c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:08 executing program 0: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000336000)={0x9}, 0x8, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='bridge0\x00', 0x7}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f000005b000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000040)) unlink(&(0x7f0000000180)='./file0\x00') rt_sigprocmask(0x0, &(0x7f0000479000)={0xfffffffffffffffe}, 0x0, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000140)={0x3f, r4, 0x10003, 0x2}) clock_gettime(0x0, &(0x7f000005b000)={0x0, 0x0}) epoll_create(0x7fffffff) timer_settime(0x0, 0xfffffffffffffffd, &(0x7f000005bfe0)={{}, {0x0, r5+10000000}}, &(0x7f0000046000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000169000)={0x1}) 2033/05/18 03:46:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x20) fanotify_mark(r1, 0x14, 0x48000000, r2, &(0x7f0000000200)='./file0\x00') seccomp(0x1, 0x0, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x718c, 0x99, 0x1, 0x9}, {0x29a, 0x1, 0x3, 0x9}, {0x2c, 0x0, 0x80, 0x6}, {0x3, 0x81, 0x1}, {0x6, 0x1, 0x4, 0x3}]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x200000000003) ioctl$KDSETLED(r1, 0x4b32, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x42f}) fadvise64(r3, 0x0, 0x1, 0x7) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r3, 0x5412, &(0x7f0000000180)) [ 126.751957] __ntfs_error: 107 callbacks suppressed [ 126.751966] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 126.765429] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 126.777538] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) clock_gettime(0x0, &(0x7f0000001c40)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) lremovexattr(&(0x7f0000001380)='./file0\x00', &(0x7f0000001400)=@random={'security.', 'posix_acl_accessppp0+E\')eth1\x00'}) recvmmsg(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000040)=@rc, 0x2f2, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/4096}, {&(0x7f0000001180)=""/207}, {&(0x7f0000001280)=""/100}, {&(0x7f0000001300)=""/72}], 0xdd, &(0x7f00000000c0)=""/186, 0xffffffffffffff1b}}], 0x1, 0x100, &(0x7f0000001c80)={0x0, r1+10000000}) 2033/05/18 03:46:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$inet(0x2, 0x803, 0x11) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000ad3000), 0x0, 0x8000, &(0x7f00000fbff0)={0x2, 0x800, @rand_addr=0x7}, 0x10) sendto$inet(r1, &(0x7f000009ff3c)="c337fbdd", 0x4, 0x0, &(0x7f000032b000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) [ 126.795659] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 126.804666] ntfs: (device loop7): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 126.812836] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 126.821266] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 126.833335] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 126.918089] raw_sendmsg: syz-executor1 forgot to set AF_INET. Fix it! [ 126.922650] IPVS: length: 132 != 24 [ 126.972199] IPVS: length: 132 != 24 2033/05/18 03:46:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x0) r1 = semget$private(0x0, 0x1, 0x30) semop(r1, &(0x7f0000000080)=[{0x3, 0x25e, 0x1800}], 0x1) 2033/05/18 03:46:08 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x7, 0x0, 0x1, [@multicast2=0xe0000002]}, 0x14) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:08 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:08 executing program 4: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x745, 0x40, 0x20, 0x3, 0x3, 0x6, 0x6, 0x1ef, 0x38, 0x93, 0x9, 0x3f, 0x20, 0x1, 0xffff, 0x1, 0x7fffffff}, [{0x1, 0x4, 0x7fffffff, 0xffffffffffffffc1, 0x400, 0x3, 0x5, 0x2}], "ffdb1c9d73d63d976f3e29620742199c0ca77beb6c35b10b01195bdca6317c671196a58a71de5414c008ca4f22d9dfcb5f4c7d4318d2c0f1491fd3e4a44a00efbc687cec365bd4966fc561a9841b5e35f82f980d1a44d0a1221136638b75dc2f3ac362276ff08a398bd678248f472cc9c1245b650db25f61f0c2968e522b7ffe0ae5489a2299faf382ae6431c77bf859bb8b6b420366617ad6d73cad8461665ededf01e98d62e8d36237bf7a6dca06ebec224b4c2e04ba5f3ce4ca8e73fe5894c448a73987bb6a8a7da7a20fb058098777cdf07a1caca7b8f5c852acde843caef7c0eaa5eecc06f1d4d97e3b53", [[], [], [], [], [], [], [], [], [], []]}, 0xb45) listen(r1, 0x0) accept(r1, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) ioctl$fiemap(r0, 0x40086602, &(0x7f00000001c0)=ANY=[]) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000140)=ANY=[], 0x50780b8) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="4000000000000000000004"]) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2033/05/18 03:46:08 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f00000002c0)=""/182}) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000340)=""/9) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0xb90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20002500], 0x0, &(0x7f0000000040), &(0x7f0000002500)=ANY=[@ANYBLOB="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"]}, 0xc08) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0xff, 0x6, 0x3, 0x7fe}, {0xd9, 0x7, 0x2, 0x7}]}, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10200020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b48}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2033/05/18 03:46:08 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:08 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f00000002c0)=""/182}) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 127.286265] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 127.288316] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. 2033/05/18 03:46:09 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1fffa, 0x0) r1 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) socket$inet6(0xa, 0x1, 0x5) sendfile(r1, r1, &(0x7f0000000040), 0x7527fb3200000000) fallocate(r0, 0x8, 0x0, 0x8000) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x801) 2033/05/18 03:46:09 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800, 0x0) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="0725bf4295e60fd244b80f48b245146774f2ca18953a9da44880e904e5fe15637282e5831f33cd66d969daece7f54a296be7eed5351e7163", 0x38}]) io_setup(0x1ff, &(0x7f0000800ffc)=0x0) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000100)) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) 2033/05/18 03:46:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000fc0000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000914ff0)={0x0, 0x0, &(0x7f0000fb2000)}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000dd5000)) 2033/05/18 03:46:09 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 4: r0 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc\x00', 0x440000, 0x0) r3 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0xc0200) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x5, 0x7, 0x1}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYBLOB="0e0000009200000000b850380500000000000e8ce822349fa9bfc26dbc542b3035d708a39aacff16de6c493282c00c4155aa11600ba3c4"], &(0x7f00000002c0)=0x16) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={r5, 0x61, "03913e3de008f2a088fa67e5141a0a051e787a060348210e78c6f75a7b48717d82a87b2859166af44529755edd91546632ebddf84abfa32aa4143e0292710352fd841692d993cd99605e567fd725edf484d3230ec5ac124233521c25467961984a"}, &(0x7f0000000380)=0x69) r7 = socket(0x1e, 0x2000000000000005, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0e0000000000"]}) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={r6, 0x3}, &(0x7f0000000400)=0x8) accept$netrom(r7, &(0x7f0000000080)=@full, &(0x7f0000000100)=0x48) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)) 2033/05/18 03:46:09 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl(r2, 0x0, &(0x7f0000000040)="115a0f9b15") 2033/05/18 03:46:09 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f00000002c0)=""/182}) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="ea00000000000000900d00007598829455efe17200000000"]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101800, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000001c40)=0xe8) bind$ipx(r3, &(0x7f00000000c0)={0x4, 0x8000, 0x80000000, "0cb5ce4dd297", 0x5}, 0x10) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000200)=""/152) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000001c80)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xda3, 0xfffffffffffffffe, 0x3, 0x100, 0x8, 0x40010, r4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x38b, 0x0, [{0xbff, 0x0, 0x7}, {0x349, 0x0, 0xfffffffffffff810}, {0x8b5, 0x0, 0xfffffffffffffff7}, {0xfff}, {0x200000b2b, 0x0, 0x2}, {0x280, 0x0, 0x5}, {0x306, 0x0, 0x7ffd}]}) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x40000009, 0x4000) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 2033/05/18 03:46:09 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x20) getdents64(r0, &(0x7f00000007c0)=""/250, 0x1015a) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x105600, 0x81) fchdir(r0) link(&(0x7f0000000740)='./file1\x00', &(0x7f0000000100)='./file2\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)="10000000030000000000000000000000", 0x10}]) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x400000000e) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000280)) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x5, 0x80000) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000001c0)) request_key(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='\x00', 0xfffffffffffffff9) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000d18000)='/dev/ion\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f00009d8ff0)) eventfd(0xb974) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x236}, 