b15390b07122e36c301ce4a53e0052a519849b3b1700c95b8e4ca9aa324cb81876fb55be2809d37c4109c1f18c494b97e6a31d79c5497b0d478a5118c2fcf9fec1a2b9fe145415722809611f5ba9eeedcb574c9f9292f7f40165609f73dd6c9430963a02494ac9fe9698", 0x9d, 0x1}, {&(0x7f0000000280)="7eb8d683f4fdb4a5c3ddfa93e2235aa865ccdfef212007aa9e2a9879d30af75deeb9b12e1ad9c35f230420e562681d5be946180b3f5c3a48bbedc522e118100b0e7bbbeb85ef34bbda9bed3983cec6a34ea8f223dc086b05eedfff951eee73b18e436025f55736826a527572dcd0abe6c8cc6262c481c9f2e9c36348f7", 0x7d, 0x3}], 0x1000000, &(0x7f0000000380)={[{@nonumtail}, {@shortname_win95}], [{@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x65, 0x38, 0x63, 0x33, 0x36, 0x33], 0x2d, [0x65, 0x38, 0x37, 0x35], 0x2d, [0x31, 0x65, 0x37], 0x2d, [0x31, 0x37, 0x33, 0x31], 0x2d, [0x65, 0x36, 0x64, 0x39, 0x31, 0x66, 0x31, 0x37]}}}, {@fowner_gt={'fowner>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'uni_xlate=1'}}]}) 14:43:53 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 30) [ 1289.277651] FAT-fs (loop2): bogus number of reserved sectors [ 1289.286559] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1289.293892] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1289.300763] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value 14:43:53 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0xff, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75ee695f786c6174653d212c00b91e43a810ac70e1223ba992caee71b8ff017bdafa1ae898e6b458922856773c12fc63debf8af85a53b6836ff2e4398b4f0e448e5b323027cddb8094e77c035df4a36aaef0c058da47c4f4becc011d992b817f33e1e720080f17459a1e7639176f9dd1dc354fbb4d858856f98eecab87552d1758e46d49e3789af4b86543dcf988a2f333b61a44303ec10c84b7b78c103737bb44a9a808f9e9e48cabf07f4727dd6674e407ea8b00e0f8b70f4e8fb6f460"]) 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1289.398954] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1289.415126] FAULT_INJECTION: forcing a failure. [ 1289.415126] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.427850] CPU: 0 PID: 2811 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1289.435663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1289.445099] Call Trace: 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x0, 0x71cbbd6b, 0x2, @local, @private1, 0x1, 0x10, 0xfffffff8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x7f, 0x5, 0x61, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x40, 0x1000, 0x5}}) r3 = socket(0x29, 0x4, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x78081e7790aae5c9) [ 1289.447690] dump_stack+0x1b2/0x281 [ 1289.451758] should_fail.cold+0x10a/0x149 [ 1289.455909] should_failslab+0xd6/0x130 [ 1289.459885] kmem_cache_alloc_node+0x263/0x410 [ 1289.464470] __alloc_skb+0x5c/0x510 [ 1289.468099] kobject_uevent_env+0x882/0xf30 [ 1289.472425] lo_ioctl+0x11a6/0x1cd0 [ 1289.476053] ? loop_set_status64+0xe0/0xe0 [ 1289.480287] blkdev_ioctl+0x540/0x1830 [ 1289.484171] ? blkpg_ioctl+0x8d0/0x8d0 [ 1289.488052] ? trace_hardirqs_on+0x10/0x10 [ 1289.492290] ? _raw_spin_unlock_irqrestore+0x66/0xe0 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x0, 0x71cbbd6b, 0x2, @local, @private1, 0x1, 0x10, 0xfffffff8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x7f, 0x5, 0x61, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x40, 0x1000, 0x5}}) r3 = socket(0x29, 0x4, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x78081e7790aae5c9) [ 1289.497392] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1289.502408] block_ioctl+0xd9/0x120 [ 1289.506027] ? blkdev_fallocate+0x3a0/0x3a0 [ 1289.510345] do_vfs_ioctl+0x75a/0xff0 [ 1289.514145] ? lock_acquire+0x170/0x3f0 [ 1289.518120] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.522525] ? __fget+0x265/0x3e0 [ 1289.525977] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.529948] ? security_file_ioctl+0x83/0xb0 [ 1289.534354] SyS_ioctl+0x7f/0xb0 [ 1289.537713] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.541685] do_syscall_64+0x1d5/0x640 14:43:53 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x0, 0x71cbbd6b, 0x2, @local, @private1, 0x1, 0x10, 0xfffffff8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x2f, 0x8, 0x7f, 0x5, 0x61, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x40, 0x1000, 0x5}}) (async) r3 = socket(0x29, 0x4, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7, 0x78081e7790aae5c9) [ 1289.545575] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.550756] RIP: 0033:0x7f5c08b6c037 [ 1289.554460] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.562164] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1289.569424] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1289.576688] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1289.583951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1289.591214] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1289.604343] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1289.613487] FAT-fs (loop4): bogus number of reserved sectors [ 1289.619561] FAULT_INJECTION: forcing a failure. [ 1289.619561] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.622951] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1289.661249] CPU: 1 PID: 2818 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1289.669071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1289.678416] Call Trace: [ 1289.681004] dump_stack+0x1b2/0x281 [ 1289.684619] should_fail.cold+0x10a/0x149 [ 1289.688773] should_failslab+0xd6/0x130 [ 1289.692733] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1289.697836] __kmalloc_node_track_caller+0x38/0x70 [ 1289.702751] __alloc_skb+0x96/0x510 [ 1289.706363] kobject_uevent_env+0x882/0xf30 [ 1289.710673] lo_ioctl+0x11a6/0x1cd0 [ 1289.714297] ? loop_set_status64+0xe0/0xe0 [ 1289.718517] blkdev_ioctl+0x540/0x1830 [ 1289.722389] ? blkpg_ioctl+0x8d0/0x8d0 [ 1289.726284] ? trace_hardirqs_on+0x10/0x10 [ 1289.730522] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1289.735604] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1289.740864] block_ioctl+0xd9/0x120 [ 1289.744470] ? blkdev_fallocate+0x3a0/0x3a0 [ 1289.748788] do_vfs_ioctl+0x75a/0xff0 [ 1289.752589] ? lock_acquire+0x170/0x3f0 [ 1289.756554] ? ioctl_preallocate+0x1a0/0x1a0 [ 1289.760948] ? __fget+0x265/0x3e0 [ 1289.764390] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.768436] ? security_file_ioctl+0x83/0xb0 [ 1289.772846] SyS_ioctl+0x7f/0xb0 [ 1289.776198] ? do_vfs_ioctl+0xff0/0xff0 [ 1289.780171] do_syscall_64+0x1d5/0x640 [ 1289.784058] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1289.789243] RIP: 0033:0x7f25b5a2a037 [ 1289.792939] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1289.800631] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1289.807888] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1289.815166] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1289.822429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1289.829679] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1289.930808] FAT-fs (loop2): Unrecognized mount option "uîi_xlate=!" or missing value [ 1289.953824] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:54 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[r1, 0x0, 0x0, 0x0], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 14:43:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) r0 = geteuid() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="3fcdb9e44d0708e49bc7524258b341ba465b0b8fe07e2b69d6b6baeae6bafe16a9dcf89e901e32fa0c83f9c411a18be46354c771dc088a6cef838ef70097895272743756a8dc6e6205aee8c6b6cd08b0d1c8de", 0x53, 0x211}, {&(0x7f0000000180)="a57ca181c1d7cf8718098fa05adcd6190c744bd9fb1e349ae034f364ab2e10d1f3babd8e8d0b5edb26da13d0456345b808aab6b15390b07122e36c301ce4a53e0052a519849b3b1700c95b8e4ca9aa324cb81876fb55be2809d37c4109c1f18c494b97e6a31d79c5497b0d478a5118c2fcf9fec1a2b9fe145415722809611f5ba9eeedcb574c9f9292f7f40165609f73dd6c9430963a02494ac9fe9698", 0x9d, 0x1}, {&(0x7f0000000280)="7eb8d683f4fdb4a5c3ddfa93e2235aa865ccdfef212007aa9e2a9879d30af75deeb9b12e1ad9c35f230420e562681d5be946180b3f5c3a48bbedc522e118100b0e7bbbeb85ef34bbda9bed3983cec6a34ea8f223dc086b05eedfff951eee73b18e436025f55736826a527572dcd0abe6c8cc6262c481c9f2e9c36348f7", 0x7d, 0x3}], 0x1000000, &(0x7f0000000380)={[{@nonumtail}, {@shortname_win95}], [{@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x65, 0x38, 0x63, 0x33, 0x36, 0x33], 0x2d, [0x65, 0x38, 0x37, 0x35], 0x2d, [0x31, 0x65, 0x37], 0x2d, [0x31, 0x37, 0x33, 0x31], 0x2d, [0x65, 0x36, 0x64, 0x39, 0x31, 0x66, 0x31, 0x37]}}}, {@fowner_gt={'fowner>', r0}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, 'uni_xlate=1'}}]}) 14:43:54 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0xff, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75ee695f786c6174653d212c00b91e43a810ac70e1223ba992caee71b8ff017bdafa1ae898e6b458922856773c12fc63debf8af85a53b6836ff2e4398b4f0e448e5b323027cddb8094e77c035df4a36aaef0c058da47c4f4becc011d992b817f33e1e720080f17459a1e7639176f9dd1dc354fbb4d858856f98eecab87552d1758e46d49e3789af4b86543dcf988a2f333b61a44303ec10c84b7b78c103737bb44a9a808f9e9e48cabf07f4727dd6674e407ea8b00e0f8b70f4e8fb6f460"]) pipe2(&(0x7f0000000000), 0x84080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0xff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75ee695f786c6174653d212c00b91e43a810ac70e1223ba992caee71b8ff017bdafa1ae898e6b458922856773c12fc63debf8af85a53b6836ff2e4398b4f0e448e5b323027cddb8094e77c035df4a36aaef0c058da47c4f4becc011d992b817f33e1e720080f17459a1e7639176f9dd1dc354fbb4d858856f98eecab87552d1758e46d49e3789af4b86543dcf988a2f333b61a44303ec10c84b7b78c103737bb44a9a808f9e9e48cabf07f4727dd6674e407ea8b00e0f8b70f4e8fb6f460"]) (async) 14:43:54 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 31) 14:43:54 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 32) [ 1290.278673] FAULT_INJECTION: forcing a failure. [ 1290.278673] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.290574] CPU: 0 PID: 2879 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1290.298372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1290.307717] Call Trace: [ 1290.310389] dump_stack+0x1b2/0x281 [ 1290.314019] should_fail.cold+0x10a/0x149 [ 1290.318165] should_failslab+0xd6/0x130 [ 1290.322141] kmem_cache_alloc_node_trace+0x25a/0x400 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) [ 1290.327247] __kmalloc_node_track_caller+0x38/0x70 [ 1290.332177] __alloc_skb+0x96/0x510 [ 1290.335804] kobject_uevent_env+0x882/0xf30 [ 1290.340131] lo_ioctl+0x11a6/0x1cd0 [ 1290.343758] ? loop_set_status64+0xe0/0xe0 [ 1290.347991] blkdev_ioctl+0x540/0x1830 [ 1290.351874] ? blkpg_ioctl+0x8d0/0x8d0 [ 1290.355750] ? trace_hardirqs_on+0x10/0x10 [ 1290.359975] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1290.365072] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1290.370089] block_ioctl+0xd9/0x120 [ 1290.373707] ? blkdev_fallocate+0x3a0/0x3a0 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1f, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1290.378022] do_vfs_ioctl+0x75a/0xff0 [ 1290.381819] ? lock_acquire+0x170/0x3f0 [ 1290.385787] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.390194] ? __fget+0x265/0x3e0 [ 1290.393641] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.397610] ? security_file_ioctl+0x83/0xb0 [ 1290.402012] SyS_ioctl+0x7f/0xb0 [ 1290.405371] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.409341] do_syscall_64+0x1d5/0x640 [ 1290.413225] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.418407] RIP: 0033:0x7f5c08b6c037 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x1f, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x80003, 0x0) (async) socketpair(0x1f, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:43:54 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x1f, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1290.422105] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.429810] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1290.437068] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1290.444324] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1290.451583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1290.458845] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1290.487501] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1290.490365] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1290.495836] FAULT_INJECTION: forcing a failure. [ 1290.495836] name failslab, interval 1, probability 0, space 0, times 0 14:43:54 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x22004050) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1290.529661] CPU: 0 PID: 2885 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1290.537461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1290.546808] Call Trace: [ 1290.549399] dump_stack+0x1b2/0x281 [ 1290.553028] should_fail.cold+0x10a/0x149 [ 1290.557184] should_failslab+0xd6/0x130 [ 1290.561158] kmem_cache_alloc_node+0x263/0x410 [ 1290.565746] __alloc_skb+0x5c/0x510 [ 1290.569378] kobject_uevent_env+0x882/0xf30 [ 1290.573706] lo_ioctl+0x11a6/0x1cd0 [ 1290.577332] ? loop_set_status64+0xe0/0xe0 [ 1290.581565] blkdev_ioctl+0x540/0x1830 [ 1290.585447] ? blkpg_ioctl+0x8d0/0x8d0 [ 1290.589332] ? trace_hardirqs_on+0x10/0x10 [ 1290.593566] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1290.598668] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1290.603687] block_ioctl+0xd9/0x120 [ 1290.607308] ? blkdev_fallocate+0x3a0/0x3a0 [ 1290.611622] do_vfs_ioctl+0x75a/0xff0 [ 1290.615420] ? lock_acquire+0x170/0x3f0 [ 1290.619389] ? ioctl_preallocate+0x1a0/0x1a0 [ 1290.623795] ? __fget+0x265/0x3e0 [ 1290.627244] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.631217] ? security_file_ioctl+0x83/0xb0 [ 1290.635620] SyS_ioctl+0x7f/0xb0 [ 1290.638979] ? do_vfs_ioctl+0xff0/0xff0 [ 1290.642951] do_syscall_64+0x1d5/0x640 [ 1290.646860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1290.652041] RIP: 0033:0x7f25b5a2a037 [ 1290.655739] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1290.663442] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1290.670700] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1290.677960] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1290.685222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1290.692481] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1290.717865] FAT-fs (loop2): Unrecognized mount option "uîi_xlate=!" or missing value [ 1290.717960] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value [ 1290.754387] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:55 executing program 5: r0 = getuid() ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt={'uid>', r0}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="98c766afc29d5242b58f6fc99fc71d4eeba02bff4e161df53c1daa2b6e4b4791a04bd6c67dd60d945c32f5fa2bc1a332573138b2d7d935cebc1d24df505f2eec3d54383071f27988df665d8195be8e4debadd505d3dc7b6cc402e0ef148467977fe89d53831910bff5e8cb5659e7da93b97fce77510436503de92daea913bf5562bc342bb900a2111ac118019fcb53968f01ff6e6029367936dc8fd3bbabf6eb5d8b0655aa4e121ecdff6de30b11859671dc2f00f8e7a9466285f6abeb25e0b358a5e05e54b04e4f2f2a75b70bb230c71bc83d60c5527d2a85ffb3f8ac", 0xdd, 0x1f}, {&(0x7f0000000040), 0x0, 0x15b754da}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:43:55 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 33) 14:43:55 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 32) 14:43:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x22004050) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket(0x10, 0x80003, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x22004050) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) (async) 14:43:55 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84080) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0xff, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75ee695f786c6174653d212c00b91e43a810ac70e1223ba992caee71b8ff017bdafa1ae898e6b458922856773c12fc63debf8af85a53b6836ff2e4398b4f0e448e5b323027cddb8094e77c035df4a36aaef0c058da47c4f4becc011d992b817f33e1e720080f17459a1e7639176f9dd1dc354fbb4d858856f98eecab87552d1758e46d49e3789af4b86543dcf988a2f333b61a44303ec10c84b7b78c103737bb44a9a808f9e9e48cabf07f4727dd6674e407ea8b00e0f8b70f4e8fb6f460"]) [ 1291.169519] FAULT_INJECTION: forcing a failure. [ 1291.169519] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.181474] FAT-fs (loop4): bogus number of reserved sectors [ 1291.196311] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1291.197664] CPU: 1 PID: 2961 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1291.209979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1291.219318] Call Trace: [ 1291.221889] dump_stack+0x1b2/0x281 [ 1291.225501] should_fail.cold+0x10a/0x149 [ 1291.229634] should_failslab+0xd6/0x130 [ 1291.233588] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1291.238676] __kmalloc_node_track_caller+0x38/0x70 [ 1291.243590] __alloc_skb+0x96/0x510 [ 1291.247201] kobject_uevent_env+0x882/0xf30 [ 1291.251506] lo_ioctl+0x11a6/0x1cd0 [ 1291.255114] ? loop_set_status64+0xe0/0xe0 [ 1291.259331] blkdev_ioctl+0x540/0x1830 [ 1291.263198] ? blkpg_ioctl+0x8d0/0x8d0 [ 1291.267067] ? trace_hardirqs_on+0x10/0x10 [ 1291.271281] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1291.276364] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1291.281364] block_ioctl+0xd9/0x120 [ 1291.284969] ? blkdev_fallocate+0x3a0/0x3a0 [ 1291.289270] do_vfs_ioctl+0x75a/0xff0 [ 1291.293048] ? lock_acquire+0x170/0x3f0 [ 1291.297000] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.301391] ? __fget+0x265/0x3e0 [ 1291.304826] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.308810] ? security_file_ioctl+0x83/0xb0 [ 1291.313211] SyS_ioctl+0x7f/0xb0 [ 1291.316555] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.320511] do_syscall_64+0x1d5/0x640 [ 1291.324381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.329547] RIP: 0033:0x7f5c08b6c037 [ 1291.333239] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.340929] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1291.348176] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1291.355422] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1291.362669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket(0x10, 0x80003, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x22004050) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 14:43:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="98c766afc29d5242b58f6fc99fc71d4eeba02bff4e161df53c1daa2b6e4b4791a04bd6c67dd60d945c32f5fa2bc1a332573138b2d7d935cebc1d24df505f2eec3d54383071f27988df665d8195be8e4debadd505d3dc7b6cc402e0ef148467977fe89d53831910bff5e8cb5659e7da93b97fce77510436503de92daea913bf5562bc342bb900a2111ac118019fcb53968f01ff6e6029367936dc8fd3bbabf6eb5d8b0655aa4e121ecdff6de30b11859671dc2f00f8e7a9466285f6abeb25e0b358a5e05e54b04e4f2f2a75b70bb230c71bc83d60c5527d2a85ffb3f8ac", 0xdd, 0x1f}, {&(0x7f0000000040), 0x0, 0x15b754da}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) [ 1291.369919] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1291.388940] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value [ 1291.396914] FAULT_INJECTION: forcing a failure. [ 1291.396914] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.416078] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1291.422726] CPU: 1 PID: 2958 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1291.430517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1291.439860] Call Trace: [ 1291.442444] dump_stack+0x1b2/0x281 [ 1291.446070] should_fail.cold+0x10a/0x149 [ 1291.450221] should_failslab+0xd6/0x130 [ 1291.454193] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1291.459303] __kmalloc_node_track_caller+0x38/0x70 [ 1291.464232] __alloc_skb+0x96/0x510 [ 1291.467868] kobject_uevent_env+0x882/0xf30 [ 1291.472201] lo_ioctl+0x11a6/0x1cd0 [ 1291.475827] ? loop_set_status64+0xe0/0xe0 [ 1291.480057] blkdev_ioctl+0x540/0x1830 [ 1291.483937] ? blkpg_ioctl+0x8d0/0x8d0 [ 1291.487824] ? trace_hardirqs_on+0x10/0x10 [ 1291.492059] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1291.497163] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1291.502179] block_ioctl+0xd9/0x120 [ 1291.505798] ? blkdev_fallocate+0x3a0/0x3a0 [ 1291.510116] do_vfs_ioctl+0x75a/0xff0 [ 1291.513917] ? lock_acquire+0x170/0x3f0 [ 1291.517884] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.522291] ? __fget+0x265/0x3e0 [ 1291.525739] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.529705] ? security_file_ioctl+0x83/0xb0 [ 1291.534108] SyS_ioctl+0x7f/0xb0 [ 1291.537467] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.541437] do_syscall_64+0x1d5/0x640 [ 1291.545326] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.550507] RIP: 0033:0x7f25b5a2a037 [ 1291.554211] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.561914] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 14:43:55 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) [ 1291.569175] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1291.576435] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1291.583691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1291.590947] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1291.630213] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1291.641757] FAT-fs (loop2): Unrecognized mount option "uîi_xlate=!" or missing value 14:43:55 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 34) 14:43:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@remote, @bcast, @default, @bcast, @default]}, &(0x7f0000000040)=0x40, 0x800) 14:43:55 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 33) [ 1291.738905] FAT-fs (loop4): bogus number of reserved sectors [ 1291.769383] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1291.785534] FAULT_INJECTION: forcing a failure. [ 1291.785534] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.811481] CPU: 1 PID: 3012 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1291.819282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1291.828632] Call Trace: [ 1291.831219] dump_stack+0x1b2/0x281 [ 1291.834841] should_fail.cold+0x10a/0x149 [ 1291.838990] should_failslab+0xd6/0x130 [ 1291.842962] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1291.848069] __kmalloc_node_track_caller+0x38/0x70 [ 1291.852994] __alloc_skb+0x96/0x510 [ 1291.856616] kobject_uevent_env+0x882/0xf30 [ 1291.860940] lo_ioctl+0x11a6/0x1cd0 [ 1291.864580] ? loop_set_status64+0xe0/0xe0 [ 1291.868811] blkdev_ioctl+0x540/0x1830 [ 1291.872698] ? blkpg_ioctl+0x8d0/0x8d0 [ 1291.876580] ? trace_hardirqs_on+0x10/0x10 [ 1291.880809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1291.885911] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1291.890927] block_ioctl+0xd9/0x120 [ 1291.894548] ? blkdev_fallocate+0x3a0/0x3a0 [ 1291.898865] do_vfs_ioctl+0x75a/0xff0 [ 1291.902662] ? lock_acquire+0x170/0x3f0 [ 1291.906633] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.911040] ? __fget+0x265/0x3e0 [ 1291.914486] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.918455] ? security_file_ioctl+0x83/0xb0 [ 1291.922860] SyS_ioctl+0x7f/0xb0 [ 1291.926218] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.930188] do_syscall_64+0x1d5/0x640 [ 1291.934076] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.939257] RIP: 0033:0x7f5c08b6c037 [ 1291.942955] RSP: 002b:00007f5c074e0f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.950658] RAX: ffffffffffffffda RBX: 00007f5c08bb5a20 RCX: 00007f5c08b6c037 [ 1291.957921] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1291.965183] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1291.972443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1291.979702] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:56 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:56 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) 14:43:56 executing program 0: socketpair(0x25, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) socketpair(0x25, 0x0, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x1, 0x4) (async) [ 1292.004291] FAT-fs (loop2): Unrecognized mount option "uni_xlatv=!" or missing value [ 1292.012532] FAULT_INJECTION: forcing a failure. [ 1292.012532] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.030719] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1292.036657] CPU: 1 PID: 3015 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1292.044443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1292.053788] Call Trace: [ 1292.056374] dump_stack+0x1b2/0x281 [ 1292.059998] should_fail.cold+0x10a/0x149 [ 1292.064145] should_failslab+0xd6/0x130 [ 1292.068115] kmem_cache_alloc_node+0x263/0x410 [ 1292.072677] __alloc_skb+0x5c/0x510 [ 1292.076282] kobject_uevent_env+0x882/0xf30 [ 1292.080585] lo_ioctl+0x11a6/0x1cd0 [ 1292.084208] ? loop_set_status64+0xe0/0xe0 [ 1292.088441] blkdev_ioctl+0x540/0x1830 [ 1292.092391] ? blkpg_ioctl+0x8d0/0x8d0 [ 1292.096270] ? trace_hardirqs_on+0x10/0x10 [ 1292.100505] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1292.105591] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1292.110588] block_ioctl+0xd9/0x120 [ 1292.114189] ? blkdev_fallocate+0x3a0/0x3a0 [ 1292.118498] do_vfs_ioctl+0x75a/0xff0 [ 1292.122295] ? lock_acquire+0x170/0x3f0 [ 1292.126253] ? ioctl_preallocate+0x1a0/0x1a0 [ 1292.130656] ? __fget+0x265/0x3e0 [ 1292.134095] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.138082] ? security_file_ioctl+0x83/0xb0 [ 1292.142495] SyS_ioctl+0x7f/0xb0 [ 1292.145872] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.149847] do_syscall_64+0x1d5/0x640 [ 1292.153733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1292.158915] RIP: 0033:0x7f25b5a2a037 [ 1292.162612] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.170310] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1292.177568] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1292.184830] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1292.192092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 14:43:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="98c766afc29d5242b58f6fc99fc71d4eeba02bff4e161df53c1daa2b6e4b4791a04bd6c67dd60d945c32f5fa2bc1a332573138b2d7d935cebc1d24df505f2eec3d54383071f27988df665d8195be8e4debadd505d3dc7b6cc402e0ef148467977fe89d53831910bff5e8cb5659e7da93b97fce77510436503de92daea913bf5562bc342bb900a2111ac118019fcb53968f01ff6e6029367936dc8fd3bbabf6eb5d8b0655aa4e121ecdff6de30b11859671dc2f00f8e7a9466285f6abeb25e0b358a5e05e54b04e4f2f2a75b70bb230c71bc83d60c5527d2a85ffb3f8ac", 0xdd, 0x1f}, {&(0x7f0000000040), 0x0, 0x15b754da}], 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 14:43:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@remote, @bcast, @default, @bcast, @default]}, &(0x7f0000000040)=0x40, 0x800) 14:43:56 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 35) [ 1292.199355] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1292.222007] FAT-fs (loop5): Unrecognized mount option "shortnam" or missing value [ 1292.223149] MTD: Attempt to mount non-MTD device "/dev/loop3" 14:43:56 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 34) 14:43:56 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socket(0x6, 0xa, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3ff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1f, 0x6, 0x81, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x800, 0x8, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) [ 1292.322348] FAT-fs (loop4): bogus number of reserved sectors [ 1292.334873] FAT-fs (loop2): Unrecognized mount option "uni_xlatv=!" or missing value [ 1292.365646] FAULT_INJECTION: forcing a failure. [ 1292.365646] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.372615] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1292.396575] CPU: 0 PID: 3058 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1292.404485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1292.413832] Call Trace: [ 1292.416422] dump_stack+0x1b2/0x281 [ 1292.420050] should_fail.cold+0x10a/0x149 [ 1292.424203] should_failslab+0xd6/0x130 [ 1292.428179] kmem_cache_alloc+0x28e/0x3c0 [ 1292.432326] getname_flags+0xc8/0x550 [ 1292.436128] SyS_mkdirat+0x83/0x270 [ 1292.439755] ? SyS_mknod+0x30/0x30 [ 1292.443294] ? fput_many+0xe/0x140 [ 1292.446836] ? do_syscall_64+0x4c/0x640 [ 1292.450807] ? SyS_mknod+0x30/0x30 [ 1292.454343] do_syscall_64+0x1d5/0x640 [ 1292.458234] entry_SYSCALL_64_after_hwframe+0x46/0xbb 14:43:56 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socket(0x6, 0xa, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3ff, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x1f, 0x6, 0x81, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x800, 0x8, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) [ 1292.463416] RIP: 0033:0x7f5c08b6b387 [ 1292.467118] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1292.474820] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1292.482082] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1292.489342] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1292.493776] FAULT_INJECTION: forcing a failure. [ 1292.493776] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.496603] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1292.496609] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1292.544458] CPU: 1 PID: 3064 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1292.552267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1292.561613] Call Trace: [ 1292.564202] dump_stack+0x1b2/0x281 [ 1292.567832] should_fail.cold+0x10a/0x149 [ 1292.571979] should_failslab+0xd6/0x130 [ 1292.575959] kmem_cache_alloc_node+0x263/0x410 [ 1292.580543] __alloc_skb+0x5c/0x510 [ 1292.584173] kobject_uevent_env+0x882/0xf30 [ 1292.588505] lo_ioctl+0x11a6/0x1cd0 [ 1292.592129] ? loop_set_status64+0xe0/0xe0 [ 1292.596360] blkdev_ioctl+0x540/0x1830 [ 1292.600242] ? blkpg_ioctl+0x8d0/0x8d0 [ 1292.604134] ? trace_hardirqs_on+0x10/0x10 [ 1292.608378] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1292.613493] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1292.618515] block_ioctl+0xd9/0x120 [ 1292.622138] ? blkdev_fallocate+0x3a0/0x3a0 [ 1292.626454] do_vfs_ioctl+0x75a/0xff0 [ 1292.630249] ? lock_acquire+0x170/0x3f0 [ 1292.634232] ? ioctl_preallocate+0x1a0/0x1a0 [ 1292.638637] ? __fget+0x265/0x3e0 [ 1292.642084] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.646056] ? security_file_ioctl+0x83/0xb0 [ 1292.650485] SyS_ioctl+0x7f/0xb0 [ 1292.653858] ? do_vfs_ioctl+0xff0/0xff0 [ 1292.657829] do_syscall_64+0x1d5/0x640 [ 1292.661755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1292.666935] RIP: 0033:0x7f25b5a2a037 [ 1292.670634] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1292.678338] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1292.685597] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1292.692861] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1292.700120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1292.707383] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 14:43:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @netrom, 0x0, [@remote, @bcast, @default, @bcast, @default]}, &(0x7f0000000040)=0x40, 0x800) 14:43:56 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socket(0x6, 0xa, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3ff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1f, 0x6, 0x81, &(0x7f00000000c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x800, 0x8, 0x9], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) socket(0x10, 0x80003, 0x0) (async) socket(0x6, 0xa, 0x10) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x3ff, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x1f, 0x6, 0x81, &(0x7f00000000c0)) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x800, 0x8, 0x9], 0x4, 0x800}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) (async) 14:43:56 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 36) [ 1292.755315] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1292.825158] FAULT_INJECTION: forcing a failure. [ 1292.825158] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.843951] FAT-fs (loop2): Unrecognized mount option "uni_xlatv=!" or missing value [ 1292.863609] CPU: 1 PID: 3086 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 14:43:57 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e00040000533e3673633aa3"]) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xfffffffb}, 0x4) r1 = getuid() syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x6, 0x4, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="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", 0x1000, 0x6}, {&(0x7f0000000840)="68d62bb351990d503eed432f0ac64a18aa3bc96fa23ac8a4d2ee8683d13a4dff06eb3e7563abf17afc916096dfd728650a84b5ec1eaa2b44aa2b53d4", 0x3c, 0x3f}, {&(0x7f0000001a40)="9b06dcf70e84754f3508fe261c31fcb967894b4fb123bdf9168366d5a16fb92757d50b01bf5a19708e79613359d5767f03df57386c43c7f39670dc41a540a4eb04e873cdff4a0703036eb831c5021b630c25bd4c318008e14325301bae6b1683c230aad0a5227b91754e7e120fec5171d8fc46b44505c66b45ffb8b4bc585567484f958d1b4c4159f7eeda3a046080a8476fc0", 0x93, 0xffffffff}, {&(0x7f0000001b00)="d2d0ba0abc7f5f17906e57d9bef4af10cb7abe4d835f7f42d35fe2aeffc62eca170bfc81e4beb1d6ea41456008e4c078246a68a1d9d3d55bf55346cd0c268b4fc8c01a551139f5f100d5414bb98b2ff8bd8569b840b0ef58bb74b392bd4f4f96ba342a27d33a62fc9f05d81c4139899e4231b32d1a0eecc9687d3364772de80708fa2255aab0b9db", 0x88, 0x8}], 0x1006, &(0x7f0000001c40)={[{@uni_xlateno}], [{@uid_lt={'uid<', r1}}, {@dont_appraise}, {@dont_hash}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xffffffff80000000, 0x0, &(0x7f0000000700), 0x848005, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c6673636f6e746578743d757365725f752c736d61636b66736465663d76666174002c6f626a5f757365723d27242d242f2d7d265c5ca42c00e3f784"]) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001c80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, r3], 0x1, 0x2, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000f8", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf250100000000000000094100000010001800009c5069623a7767310000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) 14:43:57 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) 14:43:57 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 35) [ 1292.871428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1292.880774] Call Trace: [ 1292.883361] dump_stack+0x1b2/0x281 [ 1292.886988] should_fail.cold+0x10a/0x149 [ 1292.891143] should_failslab+0xd6/0x130 [ 1292.895118] kmem_cache_alloc+0x28e/0x3c0 [ 1292.899260] getname_flags+0xc8/0x550 [ 1292.903057] SyS_mkdirat+0x83/0x270 [ 1292.906680] ? SyS_mknod+0x30/0x30 [ 1292.910213] ? fput_many+0xe/0x140 [ 1292.913747] ? do_syscall_64+0x4c/0x640 [ 1292.917719] ? SyS_mknod+0x30/0x30 [ 1292.921253] do_syscall_64+0x1d5/0x640 [ 1292.925136] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1292.930312] RIP: 0033:0x7f5c08b6b387 [ 1292.934012] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1292.941725] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1292.945310] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1292.948984] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1292.948990] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 14:43:57 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) 14:43:57 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000740)={'erspan0\x00'}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f758739f5210e93a39133c3038977b33bb84fb8532ee657356320d2d02ff69b441524369b88b80b84d8df3e659fc95ab159f420c644369788c95e6c0b5209b48158c3dc11c3f754fcc83dcfca39837c578b1b8feb5e7441f26d283394383ca45b795c4c5eb1405ce7dca5a5c73fd6b4630e8b91f57b805bb2fb45ed27f38bed8da5d7302298ba28824eff1afee80c30bd564ba4b847c737de93bdc426c8e4e6fd9b9210d79392b2d0d8ec6786819c1f07ee83ae149e4ac2f70c60000", @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf2501000000050033000000000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000001) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xlate=1(\x00']) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc, 0x8, &(0x7f0000000640)=[{&(0x7f0000000100)="4d8d9375e0327437d296afa74dc2237383c142471477f077f615383fa590f6d2d3b5473059eb68ece0c3ebb1a4a71095647f89a3d51bf453d26cf8712532e0115ce82628d0f07a0015e853892a77926fc4d70e234a0b", 0x56, 0xfffffffffffffff7}, {&(0x7f0000000380)="9ee4006805c42e00eec65dc0c0a1d962150381c789f9", 0x16, 0x8}, {&(0x7f0000000280)="7372e3af995f10f8c082673e851bfdb537a7c16fe38625f5b77d4785039cac48a50709ccc318f0e3b1e6615b3f03337e370f31efda16ff57c141f1bb8638bde652fe34385ba57a120131cb9406b37722d066aff60d194b1dd9008f96f3d4cbef77d8394cd7c9a07d19057a02d80d422046c0248a032c1e872eee27db17c3d923b8642fcd6ed84b98aacc6d1d1a5d227ef54698e7c5bcb984fc6cae61a5a2f589047336995aeec66c8e5a0123f936b2c0ecb0adf4bd40fafd8b05370f50372dc74ffd0b6412", 0xc5, 0xffffffffffffffff}, {&(0x7f0000000780)="47e088ffad7d1cdf690b0a0803d820eb124fdeccf2331921a2ed7091117216c32994dc9ab942ba6106be567d959ae034b5e7b67bf9a5954f7e7ef035ab0a3aeac18e1631479706f5996e313b81014cde893f94e3622db4c952f9c4ac954fb055ca2204ef3586c5d5f8e558509f798da472dcba7f3732227c937276449f83e55cebd7efbad29e898764dfe11336675eda03ffda2f33f081e45a8f4def665966062a18abbe12fb432d8fdb57201666dd72d7086ebd0146d1f6aa847e61d26d6648fb9328b2ffc8c3c921ef54079b645193848034026f25", 0xd6, 0x20}, {&(0x7f00000001c0)="8d2f42c26f52482a897916f2303673d44cceeac500cd1e221302ccc0e289667d116ca3efa0de701c1658c4dcc9ef5d598309a9f1a46f04cba973dfec3d7c3babb79bb99da0f065b6", 0x48}, {&(0x7f0000000480)="682bfc693a6c918b1670a9371741e6827aa420678c5d8c8e0a15d921530b29ffdda7e333b3481259f3ee1cc23e21b682163532126a0c76d1f28bd77644cfb2aababa6782911b8e19872ddbbd13583e66d74e6514b61d943ab3e9058ce9f1bba280be225e49d26a6bfe998024614951bb835b903ba69c9e1776a7d9110d957569f6124ecf1fb48bd513", 0x89, 0x7}, {&(0x7f0000000540)="6a10f10e17a0acdc5dd04d6cc56f1d58a5242e4e915ceb5b6d3ddc2221209ca118c8b655e7e3f87d3fd30fef727a4dece2147ca71afcbc2a12cb07931b6d330f81176d15abe98ad14b419a30bbe7bea12956352508", 0x55, 0x4c}, {&(0x7f00000005c0)="e70aba7b01fff08a8c35c1842d704b9a9e21dea0409f2dd43a4a547d48f243020b7cbf1bebe819e7614ecc116d343c4f5137b9a86c6f6598c19e2f707e538a6416afd624876b3361c62e", 0x4a, 0x3}], 0x904012, &(0x7f00000009c0)=ANY=[@ANYBLOB="76666174002c002c2c212c66736d616769633d3078303030303030303030303030300130652c6f626a5f7573ff033d756e695f786c6175653d312c7801000000000000803d757365725f752c00fd6181d6e13f5dbf716b0d734c5a559cce5a7787bde9fa0f184b4fdb194e3b270c9b7decd39a9faed2db40c8d86c6ebf061bf5a7f1889ff56c4a1e06dbac4e0ce638de0c00095c68cb71513b2ce3ca6bbb19e0224c11993a51c94e3a145a055999102dd13c2b1743dbf6"]) [ 1292.948995] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1292.949001] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1293.024514] FAT-fs (loop4): Unrecognized mount option "un" or missing value [ 1293.033216] FAULT_INJECTION: forcing a failure. [ 1293.033216] name failslab, interval 1, probability 0, space 0, times 0 14:43:57 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x20000000, 0x4) (async) [ 1293.074200] FAT-fs (loop2): Unrecognized mount option "uni_xlate=1(" or missing value [ 1293.076664] CPU: 1 PID: 3114 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1293.089968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1293.099401] Call Trace: [ 1293.101984] dump_stack+0x1b2/0x281 [ 1293.105618] should_fail.cold+0x10a/0x149 [ 1293.109769] should_failslab+0xd6/0x130 [ 1293.113748] kmem_cache_alloc+0x28e/0x3c0 [ 1293.117898] getname_flags+0xc8/0x550 [ 1293.121699] SyS_mkdirat+0x83/0x270 [ 1293.125320] ? SyS_mknod+0x30/0x30 [ 1293.128850] ? fput_many+0xe/0x140 [ 1293.132380] ? do_syscall_64+0x4c/0x640 [ 1293.136346] ? SyS_mknod+0x30/0x30 [ 1293.139878] do_syscall_64+0x1d5/0x640 [ 1293.143765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.148948] RIP: 0033:0x7f25b5a29387 [ 1293.152647] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1293.160350] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 [ 1293.167615] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c 14:43:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x366, 0x8, 0xffffffff, 0x5, 0x81, 0x101, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x1) r1 = socket(0xb, 0x6, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1293.174880] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1293.182144] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1293.189403] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:43:57 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000740)={'erspan0\x00'}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f758739f5210e93a39133c3038977b33bb84fb8532ee657356320d2d02ff69b441524369b88b80b84d8df3e659fc95ab159f420c644369788c95e6c0b5209b48158c3dc11c3f754fcc83dcfca39837c578b1b8feb5e7441f26d283394383ca45b795c4c5eb1405ce7dca5a5c73fd6b4630e8b91f57b805bb2fb45ed27f38bed8da5d7302298ba28824eff1afee80c30bd564ba4b847c737de93bdc426c8e4e6fd9b9210d79392b2d0d8ec6786819c1f07ee83ae149e4ac2f70c60000", @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf2501000000050033000000000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000001) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xlate=1(\x00']) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc, 0x8, &(0x7f0000000640)=[{&(0x7f0000000100)="4d8d9375e0327437d296afa74dc2237383c142471477f077f615383fa590f6d2d3b5473059eb68ece0c3ebb1a4a71095647f89a3d51bf453d26cf8712532e0115ce82628d0f07a0015e853892a77926fc4d70e234a0b", 0x56, 0xfffffffffffffff7}, {&(0x7f0000000380)="9ee4006805c42e00eec65dc0c0a1d962150381c789f9", 0x16, 0x8}, {&(0x7f0000000280)="7372e3af995f10f8c082673e851bfdb537a7c16fe38625f5b77d4785039cac48a50709ccc318f0e3b1e6615b3f03337e370f31efda16ff57c141f1bb8638bde652fe34385ba57a120131cb9406b37722d066aff60d194b1dd9008f96f3d4cbef77d8394cd7c9a07d19057a02d80d422046c0248a032c1e872eee27db17c3d923b8642fcd6ed84b98aacc6d1d1a5d227ef54698e7c5bcb984fc6cae61a5a2f589047336995aeec66c8e5a0123f936b2c0ecb0adf4bd40fafd8b05370f50372dc74ffd0b6412", 0xc5, 0xffffffffffffffff}, {&(0x7f0000000780)="47e088ffad7d1cdf690b0a0803d820eb124fdeccf2331921a2ed7091117216c32994dc9ab942ba6106be567d959ae034b5e7b67bf9a5954f7e7ef035ab0a3aeac18e1631479706f5996e313b81014cde893f94e3622db4c952f9c4ac954fb055ca2204ef3586c5d5f8e558509f798da472dcba7f3732227c937276449f83e55cebd7efbad29e898764dfe11336675eda03ffda2f33f081e45a8f4def665966062a18abbe12fb432d8fdb57201666dd72d7086ebd0146d1f6aa847e61d26d6648fb9328b2ffc8c3c921ef54079b645193848034026f25", 0xd6, 0x20}, {&(0x7f00000001c0)="8d2f42c26f52482a897916f2303673d44cceeac500cd1e221302ccc0e289667d116ca3efa0de701c1658c4dcc9ef5d598309a9f1a46f04cba973dfec3d7c3babb79bb99da0f065b6", 0x48}, {&(0x7f0000000480)="682bfc693a6c918b1670a9371741e6827aa420678c5d8c8e0a15d921530b29ffdda7e333b3481259f3ee1cc23e21b682163532126a0c76d1f28bd77644cfb2aababa6782911b8e19872ddbbd13583e66d74e6514b61d943ab3e9058ce9f1bba280be225e49d26a6bfe998024614951bb835b903ba69c9e1776a7d9110d957569f6124ecf1fb48bd513", 0x89, 0x7}, {&(0x7f0000000540)="6a10f10e17a0acdc5dd04d6cc56f1d58a5242e4e915ceb5b6d3ddc2221209ca118c8b655e7e3f87d3fd30fef727a4dece2147ca71afcbc2a12cb07931b6d330f81176d15abe98ad14b419a30bbe7bea12956352508", 0x55, 0x4c}, {&(0x7f00000005c0)="e70aba7b01fff08a8c35c1842d704b9a9e21dea0409f2dd43a4a547d48f243020b7cbf1bebe819e7614ecc116d343c4f5137b9a86c6f6598c19e2f707e538a6416afd624876b3361c62e", 0x4a, 0x3}], 0x904012, &(0x7f00000009c0)=ANY=[@ANYBLOB="76666174002c002c2c212c66736d616769633d3078303030303030303030303030300130652c6f626a5f7573ff033d756e695f786c6175653d312c7801000000000000803d757365725f752c00fd6181d6e13f5dbf716b0d734c5a559cce5a7787bde9fa0f184b4fdb194e3b270c9b7decd39a9faed2db40c8d86c6ebf061bf5a7f1889ff56c4a1e06dbac4e0ce638de0c00095c68cb71513b2ce3ca6bbb19e0224c11993a51c94e3a145a055999102dd13c2b1743dbf6"]) 14:43:57 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x366, 0x8, 0xffffffff, 0x5, 0x81, 0x101, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x1) r1 = socket(0xb, 0x6, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 14:43:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e00040000533e3673633aa3"]) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xfffffffb}, 0x4) r1 = getuid() syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x6, 0x4, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="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", 0x1000, 0x6}, {&(0x7f0000000840)="68d62bb351990d503eed432f0ac64a18aa3bc96fa23ac8a4d2ee8683d13a4dff06eb3e7563abf17afc916096dfd728650a84b5ec1eaa2b44aa2b53d4", 0x3c, 0x3f}, {&(0x7f0000001a40)="9b06dcf70e84754f3508fe261c31fcb967894b4fb123bdf9168366d5a16fb92757d50b01bf5a19708e79613359d5767f03df57386c43c7f39670dc41a540a4eb04e873cdff4a0703036eb831c5021b630c25bd4c318008e14325301bae6b1683c230aad0a5227b91754e7e120fec5171d8fc46b44505c66b45ffb8b4bc585567484f958d1b4c4159f7eeda3a046080a8476fc0", 0x93, 0xffffffff}, {&(0x7f0000001b00)="d2d0ba0abc7f5f17906e57d9bef4af10cb7abe4d835f7f42d35fe2aeffc62eca170bfc81e4beb1d6ea41456008e4c078246a68a1d9d3d55bf55346cd0c268b4fc8c01a551139f5f100d5414bb98b2ff8bd8569b840b0ef58bb74b392bd4f4f96ba342a27d33a62fc9f05d81c4139899e4231b32d1a0eecc9687d3364772de80708fa2255aab0b9db", 0x88, 0x8}], 0x1006, &(0x7f0000001c40)={[{@uni_xlateno}], [{@uid_lt={'uid<', r1}}, {@dont_appraise}, {@dont_hash}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xffffffff80000000, 0x0, &(0x7f0000000700), 0x848005, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c6673636f6e746578743d757365725f752c736d61636b66736465663d76666174002c6f626a5f757365723d27242d242f2d7d265c5ca42c00e3f784"]) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001c80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, r3], 0x1, 0x2, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000f8", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf250100000000000000094100000010001800009c5069623a7767310000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e00040000533e3673633aa3"]) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xfffffffb}, 0x4) (async) getuid() (async) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x6, 