0x0) ioctl(r6, 0xc0184900, &(0x7f0000002000)) renameat2(r1, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0xfd1092750066ec78) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') unlink(&(0x7f00000000c0)='./file0\x00') 2033/05/18 03:46:09 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0xb9d7f5f705058ff5) pkey_alloc(0x0, 0x800002) pkey_alloc(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0xffffffffffff011f, 0x10001, &(0x7f00000000c0)}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000180)={0x7, 0xffffffff, 0x8, 0x2, 0x4, 0xeac}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x6, 0xfffffffffffff288, 0x2, 0x7]}) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r4, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendfile(r0, r0, 0x0, 0x40) 2033/05/18 03:46:09 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x400000, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x5, 0x7}, 0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:09 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TIOCGLCKTRMIOS(r1, 0x40087101, &(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000240)='./file0/file0\x00', r3, r4, 0x400) 2033/05/18 03:46:09 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 3: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:09 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:09 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "cc90e2", 0x14, 0x6c, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2033/05/18 03:46:10 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x4400}) 2033/05/18 03:46:10 executing program 3: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 3: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() readv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/57, 0x39}], 0x1a2) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) dup2(r0, r1) 2033/05/18 03:46:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) 2033/05/18 03:46:10 executing program 0: r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = socket(0x2, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000140)={"6c6f00000000001300"}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'lo\x00', 0x800004}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000480)={@broadcast, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000500)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x33, r2}) 2033/05/18 03:46:10 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xffffffff, 0x100) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x30) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:10 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 4: perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x40) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x18, r2) umount2(&(0x7f0000000040)='./control\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./control\x00', 0x0) 2033/05/18 03:46:10 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000040)=""/32, 0x20}, &(0x7f00000001c0), 0x4}, 0x20) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7f) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0x5, 0x3}, {0x0, 0x800}, 0x0, 0x5, 0x5351}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)={0x8, 0x9}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:10 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:10 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000040)=""/32, 0x20}, &(0x7f00000001c0), 0x4}, 0x20) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7f) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000240)={{0x5, 0x3}, {0x0, 0x800}, 0x0, 0x5, 0x5351}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000002c0)={0x8, 0x9}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:11 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:11 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 1: pipe(&(0x7f0000000080)={0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x0) pipe2(&(0x7f00009abf7a)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r1, r3) vmsplice(r3, &(0x7f000044eff0)=[{&(0x7f0000853fde)="8d", 0x1}], 0x1, 0x0) tee(r2, r1, 0x3c, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="a535", 0x2e0}], 0x1, 0x3) 2033/05/18 03:46:11 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f000001e000)=[{&(0x7f0000017fb4)="24000000000b07031dfffd946fa2830020200a0009000100400300000000a3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7fffffff, 0x1}, 0xc) write$sndseq(r1, &(0x7f0000000380)=[{0xffffffffffffffff, 0x6, 0x9, 0xe9, @tick=0x8, {0x9293, 0x9}, {0x1f, 0xfffffffffffffff9}, @quote={{0x4, 0xb027}, 0x3, &(0x7f0000000240)={0x7ff, 0x0, 0x3, 0xffffffff, @tick=0xff, {0x9d30, 0x2}, {0x7, 0x8}, @quote={{0x7, 0x8}, 0x4, &(0x7f0000000200)={0x8, 0xf982, 0x3f, 0x5034, @tick=0x1, {0x9, 0x100000000000}, {0x6, 0x7}, @ext={0xf9, &(0x7f0000000100)="5960a2832ef3b56520834225869742076617e640f3f9858a8eff7ed55cdaf25f4f6737045d9f326f044eadfbbed56e4d610d41ee37f1dd05cf1464face61f4b6e86f3e375bd415c32685bf6acff7b0f3468336303eac6ca7f354132c71dc1b588abae7ea414c7ae86ee28998c705cd6463e0d9d58c8a6a2cce6b076154b026712e5d1ce925a1f62bddaee2d66404ebd831694763db912a418706b03c2a8b8780b556381ebf432fe0ea588eea50984e66cac78cb0f142730c00fcc220309f6429d43a1db1b724c72d370b8a902ca333cb948a937fbadf69be4f4651e8dfca21ae297d14c98487d0ee7c8eac82dc9c9472ba4adcf5f67b7f2e5d"}}}}}}, {0x4, 0x4, 0x9, 0x123ddae1, @tick=0x5, {0x1, 0x3}, {0xe18, 0x80}, @addr={0x7fff, 0x7}}, {0x7, 0x1ff, 0x0, 0x9, @time, {0x3, 0x6}, {0x0, 0xffff}, @quote={{0x8, 0x6}, 0x10001, &(0x7f0000000280)={0x7, 0x3f, 0x7, 0xffffffff80000000, @time, {0x5, 0x8000}, {0x9, 0x7}, @time=@tick=0xed39}}}, {0x0, 0x8, 0x3, 0x40, @tick, {0x7fff, 0x9}, {0xa97, 0x7}, @quote={{0x0, 0x50e}, 0x3ff, &(0x7f00000002c0)={0xfff, 0x1, 0x100000000, 0xfffffffffffff2a3, @tick=0x5, {0x3f, 0xfffffffffffeffff}, {0x3, 0x1}, @note={0x0, 0x9, 0x2, 0x7, 0x9}}}}, {0x6cf8, 0x7, 0x1, 0x0, @time={0x77359400}, {0x6, 0x1}, {0x1}, @note={0x7, 0x6e4a, 0x1000, 0x40, 0xff}}, {0x3, 0x8, 0xcde0, 0x0, @tick=0x8, {0x400000000000, 0x8}, {0x1, 0x5}, @note={0xf3c00000000, 0xfff, 0x20, 0x23, 0x100000001}}, {0x74f, 0xff, 0x3, 0x1, @tick=0x8000, {0xffff, 0x2}, {0x6, 0x600}, @queue={0x100000000, {0x4, 0xde4b}}}, {0x3, 0x0, 0x6, 0xafc6, @tick=0x7, {0x10001, 0x9}, {0xe0f0, 0x7}, @quote={{0x8, 0x9}, 0xe15, &(0x7f0000000300)={0x0, 0xfffffffffffff28d, 0xffffffffffff0001, 0x101, @tick=0x4, {0x0, 0x6}, {0x8000, 0x9}, @connect={{0x4, 0xa4b}, {0x4, 0x5}}}}}, {0x13, 0x8, 0x4, 0x3, @time, {0x0, 0x1}, {0xfffffffffffffff7, 0x5}, @quote={{0xa, 0x1a}, 0x401, &(0x7f0000000340)={0x7, 0x10001, 0x9, 0x400, @tick=0x4, {0x11bfa90, 0xffffffff80000001}, {0x7, 0x2}, @note={0x2, 0x1, 0x2, 0x7, 0x4}}}}], 0x1b0) 2033/05/18 03:46:11 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_yield() sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f00008b7ff0)={&(0x7f0000bfdfdc)={0x14, 0x2, 0x1, 0x800000001}, 0x14}, 0x1}, 0x0) 2033/05/18 03:46:11 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000396000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000d6afa0)=[{{&(0x7f00000bb000)=@ipx, 0x10, &(0x7f0000637fe8), 0x0, &(0x7f0000b1c000)=""/248, 0xf8}}], 0x1, 0x0, &(0x7f0000c08ff8)) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x58d, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000080)="3533ea5cf3db531def87ace12283b88f129f4b0b1f66bd129b9ecf668291c4ae6dccce05221a950afe66786b481840a710de744b4ec75f96d013d26cf987aa02f4fe662a58ac8418bc0c38723b4446a36c432ac159348831d7cdf1221798ff53e92997cfd9ae8c889f31ee13763eae5abfcd0c0e10262d10d1e199dfe90a3519e1022e4e2f9671cd400e4a349e8baaadc6d76082f753d5c5e10294384cc831cecac2967a1ce2dcf51745c422d29869c76f724511e942e9e3f8e974b1b96e93765eada61b1670ad1d8dc1f01577a68a8e2cd19074c5a3f02b4900782f0eec6d40d251f5d835adc7e48951", 0xea}, {&(0x7f0000000200)="618dbe577ecb9f752c28871a32783b65ed5ae5a4a8aa3ff3d56b28c903129c12fff3bb6d13883f94a330d629bdf10213407eba348d74c3d192750ffc04fa2d7eef897f794290a8f4eca1fae77b3410aed941007ea50b019ec1eeea7cef0140b25b4316ffbc2cbdb0ee146eda3c909c2b492517bbe8148def8a33c58f00a4e0d340f0f4c94801460c6c3d54c97a4d02510803d86bf09b7d9c138ca68d883b091d604b2f898f7b191fa1cc8664", 0xac, 0x3}], 0x1805000, &(0x7f0000000300)={[{@type={'type', 0x3d, "6a0e9867"}, 0x2c}]}) read(r0, &(0x7f0000000180)=""/93, 0x5d) shutdown(r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000380)=0x2) 2033/05/18 03:46:11 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) process_vm_writev(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/97, 0x61}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000640)=""/204, 0xcc}, {&(0x7f0000000780)=""/140, 0x8c}], 0x8, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/30, 0x1e}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d83}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000b40)=[@in6={0xa, 0x4e20, 0xfffffffffffff001, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in6={0xa, 0x4e23, 0x4, @empty, 0xfffffffffffffff7}], 0x38) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000b80)=0x50, 0x4) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) bind$llc(r1, &(0x7f0000000a00)={0x1a, 0x307, 0x9, 0x7, 0x2, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) 2033/05/18 03:46:11 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00008d6000), 0x4) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000e40)={0x4, 0x7}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f00000006c0)="6c6f676f09a0", &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000740)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffd) r2 = request_key(&(0x7f00000008c0)='keyring\x00', &(0x7f0000000900)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000940)='(self\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={0x0, r1, r2}, &(0x7f0000000a40)=""/28, 0xffffff41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000080)={0x1ff, 0x0, &(0x7f0000ffb000/0x2000)=nil}) ioctl(r3, 0x8000c0184908, &(0x7f0000000080)) unshare(0x20000000) clone(0x0, &(0x7f0000000240), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) clone(0x0, &(0x7f000052cf69), &(0x7f00000009c0), &(0x7f0000e9b000), &(0x7f0000000a80)="16b5d465278c491e589957f9e87329a89b2d963e56b1f9c5b8f57aacebbe3d7b200015c0e1c15214114c794f4474c7ef8253ff4a2fc9c994eda4381ade86ef7e1012e58893377c24c6aed4157ed46c1aba601725f32a267d0138f0e45039b7a09f2fbf4aada8c8f0624825a2625d8489e9def472474befae6f47679c21a2bfb46f5f38c71dc4a50fb03402904e0edd64b80ac8c4934cd04364602491ca07216934e09cc3b95fbec2bee5cfd8fcccbebb7733f5235cd9835c3956028800000000000003313426fff5d5d78504e8e643ef90537e9e50605578dbce8edd") wait4(0x0, 0x0, 0x80000000, &(0x7f0000000080)) io_setup(0x8, &(0x7f00000003c0)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a00)='status\x00') eventfd2(0x81, 0x80000) setsockopt$ax25_int(r5, 0x101, 0x6, &(0x7f0000000dc0)=0x28, 0x4) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000880)={0x8, 0xc40, 0x8, 0x5c, &(0x7f0000000780)=""/92, 0x54, &(0x7f0000000800)=""/84, 0x1c, &(0x7f0000000040)=""/28}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x7c, r6, 0x20, 0x70bd27, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11b7cd1d}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) dup3(r5, r0, 0x80000) r7 = syz_open_dev$sndmidi(&(0x7f0000000cc0)='/dev/snd/midiC#D#\x00', 0x2, 0x4000) recvfrom$unix(r5, &(0x7f00000005c0)=""/80, 0x50, 0x40000020, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) getgroups(0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0]) syz_fuse_mount(&(0x7f0000000140)='./file0\x00', 0xa001, r8, r9, 0x7, 0x0) io_submit(r4, 0x1, &(0x7f0000000d40)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="2ae88409a36d87b6bf7a305b7780ebb5df6fb10230d25ba065764a09095e620559dc9fb7aa71f820d08d13fd7a46b8d5bd232c1709eb3bbf90e7375835e0e9a4b2f29ec558a55aba7a470a4ccdfa14", 0x4f, 0xab, 0x0, 0x1, r5}]) 2033/05/18 03:46:11 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:11 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 7: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:12 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 4: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000880), 0x80800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x7, 0x400, 0x9, 0xfff}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000940)={r1, @in6={{0xa, 0x4e20, 0x2, @ipv4={[], [0xff, 0xff]}, 0xae7}}}, &(0x7f0000000a00)=0x84) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0xaf01, &(0x7f0000000480)=&(0x7f00000001c0)) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000600)=""/73, 0x49}], 0x4, &(0x7f0000000440)=""/51, 0x33, 0x5}, 0x40000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000700)={r4, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f00000007c0)=0x84) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000df5fd8)={0x0, 0x0, &(0x7f0000000200)=""/105, &(0x7f0000bf6000)=""/228, &(0x7f0000000080)=""/199}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000cef000)={0x1, 0x0, &(0x7f000062a000)=""/167, &(0x7f0000aac000)=""/21, &(0x7f00002fdf52)=""/174}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000016c0)=0x1) mkdir(&(0x7f0000000840)='./file0\x00', 0x8) ioctl$sock_netrom_SIOCGSTAMP(r3, 0x8906, &(0x7f0000000a40)) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer2\x00', 0x40200, 0x0) 2033/05/18 03:46:12 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000058000)={&(0x7f0000000080)=ANY=[@ANYBLOB="840108000000000000bd7000ffffffff000bfffc0c000000faffffffffffffd05b659a62299f13e1a04810e43e2555156f2e9a6f8ec4949869c2984d914d9f04005e66cd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff0000556b000000000000230e3b635b285e6b95a4fcdc5422a6128c14"], 0x83}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0x80000000, 0x1d8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x8404, 0xf2c}, 'port0\x00', 0x80, 0x20, 0xb23, 0x0, 0xba, 0x5, 0x1ff, 0x0, 0x3, 0xffff}) 2033/05/18 03:46:12 executing program 1: r0 = memfd_create(&(0x7f000088f000)='b\n\x00\x00\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x5011, r0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xef) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) [ 130.607137] hfs: can't find a HFS filesystem on dev loop3 2033/05/18 03:46:12 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000005ffc), &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x0, 0x401, 0x3, 0x8}, 0x2, 0x7, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x8b, 0x1, 0x1ff}) 2033/05/18 03:46:12 executing program 7: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000001000)={0x1, &(0x7f0000000040)=[{}]}) ioctl(r0, 0xc0184908, &(0x7f0000001000)) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x8}) 2033/05/18 03:46:12 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:12 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000020000)='/dev/sequencer\x00', 0xc0202, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000001880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000001840)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="84afd61f8b34ec84abcfba113f3da9de59ed46bcf04ebad30386fe6ac8e89a22ad3165f09f9fdc958c5710df3621266cb100f5e2c92e968cba7271d109be95c1859e84f98d5c1a686fc2a18949c691b706fd57c7f355c898ccbd538c43f75663ba89beac34e74e47f11aa1d36f25a5fe334b61e8bce220c94dbcabebba9f6129801b2585dc8a81c5b27b9e60d42077633ef4040bbc03a73aec4ff258efb54dae24b31c11f802bd0ab6b9705d45921271f9fab253a4c5e1e870e1e65630a18f7754b9c8dbcdae150cb254d187ade58da61b2900"], 0x1540}, 0x1, 0x0, 0x0, 0x2000c890}, 0x40) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="76d9a80100ff010000992793c0ebb25fbdb20ba8a0fe8cff0eb54c2db720f85c81daec323e7ee915c874c1ff73775b9d9d7f75ea23d24f9393905e77"], 0x1) getsockname(r0, &(0x7f0000000140)=@nfc, &(0x7f00000000c0)=0x80) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2a3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) [ 130.891139] hfs: can't find a HFS filesystem on dev loop3 2033/05/18 03:46:12 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 7: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:12 executing program 1: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 2033/05/18 03:46:12 executing program 0: mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r0 = open(&(0x7f0000267ff6)='./control\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000000)=0x2000000000000000) mkdirat(r0, &(0x7f00000189a2)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f000001aff8)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r1) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x80000) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000080)=""/67) 2033/05/18 03:46:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000e41fe0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x9, 0x8003, 0x8, 0x0, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x80000000, 0x10000}, &(0x7f0000000740)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000001cc0)={0x1, [0x0]}, &(0x7f0000001d00)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001dc0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="d72cb56813893f71e3892b03f60160f3a19fdb5c380538ae27468bc25610a8f5afa43d264d9df17584931e096915aa04398e66fa728170419d6e4889f110a7e1a4bb4c638e2d87815e869a1ebf193a917d32a74ce8005904e3cfd992fafc6a5a8e1d32c4cfc6a1c9cac466f4628ac8834fd4a619780f519cd8829f63d6a6dfae69037a7ac76ffd718f2c76529d5a024f0a30445b20e2448df6de100287b80d9075003712f98ff78bca3c59c8733357b5459756e5e4f44d64408aa5d00c7dd281ba7428e77909d378262bff99097e8312cfc9d5eb514618ac08cd6992", 0xdc}, {&(0x7f0000000200)="248657057d10ca21f787dac9ab20a1e32b070718586a061a7ddcdb167015a5854bf4cc37bf59e2c42928b89491e11bb1f0a0b648ebb7366a84c848c55b94a2e368f651031a4d1cd18f3faf7fa7aa042c712ca34775998ea1030e19178b77b9864685fb264765fbca20aa4173907f9d04a78f3954d0b656d7e076b5b62830a16d012a8dc9b434192f871dabaaa027193bf2bf94749d279b97ec67c98476ab79d5dea1232e137f9a784352e26125aa2b95cafe306e1aee8e4ddc06001f29d161c2031a7d2a71d1c371b856cf23520e457b03124da77c190a2acc", 0xd9}], 0x2, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x7, 0x2, 0x7c}}, @sndinfo={0x20, 0x84, 0x2, {0x8001, 0x200, 0x8001, 0x0, r3}}, @init={0x18, 0x84, 0x0, {0xb5ba, 0x20000000, 0x2, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x1, 0x401, 0x1, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x0, 0x0, 0x5, r5}}], 0xf0, 0x4}, {&(0x7f00000005c0)=@in6={0xa, 0x4e21, 0x3, @local={0xfe, 0x80, [], 0xaa}}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000600)="c131a164d29beac48d0c70fae78ee0c023d918308a2986010ab9e0c02beb17bad3766eb97cd1a81c15cf3a8c9b3ee9ea9b54814d247759", 0x37}], 0x1, &(0x7f0000000780)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x5, 0x1, 0x3, 0x3, 0xf02, 0x6, 0x10000, r6}}], 0x30, 0x1}, {&(0x7f00000007c0)=@in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x13}, 0x20a89d40}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000000800)="836ab9b267ac7c1efcb056e2e5fe1586cd51db0fe2a15ab77c29a2595ba0de4ead7908ce64f8bc345b62c692ce0775073d27b55986ee272a849985f2ac1801b49d3a679124be63441cee97c7a7a7f34dc45d90895b755c029bf8b2a6e4b642bec9918d2e0ae17222a9eed4e9da6b298cc79b2588855f476707a8d53e77f0245021b5fb5451ab881c6263b0c28932287ffc8b85f1b5cbe057ecc6e24b", 0x9c}, {&(0x7f00000008c0)="908859392247c5d0cf87fd6f6907cda707e3cc14bd1a336295e85245999ad484edb75bc9039dbb8cfcebc923014b31fd754a549356c04caccde43637932b28e21a96ae829a14baadd9cca2c7443fb57b96ad2310cca24e0bed", 