0x4, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="7ebc8371d7f8f5f92139b28dd6d6aecabbf9267319fbe4fabadf6217e9f7ba4a40aa6f2c121598582e3675dae2e0f4fa14f401a43cdc27050a84fe98b6ada2d891a0336cabafd80e4da3c34a85807332646262c6dbb84246c98878c9fd4ad7d104a12161a8ea652ef25526bf20f5c48bb2f421812aa3631e001d0860b6db67c77cb0e373d8b5b7868540d01c0deed3664e623c7ba4a4caf21237150a19bf02b360b4ab8d3877411f87e69345475a3c5b9584d3edc61573d9fd1f4e8ae53da0e49102d6f415d6649f549f977b1b82394da898cd7dbc13e24a38ecc2719b52d912f25deb23590687c6460ceae71e9782e49f01e2d4b2827702501fe6ddebc527f38a482f68e7a710cebd605707bebc0e7844f563b4f6f5db051e4f18ce3ed2a12ec7746218b54a619c671e22fccc9cc99326554d2912c68b27b46a359a0fa23136b95ad6ebb44cc06739bb97363a0198901bb4f459df3f001b2a634c59ddbeacc9e9d86443251e6803312d64d939baf30cd38c94028f8d22eb54c20ee0f8debe884578e1b7e565b8d4f3ac5f80d6bb15f5254e11ab3560a4d03b883ec7d2ea009bfa123a9614e82a4f3e21206b261cef2ce04b4723fa6f58b5d5aa7bb27c2d43037e8d5a348518c9da4a5fd943316ea8aadcd36f7938943cef39accba04851cae8723881a3b6a605f86f6f4cbff4b6afc2d02df88b6ad7ca428d077efc93a6577ddd62f37e01bf4ad4426b9060c7a05a35258482ac798f7cd32d308fce549ae67284b75e96fb1b00ea984913d38e27f485264d07d89c6c7e23b29c4fee7cbfc22f6fc21e92613b054343545f28082b3655145f4f67d9ffed3465a4fd52ee956c164d9e25cc51d4392155ddf0232f8c8867c2104c7e3f0a1822e393454dd0f30533b743b9a61828e65121ca9cf0c1edd9d27d471d1e930d6bc258f245152d7893a69659babc5a0e6ef274ffd2c348451c65fe5cd8164f562ff3d8b7eb1eb5fdedf3ce02adf00d609d4a0bfc6a9ba741b9f5f89f0f84d8e837c9f853c0901f9935255bbf46472fef1ac2300ac8d98e1bb7184baeb426478098172f8479667ef76a0f767bba3002acf75229204cc556d001ed02b150b994759948f490f5769d6885ec38fb789883de2ed073c5abaa508de88f0b52351ba9dd6538d75bbbae256839e6e2127160de2433c52f9c836d86ffa362315197d015d83d566229314aee2f1ec09d44c8360feacdaa94bdacbc0ffc0db00cb1531cc12dd958716dab2ff6d0bb50db252802c8a1a68041059011ea99872c89046ccb6ca3509abb5764ac93f224922c5432d16a5374a57eef297f17c609ae5b8bb29afc5a299955c058b081f40f063e62a0fd34b75a61213c9024d9a909c18062043c7d304bf20c19dc627965cafe6eda57f4ea90bc2b7557d4964b348e5a736c6b7ca8d4c0554a6ed29bc38fb6b22a8545c90e72cfd73950f09f826d244b5abd9eb4a05b62ccfca4d3c9f39ad3807b5ce6d5d25d4fe4a8cdd327e4461361bfa775b02cc0cd687c3e65f3fb1a765ac88cf5ebc1aed6d5a7231aaf65d42a0913db9ddc38a967c0ccae981713dd7d81c524d0999060ad7fc2f389f8eb486544441ff041c68bbdfbdb248c0056f66f92686a474e37c11772a284413956ea55e29ee3fdc56e46c4581d90f40dd0adc9f6efa797ce0772e793ee1b7f6cd7c94738f27cbc0cd15787da497c42171484dd564d8057036e357c7e7646e4873c0a5bd2168be1df074dda3df567896018dedcc00439091d6463826cbca90a9e50533847458bf8eb025553141dbb6d010ededb25b42e29c68a16c634541c321ae1e0f4b50f039b94203e66a78e246fa69c7061f34d07aeac143ea56dc866407a0aac90cc208ae0bebd0a264837685df2c0196b6e2106efa4a04682fd724517f40fb333c1087cb23c6b5ac5065a218a98a7d0e4a185ce0ca0882ffb91e01973efe715cb7f3215de640e29a8a110b869276170359d3fbcb7741ff45c31c086cfdc8e3f857ae49d86f02b9dfaefcd5d3367a190d138f40f43dbeaa20bf4f4a1fe7a0d740ffa488778aca644c84abc20656d9cf689e57cbab2cbf69f021c98f63851132235e908a09d1831488deeec2275da58f85a37f73f8da980aecd1b42857874f9a00b66c5710576c1b5fe3ec321559d9074e6649c785d623e77fad104463a85c7178d36b066c82521b3b01cf5accdb40ef0e63317af00d04c7aa087e31e48484fa632e15652442bdd6030b286a5c9b9e0d4aafea6777ecb4e79359b9f0bfea8274f74dfdb8c839779609ccc6c44e0da83c5665d474e46c1ae3b31ff564bc10c06cc1c3f5f2483acfbebfcf836b4e3668abb9546db19eab1c15e0d516ee3df4d6e74d2f545b56ce434ed5cd870267acbf604994d06d989479e0273a212e70c983ccc9ae41392ec7c845162d8a28db812588af5d41e1820080d54c48b3d461951b6013acd046dfc7857b49add4024f68f4783b49e544feed5da48ba2f722d5cccc4addaf81af404fcf04506ebac36934921c397fa0e5c3f0ce9a848ec59438d2c66d8add8e158842fbac651444d465d4f0aa46edab7086a375b9e322662d9340abe6ac3fdbef98f081d26b795ef6d7f61272c67371b606fa98e5fcced5c91431a0d181cf08a9e628120a28e53570d0d0d860375280d04530dae3f95f0e99e5ec1bb787b7560e3e2660014e3c023c5f25e7d67bf69470dd097eaa158c55f762fed131a88b6d0bcd7a8bbe7a645b9cbd69f66dae2f4fc34590d2ab7ebcf1e871a897e2ac6a2cab916f5a26408cec39c80b469206d1fb31f3374ac80e343f2167da027230928eafd7c2e31b6f5d443a66e7ac2ec9f7989bce21c6db3e55b64100084ceccfd993bda401a72d538888ca695fe5c95e5cf085ed0ef9efb3afb8caab1a0be31bddf818609e651b2f2050dbeb02a22f0bd299393247acebce3ea3a869871723f8e767a54219c80e88c1f49d8b38c0219a1ba3c4ca210b6eb42fa1b68e2790132932da821d7305e8c9d900eb12ed48ef37db868e801a1f81b73929a9293d525133a258fd62a74c15e5c8b9db6526db2a1ab932461b42ee0a09cc7de6c0e4104af4915bc8b38aef81b54df6a29300fc2bd192e2d4e872621f0834650b874fdefdbb9be817fccd36dc6835714fe629e4fe5870ef1107ac530d4645e1985a986808560cc4336cc2f60a87819f7d57c075cbd69e541d4ae3e8c3f0764b822f3dcee94e1e42ef6a0170aca8c5682dfdbf78968190473c522df1ce6774a6f993fd1caf67af961f4da554001d4dc8945bc0a2ab405dbf8a18e173a163d2f4b2610672c5cbdc297900c7b2f699a240f3015dff527dde2c66929fbe53a18ff4ca5a4783add11bbaf41489256bdd7ee31aeb1033c982da18ae72dc1d9a679f6d39cde95ac3bcc5e10ec17bb674a5fc1d9f8e19d7993eef12dfa0d8512f485bf64d2c010d8759e698cb46ad25598358b355ece366e6ce665752c35c70dc508b070ae433d28deaea4cc90d0a8c8af44da545dc5fb016404c7c2d48c7a1303b76df672c01d16ca5ae8f1d3767ad9149488240be326ee3fefa7d914ceb6d0b86dd79026c39022e47339a1197c69253284c0308ec25ab6d188dd198804cbcef59aaadd9c685a21500be4be89bac54424b43ae7f04ea8f237152d19946986d62344c6f207e6e42d34dcf0d875d0bfcd30ea80d5b9a0d253cbd6477f79ad7a2f15c5fe340fb5e4acf2c019bd06839cd01dc3a5a5e1a3010d20ac1a198030e78e90b96399e34e7034f978af2793cd7f73cbab86b584c601856a6560f23567e6784b349947716953dd080a69464f968e6e9f13ce97185ec3297a30dbb62ec421be979350f317d7cf6801998e864c5d9354aa5516629f83d131a696168ccd31c8c33b42de6ce732ea0e3b8a949dec484ed96f8e552348e072bfc15d7f49a602561b76db73f4334de8d63855ac3312c2c6d12597d800c035854e3c13a188293f9e5aa879d478a48cb135708f095ce55b7192514daea8403ab83fa95efcf4384eeb99a883cec09176ce2e52045963e5c3c92e4e3d3b9c6f0f42a297191ec586b35dfed494a3a3c8968f6635b0053e1f90b745bb6b47de0f073f4cc6f733dee0e5a0834868323ee4b36df788190d0ef4d671e8636d43a856ed79243ad57051b5aa0895b1fbf7acc5ecf25d432cfcf0ffb1974f136f43ca5c515e7bbaebd0d2704a7bc9879e5f743c9098a03b35e01cfec11adf9586c4fea51b136896a22376b40d363acda129b240342f0dfe04a703a489991323fd1cd64e85ac7efd2db88eab725b425e2ef328e459b9e85e2bea33b47857ef500210d1c369bc54bc9dcbd868d9cf8bdad6088744fe5e64fce0df3158d1074e9e82cd323e9f8d15393751dee9606e754abf4321685e51839a9150d06ab328002d30a8daa3b7650e1ef9de6d319c94819c26cd625fff312716d0ba3741f0d8908394c53165234d60ef12ca8d42eb5faddf6549e44769299058aab5bd99a52ac437834f228d8da5a50db533a2787aac952c2a5f4a8f3a1aad012aade5217578388032d0b14d9740be348aab769e79e0ac1412a3538040fe513bd4a8d7560d1b988c2c4441173d9eb84d564f604ce650ab98f81fa84d16500ce045cab744338102e65356ae7941ba9a735ef7dd6b8a02e448bd448e3fa262b4886674072539e0fa552dc50c86a883331839e119f8d536ef82a1f628a892d2beee4b241835fb2d7ae1f038a70a153004fb136dad63219543917cefb46528aec9a0ced53e263739de04a0e38b01db1e12e119dbf6d2c1ce9fdba025db278b8d9d63ca2df130f86eba1975278e97e54d6e3ab759e476e04a8109580d69be1758bdeff96fb0e9b47db1fa8d0e891fffa9d3ef549eee0c853ed2480643e1995bbcf7aa6719186641a9fad268c6cf59d2ddb1c71fef34997e744ccc23d69947dcfe756f39c8cb0755be9c175cf0b35bc08dc4496fb389bdf6906300be6b29f4853527d25b654337bdcfb318dba17595c73a8ae250967f624cc833fddd001c9b6b9ffdc76f4ff68e02d915538b88a1e09e1d1da05939e552a1026799b4a1029d1f49bf69f955e0da13b4cb7546a09b43bbfa686011c1d8256b36fb1b0ba378db3a232e09a3161137fd34b840ad523d3a12a6abf6585c81b18279970cf7c8c7e5bbc37c3ecb4d906f2ab01fa1ec71e844e4df4a3b2ea295ca0083489021fc6b8df6494a4e1ae9b1b57e2fe904d68a4b094c2d92f541d758105829c7703eae77e8708343643f2509a234856c03f0e0e699ff6adaf189d54bb5fbc34621a0ca26cf8bf9f38281563125710ef7e191553bbc943dee8839c70bb666029d026040371d8550e56eff2d4c2ee7bbc8e750e1f8b69a2b43dd05fdddbee353fbdd782630b0b0753bb59036b8f4da854866ce8e4eb4db2ad38773e5ed706eaeee27f7df09e2def058f149308ff26d3a8e94ddf6b93f3cd89615b85aa2c72bbe4dc394eeeeb193c8dbae2bc9060ba76d1c4f72ba1dba95d4968c0080819b39e17c76853c92df9cc72f126a5f82bb917ccec5d2044f7068eedcb520e44665a51933c09715197b16a2cd956046d791f87a6439c8c90681bdfa455dbcc84dd34bc2c065f38bf074b715cd60cb80fe8f49372d6753c9b0530683645d4036f7cb71d3610c29cb0871279ccda41e7a054323b5ddbb482f620b1df934abdb66cd1270f2184feefb135315522de8f7e9b1bf3417fd2b10ea5f37c6583f3a0dee39d26dba03ce2a317b547391d5aaf61e641f68de2564a4477f028d613c5aa5c5", 0x1000, 0x6}, {&(0x7f0000000840)="68d62bb351990d503eed432f0ac64a18aa3bc96fa23ac8a4d2ee8683d13a4dff06eb3e7563abf17afc916096dfd728650a84b5ec1eaa2b44aa2b53d4", 0x3c, 0x3f}, {&(0x7f0000001a40)="9b06dcf70e84754f3508fe261c31fcb967894b4fb123bdf9168366d5a16fb92757d50b01bf5a19708e79613359d5767f03df57386c43c7f39670dc41a540a4eb04e873cdff4a0703036eb831c5021b630c25bd4c318008e14325301bae6b1683c230aad0a5227b91754e7e120fec5171d8fc46b44505c66b45ffb8b4bc585567484f958d1b4c4159f7eeda3a046080a8476fc0", 0x93, 0xffffffff}, {&(0x7f0000001b00)="d2d0ba0abc7f5f17906e57d9bef4af10cb7abe4d835f7f42d35fe2aeffc62eca170bfc81e4beb1d6ea41456008e4c078246a68a1d9d3d55bf55346cd0c268b4fc8c01a551139f5f100d5414bb98b2ff8bd8569b840b0ef58bb74b392bd4f4f96ba342a27d33a62fc9f05d81c4139899e4231b32d1a0eecc9687d3364772de80708fa2255aab0b9db", 0x88, 0x8}], 0x1006, &(0x7f0000001c40)={[{@uni_xlateno}], [{@uid_lt={'uid<', r1}}, {@dont_appraise}, {@dont_hash}]}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xffffffff80000000, 0x0, &(0x7f0000000700), 0x848005, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c6673636f6e746578743d757365725f752c736d61636b66736465663d76666174002c6f626a5f757365723d27242d242f2d7d265c5ca42c00e3f784"]) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001c80)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, r3], 0x1, 0x2, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000f8", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf250100000000000000094100000010001800009c5069623a7767310000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) (async) [ 1293.352863] FAT-fs (loop2): Unrecognized mount option "uni_xlate=1(" or missing value [ 1293.367024] FAT-fs (loop4): Unrecognized mount option "un" or missing value 14:43:57 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 37) [ 1293.534366] FAULT_INJECTION: forcing a failure. [ 1293.534366] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.545964] CPU: 0 PID: 3199 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1293.553760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1293.563110] Call Trace: [ 1293.565703] dump_stack+0x1b2/0x281 [ 1293.569326] should_fail.cold+0x10a/0x149 [ 1293.573484] should_failslab+0xd6/0x130 [ 1293.577502] kmem_cache_alloc+0x28e/0x3c0 [ 1293.581652] __d_alloc+0x2a/0xa20 [ 1293.585096] ? d_lookup+0x172/0x220 [ 1293.588722] d_alloc+0x46/0x240 [ 1293.592005] __lookup_hash+0x101/0x270 [ 1293.595890] filename_create+0x156/0x3f0 [ 1293.599948] ? kern_path_mountpoint+0x40/0x40 [ 1293.604563] SyS_mkdirat+0x95/0x270 [ 1293.608195] ? SyS_mknod+0x30/0x30 [ 1293.611740] ? fput_many+0xe/0x140 [ 1293.615276] ? do_syscall_64+0x4c/0x640 [ 1293.619244] ? SyS_mknod+0x30/0x30 [ 1293.622775] do_syscall_64+0x1d5/0x640 [ 1293.626663] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.631843] RIP: 0033:0x7f5c08b6b387 [ 1293.635545] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1293.643248] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1293.650515] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1293.657789] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1293.665059] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1293.672319] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:43:57 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:58 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x366, 0x8, 0xffffffff, 0x5, 0x81, 0x101, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x1) (async) r1 = socket(0xb, 0x6, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 14:43:58 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000740)={'erspan0\x00'}) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f758739f5210e93a39133c3038977b33bb84fb8532ee657356320d2d02ff69b441524369b88b80b84d8df3e659fc95ab159f420c644369788c95e6c0b5209b48158c3dc11c3f754fcc83dcfca39837c578b1b8feb5e7441f26d283394383ca45b795c4c5eb1405ce7dca5a5c73fd6b4630e8b91f57b805bb2fb45ed27f38bed8da5d7302298ba28824eff1afee80c30bd564ba4b847c737de93bdc426c8e4e6fd9b9210d79392b2d0d8ec6786819c1f07ee83ae149e4ac2f70c60000", @ANYRES16=r1, @ANYBLOB="00022abd7000ffdbdf2501000000050033000000000005002a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000001) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='uni_xlate=1(\x00']) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r2, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc, 0x8, &(0x7f0000000640)=[{&(0x7f0000000100)="4d8d9375e0327437d296afa74dc2237383c142471477f077f615383fa590f6d2d3b5473059eb68ece0c3ebb1a4a71095647f89a3d51bf453d26cf8712532e0115ce82628d0f07a0015e853892a77926fc4d70e234a0b", 0x56, 0xfffffffffffffff7}, {&(0x7f0000000380)="9ee4006805c42e00eec65dc0c0a1d962150381c789f9", 0x16, 0x8}, {&(0x7f0000000280)="7372e3af995f10f8c082673e851bfdb537a7c16fe38625f5b77d4785039cac48a50709ccc318f0e3b1e6615b3f03337e370f31efda16ff57c141f1bb8638bde652fe34385ba57a120131cb9406b37722d066aff60d194b1dd9008f96f3d4cbef77d8394cd7c9a07d19057a02d80d422046c0248a032c1e872eee27db17c3d923b8642fcd6ed84b98aacc6d1d1a5d227ef54698e7c5bcb984fc6cae61a5a2f589047336995aeec66c8e5a0123f936b2c0ecb0adf4bd40fafd8b05370f50372dc74ffd0b6412", 0xc5, 0xffffffffffffffff}, {&(0x7f0000000780)="47e088ffad7d1cdf690b0a0803d820eb124fdeccf2331921a2ed7091117216c32994dc9ab942ba6106be567d959ae034b5e7b67bf9a5954f7e7ef035ab0a3aeac18e1631479706f5996e313b81014cde893f94e3622db4c952f9c4ac954fb055ca2204ef3586c5d5f8e558509f798da472dcba7f3732227c937276449f83e55cebd7efbad29e898764dfe11336675eda03ffda2f33f081e45a8f4def665966062a18abbe12fb432d8fdb57201666dd72d7086ebd0146d1f6aa847e61d26d6648fb9328b2ffc8c3c921ef54079b645193848034026f25", 0xd6, 0x20}, {&(0x7f00000001c0)="8d2f42c26f52482a897916f2303673d44cceeac500cd1e221302ccc0e289667d116ca3efa0de701c1658c4dcc9ef5d598309a9f1a46f04cba973dfec3d7c3babb79bb99da0f065b6", 0x48}, {&(0x7f0000000480)="682bfc693a6c918b1670a9371741e6827aa420678c5d8c8e0a15d921530b29ffdda7e333b3481259f3ee1cc23e21b682163532126a0c76d1f28bd77644cfb2aababa6782911b8e19872ddbbd13583e66d74e6514b61d943ab3e9058ce9f1bba280be225e49d26a6bfe998024614951bb835b903ba69c9e1776a7d9110d957569f6124ecf1fb48bd513", 0x89, 0x7}, {&(0x7f0000000540)="6a10f10e17a0acdc5dd04d6cc56f1d58a5242e4e915ceb5b6d3ddc2221209ca118c8b655e7e3f87d3fd30fef727a4dece2147ca71afcbc2a12cb07931b6d330f81176d15abe98ad14b419a30bbe7bea12956352508", 0x55, 0x4c}, {&(0x7f00000005c0)="e70aba7b01fff08a8c35c1842d704b9a9e21dea0409f2dd43a4a547d48f243020b7cbf1bebe819e7614ecc116d343c4f5137b9a86c6f6598c19e2f707e538a6416afd624876b3361c62e", 0x4a, 0x3}], 0x904012, &(0x7f00000009c0)=ANY=[@ANYBLOB="76666174002c002c2c212c66736d616769633d3078303030303030303030303030300130652c6f626a5f7573ff033d756e695f786c6175653d312c7801000000000000803d757365725f752c00fd6181d6e13f5dbf716b0d734c5a559cce5a7787bde9fa0f184b4fdb194e3b270c9b7decd39a9faed2db40c8d86c6ebf061bf5a7f1889ff56c4a1e06dbac4e0ce638de0c00095c68cb71513b2ce3ca6bbb19e0224c11993a51c94e3a145a055999102dd13c2b1743dbf6"]) 14:43:58 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 36) 14:43:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="756e00040000533e3673633aa3"]) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xfffffffb}, 0x4) r1 = getuid() syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x6, 0x4, &(0x7f0000001bc0)=[{&(0x7f0000000a40)="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", 0x1000, 0x6}, {&(0x7f0000000840)="68d62bb351990d503eed432f0ac64a18aa3bc96fa23ac8a4d2ee8683d13a4dff06eb3e7563abf17afc916096dfd728650a84b5ec1eaa2b44aa2b53d4", 0x3c, 0x3f}, {&(0x7f0000001a40)="9b06dcf70e84754f3508fe261c31fcb967894b4fb123bdf9168366d5a16fb92757d50b01bf5a19708e79613359d5767f03df57386c43c7f39670dc41a540a4eb04e873cdff4a0703036eb831c5021b630c25bd4c318008e14325301bae6b1683c230aad0a5227b91754e7e120fec5171d8fc46b44505c66b45ffb8b4bc585567484f958d1b4c4159f7eeda3a046080a8476fc0", 0x93, 0xffffffff}, {&(0x7f0000001b00)="d2d0ba0abc7f5f17906e57d9bef4af10cb7abe4d835f7f42d35fe2aeffc62eca170bfc81e4beb1d6ea41456008e4c078246a68a1d9d3d55bf55346cd0c268b4fc8c01a551139f5f100d5414bb98b2ff8bd8569b840b0ef58bb74b392bd4f4f96ba342a27d33a62fc9f05d81c4139899e4231b32d1a0eecc9687d3364772de80708fa2255aab0b9db", 0x88, 0x8}], 0x1006, &(0x7f0000001c40)={[{@uni_xlateno}], [{@uid_lt={'uid<', r1}}, {@dont_appraise}, {@dont_hash}]}) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xffffffff80000000, 0x0, &(0x7f0000000700), 0x848005, &(0x7f0000000980)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYBLOB="2c646566636f6e746578743d73797361646d5f752c6673636f6e746578743d757365725f752c736d61636b66736465663d76666174002c6f626a5f757365723d27242d242f2d7d265c5ca42c00e3f784"]) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000001c80)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000001d00)={&(0x7f0000001cc0)=[0x0, r3], 0x1, 0x2, 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="050000f8", @ANYRES16=r5, @ANYBLOB="08002abd7000fcdbdf250100000000000000094100000010001800009c5069623a7767310000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) 14:43:58 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 38) [ 1293.824051] FAULT_INJECTION: forcing a failure. [ 1293.824051] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.845857] FAT-fs (loop4): Unrecognized mount option "un" or missing value [ 1293.848727] FAULT_INJECTION: forcing a failure. [ 1293.848727] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.863429] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value 14:43:58 executing program 0: r0 = socket(0x26, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:43:58 executing program 0: r0 = socket(0x26, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x26, 0x2, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) [ 1293.883135] CPU: 1 PID: 3215 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1293.891112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1293.900461] Call Trace: [ 1293.903045] dump_stack+0x1b2/0x281 [ 1293.906667] should_fail.cold+0x10a/0x149 [ 1293.910839] should_failslab+0xd6/0x130 [ 1293.914816] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1293.919481] ? kobj_ns_drop+0x80/0x80 [ 1293.923368] call_usermodehelper_setup+0x73/0x2e0 [ 1293.928213] kobject_uevent_env+0xc21/0xf30 14:43:58 executing program 0: r0 = socket(0x26, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x26, 0x2, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) [ 1293.932528] lo_ioctl+0x11a6/0x1cd0 [ 1293.936140] ? loop_set_status64+0xe0/0xe0 [ 1293.940364] blkdev_ioctl+0x540/0x1830 [ 1293.944244] ? blkpg_ioctl+0x8d0/0x8d0 [ 1293.948118] ? trace_hardirqs_on+0x10/0x10 [ 1293.952339] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1293.957433] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1293.962456] block_ioctl+0xd9/0x120 [ 1293.966070] ? blkdev_fallocate+0x3a0/0x3a0 [ 1293.970382] do_vfs_ioctl+0x75a/0xff0 [ 1293.974194] ? lock_acquire+0x170/0x3f0 [ 1293.978163] ? ioctl_preallocate+0x1a0/0x1a0 14:43:58 executing program 0: r0 = socket(0x22, 0x1, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x6, 0x3, 0x2, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan1\x00'}) [ 1293.982654] ? __fget+0x265/0x3e0 [ 1293.986102] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.990072] ? security_file_ioctl+0x83/0xb0 [ 1293.994468] SyS_ioctl+0x7f/0xb0 [ 1293.997820] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.001788] do_syscall_64+0x1d5/0x640 [ 1294.005661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.010832] RIP: 0033:0x7f25b5a2a037 [ 1294.014526] RSP: 002b:00007f25b439ef28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.022227] RAX: ffffffffffffffda RBX: 00007f25b5a73a20 RCX: 00007f25b5a2a037 [ 1294.029569] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1294.036827] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1294.044086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1294.051342] R13: 0000000000000004 R14: 00000000200018d8 R15: 0000000000000001 [ 1294.058607] CPU: 0 PID: 3226 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1294.066505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1294.075398] FAT-fs (loop2): Unrecognized mount option "uni_xlate=1(" or missing value [ 1294.075841] Call Trace: [ 1294.075856] dump_stack+0x1b2/0x281 [ 1294.075870] should_fail.cold+0x10a/0x149 [ 1294.075883] should_failslab+0xd6/0x130 [ 1294.098088] kmem_cache_alloc+0x28e/0x3c0 [ 1294.102236] ? ext4_sync_fs+0x7e0/0x7e0 [ 1294.106213] ext4_alloc_inode+0x1a/0x640 [ 1294.110273] ? ext4_sync_fs+0x7e0/0x7e0 [ 1294.114240] alloc_inode+0x5d/0x170 [ 1294.117863] new_inode+0x1d/0xf0 [ 1294.118061] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1294.121223] __ext4_new_inode+0x360/0x4eb0 [ 1294.121236] ? kmem_cache_free+0x7c/0x2b0 [ 1294.121243] ? putname+0xcd/0x110 [ 1294.121251] ? SyS_mkdirat+0x95/0x270 [ 1294.121261] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.121277] ? ext4_free_inode+0x1460/0x1460 [ 1294.121287] ? lock_downgrade+0x740/0x740 [ 1294.121302] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1294.161725] ? dquot_initialize_needed+0x240/0x240 [ 1294.166661] ext4_mkdir+0x2e4/0xbd0 [ 1294.170291] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1294.174966] ? security_inode_mkdir+0xca/0x100 [ 1294.179555] vfs_mkdir+0x463/0x6e0 [ 1294.183093] SyS_mkdirat+0x1fd/0x270 [ 1294.186804] ? SyS_mknod+0x30/0x30 [ 1294.190333] ? fput_many+0xe/0x140 [ 1294.193864] ? do_syscall_64+0x4c/0x640 [ 1294.197830] ? SyS_mknod+0x30/0x30 [ 1294.201368] do_syscall_64+0x1d5/0x640 [ 1294.205254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.210432] RIP: 0033:0x7f5c08b6b387 [ 1294.214128] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1294.221829] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 14:43:58 executing program 0: r0 = socket(0x22, 0x1, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x6, 0x3, 0x2, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan1\x00'}) socket(0x22, 0x1, 0x6) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x6, 0x3, 0x2, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x3a) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) (async) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan1\x00'}) (async) [ 1294.229089] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1294.236347] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1294.243606] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1294.250869] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:43:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdc00, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000440)="c3f40a148ee651532df41d0d3479fe49a0aee0c2b678131dab0301ca860f08c204fa5957c5a94153a0f20eef5be1318b851c95cb4c7276996dc93d389061c6bb5eb1d0e4bdfe20e6c180d9b50369310f6cb4edf45e947bbe0364281449e9e0332f3dfa25509990949c78968de7d70f1ba46c692b6dec23de82a4448a1736c67744fdf609f3c2dab82c6d31d13cd036ea261ea2b1ba4b4c8f2fa6cd01ce6b6d955cae", 0xa2, 0x4}, {&(0x7f00000001c0)="826488406e26cb9dcf9940ab86728563b38845f81bfb7465793cff94595439cce40a779ccca98950bc36f9d742d397421d6d63da7aa59f34c9f6eb33d219acb0188779a3f1830c587f7d97abde43aaad379ddb8d423dc40e51092ebd3ed41ae6029508f4", 0x64, 0x6}, {&(0x7f00000003c0)="a187ea6faac9070000007fc8ee5146fef1746c7ab0c67afaaf06785d83de9a24e98b06c6a43dca73b62657c20723f88981777f786675021ceea6f5a7574f79df29cfa28815e3aba172ea17ac2c2d175de42ccad4b9d3ad", 0x57, 0xfffffffffffffffd}, {&(0x7f00000002c0)="71cac3a8c8fc748e064b19c340a37b080233c0bbca97e674fea479e942f0a82cd78875c6c8bd2d23dbf55f023eab558332c9954b87d0395789cb611394cda14deb0f2e15ca23572aeec906a8c63ade80b9e68e5fa283df905d", 0x59, 0x8000000000000001}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73757466383d312c935f0000000043cf3c35a633669cf6a7faf4cb29989ecd8033eea1936cca3d"]) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0xc021}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x51, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 1294.394423] FAT-fs (loop4): Unrecognized mount option "sutf8=1" or missing value 14:43:58 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:58 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 37) 14:43:58 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 39) 14:43:58 executing program 0: r0 = socket(0x22, 0x1, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x6, 0x3, 0x2, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x3a) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3, 0x4) (async) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) (async) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan1\x00'}) 14:43:58 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400695f786c6174653d312c00"]) 14:43:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdc00, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x80) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000440)="c3f40a148ee651532df41d0d3479fe49a0aee0c2b678131dab0301ca860f08c204fa5957c5a94153a0f20eef5be1318b851c95cb4c7276996dc93d389061c6bb5eb1d0e4bdfe20e6c180d9b50369310f6cb4edf45e947bbe0364281449e9e0332f3dfa25509990949c78968de7d70f1ba46c692b6dec23de82a4448a1736c67744fdf609f3c2dab82c6d31d13cd036ea261ea2b1ba4b4c8f2fa6cd01ce6b6d955cae", 0xa2, 0x4}, {&(0x7f00000001c0)="826488406e26cb9dcf9940ab86728563b38845f81bfb7465793cff94595439cce40a779ccca98950bc36f9d742d397421d6d63da7aa59f34c9f6eb33d219acb0188779a3f1830c587f7d97abde43aaad379ddb8d423dc40e51092ebd3ed41ae6029508f4", 0x64, 0x6}, {&(0x7f00000003c0)="a187ea6faac9070000007fc8ee5146fef1746c7ab0c67afaaf06785d83de9a24e98b06c6a43dca73b62657c20723f88981777f786675021ceea6f5a7574f79df29cfa28815e3aba172ea17ac2c2d175de42ccad4b9d3ad", 0x57, 0xfffffffffffffffd}, {&(0x7f00000002c0)="71cac3a8c8fc748e064b19c340a37b080233c0bbca97e674fea479e942f0a82cd78875c6c8bd2d23dbf55f023eab558332c9954b87d0395789cb611394cda14deb0f2e15ca23572aeec906a8c63ade80b9e68e5fa283df905d", 0x59, 0x8000000000000001}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73757466383d312c935f0000000043cf3c35a633669cf6a7faf4cb29989ecd8033eea1936cca3d"]) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0xc021}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x51, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 1294.699474] FAULT_INJECTION: forcing a failure. [ 1294.699474] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.714416] FAULT_INJECTION: forcing a failure. [ 1294.714416] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.731476] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1294.743310] FAT-fs (loop4): Unrecognized mount option "sutf8=1" or missing value [ 1294.756581] CPU: 1 PID: 3303 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1294.764375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1294.773714] Call Trace: [ 1294.776287] dump_stack+0x1b2/0x281 [ 1294.779910] should_fail.cold+0x10a/0x149 [ 1294.784049] should_failslab+0xd6/0x130 [ 1294.788013] kmem_cache_alloc+0x28e/0x3c0 [ 1294.792157] ? ext4_sync_fs+0x7e0/0x7e0 [ 1294.796128] ext4_alloc_inode+0x1a/0x640 [ 1294.800185] ? ext4_sync_fs+0x7e0/0x7e0 [ 1294.804152] alloc_inode+0x5d/0x170 [ 1294.807775] new_inode+0x1d/0xf0 [ 1294.811137] __ext4_new_inode+0x360/0x4eb0 [ 1294.815371] ? kmem_cache_free+0x7c/0x2b0 [ 1294.819512] ? putname+0xcd/0x110 [ 1294.822964] ? SyS_mkdirat+0x95/0x270 [ 1294.824813] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1294.826758] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.826778] ? ext4_free_inode+0x1460/0x1460 [ 1294.826795] ? lock_downgrade+0x740/0x740 [ 1294.826808] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1294.854751] ? dquot_initialize_needed+0x240/0x240 [ 1294.859680] ext4_mkdir+0x2e4/0xbd0 [ 1294.863312] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1294.867976] ? security_inode_mkdir+0xca/0x100 [ 1294.872548] vfs_mkdir+0x463/0x6e0 [ 1294.876074] SyS_mkdirat+0x1fd/0x270 [ 1294.879865] ? SyS_mknod+0x30/0x30 [ 1294.883385] ? fput_many+0xe/0x140 [ 1294.886909] ? do_syscall_64+0x4c/0x640 [ 1294.890865] ? SyS_mknod+0x30/0x30 [ 1294.894387] do_syscall_64+0x1d5/0x640 [ 1294.898265] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.903445] RIP: 0033:0x7f5c08b6b387 [ 1294.907144] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1294.914832] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1294.922084] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1294.929336] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1294.936593] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1294.943848] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1294.964043] CPU: 0 PID: 3299 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1294.971848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1294.981191] Call Trace: [ 1294.983774] dump_stack+0x1b2/0x281 [ 1294.987399] should_fail.cold+0x10a/0x149 [ 1294.991553] should_failslab+0xd6/0x130 [ 1294.995523] kmem_cache_alloc+0x28e/0x3c0 [ 1294.999668] getname_flags+0xc8/0x550 [ 1295.003471] SyS_mkdirat+0x83/0x270 [ 1295.007094] ? SyS_mknod+0x30/0x30 [ 1295.010623] ? fput_many+0xe/0x140 [ 1295.014156] ? do_syscall_64+0x4c/0x640 [ 1295.018125] ? SyS_mknod+0x30/0x30 [ 1295.021657] do_syscall_64+0x1d5/0x640 [ 1295.025542] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1295.030726] RIP: 0033:0x7f25b5a29387 [ 1295.034437] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1295.042139] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 14:43:59 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) 14:43:59 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 40) 14:43:59 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400695f786c6174653d312c00"]) 14:43:59 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, r0, 0x200, 0x70bd26, 0x25dfdc00, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41000}, 0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000340)=[{&(0x7f0000000440)="c3f40a148ee651532df41d0d3479fe49a0aee0c2b678131dab0301ca860f08c204fa5957c5a94153a0f20eef5be1318b851c95cb4c7276996dc93d389061c6bb5eb1d0e4bdfe20e6c180d9b50369310f6cb4edf45e947bbe0364281449e9e0332f3dfa25509990949c78968de7d70f1ba46c692b6dec23de82a4448a1736c67744fdf609f3c2dab82c6d31d13cd036ea261ea2b1ba4b4c8f2fa6cd01ce6b6d955cae", 0xa2, 0x4}, {&(0x7f00000001c0)="826488406e26cb9dcf9940ab86728563b38845f81bfb7465793cff94595439cce40a779ccca98950bc36f9d742d397421d6d63da7aa59f34c9f6eb33d219acb0188779a3f1830c587f7d97abde43aaad379ddb8d423dc40e51092ebd3ed41ae6029508f4", 0x64, 0x6}, {&(0x7f00000003c0)="a187ea6faac9070000007fc8ee5146fef1746c7ab0c67afaaf06785d83de9a24e98b06c6a43dca73b62657c20723f88981777f786675021ceea6f5a7574f79df29cfa28815e3aba172ea17ac2c2d175de42ccad4b9d3ad", 0x57, 0xfffffffffffffffd}, {&(0x7f00000002c0)="71cac3a8c8fc748e064b19c340a37b080233c0bbca97e674fea479e942f0a82cd78875c6c8bd2d23dbf55f023eab558332c9954b87d0395789cb611394cda14deb0f2e15ca23572aeec906a8c63ade80b9e68e5fa283df905d", 0x59, 0x8000000000000001}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73757466383d312c935f0000000043cf3c35a633669cf6a7faf4cb29989ecd8033eea1936cca3d"]) (async) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0xc021}) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x400, 0x51, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) [ 1295.049399] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1295.056662] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1295.063922] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1295.071183] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:43:59 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 38) 14:43:59 executing program 0: socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) [ 1295.182052] FAULT_INJECTION: forcing a failure. [ 1295.182052] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.213738] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1295.227556] FAULT_INJECTION: forcing a failure. [ 1295.227556] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.227758] CPU: 1 PID: 3339 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1295.243677] FAT-fs (loop4): Unrecognized mount option "sutf8=1" or missing value [ 1295.246526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1295.246531] Call Trace: [ 1295.246545] dump_stack+0x1b2/0x281 [ 1295.246558] should_fail.cold+0x10a/0x149 [ 1295.246570] should_failslab+0xd6/0x130 [ 1295.277670] __kmalloc+0x2c1/0x400 [ 1295.281205] ? ext4_find_extent+0x879/0xbc0 [ 1295.285551] ext4_find_extent+0x879/0xbc0 [ 1295.289687] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1295.295118] ext4_ext_map_blocks+0x19a/0x6b10 [ 1295.299593] ? __lock_acquire+0x5fc/0x3f20 [ 1295.303812] ? __lock_acquire+0x5fc/0x3f20 [ 1295.308030] ? mark_buffer_dirty+0x95/0x480 [ 1295.312333] ? trace_hardirqs_on+0x10/0x10 [ 1295.316549] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1295.321893] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1295.327069] ? trace_hardirqs_on+0x10/0x10 [ 1295.331290] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1295.336116] ? ext4_es_lookup_extent+0x321/0xac0 [ 1295.340857] ? lock_acquire+0x170/0x3f0 [ 1295.344816] ? lock_acquire+0x170/0x3f0 [ 1295.348775] ? ext4_map_blocks+0x29f/0x1730 [ 1295.353085] ext4_map_blocks+0xb19/0x1730 [ 1295.357291] ? ext4_issue_zeroout+0x150/0x150 [ 1295.361768] ? __ext4_new_inode+0x27c/0x4eb0 [ 1295.366162] ext4_getblk+0x98/0x3f0 [ 1295.369786] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1295.374092] ext4_bread+0x6c/0x1a0 [ 1295.377618] ? ext4_getblk+0x3f0/0x3f0 [ 1295.381486] ? dquot_initialize_needed+0x240/0x240 [ 1295.386400] ext4_append+0x143/0x350 [ 1295.390099] ext4_mkdir+0x4c9/0xbd0 [ 1295.393710] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1295.398360] ? security_inode_mkdir+0xca/0x100 [ 1295.402925] vfs_mkdir+0x463/0x6e0 [ 1295.406450] SyS_mkdirat+0x1fd/0x270 [ 1295.410156] ? SyS_mknod+0x30/0x30 [ 1295.413688] ? fput_many+0xe/0x140 [ 1295.417211] ? do_syscall_64+0x4c/0x640 [ 1295.421175] ? SyS_mknod+0x30/0x30 [ 1295.424712] do_syscall_64+0x1d5/0x640 [ 1295.428602] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1295.433780] RIP: 0033:0x7f5c08b6b387 [ 1295.437477] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1295.445170] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1295.452433] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1295.459698] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1295.466962] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1295.474217] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1295.482890] CPU: 0 PID: 3343 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1295.490699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1295.500042] Call Trace: [ 1295.502625] dump_stack+0x1b2/0x281 [ 1295.506253] should_fail.cold+0x10a/0x149 [ 1295.510404] should_failslab+0xd6/0x130 [ 1295.514379] __kmalloc+0x2c1/0x400 [ 1295.517924] ? ext4_find_extent+0x879/0xbc0 [ 1295.522245] ext4_find_extent+0x879/0xbc0 [ 1295.526401] ? rcu_lockdep_current_cpu_online+0xed/0x140 14:43:59 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:43:59 executing program 0: socket(0x10, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) socket(0x10, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r2, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffd, 0x4) (async) [ 1295.531846] ext4_ext_map_blocks+0x19a/0x6b10 [ 1295.536345] ? __lock_acquire+0x5fc/0x3f20 [ 1295.540579] ? __lock_acquire+0x5fc/0x3f20 [ 1295.544813] ? mark_buffer_dirty+0x95/0x480 [ 1295.549128] ? trace_hardirqs_on+0x10/0x10 [ 1295.553368] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1295.558733] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1295.563920] ? trace_hardirqs_on+0x10/0x10 [ 1295.568154] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1295.570990] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1295.572994] ? ext4_es_lookup_extent+0x321/0xac0 [ 1295.573009] ? lock_acquire+0x170/0x3f0 [ 1295.573020] ? lock_acquire+0x170/0x3f0 [ 1295.573032] ? ext4_map_blocks+0x29f/0x1730 [ 1295.595861] ext4_map_blocks+0xb19/0x1730 [ 1295.600010] ? ext4_issue_zeroout+0x150/0x150 [ 1295.601800] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1295.604499] ? __ext4_new_inode+0x27c/0x4eb0 [ 1295.617900] ext4_getblk+0x98/0x3f0 [ 1295.621528] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1295.625849] ext4_bread+0x6c/0x1a0 [ 1295.629387] ? ext4_getblk+0x3f0/0x3f0 14:43:59 executing program 0: r0 = socket(0x1f, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:43:59 executing program 0: r0 = socket(0x1f, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x1f, 0x800, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1295.633268] ? dquot_initialize_needed+0x240/0x240 [ 1295.638198] ext4_append+0x143/0x350 [ 1295.641909] ext4_mkdir+0x4c9/0xbd0 [ 1295.645534] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1295.650201] ? security_inode_mkdir+0xca/0x100 [ 1295.654781] vfs_mkdir+0x463/0x6e0 [ 1295.658325] SyS_mkdirat+0x1fd/0x270 [ 1295.662048] ? SyS_mknod+0x30/0x30 [ 1295.665585] ? fput_many+0xe/0x140 [ 1295.669117] ? do_syscall_64+0x4c/0x640 [ 1295.673086] ? SyS_mknod+0x30/0x30 [ 1295.676623] do_syscall_64+0x1d5/0x640 14:43:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="ad197a56faeb4d07c27fb897da9a86a84d5a95b136b71a5daa0262c7d81dd3a48f475e7faad392db3e0590a0aed9952da064860b59bfa82ea6b1b4dc84c96eb52c5bed8f063bde34ed9dcb6f363fcf561126e7101dc34d690117c4b219154cf999a767219d582cdb3200772e72cc5ece8aca5a38", 0x74, 0x5}, {&(0x7f0000000180)="d194b7f448474f8537efda54839146216ea90bb828c41aecc71bd93ff18133eae17eaaa01f1269f503284ed12daf56b4f5f9857fd12a824e", 0x38, 0x8001}, {&(0x7f0000000280)="39703533748c5fd2ff8cd072da81cd5f69b7c4289d41a31d21e1408f28c24a636c46e83740c042bfa3431c99b7241fcb0e2228ead0a4c8ee637a8894c2eee928847c5fb082e842d676bb9c63ef949b9d17f9034e3e82908ade7aa94c13789e00801109b3a76a8c8542f96bad142a3d11ab109ad22990bc5e7555c6ba7b14f3f001d460e305e9104daab702786adc57e8cb265dda7f6ace60391b79519504face4b0049", 0xa3, 0xed}, {&(0x7f0000000340)="be78e6b3c87fd0787016bd32bf0476c3264c45fb22198153aacda2220089d1633a3e01034ed677d5860fdbc565c74313b4dd94d5373a77a245618189bdc2d433bdaacc88affeddd2831719a73a5c29812bfeb1b1b13ff96680a92f4cd62ee7a4468fa6e1ca629afc79482bdf7014d7c43ad760156fc97f6a875d106499d2bff871080d3448c1c06bb745", 0x8a, 0x8c}], 0x400, &(0x7f0000000400)={[{'@'}, {}, {'uni_xlate=1'}, {'uni_xlate=1'}, {'vfat\x00'}, {'uni_xlate=1'}, {'$&--'}, {'vfat\x00'}, {}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) [ 1295.680513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1295.685691] RIP: 0033:0x7f25b5a29387 [ 1295.689391] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1295.697091] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 [ 1295.704355] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1295.711618] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1295.718879] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1295.726151] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:43:59 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 41) 14:44:00 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400695f786c6174653d312c00"]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0400695f786c6174653d312c00"]) (async) 14:44:00 executing program 0: r0 = socket(0x1f, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x1f, 0x800, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:44:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1295.814261] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1295.824717] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1295.846529] FAT-fs (loop4): bogus number of reserved sectors [ 1295.854105] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1295.864139] FAULT_INJECTION: forcing a failure. [ 1295.864139] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.884441] CPU: 0 PID: 3410 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1295.892240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1295.901586] Call Trace: [ 1295.904171] dump_stack+0x1b2/0x281 [ 1295.907806] should_fail.cold+0x10a/0x149 [ 1295.911958] should_failslab+0xd6/0x130 [ 1295.915932] __kmalloc+0x2c1/0x400 [ 1295.919476] ? ext4_find_extent+0x879/0xbc0 [ 1295.923798] ext4_find_extent+0x879/0xbc0 [ 1295.927941] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1295.933401] ext4_ext_map_blocks+0x19a/0x6b10 [ 1295.937897] ? __lock_acquire+0x5fc/0x3f20 [ 1295.942135] ? mark_buffer_dirty+0x95/0x480 [ 1295.946461] ? trace_hardirqs_on+0x10/0x10 [ 1295.950700] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1295.956067] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1295.961255] ? trace_hardirqs_on+0x10/0x10 [ 1295.965482] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1295.970328] ? ext4_es_lookup_extent+0x321/0xac0 [ 1295.975083] ? lock_acquire+0x170/0x3f0 [ 1295.979056] ? lock_acquire+0x170/0x3f0 [ 1295.983023] ? ext4_map_blocks+0x623/0x1730 [ 1295.987348] ext4_map_blocks+0x675/0x1730 [ 1295.991498] ? ext4_issue_zeroout+0x150/0x150 [ 1295.995985] ? __ext4_new_inode+0x27c/0x4eb0 [ 1296.000401] ext4_getblk+0x98/0x3f0 [ 1296.004022] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1296.008344] ext4_bread+0x6c/0x1a0 [ 1296.011886] ? ext4_getblk+0x3f0/0x3f0 [ 1296.015766] ? dquot_initialize_needed+0x240/0x240 [ 1296.020696] ext4_append+0x143/0x350 [ 1296.024411] ext4_mkdir+0x4c9/0xbd0 [ 1296.028040] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1296.032708] ? security_inode_mkdir+0xca/0x100 [ 1296.037283] vfs_mkdir+0x463/0x6e0 [ 1296.040815] SyS_mkdirat+0x1fd/0x270 [ 1296.044522] ? SyS_mknod+0x30/0x30 [ 1296.048052] ? fput_many+0xe/0x140 [ 1296.051584] ? do_syscall_64+0x4c/0x640 [ 1296.055552] ? SyS_mknod+0x30/0x30 [ 1296.059097] do_syscall_64+0x1d5/0x640 [ 1296.062984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.068163] RIP: 0033:0x7f5c08b6b387 [ 1296.071867] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1296.079569] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1296.086828] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1296.094173] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1296.101434] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 14:44:00 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 39) [ 1296.108695] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1296.130366] FAULT_INJECTION: forcing a failure. [ 1296.130366] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.139509] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 1296.141795] CPU: 0 PID: 3423 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1296.156332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 14:44:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1296.165681] Call Trace: [ 1296.168260] dump_stack+0x1b2/0x281 [ 1296.171887] should_fail.cold+0x10a/0x149 [ 1296.176035] should_failslab+0xd6/0x130 [ 1296.180007] kmem_cache_alloc+0x40/0x3c0 [ 1296.184065] __es_insert_extent+0x338/0x1360 [ 1296.188471] ? __es_shrink+0x8c0/0x8c0 [ 1296.192364] ? lock_acquire+0x170/0x3f0 [ 1296.196334] ? ext4_es_insert_extent+0x11f/0x530 [ 1296.201097] ext4_es_insert_extent+0x1b9/0x530 [ 1296.205675] ? ext4_es_find_delayed_extent_range+0x930/0x930 14:44:00 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x3, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1296.211467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1296.216914] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 1296.222707] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 1296.227284] ? __lock_acquire+0x5fc/0x3f20 [ 1296.231515] ? __lock_acquire+0x5fc/0x3f20 [ 1296.235745] ? mark_buffer_dirty+0x95/0x480 [ 1296.240062] ? trace_hardirqs_on+0x10/0x10 [ 1296.244291] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1296.249649] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1296.254831] ? trace_hardirqs_on+0x10/0x10 [ 1296.259058] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1296.263897] ? ext4_es_lookup_extent+0x321/0xac0 [ 1296.268645] ? lock_acquire+0x170/0x3f0 [ 1296.272623] ? lock_acquire+0x170/0x3f0 [ 1296.276682] ? ext4_map_blocks+0x29f/0x1730 [ 1296.281024] ext4_map_blocks+0xb19/0x1730 [ 1296.285175] ? ext4_issue_zeroout+0x150/0x150 [ 1296.289662] ? __ext4_new_inode+0x27c/0x4eb0 [ 1296.294072] ext4_getblk+0x98/0x3f0 [ 1296.297695] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1296.302017] ext4_bread+0x6c/0x1a0 [ 1296.305555] ? ext4_getblk+0x3f0/0x3f0 [ 1296.309445] ? dquot_initialize_needed+0x240/0x240 [ 1296.314373] ext4_append+0x143/0x350 [ 1296.318088] ext4_mkdir+0x4c9/0xbd0 [ 1296.321714] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1296.326381] ? security_inode_mkdir+0xca/0x100 [ 1296.330959] vfs_mkdir+0x463/0x6e0 [ 1296.334498] SyS_mkdirat+0x1fd/0x270 [ 1296.338211] ? SyS_mknod+0x30/0x30 [ 1296.341743] ? fput_many+0xe/0x140 [ 1296.345284] ? do_syscall_64+0x4c/0x640 [ 1296.349255] ? SyS_mknod+0x30/0x30 [ 1296.352791] do_syscall_64+0x1d5/0x640 [ 1296.356679] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.361861] RIP: 0033:0x7f25b5a29387 [ 1296.365563] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1296.373269] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 [ 1296.380530] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1296.387796] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1296.395057] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1296.402316] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:00 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:00 executing program 0: r0 = socket(0x10, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:00 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffaf5, 0xffffffff}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x5) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75921ad25c8fa695a6f8310471b1305e79c8"]) 14:44:00 executing program 0: r0 = socket(0x10, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x800, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1296.423258] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1296.451068] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1296.458448] romfs: VFS: Can't find a romfs filesystem on dev loop4. 