0x59}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="ebc098cb790d97a118254fd7c1ad37687f392e68a7df626d9e0b0f1b8a72bc04031588be254b3ec27d2c53a8435d249c5c055f6ab6373a218ade2e5d90dec0e26f136d1177e81506ef32f1b6d690238113072df3243ef47ae4a92a376f9bb16f5bd6923babc563752986caf8313bf89060", 0x71}, {&(0x7f00000019c0)="8f5b356513ae0e59d51f592bb4126d95db158b900d6cbb7b2649c82061e55f964a4d64f2ee8eda8227b237d419177604ec0db34b95cc1f17e365fccf4e9c9fab292cc0ab6434658baba3c914f92a670b6b553e5587c56e060b118ff9f046", 0x5e}, {&(0x7f0000001a40)="8eb52f2864fc12edb8a28303db9e413911086208f9d329f0191b50c78a8bef5ca36fdfd67142b6b3249a0751651dd55b95e30df5318c3055c3a06b4a56d2448fafcd6f673d34d72345768d4c15a63de7ddc977d63c69dbdc39d110dc", 0x5c}, {&(0x7f0000001ac0)="bfe898a837da649b958de4e6357ffe79082770d9b7c52586cad278ad51a34dbb07d02327e9b7fa75af5b8b1e64dbae8fc0b05301ea6c7e4b6e31138caa2daf8565680fb21fa6b7d5d8", 0x49}, {&(0x7f0000001b40)="bef77562b495299ee10dad94b79104436b788f4334139771d0e403096bd2170fbe05b9d665a52454f9e715e2a75ebb5c8c370507d7bfd24929cfb1393f3cf9835942c95777598a9b5ca0459bf8a9e1a042c156879d3282fed9523f6d9d848902515653d57cdb5c608aa451db50dca0d6273d26ca2f12cbd24d30e6b260b9895183b261b47fe0dc80883f24cf0e141526ed28fe835c4bff7ed5efc79be387576942cf899f61b7a7833b9ef009747c471485f5515ca0816c268f6360744383bb36b3ddb7ee4a5c9a91b0e5ece3662feebc48430d5a7bbec7", 0xd7}], 0x8, &(0x7f0000001d40)=[@sndinfo={0x20, 0x84, 0x2, {0x1000, 0x4, 0x518d, 0x9, r7}}, @init={0x18, 0x84, 0x0, {0xcabd, 0xeb6, 0x1, 0x3}}], 0x60, 0x24000000}], 0x3, 0x48050) [ 131.135626] hfs: can't find a HFS filesystem on dev loop3 2033/05/18 03:46:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x22, 0xdf, &(0x7f00000001c0)="34b388bea774c9f37e566b85ad95ea7889b0aa7c8ba3dd7c8d73cb7e3f2869d88447", &(0x7f0000000200)=""/223, 0x8, 0x3}, 0x28) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/55) sendmsg$nl_route(r0, &(0x7f0000235fe4)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000011000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) 2033/05/18 03:46:12 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:12 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 0: r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000005a0099f0003be9000658ef2380ead4d48e003ccf00ed190e0208081600000000", 0xf35bd90f) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xfff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20042, 0x0) 2033/05/18 03:46:13 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) fstat(r0, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:13 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fanotify_init(0x6, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x85, "dee1c17de7609ff3f87da64a93e44a5879f4bc9a2094f5e6a017cf85016d956c653d7e0e7419067e174d5980a8cba08cacf576f9d4b7fc4100cef423af3dcec5b910d3b0fead66781fe3f501caaa9ff4a61ea9f83857a051c6b57c0c5ff1c0a26fb619566e889cdffd493187f30b2b979ac254a7c5989a4892bad10f0dde312aadae515d49"}, &(0x7f0000000340)=0x8d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000380)={r2, 0x8}, &(0x7f00000003c0)=0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) sendto$llc(r3, &(0x7f0000000180)="8fba71f91ae96f1175e33e187b105c4791d965a86f09c9c75c6580a337e7ffd69574ce5c6137c4c2d58d30ea7aad83a8cba4195d05375ed4074a474983c1c5c5f9a9ffb8e691b9eea8f02083157574bec7e6eb55e2a821bade223e6b01f2f8972b4d4b738dc1cf4b633534a263a5ef80feeb7482540951ebaf829009f1c1ad28fb16cb57cfe4ed5fa141387a535808ecda027ce68efff798efb92355fbd4d71000d4c72ae7e5e2d886df54899c2177485b6708472b6af030a7d8437f8882d3a87e1da2196336218869208e536aa3cfde5c0b5127d0b35e4b1e34a2e26fb0a5f3e42311d6d25f8e3b98", 0xe9, 0x8000, &(0x7f00000000c0)={0x1a, 0xfffe, 0x20, 0x1, 0x9, 0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1) 2033/05/18 03:46:13 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x2, 0x30, 0x0, 0x5}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x7fffffff0, 0x30}, &(0x7f0000000300)=0xc) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x200, 0x5, 0x8, 0x13, 0x0, 0x2, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x8, 0x1, 0xfff, 0xf488, 0x36, 0x1, 0x7, 0xbdd9, 0x100000000, 0x6, 0xaa39, 0x1, 0x0, 0x20, 0xf14, 0x10001, 0x3, 0x7, 0xfffffffffffff001, 0x3, 0x0, 0x1, 0x7b2, 0x4, 0x8, 0x2, 0x0, 0x101, 0x1, @perf_config_ext={0x1, 0x20}, 0x1004, 0x9, 0xdffe, 0x7, 0x3830b95c, 0x1ff, 0x6}, r3, 0x6, r1, 0x2) 2033/05/18 03:46:13 executing program 4: r0 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x401, 0x1e, 0x2, 0x1f, "83514e548a3f57b2b219bcaca82f56ac840f5ccba1d424906fcfd18c82ea2daa"}) r1 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x200000400000002}, 0x1c) sendmmsg(r1, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001500)}}, {{&(0x7f0000000400)=@in={0x2, 0x4e24, @rand_addr=0x7}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000003740)}}], 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0x3, 0x1, 'client0\x00', 0x1, "e3bf4d103caa341e", "3f53c9bc385c26bd5301016aace1a66f49bcec27862189e82ee723bb27894995", 0x8, 0x2}) accept$netrom(r0, &(0x7f0000000200), &(0x7f0000000240)=0x10) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000001c0)=0x6000) syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x8401, 0x6a8000) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000001a40)={@dev, 0x0}, &(0x7f0000001a80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001ac0)={@loopback={0x0, 0x1}, 0x5c, r3}) sysfs$1(0x1, &(0x7f0000000280)=':\x00') 2033/05/18 03:46:13 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 0: socket(0xa, 0x2000000001, 0x0) 2033/05/18 03:46:13 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:13 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 132.172829] __ntfs_error: 80 callbacks suppressed [ 132.172854] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 132.186261] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 132.194608] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 132.198344] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x58b, 0xffffffffffffffff, 0x8000, 0x401, 0xe8e, 0x8, 0x40000, 0xbe, r1}, 0x20) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000700)) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) mount(&(0x7f0000463000)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0, &(0x7f0000e2ef53)) r3 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) fchmodat(r0, &(0x7f0000000800)='./file0/file0\x00', 0x0) umount2(&(0x7f0000a23000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) readlinkat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000740)=""/180, 0xb4) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000006c0)={'irlan0\x00', 0x5}) add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="9b848735cefadfb9160c6511a5a9df6ceba71040df46ae12eeafe5d60827787c1df5f190e59de5c69aeebbc0547c8691ad78386a3ffed22064a7f55fbfee51e0b18de4a3fe5e222496cb9ea83912236fa09095a8f9e0461b6e4290d2454eb071de579e6e4ca1d729aedf1cdd236e3c349b4064bf7c5ddee554feda53fd96529e53ee9614a839d869d78b859841e4d44cdf0b698b3fcc1ee556835afc5b4bc9982bfde2a0c3555bb615715a91257d83b3bd3d1082c86042113563bce33d988b0b6709e6a509501f0cc1aa6327c7e10b98d5cc5ea7", 0xd4, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000300)=[{&(0x7f0000000080)="311eb92cdc38e45ea6e507b86afeac7ce9c0775e289a6e8065059983c019bd765e2c5e4d734c8ccaf2c55761ccc1283bf46844b08c8ce9b9803fafd35babd3b47823e31f733c473af0eb6f749ec1bed47dbfc466952360a9b07aa952822bb7c200be88023a04f54f5e83801f58ec38ca03a21acc984170171059eb39adf2cc68affa86187581e0e81f33bd092a31d08a8fe20bde6d30eecbb29fda7bac8d489e3c", 0xa1}, {&(0x7f0000000600)="535fca11d957b1b7c01ecf40177cea0fbb05637190cf9296cedba014f768230aecfbba5b8c94f37bbf7a00d5e27a077bed76f4ec5cb18209287e7d3012b4ac1dc419b510c026c251021a77c7e357dea314cbf1aa928778aa02acc035e071616f7f3ed6ad906a3eb89c433c0feb9086a275566b79674f386974b51d7626bec27143148811e21983b0e2a0c87869cc6304c0ed791db64cdbaa877c95f2", 0x9c}], 0x2, r4) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000500)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) sendto$llc(r2, &(0x7f0000001200)="23fc6fc99e714e9e6fd43f8fa21f888d6780b8afbd16cba03a5f74b797b2e11ce2a94b20b5d46d25376b83438a9c8218549b068f3337eae22002f13adeb6497a0813d251b7ec9e7a6415673b171ad97eafc5ec869eb20568b5b9ee287e8b232d31fc366e93fb3e0f8348604579e79170cf70902ebb86fe17923c1de8df09083b5364e4794f3cebf08a7869c48bb90fd6b5e81c45", 0x94, 0x0, &(0x7f00000012c0)={0x1a, 0x308, 0x8001, 0x4b7, 0x4, 0x5}, 0x10) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000580)={0x5, 0x10, 0x1, r0}) [ 132.218747] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 2033/05/18 03:46:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x230a00, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000780)) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0), 0x4) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x5, &(0x7f0000000580)=[{&(0x7f00000002c0)="c874293041f0def89d58e13274c1d07f8a40f99d1448f048148990ae8d94ac4ac5ddd3fab926341f0b97e6cff5f8bfb3550d7d1d297a47dad1168672f03c74dbba730aeea2832ad583f744677696c4785a04fc4730e28bb51293", 0x5a, 0x100}, {&(0x7f0000000340)="3cd4f327c845e783ac81c4f09f6b77839d08322d19", 0x15, 0x8000}, {&(0x7f0000000380)="27d398b5292f54dc787b586d6e7fa349117c1c1b0817bf0d1813d6f0df8ce5edc4191b262b7e72eb9985946e0cb68b1ec78e0f6c9a890488266d9b1f2b91951f4e56691566e28d312e7fc79e6f76d7fe1dc1ad23b2357f", 0x57, 0x200}, {&(0x7f0000000400)="bd2fe7453987cb29f916887a2342a9bb2eb6d24ba02e5782ca233d1b47d3aff997bb06764a6f0f18f23e62b598e99cd264de2ee9eb8c6f36f5e9b5a1001c1ec4b4286f3f8da7c1c764014017479a644604098f57f044f3b3d987c4d078cf3fd6df15e4f79df572e3431c7de1f153200549272f8bfab7d42f2a45fec644c4bb7061466e47cdd0dc44a6bb118d89fe0582f1eb796d106b0a1b1f68c4a9ff7fd7fa049cc1941ab2476ed0efe06d47053d5eb04e585f43a89da84b3a577ac4c084ded9a62da58f25f7bea8225c56e400afcab8febccbbffd84ede1173198ff81d5ea08f219db34ff", 0xe6, 0x101}, {&(0x7f0000000500)="e46c3f51a4bb15ba6c3b7d54ae699c73fd7613dd8feb6bf67991a2e7f98e4b3b181a37f1bbf0157a0e7410eea8fea5585090131cfcff23a4c19a2637acddf26a812b45423caad3381c440a5dc2", 0x4d, 0xffffffff}], 0x305000, &(0x7f0000000600)={[{@resize='resize', 0x2c}]}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x9, 0x5add, 0x5d5, 0x1ff, 0xfffffffffffffffa, 0xffffffff7fffffff, 0x884, {0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x6, 0x80000000, 0x101, 0x1, 0x1000200000000000}}, &(0x7f0000000700)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000740)={r1, 0x3db}, 0x8) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="58465342000002000000000000008000000000000000000000000000000000005bfc2f1a415c41dab49211bccbd5f4cb000000000000000700000000000025a000000000000025a100000000000025010400000800008000000000010000000000000000b4a4020001000002000000000000000000000000090908010f", 0x7d}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="edffffffffffffff"]) [ 132.403838] XFS (loop0): unknown mount option [íÿÿÿÿÿÿÿ]. 