14:44:00 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 42) 14:44:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="ad197a56faeb4d07c27fb897da9a86a84d5a95b136b71a5daa0262c7d81dd3a48f475e7faad392db3e0590a0aed9952da064860b59bfa82ea6b1b4dc84c96eb52c5bed8f063bde34ed9dcb6f363fcf561126e7101dc34d690117c4b219154cf999a767219d582cdb3200772e72cc5ece8aca5a38", 0x74, 0x5}, {&(0x7f0000000180)="d194b7f448474f8537efda54839146216ea90bb828c41aecc71bd93ff18133eae17eaaa01f1269f503284ed12daf56b4f5f9857fd12a824e", 0x38, 0x8001}, {&(0x7f0000000280)="39703533748c5fd2ff8cd072da81cd5f69b7c4289d41a31d21e1408f28c24a636c46e83740c042bfa3431c99b7241fcb0e2228ead0a4c8ee637a8894c2eee928847c5fb082e842d676bb9c63ef949b9d17f9034e3e82908ade7aa94c13789e00801109b3a76a8c8542f96bad142a3d11ab109ad22990bc5e7555c6ba7b14f3f001d460e305e9104daab702786adc57e8cb265dda7f6ace60391b79519504face4b0049", 0xa3, 0xed}, {&(0x7f0000000340)="be78e6b3c87fd0787016bd32bf0476c3264c45fb22198153aacda2220089d1633a3e01034ed677d5860fdbc565c74313b4dd94d5373a77a245618189bdc2d433bdaacc88affeddd2831719a73a5c29812bfeb1b1b13ff96680a92f4cd62ee7a4468fa6e1ca629afc79482bdf7014d7c43ad760156fc97f6a875d106499d2bff871080d3448c1c06bb745", 0x8a, 0x8c}], 0x400, &(0x7f0000000400)={[{'@'}, {}, {'uni_xlate=1'}, {'uni_xlate=1'}, {'vfat\x00'}, {'uni_xlate=1'}, {'$&--'}, {'vfat\x00'}, {}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="ad197a56faeb4d07c27fb897da9a86a84d5a95b136b71a5daa0262c7d81dd3a48f475e7faad392db3e0590a0aed9952da064860b59bfa82ea6b1b4dc84c96eb52c5bed8f063bde34ed9dcb6f363fcf561126e7101dc34d690117c4b219154cf999a767219d582cdb3200772e72cc5ece8aca5a38", 0x74, 0x5}, {&(0x7f0000000180)="d194b7f448474f8537efda54839146216ea90bb828c41aecc71bd93ff18133eae17eaaa01f1269f503284ed12daf56b4f5f9857fd12a824e", 0x38, 0x8001}, {&(0x7f0000000280)="39703533748c5fd2ff8cd072da81cd5f69b7c4289d41a31d21e1408f28c24a636c46e83740c042bfa3431c99b7241fcb0e2228ead0a4c8ee637a8894c2eee928847c5fb082e842d676bb9c63ef949b9d17f9034e3e82908ade7aa94c13789e00801109b3a76a8c8542f96bad142a3d11ab109ad22990bc5e7555c6ba7b14f3f001d460e305e9104daab702786adc57e8cb265dda7f6ace60391b79519504face4b0049", 0xa3, 0xed}, {&(0x7f0000000340)="be78e6b3c87fd0787016bd32bf0476c3264c45fb22198153aacda2220089d1633a3e01034ed677d5860fdbc565c74313b4dd94d5373a77a245618189bdc2d433bdaacc88affeddd2831719a73a5c29812bfeb1b1b13ff96680a92f4cd62ee7a4468fa6e1ca629afc79482bdf7014d7c43ad760156fc97f6a875d106499d2bff871080d3448c1c06bb745", 0x8a, 0x8c}], 0x400, &(0x7f0000000400)={[{'@'}, {}, {'uni_xlate=1'}, {'uni_xlate=1'}, {'vfat\x00'}, {'uni_xlate=1'}, {'$&--'}, {'vfat\x00'}, {}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) (async) 14:44:00 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 40) [ 1296.495263] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1296.503800] FAT-fs (loop2): Unrecognized mount option "u’Ò\¦•¦ø1q±0^yÈ" or missing value 14:44:00 executing program 0: r0 = socket(0x10, 0x800, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x10, 0x800, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) 14:44:00 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffaf5, 0xffffffff}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x5) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75921ad25c8fa695a6f8310471b1305e79c8"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) (async) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffaf5, 0xffffffff}) (async) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x5) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75921ad25c8fa695a6f8310471b1305e79c8"]) (async) 14:44:00 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @empty, 0x9}}, 0x24) 14:44:00 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @empty, 0x9}}, 0x24) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @empty, 0x9}}, 0x24) (async) [ 1296.584108] FAULT_INJECTION: forcing a failure. [ 1296.584108] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.594038] FAT-fs (loop2): Unrecognized mount option "u’Ò\¦•¦ø1q±0^yÈ" or missing value [ 1296.595484] CPU: 0 PID: 3466 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1296.611560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1296.620903] Call Trace: [ 1296.623484] dump_stack+0x1b2/0x281 [ 1296.627112] should_fail.cold+0x10a/0x149 14:44:00 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @empty, 0x9}}, 0x24) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffe, @empty, 0x9}}, 0x24) (async) [ 1296.631259] should_failslab+0xd6/0x130 [ 1296.631683] FAULT_INJECTION: forcing a failure. [ 1296.631683] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.635232] kmem_cache_alloc+0x40/0x3c0 [ 1296.635246] __es_insert_extent+0x338/0x1360 [ 1296.635254] ? __es_shrink+0x8c0/0x8c0 [ 1296.635265] ? lock_acquire+0x170/0x3f0 [ 1296.635274] ? ext4_es_insert_extent+0x11f/0x530 [ 1296.635292] ext4_es_insert_extent+0x1b9/0x530 [ 1296.672083] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1296.677881] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1296.683328] ? ext4_es_find_delayed_extent_range+0x646/0x930 [ 1296.689119] ext4_ext_map_blocks+0x1e2c/0x6b10 [ 1296.693697] ? __lock_acquire+0x5fc/0x3f20 [ 1296.697930] ? __lock_acquire+0x5fc/0x3f20 [ 1296.702160] ? mark_buffer_dirty+0x95/0x480 [ 1296.706472] ? trace_hardirqs_on+0x10/0x10 [ 1296.710697] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1296.716044] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1296.721216] ? trace_hardirqs_on+0x10/0x10 [ 1296.725432] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1296.730261] ? ext4_es_lookup_extent+0x321/0xac0 [ 1296.734997] ? lock_acquire+0x170/0x3f0 [ 1296.738953] ? lock_acquire+0x170/0x3f0 [ 1296.742909] ? ext4_map_blocks+0x29f/0x1730 [ 1296.747219] ext4_map_blocks+0xb19/0x1730 [ 1296.751359] ? ext4_issue_zeroout+0x150/0x150 [ 1296.755841] ? __ext4_new_inode+0x27c/0x4eb0 [ 1296.760244] ext4_getblk+0x98/0x3f0 [ 1296.763856] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1296.768173] ext4_bread+0x6c/0x1a0 [ 1296.771709] ? ext4_getblk+0x3f0/0x3f0 [ 1296.775576] ? dquot_initialize_needed+0x240/0x240 [ 1296.780488] ext4_append+0x143/0x350 [ 1296.784199] ext4_mkdir+0x4c9/0xbd0 [ 1296.787812] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1296.792465] ? security_inode_mkdir+0xca/0x100 [ 1296.797029] vfs_mkdir+0x463/0x6e0 [ 1296.800551] SyS_mkdirat+0x1fd/0x270 [ 1296.804265] ? SyS_mknod+0x30/0x30 [ 1296.807789] ? fput_many+0xe/0x140 [ 1296.811330] ? do_syscall_64+0x4c/0x640 [ 1296.815288] ? SyS_mknod+0x30/0x30 [ 1296.818806] do_syscall_64+0x1d5/0x640 [ 1296.822676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.827843] RIP: 0033:0x7f5c08b6b387 [ 1296.831530] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1296.839248] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6b387 [ 1296.846496] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1296.853745] RBP: 00007f5c074e11d0 R08: 0000000000000000 R09: 00007f5c074e11d0 [ 1296.860995] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1296.868248] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1296.875516] CPU: 1 PID: 3476 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1296.882592] FAT-fs (loop4): bogus number of reserved sectors [ 1296.883305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1296.883309] Call Trace: [ 1296.883323] dump_stack+0x1b2/0x281 [ 1296.883336] should_fail.cold+0x10a/0x149 [ 1296.905536] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1296.908747] should_failslab+0xd6/0x130 [ 1296.908759] __kmalloc+0x2c1/0x400 [ 1296.908767] ? ext4_find_extent+0x879/0xbc0 [ 1296.908777] ext4_find_extent+0x879/0xbc0 [ 1296.908790] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1296.908800] ext4_ext_map_blocks+0x19a/0x6b10 [ 1296.940482] ? __lock_acquire+0x5fc/0x3f20 [ 1296.944717] ? mark_buffer_dirty+0x95/0x480 [ 1296.949044] ? trace_hardirqs_on+0x10/0x10 [ 1296.953276] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1296.958638] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1296.963822] ? trace_hardirqs_on+0x10/0x10 [ 1296.968051] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1296.972894] ? ext4_es_lookup_extent+0x321/0xac0 [ 1296.977644] ? lock_acquire+0x170/0x3f0 [ 1296.981619] ? lock_acquire+0x170/0x3f0 [ 1296.985586] ? ext4_map_blocks+0x623/0x1730 [ 1296.989907] ext4_map_blocks+0x675/0x1730 [ 1296.994059] ? ext4_issue_zeroout+0x150/0x150 [ 1296.998548] ? __ext4_new_inode+0x27c/0x4eb0 [ 1297.002958] ext4_getblk+0x98/0x3f0 [ 1297.006581] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1297.010904] ext4_bread+0x6c/0x1a0 [ 1297.014439] ? ext4_getblk+0x3f0/0x3f0 [ 1297.018592] ? dquot_initialize_needed+0x240/0x240 [ 1297.023522] ext4_append+0x143/0x350 [ 1297.027235] ext4_mkdir+0x4c9/0xbd0 [ 1297.030859] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1297.035530] ? security_inode_mkdir+0xca/0x100 [ 1297.040110] vfs_mkdir+0x463/0x6e0 [ 1297.043648] SyS_mkdirat+0x1fd/0x270 [ 1297.047359] ? SyS_mknod+0x30/0x30 [ 1297.050890] ? fput_many+0xe/0x140 [ 1297.054425] ? do_syscall_64+0x4c/0x640 [ 1297.058425] ? SyS_mknod+0x30/0x30 [ 1297.061963] do_syscall_64+0x1d5/0x640 [ 1297.065850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.071030] RIP: 0033:0x7f25b5a29387 [ 1297.074737] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1297.082439] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 [ 1297.089707] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1297.096974] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1297.104238] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1297.111501] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1297.136104] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1297.150608] FAT-fs (loop2): Unrecognized mount option "u’Ò\¦•¦ø1q±0^yÈ" or missing value [ 1297.157165] romfs: VFS: Can't find a romfs filesystem on dev loop4. [ 1297.180619] print_req_error: I/O error, dev loop4, sector 2 [ 1297.186340] Buffer I/O error on dev loop4, logical block 1, async page read [ 1297.198017] print_req_error: I/O error, dev loop4, sector 4 [ 1297.203829] Buffer I/O error on dev loop4, logical block 2, async page read [ 1297.211052] print_req_error: I/O error, dev loop4, sector 6 [ 1297.216758] Buffer I/O error on dev loop4, logical block 3, async page read [ 1297.235266] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:44:01 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={0x0}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:01 executing program 0: r0 = socket(0x11, 0x80003, 0x396) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x8, 0x2, 0x2800000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000480)={0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7800fedbdf250e00000005003000000000000500380001000000000008a002c859ab00000000800000000a000900aaaaaaaaaa3d00004b0600000000000008000300712b27c70000000000000000", @ANYRES32=r7, @ANYBLOB="c47fa7ff3c099be911e38ebe6abf73843d98b97f8a85438213532a8147cb2fafbd6df14a1259bc3b0fcc73a493ad10aa6e84ab314d592caf21d2bc"], 0x58}}, 0x804) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:01 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 41) 14:44:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="ad197a56faeb4d07c27fb897da9a86a84d5a95b136b71a5daa0262c7d81dd3a48f475e7faad392db3e0590a0aed9952da064860b59bfa82ea6b1b4dc84c96eb52c5bed8f063bde34ed9dcb6f363fcf561126e7101dc34d690117c4b219154cf999a767219d582cdb3200772e72cc5ece8aca5a38", 0x74, 0x5}, {&(0x7f0000000180)="d194b7f448474f8537efda54839146216ea90bb828c41aecc71bd93ff18133eae17eaaa01f1269f503284ed12daf56b4f5f9857fd12a824e", 0x38, 0x8001}, {&(0x7f0000000280)="39703533748c5fd2ff8cd072da81cd5f69b7c4289d41a31d21e1408f28c24a636c46e83740c042bfa3431c99b7241fcb0e2228ead0a4c8ee637a8894c2eee928847c5fb082e842d676bb9c63ef949b9d17f9034e3e82908ade7aa94c13789e00801109b3a76a8c8542f96bad142a3d11ab109ad22990bc5e7555c6ba7b14f3f001d460e305e9104daab702786adc57e8cb265dda7f6ace60391b79519504face4b0049", 0xa3, 0xed}, {&(0x7f0000000340)="be78e6b3c87fd0787016bd32bf0476c3264c45fb22198153aacda2220089d1633a3e01034ed677d5860fdbc565c74313b4dd94d5373a77a245618189bdc2d433bdaacc88affeddd2831719a73a5c29812bfeb1b1b13ff96680a92f4cd62ee7a4468fa6e1ca629afc79482bdf7014d7c43ad760156fc97f6a875d106499d2bff871080d3448c1c06bb745", 0x8a, 0x8c}], 0x400, &(0x7f0000000400)={[{'@'}, {}, {'uni_xlate=1'}, {'uni_xlate=1'}, {'vfat\x00'}, {'uni_xlate=1'}, {'$&--'}, {'vfat\x00'}, {}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000100)="ad197a56faeb4d07c27fb897da9a86a84d5a95b136b71a5daa0262c7d81dd3a48f475e7faad392db3e0590a0aed9952da064860b59bfa82ea6b1b4dc84c96eb52c5bed8f063bde34ed9dcb6f363fcf561126e7101dc34d690117c4b219154cf999a767219d582cdb3200772e72cc5ece8aca5a38", 0x74, 0x5}, {&(0x7f0000000180)="d194b7f448474f8537efda54839146216ea90bb828c41aecc71bd93ff18133eae17eaaa01f1269f503284ed12daf56b4f5f9857fd12a824e", 0x38, 0x8001}, {&(0x7f0000000280)="39703533748c5fd2ff8cd072da81cd5f69b7c4289d41a31d21e1408f28c24a636c46e83740c042bfa3431c99b7241fcb0e2228ead0a4c8ee637a8894c2eee928847c5fb082e842d676bb9c63ef949b9d17f9034e3e82908ade7aa94c13789e00801109b3a76a8c8542f96bad142a3d11ab109ad22990bc5e7555c6ba7b14f3f001d460e305e9104daab702786adc57e8cb265dda7f6ace60391b79519504face4b0049", 0xa3, 0xed}, {&(0x7f0000000340)="be78e6b3c87fd0787016bd32bf0476c3264c45fb22198153aacda2220089d1633a3e01034ed677d5860fdbc565c74313b4dd94d5373a77a245618189bdc2d433bdaacc88affeddd2831719a73a5c29812bfeb1b1b13ff96680a92f4cd62ee7a4468fa6e1ca629afc79482bdf7014d7c43ad760156fc97f6a875d106499d2bff871080d3448c1c06bb745", 0x8a, 0x8c}], 0x400, &(0x7f0000000400)={[{'@'}, {}, {'uni_xlate=1'}, {'uni_xlate=1'}, {'vfat\x00'}, {'uni_xlate=1'}, {'$&--'}, {'vfat\x00'}, {}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) (async) 14:44:01 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffaf5, 0xffffffff}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000040)=0x5) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="75921ad25c8fa695a6f8310471b1305e79c8"]) 14:44:01 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 43) 14:44:01 executing program 0: r0 = socket(0x11, 0x80003, 0x396) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x8, 0x2, 0x2800000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000480)={0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7800fedbdf250e00000005003000000000000500380001000000000008a002c859ab00000000800000000a000900aaaaaaaaaa3d00004b0600000000000008000300712b27c70000000000000000", @ANYRES32=r7, @ANYBLOB="c47fa7ff3c099be911e38ebe6abf73843d98b97f8a85438213532a8147cb2fafbd6df14a1259bc3b0fcc73a493ad10aa6e84ab314d592caf21d2bc"], 0x58}}, 0x804) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1297.352114] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1297.367778] FAULT_INJECTION: forcing a failure. [ 1297.367778] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.372623] FAT-fs (loop2): Unrecognized mount option "u’Ò\¦•¦ø1q±0^yÈ" or missing value [ 1297.380450] FAULT_INJECTION: forcing a failure. [ 1297.380450] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.403286] FAT-fs (loop4): bogus number of reserved sectors [ 1297.407840] CPU: 0 PID: 3541 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1297.416874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1297.423883] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1297.426215] Call Trace: [ 1297.426231] dump_stack+0x1b2/0x281 [ 1297.426245] should_fail.cold+0x10a/0x149 [ 1297.426258] should_failslab+0xd6/0x130 [ 1297.426271] __kmalloc_track_caller+0x2bc/0x400 [ 1297.451044] ? strndup_user+0x5b/0xf0 [ 1297.454831] memdup_user+0x22/0xa0 [ 1297.458438] strndup_user+0x5b/0xf0 [ 1297.462045] ? copy_mnt_ns+0xa30/0xa30 [ 1297.465915] SyS_mount+0x39/0x120 [ 1297.469346] ? copy_mnt_ns+0xa30/0xa30 [ 1297.473219] do_syscall_64+0x1d5/0x640 [ 1297.477091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.482261] RIP: 0033:0x7f5c08b6d7aa [ 1297.485952] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1297.493649] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa 14:44:01 executing program 0: r0 = socket(0x11, 0x80003, 0x396) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x8, 0x2, 0x2800000], 0x4, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000480)={0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7800fedbdf250e00000005003000000000000500380001000000000008a002c859ab00000000800000000a000900aaaaaaaaaa3d00004b0600000000000008000300712b27c70000000000000000", @ANYRES32=r7, @ANYBLOB="c47fa7ff3c099be911e38ebe6abf73843d98b97f8a85438213532a8147cb2fafbd6df14a1259bc3b0fcc73a493ad10aa6e84ab314d592caf21d2bc"], 0x58}}, 0x804) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket(0x11, 0x80003, 0x396) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x8, 0x2, 0x2800000], 0x4}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000480)={0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) pipe2(&(0x7f0000000140), 0x80000) (async) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7800fedbdf250e00000005003000000000000500380001000000000008a002c859ab00000000800000000a000900aaaaaaaaaa3d00004b0600000000000008000300712b27c70000000000000000", @ANYRES32=r7, @ANYBLOB="c47fa7ff3c099be911e38ebe6abf73843d98b97f8a85438213532a8147cb2fafbd6df14a1259bc3b0fcc73a493ad10aa6e84ab314d592caf21d2bc"], 0x58}}, 0x804) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) [ 1297.500902] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1297.508148] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1297.515397] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1297.522648] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1297.551988] CPU: 1 PID: 3543 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1297.559792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1297.569133] Call Trace: [ 1297.571715] dump_stack+0x1b2/0x281 [ 1297.575341] should_fail.cold+0x10a/0x149 [ 1297.579485] should_failslab+0xd6/0x130 [ 1297.583457] kmem_cache_alloc+0x28e/0x3c0 [ 1297.587609] ext4_mb_new_blocks+0x514/0x3db0 [ 1297.592015] ? ext4_find_extent+0x6f7/0xbc0 [ 1297.596353] ? ext4_ext_search_right+0x2bc/0xaa0 [ 1297.601109] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1297.606127] ext4_ext_map_blocks+0x2845/0x6b10 [ 1297.610723] ? __lock_acquire+0x5fc/0x3f20 [ 1297.614965] ? mark_buffer_dirty+0x95/0x480 [ 1297.619280] ? trace_hardirqs_on+0x10/0x10 [ 1297.623507] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1297.628868] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1297.634053] ? trace_hardirqs_on+0x10/0x10 [ 1297.638280] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1297.643119] ? ext4_es_lookup_extent+0x321/0xac0 [ 1297.647871] ? lock_acquire+0x170/0x3f0 [ 1297.651852] ext4_map_blocks+0x675/0x1730 [ 1297.656002] ? ext4_issue_zeroout+0x150/0x150 [ 1297.660492] ? __ext4_new_inode+0x27c/0x4eb0 [ 1297.664903] ext4_getblk+0x98/0x3f0 [ 1297.668527] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1297.672851] ext4_bread+0x6c/0x1a0 [ 1297.676398] ? ext4_getblk+0x3f0/0x3f0 [ 1297.680280] ? dquot_initialize_needed+0x240/0x240 [ 1297.685213] ext4_append+0x143/0x350 [ 1297.688933] ext4_mkdir+0x4c9/0xbd0 [ 1297.692564] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1297.697231] ? security_inode_mkdir+0xca/0x100 [ 1297.701810] vfs_mkdir+0x463/0x6e0 [ 1297.705354] SyS_mkdirat+0x1fd/0x270 [ 1297.709065] ? SyS_mknod+0x30/0x30 [ 1297.712599] ? fput_many+0xe/0x140 [ 1297.716134] ? do_syscall_64+0x4c/0x640 [ 1297.720100] ? SyS_mknod+0x30/0x30 [ 1297.723634] do_syscall_64+0x1d5/0x640 [ 1297.727519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.732697] RIP: 0033:0x7f25b5a29387 [ 1297.736401] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1297.744108] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 14:44:02 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 44) [ 1297.751370] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1297.758632] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1297.765893] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1297.773152] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x1, 0x1d, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8, 0x7, 0x7fffffff, 0x1}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20080905) [ 1297.853436] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1297.854842] FAULT_INJECTION: forcing a failure. [ 1297.854842] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.860976] romfs: VFS: Can't find a romfs filesystem on dev loop4. [ 1297.870828] CPU: 1 PID: 3587 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1297.870835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1297.870839] Call Trace: [ 1297.870852] dump_stack+0x1b2/0x281 [ 1297.870866] should_fail.cold+0x10a/0x149 [ 1297.904680] should_failslab+0xd6/0x130 [ 1297.908655] __kmalloc_track_caller+0x2bc/0x400 [ 1297.913356] ? strndup_user+0x5b/0xf0 [ 1297.917153] memdup_user+0x22/0xa0 [ 1297.920690] strndup_user+0x5b/0xf0 [ 1297.924312] ? copy_mnt_ns+0xa30/0xa30 [ 1297.928191] SyS_mount+0x68/0x120 [ 1297.931637] ? copy_mnt_ns+0xa30/0xa30 [ 1297.935522] do_syscall_64+0x1d5/0x640 [ 1297.939411] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.944591] RIP: 0033:0x7f5c08b6d7aa 14:44:02 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) [ 1297.948291] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1297.956254] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1297.963609] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1297.970874] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1297.978140] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1297.985404] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000500)=[{&(0x7f00000005c0)="931e0c86388d3b3934f66c67613dfb4e98dc91", 0x13, 0x5dfa}], 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_getroute={0x144, 0x1a, 0x8, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x17, 0xff, 0x3, 0xff, 0x7}, [@RTA_METRICS={0xdf, 0x8, 0x0, 0x1, "8d2040bed09b2360c0cf96680652e0b4c8b6ecf3d5b84722b730d9fce2a8b77815ef1a86cdbc8ba330749ee10043fb30b07f4ccb14079088c92c729e4c0a2cd54b815ce69dfbf7777aea39b70067385b82a32c237d100e8331dae2b0f651a39a687f603b99bfabe14bfe7f1ab9c497690b5c450a2028f1448473242b3ed8c4402c5be98cdee9e0d3d5ad496c6677bbb321d5cb8fb404e8b90064801ba7cc17bd6cf3d697344763943e179d1df864c7a1feb0c258db129e102f6b8afa4c6236914f61216b9c714b0eaaa8cadd89d7648e3fd4fa32d8e80e7311d569"}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xc}}, @RTA_ENCAP_TYPE={0x6}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0x8c1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) socketpair(0x1, 0xa, 0x8000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250000000008000101", @ANYRES32=0x0, @ANYBLOB="0600060003000000080004006401010108000100", @ANYRES32=r2, @ANYBLOB="060006000000000008000800010000000800080004000000080008000300000006000600000000000c0003000200000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004094}, 0x4d064) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x44], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x1402, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000240), 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) [ 1298.048741] FAT-fs (loop2): bogus number of reserved sectors [ 1298.054606] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1298.085943] FAT-fs (loop4): bogus number of reserved sectors [ 1298.104551] FAT-fs (loop4): Can't find a valid FAT filesystem 14:44:02 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:02 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 42) 14:44:02 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 45) 14:44:02 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) 14:44:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x1, 0x1d, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8, 0x7, 0x7fffffff, 0x1}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20080905) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x1, 0x1d, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8, 0x7, 0x7fffffff, 0x1}}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20080905) (async) 14:44:02 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x4) 14:44:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000500)=[{&(0x7f00000005c0)="931e0c86388d3b3934f66c67613dfb4e98dc91", 0x13, 0x5dfa}], 0x0, &(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_getroute={0x144, 0x1a, 0x8, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x17, 0xff, 0x3, 0xff, 0x7}, [@RTA_METRICS={0xdf, 0x8, 0x0, 0x1, "8d2040bed09b2360c0cf96680652e0b4c8b6ecf3d5b84722b730d9fce2a8b77815ef1a86cdbc8ba330749ee10043fb30b07f4ccb14079088c92c729e4c0a2cd54b815ce69dfbf7777aea39b70067385b82a32c237d100e8331dae2b0f651a39a687f603b99bfabe14bfe7f1ab9c497690b5c450a2028f1448473242b3ed8c4402c5be98cdee9e0d3d5ad496c6677bbb321d5cb8fb404e8b90064801ba7cc17bd6cf3d697344763943e179d1df864c7a1feb0c258db129e102f6b8afa4c6236914f61216b9c714b0eaaa8cadd89d7648e3fd4fa32d8e80e7311d569"}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xc}}, @RTA_ENCAP_TYPE={0x6}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0x8c1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) (async) socketpair(0x1, 0xa, 0x8000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250000000008000101", @ANYRES32=0x0, @ANYBLOB="0600060003000000080004006401010108000100", @ANYRES32=r2, @ANYBLOB="060006000000000008000800010000000800080004000000080008000300000006000600000000000c0003000200000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004094}, 0x4d064) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x44], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (async) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000180)) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x1402, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000240), 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) [ 1298.235171] FAT-fs (loop2): bogus number of reserved sectors [ 1298.236600] FAULT_INJECTION: forcing a failure. [ 1298.236600] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.247811] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1298.296000] CPU: 1 PID: 3631 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1298.298257] FAULT_INJECTION: forcing a failure. [ 1298.298257] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.303803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1298.303807] Call Trace: [ 1298.303823] dump_stack+0x1b2/0x281 [ 1298.303842] should_fail.cold+0x10a/0x149 [ 1298.303856] should_failslab+0xd6/0x130 [ 1298.303868] __kmalloc_track_caller+0x2bc/0x400 14:44:02 executing program 0: ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1298.303877] ? strndup_user+0x5b/0xf0 [ 1298.303888] memdup_user+0x22/0xa0 [ 1298.303897] strndup_user+0x5b/0xf0 [ 1298.303907] ? copy_mnt_ns+0xa30/0xa30 [ 1298.303916] SyS_mount+0x68/0x120 [ 1298.303924] ? copy_mnt_ns+0xa30/0xa30 [ 1298.303935] do_syscall_64+0x1d5/0x640 [ 1298.303950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.303957] RIP: 0033:0x7f5c08b6d7aa [ 1298.303969] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 [ 1298.327543] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1298.330634] ORIG_RAX: 00000000000000a5 [ 1298.330640] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1298.330646] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1298.330651] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1298.330656] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1298.330661] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1298.361882] FAT-fs (loop4): bogus number of reserved sectors [ 1298.392605] CPU: 0 PID: 3638 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1298.446869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1298.456211] Call Trace: [ 1298.458796] dump_stack+0x1b2/0x281 [ 1298.462428] should_fail.cold+0x10a/0x149 [ 1298.466578] should_failslab+0xd6/0x130 [ 1298.470987] kmem_cache_alloc+0x28e/0x3c0 [ 1298.475138] ext4_mb_new_blocks+0x514/0x3db0 [ 1298.479554] ? ext4_find_extent+0x6f7/0xbc0 [ 1298.483876] ? ext4_ext_search_right+0x2bc/0xaa0 [ 1298.484552] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1298.488620] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1298.488636] ext4_ext_map_blocks+0x2845/0x6b10 [ 1298.488654] ? __lock_acquire+0x5fc/0x3f20 [ 1298.488669] ? mark_buffer_dirty+0x95/0x480 [ 1298.512621] ? trace_hardirqs_on+0x10/0x10 [ 1298.516855] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 1298.522219] ? ext4_find_delalloc_cluster+0x180/0x180 [ 1298.527404] ? trace_hardirqs_on+0x10/0x10 [ 1298.531634] ? ext4_mark_iloc_dirty+0x1822/0x26a0 [ 1298.536476] ? ext4_es_lookup_extent+0x321/0xac0 [ 1298.541227] ? lock_acquire+0x170/0x3f0 [ 1298.545211] ext4_map_blocks+0x675/0x1730 [ 1298.549358] ? ext4_issue_zeroout+0x150/0x150 [ 1298.553846] ? __ext4_new_inode+0x27c/0x4eb0 [ 1298.558260] ext4_getblk+0x98/0x3f0 [ 1298.561882] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1298.566202] ext4_bread+0x6c/0x1a0 [ 1298.569741] ? ext4_getblk+0x3f0/0x3f0 [ 1298.573622] ? dquot_initialize_needed+0x240/0x240 [ 1298.579415] ext4_append+0x143/0x350 [ 1298.583122] ext4_mkdir+0x4c9/0xbd0 [ 1298.586748] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 1298.591415] ? security_inode_mkdir+0xca/0x100 [ 1298.595990] vfs_mkdir+0x463/0x6e0 [ 1298.599529] SyS_mkdirat+0x1fd/0x270 [ 1298.603238] ? SyS_mknod+0x30/0x30 [ 1298.606772] ? fput_many+0xe/0x140 [ 1298.610307] ? do_syscall_64+0x4c/0x640 [ 1298.614276] ? SyS_mknod+0x30/0x30 [ 1298.617814] do_syscall_64+0x1d5/0x640 [ 1298.621705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.626909] RIP: 0033:0x7f25b5a29387 [ 1298.630611] RSP: 002b:00007f25b439ef88 EFLAGS: 00000213 ORIG_RAX: 0000000000000102 [ 1298.638313] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a29387 14:44:02 executing program 0: ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) (async) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x0, 0x1, 0x1d, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8, 0x7, 0x7fffffff, 0x1}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20080905) 14:44:02 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 46) [ 1298.645660] RDX: 00000000000001ff RSI: 00000000200013c0 RDI: 00000000ffffff9c [ 1298.652922] RBP: 00007f25b439f1d0 R08: 0000000000000000 R09: 00007f25b439f1d0 [ 1298.660179] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000200011c0 [ 1298.667439] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, 0x1, &(0x7f0000000500)=[{&(0x7f00000005c0)="931e0c86388d3b3934f66c67613dfb4e98dc91", 0x13, 0x5dfa}], 0x0, &(0x7f0000000580)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@ipv6_getroute={0x144, 0x1a, 0x8, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x20, 0x17, 0xff, 0x3, 0xff, 0x7}, [@RTA_METRICS={0xdf, 0x8, 0x0, 0x1, "8d2040bed09b2360c0cf96680652e0b4c8b6ecf3d5b84722b730d9fce2a8b77815ef1a86cdbc8ba330749ee10043fb30b07f4ccb14079088c92c729e4c0a2cd54b815ce69dfbf7777aea39b70067385b82a32c237d100e8331dae2b0f651a39a687f603b99bfabe14bfe7f1ab9c497690b5c450a2028f1448473242b3ed8c4402c5be98cdee9e0d3d5ad496c6677bbb321d5cb8fb404e8b90064801ba7cc17bd6cf3d697344763943e179d1df864c7a1feb0c258db129e102f6b8afa4c6236914f61216b9c714b0eaaa8cadd89d7648e3fd4fa32d8e80e7311d569"}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xc}}, @RTA_ENCAP_TYPE={0x6}, @RTA_EXPIRES={0x8, 0x17, 0x4}, @RTA_EXPIRES={0x8, 0x17, 0x8c1}, @RTA_ENCAP={0x8, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x40045) (async) socketpair(0x1, 0xa, 0x8000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250000000008000101", @ANYRES32=0x0, @ANYBLOB="0600060003000000080004006401010108000100", @ANYRES32=r2, @ANYBLOB="060006000000000008000800010000000800080004000000080008000300000006000600000000000c0003000200000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004094}, 0x4d064) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r3, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000640)={&(0x7f0000000600)=[0x44], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000180)) (async) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x1402, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000240), 0x4) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) [ 1298.752203] FAT-fs (loop2): bogus number of reserved sectors [ 1298.765030] FAULT_INJECTION: forcing a failure. [ 1298.765030] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.779465] FAT-fs (loop4): bogus number of reserved sectors [ 1298.786439] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1298.798018] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1298.807917] CPU: 0 PID: 3685 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1298.815721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1298.825069] Call Trace: [ 1298.827661] dump_stack+0x1b2/0x281 [ 1298.831287] should_fail.cold+0x10a/0x149 [ 1298.835435] should_failslab+0xd6/0x130 [ 1298.839413] __kmalloc_track_caller+0x2bc/0x400 [ 1298.844687] ? strndup_user+0x5b/0xf0 [ 1298.848486] memdup_user+0x22/0xa0 [ 1298.852025] strndup_user+0x5b/0xf0 [ 1298.855649] ? copy_mnt_ns+0xa30/0xa30 [ 1298.859545] SyS_mount+0x68/0x120 [ 1298.862993] ? copy_mnt_ns+0xa30/0xa30 [ 1298.866882] do_syscall_64+0x1d5/0x640 [ 1298.870780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.875962] RIP: 0033:0x7f5c08b6d7aa [ 1298.879665] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1298.887369] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1298.894635] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1298.901897] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1298.909162] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1298.916424] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:03 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:03 executing program 0: ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="9f121247e53ac207bf292f73fee0b5aef33858ab18e47772f17ceecc5a0095f21f024e436a1115ecca04ca355467482fad5bbe018b6986981a5197ad4480854a0680142ac775dabdb14a26268d252cba80a4f64f728d02fd6d7cdf3ab2c2369ac08a74d3f3a67b1f358e2c1bd86a7427169a6ab92781766831ff8cf0307c98af50f5599a19b283b8f548e5ecafa24860b0f33ad5a0e7b8771d6cbc186625353f4a7bf8b8a7420e0f61aafc7f8facdb6986ce6e8713b301459008d25d85b164656671c21a2de8d1a3d7ad0b6e641d1c83145b097076c907afcf7a1b86226c43b90f02f1adaf", 0xe5, 0x7fff}, {&(0x7f0000000000)="0fc94a557556d369307c4c1f5ab07d4b", 0x10, 0x10001}, {&(0x7f0000000040)="0aa171823c7c6f95badec7c84fe4858c90be9947b33081a7df025f8c3375006413151708df3e38f542af", 0x2a, 0xb}], 0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x43f7, 0x1d, 0x200, 0xffffffffffffffff, 0x7f, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x3}, 0x48) 14:44:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) socket$nl_generic(0x10, 0x3, 0x10) 14:44:03 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 43) 14:44:03 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 47) 14:44:03 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') [ 1299.112456] FAT-fs (loop4): bogus number of reserved sectors [ 1299.122452] FAULT_INJECTION: forcing a failure. [ 1299.122452] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.139159] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1299.141752] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1299.147871] FAULT_INJECTION: forcing a failure. [ 1299.147871] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.186228] FAT-fs (loop2): invalid media value (0xc7) [ 1299.191552] CPU: 1 PID: 3723 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1299.191559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1299.191562] Call Trace: [ 1299.191578] dump_stack+0x1b2/0x281 [ 1299.191593] should_fail.cold+0x10a/0x149 [ 1299.191606] should_failslab+0xd6/0x130 [ 1299.204731] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1299.208741] kmem_cache_alloc+0x28e/0x3c0 [ 1299.208754] getname_flags+0xc8/0x550 [ 1299.208764] ? __do_page_fault+0x159/0xad0 [ 1299.208775] user_path_at_empty+0x2a/0x50 [ 1299.208785] do_mount+0x118/0x2a30 [ 1299.208796] ? __do_page_fault+0x159/0xad0 [ 1299.208807] ? retint_kernel+0x2d/0x2d [ 1299.256825] ? copy_mount_string+0x40/0x40 [ 1299.261061] ? memset+0x20/0x40 [ 1299.264339] ? copy_mount_options+0x1fa/0x2f0 [ 1299.268831] ? copy_mnt_ns+0xa30/0xa30 [ 1299.272738] SyS_mount+0xa8/0x120 [ 1299.276191] ? copy_mnt_ns+0xa30/0xa30 [ 1299.280076] do_syscall_64+0x1d5/0x640 [ 1299.283965] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.289151] RIP: 0033:0x7f5c08b6d7aa [ 1299.292853] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1299.300555] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1299.307818] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1299.315082] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1299.322345] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1299.329610] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1299.339331] CPU: 1 PID: 3726 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1299.347130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1299.356478] Call Trace: [ 1299.359068] dump_stack+0x1b2/0x281 [ 1299.362693] should_fail.cold+0x10a/0x149 [ 1299.366852] should_failslab+0xd6/0x130 [ 1299.370832] __kmalloc_track_caller+0x2bc/0x400 [ 1299.375497] ? strndup_user+0x5b/0xf0 [ 1299.379298] memdup_user+0x22/0xa0 [ 1299.382835] strndup_user+0x5b/0xf0 [ 1299.386462] ? copy_mnt_ns+0xa30/0xa30 [ 1299.390352] SyS_mount+0x68/0x120 [ 1299.393804] ? copy_mnt_ns+0xa30/0xa30 [ 1299.397692] do_syscall_64+0x1d5/0x640 [ 1299.401586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.406768] RIP: 0033:0x7f25b5a2b7aa [ 1299.410473] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1299.418270] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1299.425537] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1299.432808] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 14:44:03 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xff, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) 14:44:03 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xff, 0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 14:44:03 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 44) 14:44:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) 14:44:03 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 48) [ 1299.440070] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1299.447334] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1299.518260] FAT-fs (loop4): bogus number of reserved sectors [ 1299.529198] FAULT_INJECTION: forcing a failure. [ 1299.529198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1299.541003] CPU: 0 PID: 3778 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1299.544145] FAULT_INJECTION: forcing a failure. [ 1299.544145] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.548786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1299.548791] Call Trace: [ 1299.548807] dump_stack+0x1b2/0x281 [ 1299.548822] should_fail.cold+0x10a/0x149 [ 1299.548837] __alloc_pages_nodemask+0x22c/0x2720 [ 1299.548852] ? __save_stack_trace+0x63/0x160 [ 1299.562852] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1299.569898] ? __lock_acquire+0x5fc/0x3f20 [ 1299.569911] ? __lock_acquire+0x5fc/0x3f20 [ 1299.569924] ? cmp_ex_sort+0xb0/0xb0 [ 1299.569935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1299.569943] ? search_extable+0x6f/0x80 [ 1299.569954] ? trim_init_extable+0x280/0x280 [ 1299.620735] ? copy_mount_options+0x194/0x2f0 [ 1299.625224] ? fixup_exception+0x93/0xd0 [ 1299.629283] ? no_context+0x9c/0x7c0 [ 1299.632996] ? finish_task_switch+0x178/0x610 [ 1299.637505] ? force_sig_info_fault.constprop.0+0x260/0x260 [ 1299.643214] ? bad_area_access_error+0x1f8/0x3e0 [ 1299.647962] cache_grow_begin+0x91/0x700 [ 1299.652014] ? fs_reclaim_release+0xd0/0x110 [ 1299.656432] ? check_preemption_disabled+0x35/0x240 [ 1299.661451] cache_alloc_refill+0x273/0x350 [ 1299.665781] kmem_cache_alloc+0x333/0x3c0 [ 1299.669929] getname_flags+0xc8/0x550 [ 1299.673732] ? __do_page_fault+0x159/0xad0 [ 1299.677968] user_path_at_empty+0x2a/0x50 [ 1299.682113] do_mount+0x118/0x2a30 [ 1299.685653] ? __do_page_fault+0x159/0xad0 [ 1299.689882] ? retint_kernel+0x2d/0x2d [ 1299.693760] ? copy_mount_string+0x40/0x40 [ 1299.697981] ? memset+0x20/0x40 [ 1299.701242] ? copy_mount_options+0x1fa/0x2f0 [ 1299.705752] ? copy_mnt_ns+0xa30/0xa30 [ 1299.709622] SyS_mount+0xa8/0x120 [ 1299.713057] ? copy_mnt_ns+0xa30/0xa30 [ 1299.716932] do_syscall_64+0x1d5/0x640 [ 1299.720805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.725980] RIP: 0033:0x7f5c08b6d7aa [ 1299.729679] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1299.737370] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1299.744619] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1299.751871] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1299.759126] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1299.766383] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1299.773648] CPU: 1 PID: 3779 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1299.781442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1299.790790] Call Trace: [ 1299.793378] dump_stack+0x1b2/0x281 [ 1299.797003] should_fail.cold+0x10a/0x149 [ 1299.801152] should_failslab+0xd6/0x130 [ 1299.805125] __kmalloc_track_caller+0x2bc/0x400 [ 1299.809786] ? strndup_user+0x5b/0xf0 [ 1299.813582] memdup_user+0x22/0xa0 [ 1299.817124] strndup_user+0x5b/0xf0 [ 1299.820744] ? copy_mnt_ns+0xa30/0xa30 [ 1299.824632] SyS_mount+0x39/0x120 [ 1299.828082] ? copy_mnt_ns+0xa30/0xa30 [ 1299.831965] do_syscall_64+0x1d5/0x640 [ 1299.835852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.841037] RIP: 0033:0x7f25b5a2b7aa [ 1299.844740] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1299.852441] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1299.859703] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1299.866964] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1299.874228] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1299.881488] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1299.915063] MTD: Attempt to mount non-MTD device "/dev/loop1" 14:44:04 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="9f121247e53ac207bf292f73fee0b5aef33858ab18e47772f17ceecc5a0095f21f024e436a1115ecca04ca355467482fad5bbe018b6986981a5197ad4480854a0680142ac775dabdb14a26268d252cba80a4f64f728d02fd6d7cdf3ab2c2369ac08a74d3f3a67b1f358e2c1bd86a7427169a6ab92781766831ff8cf0307c98af50f5599a19b283b8f548e5ecafa24860b0f33ad5a0e7b8771d6cbc186625353f4a7bf8b8a7420e0f61aafc7f8facdb6986ce6e8713b301459008d25d85b164656671c21a2de8d1a3d7ad0b6e641d1c83145b097076c907afcf7a1b86226c43b90f02f1adaf", 0xe5, 0x7fff}, {&(0x7f0000000000)="0fc94a557556d369307c4c1f5ab07d4b", 0x10, 0x10001}, {&(0x7f0000000040)="0aa171823c7c6f95badec7c84fe4858c90be9947b33081a7df025f8c3375006413151708df3e38f542af", 0x2a, 0xb}], 0x0, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x43f7, 0x1d, 0x200, 0xffffffffffffffff, 0x7f, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x3}, 0x48) 14:44:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000006d00000126bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200c00004290010008bb6f458ab274732fcaa007f79c001e00c600000008000400060000001c00128009000100626f6e64000000000c00028008001c00090000001400030073797a5f74756e00000000fbb1183fd823b87ea46ccde2490b1efefdd85f3c6ec8b09c05c8"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000001) r1 = socket(0x1, 0x80003, 0x1000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) 14:44:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) 14:44:04 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 45) 14:44:04 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 49) [ 1300.016681] FAT-fs (loop2): invalid media value (0xc7) [ 1300.016691] FAT-fs (loop4): bogus number of reserved sectors [ 1300.033836] FAULT_INJECTION: forcing a failure. [ 1300.033836] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.040077] FAULT_INJECTION: forcing a failure. [ 1300.040077] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.050483] FAT-fs (loop2): Can't find a valid FAT filesystem 14:44:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000006d00000126bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200c00004290010008bb6f458ab274732fcaa007f79c001e00c600000008000400060000001c00128009000100626f6e64000000000c00028008001c00090000001400030073797a5f74756e00000000fbb1183fd823b87ea46ccde2490b1efefdd85f3c6ec8b09c05c8"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000001) (async) r1 = socket(0x1, 0x80003, 0x1000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1300.057320] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1300.084458] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1300.086081] CPU: 1 PID: 3823 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1300.101274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1300.110620] Call Trace: [ 1300.113197] dump_stack+0x1b2/0x281 14:44:04 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000006d00000126bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200c00004290010008bb6f458ab274732fcaa007f79c001e00c600000008000400060000001c00128009000100626f6e64000000000c00028008001c00090000001400030073797a5f74756e00000000fbb1183fd823b87ea46ccde2490b1efefdd85f3c6ec8b09c05c8"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4000001) (async) r1 = socket(0x1, 0x80003, 0x1000) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4) [ 1300.116915] should_fail.cold+0x10a/0x149 [ 1300.121069] should_failslab+0xd6/0x130 [ 1300.125041] __kmalloc_track_caller+0x2bc/0x400 [ 1300.129756] ? strndup_user+0x5b/0xf0 [ 1300.133647] memdup_user+0x22/0xa0 [ 1300.137186] strndup_user+0x5b/0xf0 [ 1300.140812] ? copy_mnt_ns+0xa30/0xa30 [ 1300.144695] SyS_mount+0x68/0x120 [ 1300.148142] ? copy_mnt_ns+0xa30/0xa30 [ 1300.152028] do_syscall_64+0x1d5/0x640 [ 1300.155925] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1300.161108] RIP: 0033:0x7f25b5a2b7aa 14:44:04 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x2b, 0x800, 0x92dc003, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000140}, 0x20000011) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="9f121247e53ac207bf292f73fee0b5aef33858ab18e47772f17ceecc5a0095f21f024e436a1115ecca04ca355467482fad5bbe018b6986981a5197ad4480854a0680142ac775dabdb14a26268d252cba80a4f64f728d02fd6d7cdf3ab2c2369ac08a74d3f3a67b1f358e2c1bd86a7427169a6ab92781766831ff8cf0307c98af50f5599a19b283b8f548e5ecafa24860b0f33ad5a0e7b8771d6cbc186625353f4a7bf8b8a7420e0f61aafc7f8facdb6986ce6e8713b301459008d25d85b164656671c21a2de8d1a3d7ad0b6e641d1c83145b097076c907afcf7a1b86226c43b90f02f1adaf", 0xe5, 0x7fff}, {&(0x7f0000000000)="0fc94a557556d369307c4c1f5ab07d4b", 0x10, 0x10001}, {&(0x7f0000000040)="0aa171823c7c6f95badec7c84fe4858c90be9947b33081a7df025f8c3375006413151708df3e38f542af", 0x2a, 0xb}], 0x0, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x43f7, 0x1d, 0x200, 0xffffffffffffffff, 0x7f, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x3}, 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100)="9f121247e53ac207bf292f73fee0b5aef33858ab18e47772f17ceecc5a0095f21f024e436a1115ecca04ca355467482fad5bbe018b6986981a5197ad4480854a0680142ac775dabdb14a26268d252cba80a4f64f728d02fd6d7cdf3ab2c2369ac08a74d3f3a67b1f358e2c1bd86a7427169a6ab92781766831ff8cf0307c98af50f5599a19b283b8f548e5ecafa24860b0f33ad5a0e7b8771d6cbc186625353f4a7bf8b8a7420e0f61aafc7f8facdb6986ce6e8713b301459008d25d85b164656671c21a2de8d1a3d7ad0b6e641d1c83145b097076c907afcf7a1b86226c43b90f02f1adaf", 0xe5, 0x7fff}, {&(0x7f0000000000)="0fc94a557556d369307c4c1f5ab07d4b", 0x10, 0x10001}, {&(0x7f0000000040)="0aa171823c7c6f95badec7c84fe4858c90be9947b33081a7df025f8c3375006413151708df3e38f542af", 0x2a, 0xb}], 0x0, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x43f7, 0x1d, 0x200, 0xffffffffffffffff, 0x7f, '\x00', r0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x3}, 0x48) (async) [ 1300.164807] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1300.172509] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1300.179771] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1300.187037] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1300.194303] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1300.201572] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1300.228094] CPU: 0 PID: 3827 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1300.235905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1300.245247] Call Trace: [ 1300.247828] dump_stack+0x1b2/0x281 [ 1300.251458] should_fail.cold+0x10a/0x149 [ 1300.255606] should_failslab+0xd6/0x130 [ 1300.259580] __kmalloc_track_caller+0x2bc/0x400 [ 1300.264243] ? kstrdup_const+0x35/0x60 [ 1300.268135] ? lock_downgrade+0x740/0x740 [ 1300.272284] kstrdup+0x36/0x70 [ 1300.275470] kstrdup_const+0x35/0x60 [ 1300.279180] alloc_vfsmnt+0xe0/0x7f0 [ 1300.282885] ? _raw_read_unlock+0x29/0x40 [ 1300.287031] vfs_kern_mount.part.0+0x27/0x470 [ 1300.291517] do_mount+0xe65/0x2a30 [ 1300.295080] ? __do_page_fault+0x159/0xad0 [ 1300.299312] ? retint_kernel+0x2d/0x2d [ 1300.303191] ? copy_mount_string+0x40/0x40 [ 1300.307420] ? memset+0x20/0x40 [ 1300.310692] ? copy_mount_options+0x1fa/0x2f0 [ 1300.315177] ? copy_mnt_ns+0xa30/0xa30 [ 1300.319057] SyS_mount+0xa8/0x120 [ 1300.322502] ? copy_mnt_ns+0xa30/0xa30 [ 1300.326382] do_syscall_64+0x1d5/0x640 [ 1300.330271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1300.335454] RIP: 0033:0x7f5c08b6d7aa [ 1300.339160] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1300.346858] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1300.354125] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1300.361387] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1300.368649] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1300.375908] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:04 executing program 4: socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) 14:44:04 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 50) [ 1300.430484] FAT-fs (loop2): invalid media value (0xc7) [ 1300.452507] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1300.473191] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1300.483608] FAT-fs (loop4): bogus number of reserved sectors [ 1300.485778] FAULT_INJECTION: forcing a failure. [ 1300.485778] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.501629] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1300.527670] CPU: 1 PID: 3882 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1300.535471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1300.544818] Call Trace: [ 1300.547401] dump_stack+0x1b2/0x281 [ 1300.551031] should_fail.cold+0x10a/0x149 [ 1300.555187] should_failslab+0xd6/0x130 [ 1300.559339] kmem_cache_alloc+0x28e/0x3c0 [ 1300.563521] getname_kernel+0x4e/0x340 [ 1300.567580] kern_path+0x1b/0x40 [ 1300.570944] lookup_bdev+0xc6/0x1c0 [ 1300.574567] ? bd_acquire+0x440/0x440 [ 1300.578369] blkdev_get_by_path+0x1b/0xa0 [ 1300.582510] mount_bdev+0x4c/0x360 [ 1300.586053] ? romfs_iget+0x5f0/0x5f0 [ 1300.589849] romfs_mount+0x6a/0x70 [ 1300.593383] mount_fs+0x92/0x2a0 [ 1300.596751] vfs_kern_mount.part.0+0x5b/0x470 [ 1300.601241] do_mount+0xe65/0x2a30 [ 1300.604780] ? __do_page_fault+0x159/0xad0 [ 1300.609011] ? retint_kernel+0x2d/0x2d [ 1300.612899] ? copy_mount_string+0x40/0x40 [ 1300.617132] ? memset+0x20/0x40 [ 1300.620404] ? copy_mount_options+0x1fa/0x2f0 [ 1300.624894] ? copy_mnt_ns+0xa30/0xa30 [ 1300.628776] SyS_mount+0xa8/0x120 [ 1300.632225] ? copy_mnt_ns+0xa30/0xa30 [ 1300.636106] do_syscall_64+0x1d5/0x640 [ 1300.640000] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1300.645178] RIP: 0033:0x7f5c08b6d7aa [ 1300.648882] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1300.656577] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1300.663836] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1300.671099] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1300.678364] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1300.685627] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:05 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:05 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 46) 14:44:05 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async) socketpair(0x2b, 0x800, 0x92dc003, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000140}, 0x20000011) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:05 executing program 2: ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=[0x83], 0x1}) 14:44:05 executing program 4: socket$rxrpc(0x21, 0x2, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) (async) 14:44:05 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 51) 14:44:05 executing program 0: r0 = socket(0x10, 0x80003, 0x0) socketpair(0x2b, 0x800, 0x92dc003, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000140}, 0x20000011) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1300.913888] FAT-fs (loop5): Unrecognized mount option "uid>00000000000000000000" or missing value [ 1300.923797] FAULT_INJECTION: forcing a failure. [ 1300.923797] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.937336] FAT-fs (loop2): bogus number of reserved sectors [ 1300.953634] FAULT_INJECTION: forcing a failure. [ 1300.953634] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.977148] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1300.987461] CPU: 1 PID: 3932 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1300.995266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1301.000763] FAT-fs (loop4): bogus number of reserved sectors [ 1301.004611] Call Trace: [ 1301.004630] dump_stack+0x1b2/0x281 [ 1301.004645] should_fail.cold+0x10a/0x149 [ 1301.020784] ? romfs_iget+0x5f0/0x5f0 [ 1301.024581] should_failslab+0xd6/0x130 [ 1301.028556] kmem_cache_alloc+0x28e/0x3c0 [ 1301.032701] ? romfs_iget+0x5f0/0x5f0 [ 1301.036499] getname_kernel+0x4e/0x340 [ 1301.037290] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1301.040377] ? romfs_iget+0x5f0/0x5f0 [ 1301.040387] kern_path+0x1b/0x40 [ 1301.040399] lookup_bdev+0xc6/0x1c0 [ 1301.040407] ? bd_acquire+0x440/0x440 [ 1301.040420] mount_mtd+0xf4/0x430 [ 1301.040431] ? mount_mtd_nr.isra.0+0x90/0x90 [ 1301.040443] romfs_mount+0x32/0x70 [ 1301.040452] mount_fs+0x92/0x2a0 [ 1301.040465] vfs_kern_mount.part.0+0x5b/0x470 [ 1301.080058] do_mount+0xe65/0x2a30 [ 1301.083586] ? __do_page_fault+0x159/0xad0 [ 1301.087799] ? retint_kernel+0x2d/0x2d [ 1301.091691] ? copy_mount_string+0x40/0x40 [ 1301.095997] ? memset+0x20/0x40 [ 1301.099258] ? copy_mount_options+0x1fa/0x2f0 [ 1301.103730] ? copy_mnt_ns+0xa30/0xa30 [ 1301.107601] SyS_mount+0xa8/0x120 [ 1301.111036] ? copy_mnt_ns+0xa30/0xa30 [ 1301.114911] do_syscall_64+0x1d5/0x640 [ 1301.118789] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1301.123971] RIP: 0033:0x7f5c08b6d7aa [ 1301.127665] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1301.135354] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1301.142603] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1301.149854] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1301.157101] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 14:44:05 executing program 0: r0 = socket(0x28, 0x80003, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:05 executing program 0: r0 = socket(0x28, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1301.164349] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1301.171613] CPU: 0 PID: 3928 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1301.179403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1301.188750] Call Trace: [ 1301.191336] dump_stack+0x1b2/0x281 [ 1301.194965] should_fail.cold+0x10a/0x149 [ 1301.199203] should_failslab+0xd6/0x130 [ 1301.203178] __kmalloc_track_caller+0x2bc/0x400 [ 1301.207841] ? strndup_user+0x5b/0xf0 [ 1301.211642] memdup_user+0x22/0xa0 [ 1301.215183] strndup_user+0x5b/0xf0 [ 1301.218807] ? copy_mnt_ns+0xa30/0xa30 [ 1301.222689] SyS_mount+0x68/0x120 [ 1301.226138] ? copy_mnt_ns+0xa30/0xa30 [ 1301.230027] do_syscall_64+0x1d5/0x640 [ 1301.233926] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1301.239108] RIP: 0033:0x7f25b5a2b7aa [ 1301.242810] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1301.250514] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1301.257775] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 14:44:05 executing program 0: r0 = socket(0x28, 0x80003, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x4, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1301.265034] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1301.272294] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1301.279554] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:05 executing program 2: ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0)) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=[0x83], 0x1}) 14:44:05 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 52) [ 1301.340437] FAT-fs (loop4): bogus number of reserved sectors [ 1301.346252] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1301.411284] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1301.424432] FAULT_INJECTION: forcing a failure. [ 1301.424432] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.436246] FAT-fs (loop2): bogus number of reserved sectors [ 1301.447528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1301.453382] CPU: 1 PID: 3979 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1301.453416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1301.453420] Call Trace: [ 1301.453436] dump_stack+0x1b2/0x281 [ 1301.453450] should_fail.cold+0x10a/0x149 [ 1301.453464] should_failslab+0xd6/0x130 [ 1301.453476] __kmalloc+0x2c1/0x400 [ 1301.453487] ? __list_lru_init+0x67/0x710 [ 1301.453501] __list_lru_init+0x67/0x710 [ 1301.453515] sget_userns+0x4e4/0xc10 [ 1301.453525] ? set_bdev_super+0x110/0x110 [ 1301.453538] ? ns_test_super+0x50/0x50 [ 1301.453550] ? set_bdev_super+0x110/0x110 [ 1301.453557] ? ns_test_super+0x50/0x50 [ 1301.453563] sget+0xd1/0x110 [ 1301.453574] mount_bdev+0xcd/0x360 [ 1301.453583] ? romfs_iget+0x5f0/0x5f0 [ 1301.453594] romfs_mount+0x6a/0x70 [ 1301.453603] mount_fs+0x92/0x2a0 [ 1301.533448] vfs_kern_mount.part.0+0x5b/0x470 [ 1301.537945] do_mount+0xe65/0x2a30 [ 1301.541488] ? __do_page_fault+0x159/0xad0 [ 1301.545717] ? retint_kernel+0x2d/0x2d [ 1301.549611] ? copy_mount_string+0x40/0x40 [ 1301.553841] ? memset+0x20/0x40 [ 1301.557114] ? copy_mount_options+0x1fa/0x2f0 [ 1301.561604] ? copy_mnt_ns+0xa30/0xa30 [ 1301.565482] SyS_mount+0xa8/0x120 [ 1301.568926] ? copy_mnt_ns+0xa30/0xa30 [ 1301.572811] do_syscall_64+0x1d5/0x640 [ 1301.576700] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1301.581881] RIP: 0033:0x7f5c08b6d7aa [ 1301.585585] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1301.593293] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1301.600557] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1301.607902] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1301.615170] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1301.622432] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1301.655049] FAT-fs (loop2): bogus number of reserved sectors [ 1301.661911] FAT-fs (loop2): Can't find a valid FAT filesystem 14:44:05 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)}) syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:05 executing program 4: socket$rxrpc(0x21, 0x2, 0x2) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) 14:44:05 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="280625bd7000fedbdf25110000000500290001000000050033000000000008002c000000000205002a000100000005002e00000000000600280004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 14:44:05 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 47) 14:44:05 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 53) [ 1301.712563] FAT-fs (loop2): bogus number of reserved sectors [ 1301.722640] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1301.781274] FAT-fs (loop2): bogus number of reserved sectors [ 1301.786507] FAULT_INJECTION: forcing a failure. [ 1301.786507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1301.798148] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1301.798873] CPU: 0 PID: 4017 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1301.798880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1301.798884] Call Trace: [ 1301.798899] dump_stack+0x1b2/0x281 [ 1301.798912] should_fail.cold+0x10a/0x149 [ 1301.798926] __alloc_pages_nodemask+0x22c/0x2720 [ 1301.836960] ? get_page_from_freelist+0xaf6/0x25a0 [ 1301.841892] ? __lock_acquire+0x5fc/0x3f20 [ 1301.846131] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1301.851148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1301.855989] ? preempt_count_add+0xaf/0x170 [ 1301.860324] cache_grow_begin+0x91/0x700 [ 1301.864385] ? fs_reclaim_release+0xd0/0x110 [ 1301.868794] ? check_preemption_disabled+0x35/0x240 [ 1301.871446] FAULT_INJECTION: forcing a failure. [ 1301.871446] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.873807] cache_alloc_refill+0x273/0x350 [ 1301.873823] kmem_cache_alloc+0x333/0x3c0 [ 1301.873834] ? romfs_iget+0x5f0/0x5f0 [ 1301.873848] getname_kernel+0x4e/0x340 [ 1301.901107] ? romfs_iget+0x5f0/0x5f0 [ 1301.904901] kern_path+0x1b/0x40 [ 1301.908252] lookup_bdev+0xc6/0x1c0 [ 1301.911868] ? bd_acquire+0x440/0x440 [ 1301.915656] mount_mtd+0xf4/0x430 [ 1301.919092] ? mount_mtd_nr.isra.0+0x90/0x90 [ 1301.923485] romfs_mount+0x32/0x70 [ 1301.927004] mount_fs+0x92/0x2a0 [ 1301.930354] vfs_kern_mount.part.0+0x5b/0x470 [ 1301.934831] do_mount+0xe65/0x2a30 [ 1301.938353] ? __do_page_fault+0x159/0xad0 [ 1301.942568] ? retint_kernel+0x2d/0x2d [ 1301.946440] ? copy_mount_string+0x40/0x40 [ 1301.950654] ? memset+0x20/0x40 [ 1301.953915] ? copy_mount_options+0x1fa/0x2f0 [ 1301.958388] ? copy_mnt_ns+0xa30/0xa30 [ 1301.962258] SyS_mount+0xa8/0x120 [ 1301.965695] ? copy_mnt_ns+0xa30/0xa30 [ 1301.969569] do_syscall_64+0x1d5/0x640 [ 1301.973443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1301.978612] RIP: 0033:0x7f5c08b6d7aa [ 1301.982304] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1301.989991] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1301.997242] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1302.004490] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1302.011739] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1302.018989] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1302.026254] CPU: 1 PID: 4015 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1302.028434] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1302.034044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1302.034048] Call Trace: [ 1302.034063] dump_stack+0x1b2/0x281 [ 1302.034078] should_fail.cold+0x10a/0x149 [ 1302.034091] should_failslab+0xd6/0x130 [ 1302.034104] kmem_cache_alloc+0x28e/0x3c0 [ 1302.067718] getname_flags+0xc8/0x550 [ 1302.071520] ? __do_page_fault+0x159/0xad0 [ 1302.075751] user_path_at_empty+0x2a/0x50 [ 1302.079891] do_mount+0x118/0x2a30 [ 1302.083431] ? __do_page_fault+0x159/0xad0 [ 1302.087662] ? retint_kernel+0x2d/0x2d [ 1302.091549] ? copy_mount_string+0x40/0x40 [ 1302.095786] ? memset+0x20/0x40 [ 1302.098671] FAT-fs (loop4): bogus number of reserved sectors [ 1302.099058] ? copy_mount_options+0x1fa/0x2f0 [ 1302.104831] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1302.109300] ? copy_mnt_ns+0xa30/0xa30 [ 1302.109310] SyS_mount+0xa8/0x120 [ 1302.109318] ? copy_mnt_ns+0xa30/0xa30 [ 1302.109329] do_syscall_64+0x1d5/0x640 [ 1302.109344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.109352] RIP: 0033:0x7f25b5a2b7aa [ 1302.109356] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1302.109367] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1302.109373] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1302.109379] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1302.109384] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1302.109391] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:06 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 54) 14:44:06 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)="97", 0x1, 0x2f99188}], 0x0, &(0x7f0000000600)) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x40, 0x174d40fa], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:44:06 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="280625bd7000fedbdf25110000000500290001000000050033000000000008002c000000000205002a000100000005002e00000000000600280004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="280625bd7000fedbdf25110000000500290001000000050033000000000008002c000000000205002a000100000005002e00000000000600280004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4) (async) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) (async) 14:44:06 executing program 2: ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=[0x83], 0x1}) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0)) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000180)={&(0x7f0000000100), &(0x7f0000000140)=[0x83], 0x1}) (async) 14:44:06 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="280625bd7000fedbdf25110000000500290001000000050033000000000008002c000000000205002a000100000005002e00000000000600280004000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4) (async) r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 14:44:06 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 48) 14:44:06 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) [ 1302.323183] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1302.346923] FAULT_INJECTION: forcing a failure. [ 1302.346923] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.364801] FAT-fs (loop2): bogus number of reserved sectors [ 1302.379654] FAULT_INJECTION: forcing a failure. [ 1302.379654] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.383234] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1302.405191] FAT-fs (loop4): bogus number of reserved sectors [ 1302.421655] CPU: 1 PID: 4054 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1302.423836] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1302.429460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1302.429465] Call Trace: [ 1302.429482] dump_stack+0x1b2/0x281 [ 1302.429495] should_fail.cold+0x10a/0x149 [ 1302.429509] should_failslab+0xd6/0x130 [ 1302.429522] kmem_cache_alloc+0x28e/0x3c0 [ 1302.429535] getname_kernel+0x4e/0x340 [ 1302.429545] kern_path+0x1b/0x40 [ 1302.429556] lookup_bdev+0xc6/0x1c0 [ 1302.429564] ? bd_acquire+0x440/0x440 [ 1302.429577] blkdev_get_by_path+0x1b/0xa0 [ 1302.429587] mount_bdev+0x4c/0x360 [ 1302.485450] ? romfs_iget+0x5f0/0x5f0 [ 1302.489243] romfs_mount+0x6a/0x70 [ 1302.492770] mount_fs+0x92/0x2a0 [ 1302.496129] vfs_kern_mount.part.0+0x5b/0x470 [ 1302.500629] do_mount+0xe65/0x2a30 [ 1302.504168] ? __do_page_fault+0x159/0xad0 [ 1302.508395] ? retint_kernel+0x2d/0x2d [ 1302.512274] ? copy_mount_string+0x40/0x40 [ 1302.516507] ? memset+0x20/0x40 [ 1302.519780] ? copy_mount_options+0x1fa/0x2f0 [ 1302.524264] ? copy_mnt_ns+0xa30/0xa30 [ 1302.528134] SyS_mount+0xa8/0x120 [ 1302.531577] ? copy_mnt_ns+0xa30/0xa30 [ 1302.535461] do_syscall_64+0x1d5/0x640 [ 1302.539346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.544519] RIP: 0033:0x7f5c08b6d7aa [ 1302.548216] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1302.555913] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1302.563162] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1302.570415] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1302.577679] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1302.584936] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1302.601027] CPU: 0 PID: 4069 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1302.608828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1302.618171] Call Trace: [ 1302.620744] dump_stack+0x1b2/0x281 [ 1302.624359] should_fail.cold+0x10a/0x149 [ 1302.628487] should_failslab+0xd6/0x130 [ 1302.632440] __kmalloc_track_caller+0x2bc/0x400 [ 1302.637087] ? kstrdup_const+0x35/0x60 [ 1302.640955] ? lock_downgrade+0x740/0x740 [ 1302.645082] kstrdup+0x36/0x70 [ 1302.648258] kstrdup_const+0x35/0x60 [ 1302.651963] alloc_vfsmnt+0xe0/0x7f0 [ 1302.655659] ? _raw_read_unlock+0x29/0x40 [ 1302.659785] vfs_kern_mount.part.0+0x27/0x470 [ 1302.664260] do_mount+0xe65/0x2a30 [ 1302.667784] ? __do_page_fault+0x159/0xad0 [ 1302.671999] ? retint_kernel+0x2d/0x2d [ 1302.675866] ? copy_mount_string+0x40/0x40 [ 1302.680082] ? memset+0x20/0x40 [ 1302.683340] ? copy_mount_options+0x1fa/0x2f0 [ 1302.687817] ? copy_mnt_ns+0xa30/0xa30 [ 1302.691683] SyS_mount+0xa8/0x120 [ 1302.695126] ? copy_mnt_ns+0xa30/0xa30 [ 