2033/05/18 03:46:14 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)="ff020400001b000500000000000000000000000000000205", 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000f3afc2), 0x0, 0x0, &(0x7f0000b86000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2033/05/18 03:46:14 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f00000001c0)=""/2, &(0x7f0000000200)=0x2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000a80)=""/4096) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x2, 0x7fffffff, 0x81, 0x81, 0x7}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:14 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 4: r0 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="f2", 0x1, 0xfffffffffffffffc) keyctl$clear(0x7, r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x101000) 2033/05/18 03:46:14 executing program 0: prctl$seccomp(0x2b, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3d, 0x301001) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x4, 0x0, [{0xc000000f, 0x66, 0xffffffffffffff7f, 0x6929, 0x8}, {0x4, 0x77f3, 0x5, 0x3, 0x8}, {0x40000007, 0xffffffffffff7fff, 0x5, 0x9, 0x2}, {0xd, 0x3, 0xffffffff, 0x36cd, 0xfff}]}) [ 132.534184] hfs: can't find a HFS filesystem on dev loop7 [ 132.547656] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. [ 132.567072] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 132.571190] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 132.583586] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 132.595748] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 0: unshare(0x40600) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, &(0x7f00006f1000)) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000003fe0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x20, @local={0xfe, 0x80, [], 0xaa}}}, 0x5, 0x3, 0xd0, 0x7fffffff, 0x2}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e20, 0x1000, @empty, 0x6}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="0c0d9ae2905ff3dfec8e1d6772db15ce8861b7427cbe85f4b46d8a9eb747f2b7cd6dc4d148c4ab0c45d6821736408914c4a79499cf91fd02b72fd1b7bc89c8329f8e5b539fd33c3c03afedfd2cedc129461bf42eb1fd421c802b037433240935303cf70d5b19f689207601c1f5224b201040b7e101ba63484dbfaef475f1899c073e77a039c8722a1582dd3523a5d370b05761daf804d477783236c8921dafdea42806d340669161ea70d7beeb0ba24e69f1f8d287942234d4811abac49f37d0de21cc2ca004fbb9afccecdbe1663c07ecf278df1b67329c97", 0xd9}, {&(0x7f0000000180)="ea759cfc4b1baf37c8658d7f869e7462f2c9eb007096aea14af5756c25b721fc17a66971eb62d89210e43c05f936b3d11c04a57037e2fdcf480b8b76be36bb730ac6141d4d48dcbabf2f57c101da436d8137a601150dc8419be1489972372cbc64f0bc20de9d61c80be12bf9054ae29ac1e864610cb227112ffb1ef1df5566e50e85960e507db0bec40c0e09944350df62bf5258ab18a0ed9d01403c0860f2d590fd8e35976a5bd365753e5b3d119fa2ad9f98f31aca11e7f145155a19f5227711fcf2b983bebee9c40f3587df5ad89e381c5a2cdd112fd62f5ad9", 0xdb}, {&(0x7f0000000280)="b6e7439921059081302b6edf3326881ab17bcbae9f0ef8b0c49abbecc196ea9cd07f", 0x3bc}], 0x4) 2033/05/18 03:46:14 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x17, 0x80803, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000100), 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x1000001, 0x108011, r1, 0x0) 2033/05/18 03:46:14 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000001c0)={0x3, r0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a80)={0x8, {{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, 0x1, 0x6, [{{0xa, 0x4e21, 0x70000000, @remote={0xfe, 0x80, [], 0xbb}, 0x10001}}, {{0xa, 0x4e22, 0x3, @empty, 0x7}}, {{0xa, 0x4e24, 0xa9, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, {{0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0x11}, 0x7}}, {{0xa, 0x4e24, 0xf2c, @loopback={0x0, 0x1}, 0x1ff}}, {{0xa, 0x4e20, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7fffffff}}]}, 0x390) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x800000000000000, 0x4000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000a80)=""/4096) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:14 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, &(0x7f0000000000), &(0x7f000000cffc)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x521000, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e23, @rand_addr=0x2}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000c8030000ffffffff500100005001000048020000ffffffffffffffff300300003003000030030000ffffffff04000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000f0005001000000000000000000000000000000000000000000000000300061646472747970650000000000000000000000000000000000000000000010000000000000000000000000000000280069636d70000000000000000000000000000000000000000000000000000012fdff00000000006000484d41524b00000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000ffffff00ffffff00000000ffffffffff4e244e234e214e213f00000001000000bd000000050000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f80000000000000000000000c100000000000000000000000000600053455400000000000000000000000000000000000000000000000000000003000000800000000002000001800000018000000000010000800000000606000700000004000000090000000500000004000000000400000900000001c80100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007fdecc410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e800000000000000000000000000000000000000000000000000280069636d7000000000000000000000000000000000000000000000000000001b010101000000002800434c415353494659000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000d1c4"], 0x428) 2033/05/18 03:46:14 executing program 1: r0 = add_key$keyring(&(0x7f0000001180)='keyring\x00', &(0x7f00000011c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200)) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) [ 133.074347] hfs: can't find a HFS filesystem on dev loop7 2033/05/18 03:46:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2033/05/18 03:46:14 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x5, &(0x7f00000001c0)=0x4) 2033/05/18 03:46:14 executing program 5: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 2: syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000237fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x6, 0x87, &(0x7f0000000000)="b08994eef6e70a6eb6a2eb8fd5876bd1bc56c6d396b91ea06a95c1ae90c261994b4fc0142e4a6c2ab5a655ab34a5522499e0234ad86eb6185eb91accf01965981893bb8005eeb397ac1d47460a559d6cd72761c6966b9e682d90e17098288552dd793b061cc7a43c4f3ecbdceb1d31e9e73fdc88469a114548348b4f9742905bf1ad239dfd4d01"}) 2033/05/18 03:46:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa3e3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32", 0x43}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x90400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x0, 0x1, 0x4, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0x5d, "c8e220a3ffbe1b009eb2ed9bc15252070b5e4cd15c258f5c1a093c32495162a798b8a939bc6c26a1c1e70d7099976ed5da6070419f29aa00ee3c3af5b533c1001eaeb476931be783f9a645f9f0cd995e7c1fb8f7a065f5ccd14864e872"}, &(0x7f0000000140)=0x65) [ 133.256921] hfs: can't find a HFS filesystem on dev loop7 2033/05/18 03:46:15 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x3fc, 0x0) recvfrom$ax25(r0, &(0x7f0000000140)=""/240, 0x16e, 0x2000, &(0x7f00000003c0)={0x3, {"25631743e1b60f"}, 0x5}, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast=0xffffffff, {[@timestamp={0x44, 0x4, 0xff, 0x0, 0xffffffff}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000280)=0x6e5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)="4afdd91590817f46298cb5f8633bf9ddbbd1d4145369a309f914f1a3ee4cfb33a29e1b554c9498b111600173a72efbe344ac1c214bf95007efcff41629bf570ceed8ca481a756a3b80624529e8cca49308e9fd1cfb2f2e1d719d8dc246de41affc619395daf4027d2ecbcd3d41f0393fddd87bde8336dceac74b2d464f7e236dbbcb6a07786fb66c75d5234d83ac7bc1ba36b6af5174335ab83ce3a385b06dbad8bb2d8852257ca601faee2dc5e38f1328a3d95872778cf4739817af859ccb34bf6c29cc4788b4a118c955f59b9ef6ea24f942164e1a460090561e7f164ffb6bee4bef4f87d9dd470b5b10f0c05fb046ba9a730720a5", 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'rose0\x00', 0x200}) flistxattr(r0, &(0x7f00000002c0)=""/189, 0xffffffb1) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x0, 0x1, 0xfffffffffffffffe, 0x80000001, 0x3, 0x85, 0x89d, 0x9, 0x0, 0xfff, 0x100000000, 0x20, 0x8}, {0x1, 0x9, 0x180000, 0x10000, 0x9, 0x1f, 0x5, 0x6, 0x5, 0x4, 0x5, 0x4a66b8d9, 0x5}, {0x1, 0x6, 0x20, 0x66, 0x4, 0xf81, 0x100000000, 0x1, 0x4, 0x9, 0x1, 0x1000, 0x5}], 0x9}) 2033/05/18 03:46:15 executing program 0: socket$inet6(0xa, 0x80003, 0x0) perf_event_open(&(0x7f0000bba000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0xac, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, @IFLA_IFNAME={0x14, 0x3, 'lo\x00'}]}, 0x40}, 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000480)=0x1e) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000380)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a402f1265047502f6c2dd9f655a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb050000000000000000000000000044b800e87953ed64ae2f3f5f53c78f80293abf2a8486bd65d593cea221df08495ace8ea1f739deb9394733c7f2a8bc8469c6ab2ec67eeec0f89c726db45b9fbf07b5e70840d3520ab33cd4619123cbd3b6246e1c0fb86835c5a2d52e02d7f8da762ba15a81fafeb2c9549175") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200)=0x7, 0x4) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)='ubifs\x00', 0x1004, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)) 2033/05/18 03:46:15 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) lseek(r0, 0x0, 0x3) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:15 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') exit(0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f00000000c0)="4d146b75def116a87801cf3ecce973c9ec28076551966781d5e13f2e754ff5d9c2d72d171287da823a956a2ffcda452996714e5719f1fd3e2709deb0a69a719755f0840cf2d212445b3bdb3e128c23ad81269fa9ad16182f2f02240ed4589f5f95", &(0x7f0000000000)=""/50}, 0x18) fgetxattr(r0, &(0x7f00000002c0)=@random={'osx.', 's@^\x00'}, &(0x7f0000000380)=""/219, 0xdb) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() ppoll(&(0x7f00000002c0), 0x0, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340)={0x400}, 0x8) syz_fuseblk_mount(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00', 0x6000, r1, r2, 0x5, 0x2, 0x28) 2033/05/18 03:46:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x800, 0x0) read(r0, &(0x7f00000002c0)=""/155, 0x9b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x66, "e90dd74f3ec71e9f1b6660d9675d65a91b0028e1434fa9962e2c1293df6e5eceaa422a5f160ba032ff361fc7206be994152d05ad3499e17e956b08e8ad736cf422924393de006e50263dabc716ef5a78537ffb1e84ae9a47fbc8f165405c070bd6cef0788bf5"}, &(0x7f0000000180)=0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xffffffffffffffc0, 0xf, 0x5, 0xfffffffffffffffc, r2}, &(0x7f0000000200)=0x10) 2033/05/18 03:46:15 executing program 6: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x5, 0x20}) close(r1) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='gre0\x00', 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:15 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00006cdfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad", 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x600100, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x7f, 0x1, 0x5, 0xffffffffffffffff, 0x10000, 0x7fff}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f000014b000)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) 2033/05/18 03:46:15 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 133.820409] FAT-fs (loop3): bogus number of reserved sectors [ 133.826333] FAT-fs (loop3): Can't find a valid FAT filesystem 2033/05/18 03:46:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x8, 0x5, &(0x7f0000000240)=@framed={{0x18}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000000280)='GPL\x00', 0x97, 0x94, &(0x7f00000002c0)=""/148}, 0x48) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x7}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x101, 0x18}, 0xc) 2033/05/18 03:46:15 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14, 0x1}) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r4 = getgid() keyctl$chown(0x4, r2, r3, r4) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000001c0)={0x3ff, 0x3, 0x8, 0x0, 0x0, 0x5, 0x100000001, 0xc5, 0x207, 0x2, 0x26, 0x23, 0x0, 0x6, 0x26bbb17d, 0x7, 0x1f, 0x1, 0x1}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x1c, {0x2, 0x4e21}, 'ip6tnl0\x00'}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:15 executing program 0: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:15 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 134.140909] FAT-fs (loop3): bogus number of reserved sectors [ 134.146819] FAT-fs (loop3): Can't find a valid FAT filesystem 2033/05/18 03:46:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00004b4000)=[{}], 0x1, 0x0) 2033/05/18 03:46:16 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x9, 0x800) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x1, 0x1, 0x0, 0x9}, 0x1, 0x7ff, 0x9}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) r3 = gettid() sched_getaffinity(r3, 0x8, &(0x7f0000000240)) 2033/05/18 03:46:16 executing program 0: recvmmsg(0xffffffffffffff9c, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/182, 0xb6}], 0x1, 0x0, 0x0, 0xffffffffffff0035}, 0x2}, {{&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000340)=""/102, 0x66}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, &(0x7f0000001500)=""/214, 0xd6, 0x5}, 0x91}, {{&(0x7f0000001600)=@ipx, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/235, 0xeb}, {&(0x7f0000002780)=""/7, 0x7}, {&(0x7f00000027c0)=""/229, 0xe5}, {&(0x7f00000028c0)=""/98, 0x62}, {&(0x7f0000002940)=""/193, 0xc1}, {&(0x7f0000002a40)=""/27, 0x1b}], 0x7, &(0x7f0000002b00)=""/4096, 0x1000, 0x4}, 0x4}, {{&(0x7f0000003b00)=@hci, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003b80)=""/237, 0xed}, {&(0x7f0000003c80)=""/24, 0x18}], 0x2, &(0x7f0000003d00)=""/218, 0xda, 0xffffffff}, 0xffffffffffffffff}, {{&(0x7f0000003e00)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003e80)=""/101, 0x65}, {&(0x7f0000003f00)=""/74, 0x4a}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/70, 0x46}, {&(0x7f0000005000)=""/55, 0x37}, {&(0x7f0000005040)=""/129, 0x81}, {&(0x7f0000005100)=""/181, 0xb5}, {&(0x7f00000051c0)=""/102, 0x66}], 0x8, &(0x7f00000052c0)=""/156, 0x9c}, 0xfa}, {{&(0x7f0000005380)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000006700)=[{&(0x7f0000005400)=""/244, 0xf4}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/175, 0xaf}, {&(0x7f00000065c0)=""/27, 0x1b}, {&(0x7f0000006600)=""/215, 0xd7}], 0x5, 0x0, 0x0, 0x5}, 0x7ff}, {{&(0x7f0000006780)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006800)=""/234, 0xea}, {&(0x7f0000006900)=""/15, 0xf}, {&(0x7f0000006940)=""/252, 0xfc}, {&(0x7f0000006a40)=""/123, 0x7b}, {&(0x7f0000006ac0)=""/221, 0xdd}, {&(0x7f0000006bc0)=""/208, 0xd0}], 0x6, 0x0, 0x0, 0xff}, 0x2b80000000}, {{&(0x7f0000006d40)=@nl, 0x80, &(0x7f00000071c0)=[{&(0x7f0000006dc0)=""/184, 0xb8}, {&(0x7f0000006e80)=""/231, 0xe7}, {&(0x7f0000006f80)=""/102, 0x66}, {&(0x7f0000007000)=""/168, 0xa8}, {&(0x7f00000070c0)=""/168, 0xa8}, {&(0x7f0000007180)=""/60, 0x3c}], 0x6, &(0x7f0000007240)=""/225, 0xe1, 0x100000001}, 0x9}], 0x8, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000007540)={0x0, @in6={{0xa, 0x4e21, 0xff, @empty, 0x5cb7}}, [0x9, 0xffffffff, 0x1, 0x2, 0x138, 0x7, 0x3, 0x1, 0x0, 0x800, 0x4, 0x8, 0x10000, 0xf4c3, 0x7]}, &(0x7f0000007640)=0x100) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000007700)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000007680)={r1, 0x2b4}, &(0x7f00000076c0)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) 2033/05/18 03:46:16 executing program 4: clone(0x200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='io\x00', &(0x7f00000000c0)="25406367726f7570bd706f7369785f61636c5f6163636573735c2f00", &(0x7f0000000100)='io\x00', &(0x7f0000000140)='io\x00', &(0x7f00000001c0)='io\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f000042cff4)='io\x00') pread64(r0, &(0x7f00009f3000), 0x352, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x1) lseek(r0, 0x0, 0x0) lseek(r0, 0x0, 0x0) pread64(r0, &(0x7f0000ad8f46)=""/186, 0xba, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x27e, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1060, 0x3) 2033/05/18 03:46:16 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 134.900607] hfs: can't find a HFS filesystem on dev loop2 [ 134.910298] FAT-fs (loop3): bogus number of reserved sectors [ 134.916237] FAT-fs (loop3): Can't find a valid FAT filesystem [ 134.923264] hfs: can't find a HFS filesystem on dev loop5 2033/05/18 03:46:16 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffffb, 0x125082) dup3(r0, r1, 0x80000) r2 = socket(0x13, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20000000, 0x521000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f00000000c0)=""/89) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) write(r2, &(0x7f00000014c0)="240000004e001f0014f9f4070008f414020806f70d000100020001000400000000040008", 0x24) 2033/05/18 03:46:16 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/189) 2033/05/18 03:46:16 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x10000, 0x38, &(0x7f0000000200)=""/56}]}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:16 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:16 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x800000010f, 0x81, &(0x7f0000000040), &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e0e5a06"], &(0x7f0000000080)=0xe) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, [0x1f, 0x1, 0x73, 0x6, 0x3, 0x3, 0x43, 0x5, 0x0, 0xca, 0xfffffffffffffffe, 0xff, 0x20, 0xcb, 0x83899e6]}, &(0x7f00000001c0)=0x100) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000200)={{0xfff, 0x7, 0xff, 0x1000, 0x486a, 0xe4a}, 0x8}) [ 135.179541] hfs: can't find a HFS filesystem on dev loop2 [ 135.195824] hfs: can't find a HFS