1302.698993] do_syscall_64+0x1d5/0x640 [ 1302.702864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.708033] RIP: 0033:0x7f25b5a2b7aa [ 1302.711722] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1302.719408] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1302.726656] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1302.733945] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1302.741193] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1302.748441] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:07 executing program 0: r0 = socket(0x10, 0x80003, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (rerun: 32) 14:44:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="6525b38c9e87561826361f50423be71539fa3131f9e8141db869283f2a33effe7941", 0x22, 0x2}], 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)="97", 0x1, 0x2f99188}], 0x0, &(0x7f0000000600)) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000180)=0x3) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x40, 0x174d40fa], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:44:07 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x3, 0x4}}, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x0, 0x2, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}}, 0x32) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x109540, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="d815e90000b1cf94e75500000000000000") syz_open_dev$dri(&(0x7f0000000080), 0x700, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000001400100e29bd7000ffdbdf250a100100", @ANYRES32=r6, @ANYBLOB="14000200ff010000000000000000000000000001080009000700000008000900ff070000140001f82c00fc020000000000000000000000000000140006000900000000020000070600007f00000014000100200100000000000000000000ede2371939c9af86bd5300000001140002000000000000000000000000000000000108000a000300000014000200fe800000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) 14:44:07 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 55) 14:44:07 executing program 0: r0 = socket(0x10, 0x80003, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) 14:44:07 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 49) 14:44:07 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) [ 1302.921994] FAT-fs (loop4): bogus number of reserved sectors [ 1302.926743] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1302.934848] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1302.950290] FAULT_INJECTION: forcing a failure. [ 1302.950290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1302.962088] CPU: 0 PID: 4131 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1302.966720] FAULT_INJECTION: forcing a failure. [ 1302.966720] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.969868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1302.969872] Call Trace: [ 1302.969887] dump_stack+0x1b2/0x281 [ 1302.969901] should_fail.cold+0x10a/0x149 [ 1302.969916] ? check_preemption_disabled+0x35/0x240 [ 1303.005715] __alloc_pages_nodemask+0x22c/0x2720 [ 1303.010471] ? finish_task_switch+0x178/0x610 [ 1303.014971] ? __lock_acquire+0x5fc/0x3f20 [ 1303.019207] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1303.023701] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.028548] ? io_schedule_timeout+0x140/0x140 [ 1303.033124] ? irq_work_queue+0x7a/0x1e0 [ 1303.037182] ? ___preempt_schedule+0x16/0x18 [ 1303.041591] cache_grow_begin+0x91/0x700 [ 1303.045642] ? fs_reclaim_release+0xd0/0x110 [ 1303.050048] ? check_preemption_disabled+0x35/0x240 [ 1303.055061] cache_alloc_refill+0x273/0x350 [ 1303.059385] kmem_cache_alloc+0x333/0x3c0 [ 1303.063539] getname_kernel+0x4e/0x340 [ 1303.067422] kern_path+0x1b/0x40 [ 1303.070780] lookup_bdev+0xc6/0x1c0 [ 1303.074399] ? bd_acquire+0x440/0x440 [ 1303.078199] blkdev_get_by_path+0x1b/0xa0 [ 1303.082349] mount_bdev+0x4c/0x360 [ 1303.085882] ? romfs_iget+0x5f0/0x5f0 [ 1303.089677] romfs_mount+0x6a/0x70 [ 1303.093216] mount_fs+0x92/0x2a0 [ 1303.096578] vfs_kern_mount.part.0+0x5b/0x470 [ 1303.101059] do_mount+0xe65/0x2a30 [ 1303.104583] ? __do_page_fault+0x159/0xad0 [ 1303.108799] ? retint_kernel+0x2d/0x2d [ 1303.112666] ? copy_mount_string+0x40/0x40 [ 1303.116884] ? memset+0x20/0x40 [ 1303.120142] ? copy_mount_options+0x1fa/0x2f0 [ 1303.124619] ? copy_mnt_ns+0xa30/0xa30 [ 1303.128493] SyS_mount+0xa8/0x120 [ 1303.131925] ? copy_mnt_ns+0xa30/0xa30 [ 1303.135796] do_syscall_64+0x1d5/0x640 [ 1303.139665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.144833] RIP: 0033:0x7f5c08b6d7aa [ 1303.148523] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1303.156219] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1303.163471] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1303.170717] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1303.177969] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1303.185222] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1303.192481] CPU: 1 PID: 4138 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1303.200276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1303.209620] Call Trace: [ 1303.212206] dump_stack+0x1b2/0x281 [ 1303.215842] should_fail.cold+0x10a/0x149 [ 1303.219988] should_failslab+0xd6/0x130 [ 1303.223959] kmem_cache_alloc+0x28e/0x3c0 [ 1303.228104] getname_flags+0xc8/0x550 [ 1303.231906] ? __do_page_fault+0x159/0xad0 [ 1303.236137] user_path_at_empty+0x2a/0x50 [ 1303.240284] do_mount+0x118/0x2a30 [ 1303.243829] ? __do_page_fault+0x159/0xad0 [ 1303.248062] ? retint_kernel+0x2d/0x2d [ 1303.251949] ? copy_mount_string+0x40/0x40 [ 1303.256179] ? memset+0x20/0x40 [ 1303.259447] ? copy_mount_options+0x1fa/0x2f0 [ 1303.263936] ? copy_mnt_ns+0xa30/0xa30 [ 1303.267837] SyS_mount+0xa8/0x120 [ 1303.271286] ? copy_mnt_ns+0xa30/0xa30 [ 1303.275174] do_syscall_64+0x1d5/0x640 [ 1303.279067] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.284252] RIP: 0033:0x7f25b5a2b7aa [ 1303.287953] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1303.295656] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1303.302922] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1303.310189] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 14:44:07 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) 14:44:07 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x3, 0x4}}, 0x26) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x0, 0x2, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}}, 0x32) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x109540, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="d815e90000b1cf94e75500000000000000") (async) syz_open_dev$dri(&(0x7f0000000080), 0x700, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000001400100e29bd7000ffdbdf250a100100", @ANYRES32=r6, @ANYBLOB="14000200ff010000000000000000000000000001080009000700000008000900ff070000140001f82c00fc020000000000000000000000000000140006000900000000020000070600007f00000014000100200100000000000000000000ede2371939c9af86bd5300000001140002000000000000000000000000000000000108000a000300000014000200fe800000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) [ 1303.317455] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1303.324721] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 14:44:07 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000140)="97", 0x1, 0x2f99188}], 0x0, &(0x7f0000000600)) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000180)=0x3) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x40, 0x174d40fa], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000000)) (async) accept$phonet_pipe(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:44:07 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 56) 14:44:07 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x0, 0x3, 0x4}}, 0x26) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x0, 0x2, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}}, 0x32) (async) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r5, &(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x109540, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000000)="d815e90000b1cf94e75500000000000000") syz_open_dev$dri(&(0x7f0000000080), 0x700, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80000001400100e29bd7000ffdbdf250a100100", @ANYRES32=r6, @ANYBLOB="14000200ff010000000000000000000000000001080009000700000008000900ff070000140001f82c00fc020000000000000000000000000000140006000900000000020000070600007f00000014000100200100000000000000000000ede2371939c9af86bd5300000001140002000000000000000000000000000000000108000a000300000014000200fe800000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) [ 1303.430903] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1303.441856] FAT-fs (loop4): bogus number of reserved sectors [ 1303.447819] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1303.455634] FAULT_INJECTION: forcing a failure. [ 1303.455634] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.467786] CPU: 1 PID: 4172 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1303.475590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1303.484934] Call Trace: [ 1303.487518] dump_stack+0x1b2/0x281 [ 1303.491149] should_fail.cold+0x10a/0x149 [ 1303.495295] should_failslab+0xd6/0x130 [ 1303.499267] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1303.503934] ? set_bdev_super+0x110/0x110 [ 1303.508076] sget_userns+0x102/0xc10 [ 1303.511786] ? set_bdev_super+0x110/0x110 [ 1303.515937] ? ns_test_super+0x50/0x50 [ 1303.519827] ? set_bdev_super+0x110/0x110 [ 1303.523968] ? ns_test_super+0x50/0x50 [ 1303.527849] sget+0xd1/0x110 [ 1303.530865] mount_bdev+0xcd/0x360 [ 1303.534400] ? romfs_iget+0x5f0/0x5f0 [ 1303.538196] romfs_mount+0x6a/0x70 [ 1303.541727] mount_fs+0x92/0x2a0 [ 1303.545090] vfs_kern_mount.part.0+0x5b/0x470 [ 1303.549584] do_mount+0xe65/0x2a30 [ 1303.553120] ? __do_page_fault+0x159/0xad0 [ 1303.557348] ? retint_kernel+0x2d/0x2d [ 1303.561235] ? copy_mount_string+0x40/0x40 [ 1303.565472] ? memset+0x20/0x40 [ 1303.568749] ? copy_mount_options+0x1fa/0x2f0 [ 1303.573236] ? copy_mnt_ns+0xa30/0xa30 [ 1303.577119] SyS_mount+0xa8/0x120 [ 1303.580560] ? copy_mnt_ns+0xa30/0xa30 [ 1303.584445] do_syscall_64+0x1d5/0x640 [ 1303.588332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.593518] RIP: 0033:0x7f5c08b6d7aa [ 1303.597222] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1303.604924] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1303.612188] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1303.619455] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1303.626718] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1303.633977] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:08 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000200)={[{@shortname_win95}, {@uni_xlateno}], [{@uid_gt}, {@hash}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@subj_user={'subj_user', 0x3d, 'shortname=mixed'}}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaabe5, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02006f72746e616d653d6d000000000000"]) 14:44:08 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) socketpair(0x1, 0x1, 0xfffffffd, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) 14:44:08 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) 14:44:08 executing program 4: syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x2, 0x0, &(0x7f0000000200), 0x4a824, &(0x7f0000000240)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f00000005c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x4000, &(0x7f00000001c0), 0x2, r1, 0xa}) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffff, @bcast, @bpq0, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) 14:44:08 executing program 1: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 57) 14:44:08 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 50) 14:44:08 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) sendto$rose(r1, &(0x7f0000000000)="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", 0x1000, 0x40044, &(0x7f0000001000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40) [ 1303.874151] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1303.883865] FAT-fs (loop2): bogus number of reserved sectors [ 1303.884362] romfs: VFS: Can't find a romfs filesystem on dev loop4. [ 1303.906874] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1303.925428] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1303.931712] FAULT_INJECTION: forcing a failure. [ 1303.931712] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.953367] CPU: 0 PID: 4220 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1303.961175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1303.970528] Call Trace: [ 1303.973122] dump_stack+0x1b2/0x281 [ 1303.976750] should_fail.cold+0x10a/0x149 [ 1303.980897] should_failslab+0xd6/0x130 [ 1303.984871] kmem_cache_alloc+0x28e/0x3c0 [ 1303.989014] alloc_vfsmnt+0x23/0x7f0 [ 1303.992718] ? _raw_read_unlock+0x29/0x40 [ 1303.996857] vfs_kern_mount.part.0+0x27/0x470 [ 1304.001350] do_mount+0xe65/0x2a30 [ 1304.004897] ? __do_page_fault+0x159/0xad0 [ 1304.009124] ? retint_kernel+0x2d/0x2d [ 1304.013007] ? copy_mount_string+0x40/0x40 [ 1304.017235] ? memset+0x20/0x40 [ 1304.020518] ? copy_mount_options+0x1fa/0x2f0 [ 1304.025011] ? copy_mnt_ns+0xa30/0xa30 [ 1304.028892] SyS_mount+0xa8/0x120 [ 1304.032340] ? copy_mnt_ns+0xa30/0xa30 [ 1304.036224] do_syscall_64+0x1d5/0x640 [ 1304.040109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1304.045292] RIP: 0033:0x7f25b5a2b7aa [ 1304.048996] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1304.056702] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1304.063992] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 14:44:08 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) sendto$rose(r1, &(0x7f0000000000)="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", 0x1000, 0x40044, &(0x7f0000001000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40) 14:44:08 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@uni_xlate}]}) (async) [ 1304.071253] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1304.078510] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1304.085771] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1304.098437] FAULT_INJECTION: forcing a failure. [ 1304.098437] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.151178] CPU: 1 PID: 4211 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1304.158988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1304.168341] Call Trace: [ 1304.170927] dump_stack+0x1b2/0x281 [ 1304.174552] should_fail.cold+0x10a/0x149 [ 1304.178702] should_failslab+0xd6/0x130 [ 1304.182675] __kmalloc+0x2c1/0x400 [ 1304.186210] ? register_shrinker+0x1ab/0x220 [ 1304.186621] FAT-fs (loop2): bogus number of reserved sectors [ 1304.190611] register_shrinker+0x1ab/0x220 [ 1304.190626] sget_userns+0x9aa/0xc10 [ 1304.190636] ? set_bdev_super+0x110/0x110 [ 1304.190647] ? ns_test_super+0x50/0x50 [ 1304.190657] ? set_bdev_super+0x110/0x110 [ 1304.190664] ? ns_test_super+0x50/0x50 [ 1304.190670] sget+0xd1/0x110 [ 1304.190680] mount_bdev+0xcd/0x360 [ 1304.190689] ? romfs_iget+0x5f0/0x5f0 [ 1304.190699] romfs_mount+0x6a/0x70 [ 1304.190709] mount_fs+0x92/0x2a0 [ 1304.190723] vfs_kern_mount.part.0+0x5b/0x470 [ 1304.190735] do_mount+0xe65/0x2a30 [ 1304.190747] ? __do_page_fault+0x159/0xad0 [ 1304.190757] ? retint_kernel+0x2d/0x2d [ 1304.208079] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1304.208570] ? copy_mount_string+0x40/0x40 [ 1304.208583] ? memset+0x20/0x40 [ 1304.208593] ? copy_mount_options+0x1fa/0x2f0 [ 1304.208601] ? copy_mnt_ns+0xa30/0xa30 [ 1304.208611] SyS_mount+0xa8/0x120 [ 1304.208619] ? copy_mnt_ns+0xa30/0xa30 [ 1304.208630] do_syscall_64+0x1d5/0x640 [ 1304.286677] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1304.291862] RIP: 0033:0x7f5c08b6d7aa 14:44:08 executing program 0: r0 = socket(0x10, 0x80003, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) sendto$rose(r1, &(0x7f0000000000)="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", 0x1000, 0x40044, &(0x7f0000001000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40) socket(0x10, 0x80003, 0x0) (async) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x4) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$rose(r1, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) sendto$rose(r1, &(0x7f0000000000)="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", 0x1000, 0x40044, &(0x7f0000001000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x40) (async) 14:44:08 executing program 4: syz_mount_image$romfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x2, 0x0, &(0x7f0000000200), 0x4a824, &(0x7f0000000240)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, 0x0, &(0x7f00000005c0)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000003c0)=0x1f, 0x4) (async) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000200)={0x4000, &(0x7f00000001c0), 0x2, r1, 0xa}) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffff, @bcast, @bpq0, 0x7, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default]}) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) [ 1304.295596] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1304.303302] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1304.310569] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1304.317833] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1304.325106] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1304.332366] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 14:44:08 executing program 3: syz_mount_image$romfs(&(0x7f00000011c0), &(0x7f00000013c0)='./file0\x00', 0x0, 0x1, &(0x7f00000018c0)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001980)) (fail_nth: 51) [ 1304.384542] FAT-fs (loop2): bogus number of reserved sectors [ 1304.401315] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1304.408375] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1304.431072] romfs: VFS: Can't find a romfs filesystem on dev loop4. [ 1304.459641] FAULT_INJECTION: forcing a failure. [ 1304.459641] name failslab, interval 1, probability 0, space 0, times 0 [ 1304.488720] CPU: 1 PID: 4268 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 1304.496524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1304.505871] Call Trace: [ 1304.508458] dump_stack+0x1b2/0x281 [ 1304.512095] should_fail.cold+0x10a/0x149 [ 1304.516244] should_failslab+0xd6/0x130 [ 1304.520224] __kmalloc_track_caller+0x2bc/0x400 [ 1304.524890] ? kstrdup_const+0x35/0x60 [ 1304.528775] ? lock_downgrade+0x740/0x740 [ 1304.532921] kstrdup+0x36/0x70 [ 1304.536113] kstrdup_const+0x35/0x60 [ 1304.539822] alloc_vfsmnt+0xe0/0x7f0 [ 1304.543530] ? _raw_read_unlock+0x29/0x40 [ 1304.547674] vfs_kern_mount.part.0+0x27/0x470 [ 1304.552173] do_mount+0xe65/0x2a30 [ 1304.553943] ------------[ cut here ]------------ [ 1304.555707] ? __do_page_fault+0x159/0xad0 [ 1304.560444] WARNING: CPU: 0 PID: 4211 at fs/super.c:1163 kill_block_super+0xbe/0xe0 [ 1304.564654] ? retint_kernel+0x2d/0x2d [ 1304.572440] Kernel panic - not syncing: panic_on_warn set ... [ 1304.572440] [ 1304.576306] ? copy_mount_string+0x40/0x40 [ 1304.587846] ? memset+0x20/0x40 [ 1304.591106] ? copy_mount_options+0x1fa/0x2f0 [ 1304.595578] ? copy_mnt_ns+0xa30/0xa30 [ 1304.599445] SyS_mount+0xa8/0x120 [ 1304.602877] ? copy_mnt_ns+0xa30/0xa30 [ 1304.606747] do_syscall_64+0x1d5/0x640 [ 1304.610619] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1304.615787] RIP: 0033:0x7f25b5a2b7aa [ 1304.619475] RSP: 002b:00007f25b439ef88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1304.627164] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f25b5a2b7aa [ 1304.634512] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f25b439efe0 [ 1304.641764] RBP: 00007f25b439f020 R08: 00007f25b439f020 R09: 00000000200011c0 [ 1304.649013] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1304.656276] R13: 00000000200013c0 R14: 00007f25b439efe0 R15: 0000000020001980 [ 1304.663539] CPU: 0 PID: 4211 Comm: syz-executor.1 Not tainted 4.14.290-syzkaller #0 [ 1304.671322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 1304.680663] Call Trace: [ 1304.683246] dump_stack+0x1b2/0x281 [ 1304.686873] panic+0x1f9/0x42d [ 1304.690060] ? add_taint.cold+0x16/0x16 [ 1304.694036] ? kill_block_super+0xbe/0xe0 [ 1304.698174] ? __warn.cold+0x5/0x44 [ 1304.701797] ? kill_block_super+0xbe/0xe0 [ 1304.705935] __warn.cold+0x20/0x44 [ 1304.709476] ? ist_end_non_atomic+0x10/0x10 [ 1304.713791] ? kill_block_super+0xbe/0xe0 [ 1304.717934] report_bug+0x208/0x250 [ 1304.721563] do_error_trap+0x195/0x2d0 [ 1304.725443] ? math_error+0x2d0/0x2d0 [ 1304.729235] ? retint_kernel+0x2d/0x2d [ 1304.733124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1304.737967] invalid_op+0x1b/0x40 [ 1304.741414] RIP: 0010:kill_block_super+0xbe/0xe0 [ 1304.746156] RSP: 0018:ffff88808ea3fb88 EFLAGS: 00010246 [ 1304.751512] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90007215000 [ 1304.758781] RDX: 0000000000040000 RSI: ffffffff81875ece RDI: ffff8880b1da6b70 [ 1304.766048] RBP: ffff88809fa46800 R08: ffffffff8b9d6660 R09: 0000000000000001 [ 1304.773309] R10: 0000000000000000 R11: ffff8880999a6040 R12: ffff8880b1da66c0 [ 1304.780570] R13: ffffffff891e2cf0 R14: ffffffff88f45760 R15: dffffc0000000000 [ 1304.787935] ? kill_block_super+0xbe/0xe0 [ 1304.792086] ? kill_block_super+0xbe/0xe0 [ 1304.796225] romfs_kill_sb+0x71/0xa0 [ 1304.799936] deactivate_locked_super+0x6c/0xd0 [ 1304.804510] sget_userns+0x9c4/0xc10 [ 1304.808220] ? set_bdev_super+0x110/0x110 [ 1304.812364] ? ns_test_super+0x50/0x50 [ 1304.816247] ? set_bdev_super+0x110/0x110 [ 1304.820387] ? ns_test_super+0x50/0x50 [ 1304.824273] sget+0xd1/0x110 [ 1304.827290] mount_bdev+0xcd/0x360 [ 1304.830827] ? romfs_iget+0x5f0/0x5f0 [ 1304.834617] romfs_mount+0x6a/0x70 [ 1304.838145] mount_fs+0x92/0x2a0 [ 1304.841493] vfs_kern_mount.part.0+0x5b/0x470 [ 1304.846012] do_mount+0xe65/0x2a30 [ 1304.849532] ? __do_page_fault+0x159/0xad0 [ 1304.853759] ? retint_kernel+0x2d/0x2d [ 1304.857627] ? copy_mount_string+0x40/0x40 [ 1304.861849] ? memset+0x20/0x40 [ 1304.865115] ? copy_mount_options+0x1fa/0x2f0 [ 1304.869595] ? copy_mnt_ns+0xa30/0xa30 [ 1304.873470] SyS_mount+0xa8/0x120 [ 1304.876898] ? copy_mnt_ns+0xa30/0xa30 [ 1304.880766] do_syscall_64+0x1d5/0x640 [ 1304.884633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1304.889798] RIP: 0033:0x7f5c08b6d7aa [ 1304.893483] RSP: 002b:00007f5c074e0f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 1304.901166] RAX: ffffffffffffffda RBX: 00000000200018c0 RCX: 00007f5c08b6d7aa [ 1304.908412] RDX: 00000000200011c0 RSI: 00000000200013c0 RDI: 00007f5c074e0fe0 [ 1304.915657] RBP: 00007f5c074e1020 R08: 00007f5c074e1020 R09: 00000000200011c0 [ 1304.922910] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200011c0 [ 1304.930163] R13: 00000000200013c0 R14: 00007f5c074e0fe0 R15: 0000000020001980 [ 1304.937759] Kernel Offset: disabled [ 1304.941451] Rebooting in 86400 seconds..