filesystem on dev loop5 2033/05/18 03:46:17 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000012000)=0xffffffffad36b24d, 0x4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), 0x2) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xd6f, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000100)=0x3) socket$inet_icmp(0x2, 0x2, 0x1) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000180)=0xff) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x1110, 0xffffffffffffff9c, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000300)={r4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x38, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x1, 0x3}, @free_buffer={0x40086303, r4}, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x2}], 0x94, 0x0, &(0x7f0000000200)="842acf441a16a1b4f6c0e9a4d06c305aa4625df3ccf3bc13959df2729cf81eda312fdc867a06d2923825807ecfdbeda94bc9e0a7fde60301eb2feca9eff7a18af343d2a6fea5d5125545898f4aa73bdbfc5d75d411687c29f4e8ebee4129fc777ab84e0c35206c892b832951a4f6090cfbed637287066e7cec412a43cc0baa8775ca561c4749974ffb6522896b99307cf46c7628"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000480)=0x783) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) read(r0, &(0x7f0000000040)=""/69, 0x45) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x5, 0xc5, 0x1f, 0x6, 0x7f}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={r6, @in6={{0xa, 0x4e24, 0x80000001, @local={0xfe, 0x80, [], 0xaa}, 0x100000000}}}, 0x84) 2033/05/18 03:46:17 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in, 0x4e23, 0xffffffffffffff6d, 0x4e21, 0x3, 0xa, 0x20, 0x80, 0x87, r1, r2}, {0x40, 0x1, 0x7cc6, 0x3, 0x1, 0x1, 0x7d, 0x5996}, {0x1, 0x0, 0x1000, 0x6}, 0xa4, 0x6e6bbe, 0x3, 0x1, 0x1, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d2, 0x3c}, 0x2, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x34ff, 0x5, 0x0, 0x1, 0x0, 0x81, 0xc7c}}, 0xe8) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r3, 0x1, &(0x7f0000000180)="d7e3") geteuid() 2033/05/18 03:46:17 executing program 0: r0 = getpgrp(0xffffffffffffffff) getpgid(r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x7) read(r1, &(0x7f00004bdf32)=""/206, 0xce) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {0x0}, {}, {}, {}]}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0x3, 0x4) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x2}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x1a, 0x4) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)) 2033/05/18 03:46:17 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xfb, 0xad, &(0x7f00000001c0)="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", &(0x7f0000000480)=""/173, 0x6, 0x2}, 0x28) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xd91, 0x80) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) fcntl$notify(r1, 0x402, 0x8) 2033/05/18 03:46:17 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 4: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000040)={0x6}, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'syzkaller0\x00'}, {0x20, 'erspan0\x00'}, {0x20, 'syz_tun\x00'}, {0x20, '\\'}], 0xa, "a2c493c26f55abee9521094394ea559e0dcc094c7b06e5740314c1c62a7e6d99a8d410de66f103a7bb8cb4f2ba2591bd9910b7c5c44105b769ff71e7c9f09fbaeb772eccb088efcc24c59c42631dc7c4b50ee56ef75844df8373c506d4"}, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000bc0)={0x874f, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x9, [{{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e21, @rand_addr=0x8704}}, {{0x2, 0x4e23, @multicast2=0xe0000002}}, {{0x2, 0x4e21, @multicast2=0xe0000002}}, {{0x2, 0x4e24, @loopback=0x7f000001}}, {{0x2, 0x4e20, @multicast2=0xe0000002}}, {{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e22}}]}, 0x510) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x5, 0x870, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000000), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, '\x00', 'nr0\x00', 'lo\x00', 'erspan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xa0, 0xd0, 0x100, [@m802_3={'802_3\x00', 0x8}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'ifb0\x00', 'ip6_vti0\x00', 'dummy0\x00', 'syzkaller0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xe8, 0x188, 0x1c0, [@limit={'limit\x00', 0x20, {{0x0, 0xffff}}}, @pkttype={'pkttype\x00', 0x8}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfff, 'syz1\x00'}}}, @common=@log={'log\x00', 0x28, {{0x0, "a91970ffbb2e821248c1ba64ed6f78d69ce862d32f9ae1192bbc9caa0871"}}}]}, @common=@mark={'mark\x00', 0x10}}, {{{0x1f, 0x0, 0x0, 'syz_tun\x00', 'vcan0\x00', 'syz_tun\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'ifb0\x00', 'syzkaller0\x00', 'dummy0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:cert_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsh0\x00', 'syzkaller0\x00', 'yam0\x00', 'erspan0\x00', @random="f6ea749471aa", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1c8, 0x1c8, 0x1f8, [@connlabel={'connlabel\x00', 0x8}, @comment={'comment\x00', 0x100}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x8e8) [ 135.818502] hfs: can't find a HFS filesystem on dev loop5 [ 135.826566] hfs: can't find a HFS filesystem on dev loop2 2033/05/18 03:46:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x10000, 0x38, &(0x7f0000000200)=""/56}]}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:17 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f000009e000)={0x0, 0x0, &(0x7f000038f000)=[{&(0x7f0000000000)="b4b4a10b35bfdfbb1ba67e07411f3c5b63b22399beec78c9551bd854314505f62013bb4eb3879b8c7998dae3d24c44e2108c63d0d979662cf169f5441954d43150a7985ca812ee8d255924908d1554654a4876a62fe2b9b458a6178225b9", 0x5e}], 0x1, &(0x7f00003bb296)}, 0x0) 2033/05/18 03:46:17 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:17 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 135.977423] FAT-fs (loop7): bogus number of reserved sectors [ 135.983338] FAT-fs (loop7): Can't find a valid FAT filesystem 2033/05/18 03:46:17 executing program 4: mmap(&(0x7f0000618000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000000)={0x0, ""/79}, 0xffffff73, 0x0, 0x2000) 2033/05/18 03:46:17 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:18 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x10000, 0x38, &(0x7f0000000200)=""/56}]}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:18 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:18 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:18 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000040)=0x665f) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) r2 = msgget$private(0x0, 0xc0) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000001c0)=""/152) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000280)=""/45) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:18 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000001340)="462a6c03b2f7a0e46f8e4789d71e3a0edffe8c4c065cea78c2a22b2754c9176acf232296dd8db74920fc219e084a2a6cd1bdab8e26986fb94c787fae351e5fa9f15c73", 0xffffffffffffffd6}, {&(0x7f0000001200)="24706618b733896c7befbc82b4821444b9c9a70d6da66cfe51deb7a423a3ef1c7c85f4f71d239d5f72479e113f059f94642401ece8d7f6e6044d282f466e0d0bea268e084840f897d61e581a93276d003dd00c4165ec131f6b6af91d27736fb973f031d3439da24580277c7dd59b76d98274299cf1c407a3e8908089ed2d901d4e45070bd32833e932d7e9aa65141a9eda7e07a7fad20fa488d9ed4e5496548777be65d8c0dfe2089ae14adfacccbf1995763a662728ff8c012662cb7b2d16476147074eaedb5761432969b418452f27be24c9bc56029da747ead51f1ff42157ba99497bed792cfd80192c7232b6ce54ab87449eae0758", 0xf7}], 0x3, 0x0, 0xfffffffffffffd1e, 0x4}, 0x40000) 2033/05/18 03:46:18 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:18 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1d, 0x80002) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x40, 0x2000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x10}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xe, 0x20, 0x1, 0x9, 0x1, 0xffffffffffffffff, 0x4}, 0x2c) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000100)=0x2, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000500)) r3 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="665f600e95611f0de3a7b78880474ed8cfd4", 0x12, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) futimesat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r4, r5/1000+30000}}) r6 = request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='wlan1wlan1\x00', 0xfffffffffffffffa) socket$inet6(0xa, 0x3, 0x1ff) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x6627, 0x400000) keyctl$link(0x8, r3, r6) [ 137.196066] __ntfs_error: 66 callbacks suppressed [ 137.196075] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 137.209385] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 137.221464] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 137.245210] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 137.247546] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 137.253740] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 137.262081] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 137.262095] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:19 executing program 0: syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x2) r0 = socket(0x1d, 0x6, 0x5) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x84200) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8001, 0x1}, {0x100000000, 0xffffffffffffffff}, {0x8, 0xfff}, {0x200, 0x800}, {0xff, 0x1}, {0x8, 0x1000000010}]}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x65, 0x5, &(0x7f0000000000)=0xaaae, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003fd8)={'vcan0\x00', 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2000, 0x0) sendmsg$can_raw(r0, &(0x7f0000001000)={&(0x7f00000001c0)={0x1d, r2}, 0xfffffffffffffe8d, &(0x7f0000003ff0)={&(0x7f0000000200)=@canfd={{0x1, 0x7fffffff, 0x3c, 0x7ff}, 0xb, 0x1, 0x0, 0x0, "8ae56a22d4c08ce7eeb1cf1cdc349d4f6770f6a5bcba19e82adfa5ada732c97bad171e0af4f09bc20c5d88bbd1d5f2c1fb94a9b36d69639f726f39b26f6fc42d"}, 0x10}, 0x1}, 0x40000) uselib(&(0x7f0000000040)='./file0\x00') [ 137.274141] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 137.316646] FAT-fs (loop7): bogus number of reserved sectors [ 137.322553] FAT-fs (loop7): Can't find a valid FAT filesystem 2033/05/18 03:46:19 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 137.342513] ntfs: (device loop7): is_boot_sector_ntfs(): Invalid boot sector checksum. 2033/05/18 03:46:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x1, 0x0, [{0x10000, 0x38, &(0x7f0000000200)=""/56}]}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:19 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0x0, 0x15}) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2033/05/18 03:46:19 executing program 6: syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0xffff, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="05acf857c2a71a31e6ed9a713d52a8cdd80ef30cefd57e1b1dee33c2854b22b71ec88aef8b2db0493f604d5e8a31b113e3f36b0cde1dfc6d78392f7b1ba2202415efeb9e93e2d99447e1191be8d4290a7c28a0aa0cacf6250de709be30b4464f9da811ba6587153314cf28a99c8d1ce3ae72a072d2b409cf3f74b8e55a7d74e8a27a7b0a1245062e6c57ec", 0x8b, 0x3}, {&(0x7f0000000300)="5b94edde94e6", 0x6, 0x6}, {&(0x7f0000000340)="03604fa0534df28b1f57b834c2cd1f4d90c747e99ffd9c304ee3dd1a4724400095b823ef6db8d748be336bf245531774db81069dbac3d0cbf7344143f3132850cfc10e2478000f6f09ae54c0c4c0b7580799e9954b", 0x55, 0x1}], 0x100000, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c63726561747f723d6ffe33f62c00"]) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000640)=r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={r1, 0x3, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x20) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000006c0)={0x0, &(0x7f0000000680), 0x1, r1, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0xfffffffffffffffe, r1}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0xa800, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0xc00, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 137.499286] can: request_module (can-proto-5) failed. 2033/05/18 03:46:19 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 137.570828] can: request_module (can-proto-5) failed. 2033/05/18 03:46:19 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 2033/05/18 03:46:19 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x5, 0xfffffffffffffff9, 0xfffffffffffffeff, 0x12, r0, 0x4}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xf}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x5a0, 0x3c0, 0x0, 0xffffffff, 0x0, 0x0, 0x4d0, 0x4d0, 0xffffffff, 0x4d0, 0x4d0, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d4, 0x100000000, 0x3, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, [], 0x12}, @ipv4, @gre_key=0x7, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0x3, 0xfffffffffffeffff, 0x40, 0x100, 0x40, 0x608}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x4, 0x3a9}, {0x8, 0x7a4d, 0x10001}}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x8, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @ipv4=@loopback=0x7f000001, @icmp_id=0x64, @icmp_id=0x67}}}, {{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @icmp_id=0x67, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x600) [ 137.713253] FAT-fs (loop7): bogus number of reserved sectors [ 137.719252] FAT-fs (loop7): Can't find a valid FAT filesystem 2033/05/18 03:46:19 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x7ff, 0x0, {0x0, 0x3, 0x2, 0x2, 0x2}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = semget(0x3, 0x2, 0x595) semctl$SETVAL(r2, 0xf3a54aa8dbb05d6a, 0x10, &(0x7f0000000140)=0x81) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)=0x4) r3 = syz_open_pts(r0, 0x8000000006) ioctl$TCSETSW(r3, 0x5402, &(0x7f0000000000)={0x0, 0x9}) dup2(r3, r1) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000480)="fd94e0d4c6b31d1df0c89f13c76f0d", 0xf}], 0x1) 2033/05/18 03:46:19 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x406400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000000a) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) 2033/05/18 03:46:19 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="6e65742f697076365f726f7574650000001601e1160aa209e07a86df5448177d47adec466e78220008000069a43690640d0f5c4a5dce00000008f516f26c2f361eaa5fe8ec210edb437b63ccd8db59750540b977b0298f24826a3aa03977b41c422c8e76ab47d16ea287abfb72812b1037edaa1dc78a95190e0c3f9c149c4672df66e6be42676465fef03b5f0000969c5b494b2b0c10bd82a1ae3d170000000000000001da57ce748f24a236e3d76862e94d7cfd5c59f5f4ee72ea99") bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000100), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) 2033/05/18 03:46:19 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:19 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000007000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@generic, 0x6f74, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0xffe4}], 0x3b5, &(0x7f0000000000)=""/115, 0x73}, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080), 0x111}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/cuse\x00', 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000003b40)={&(0x7f0000001600)=@hci={0x0, 0x0}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000001680)=""/175, 0xaf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000001740)=""/210, 0xd2}, {&(0x7f0000001840)=""/220, 0xdc}, {&(0x7f0000001940)=""/5, 0x5}], 0x5, &(0x7f0000003a40)=""/214, 0xd6, 0x2}, 0x61) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003b80)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000003c80)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003cc0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e24, 0xa217, 0x4e22, 0x8, 0x2, 0x0, 0xa0, 0x0, r2}, {0x0, 0x80000001, 0x7f, 0xbd5, 0x7ed, 0x6, 0x2, 0x100000001}, {0x40, 0xffffffff, 0x2, 0x9}, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d6, 0x33}, 0xa, @in6, 0x3500, 0x1, 0x3, 0x8, 0xaca, 0x2cd7f614, 0x20}}, 0xe8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000001400), &(0x7f0000001440)=0x4) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) ppoll(&(0x7f00000014c0)=[{r0, 0x1100}, {r1, 0x2000}, {r1, 0x3004}, {r0, 0x4000}, {r1, 0x1000}, {r0, 0x9000}], 0x6, &(0x7f0000001540)={r3, r4+10000000}, &(0x7f0000001580)={0x7}, 0x8) stat(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001140)=0xe8) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000003a00)}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000012c0)=""/50, &(0x7f0000001300)=0x32) listen(r0, 0xfffffffffffffffd) 2033/05/18 03:46:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x72b9e913, 0x200000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x3, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0xff, 0x8, 0xa5, 0xfffffffffffffffc]}) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2033/05/18 03:46:20 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) r1 = gettid() r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x101002, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kcmp(r0, r1, 0x6, r2, r3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x8000) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000100)=0x7fff, 0x4) write$rdma_cm(r4, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000280)=""/240, &(0x7f0000000380)=0xf0) write$rdma_cm(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000180000fa", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="01000000e5ed6074d2cf5da49bca58668d5a821df43a42b855d474f31901f6bf35620405b110a27cdf9bc23dec7b2b6eaaffe5156a01937df03782bfaa5119c170e7454c56152f6eedb5060de6f6a5e3f43d1df42bf9a7c46c2258a83da5cdf70809ff8ef20c1c5a"], @ANYRES32=r6, @ANYBLOB="000000000100000004000000"], 0x20) write$rdma_cm(r4, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00, {r6}}, 0x10) 2033/05/18 03:46:20 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80}}]}, 0xfffffffffffffe86}, 0x1}, 0x0) fadvise64(r0, 0x0, 0x1, 0x7) 2033/05/18 03:46:20 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x3, 0x9, 0x8, 0x12, 0x1, 0x8}, 0x2c) write(r0, &(0x7f0000000a80)="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", 0x1000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000001c0)=[0x8, 0x7]) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:20 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r0}) write$eventfd(r0, &(0x7f0000857ff8), 0x8) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x2, 0x22812, r0, 0x2000000000000000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001100)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/4096}, &(0x7f0000001180)=0x78) 2033/05/18 03:46:20 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 138.360665] FAT-fs (loop2): bogus number of reserved sectors [ 138.366595] FAT-fs (loop2): Can't find a valid FAT filesystem 2033/05/18 03:46:20 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 0: r0 = perf_event_open(&(0x7f0000723f88)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00001c5d9f)={0x6, 0x4, 0x87, 0xf}, 0x2c) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0xfff, 0x100}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000012c0)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/4096}, 0x18) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1, 0x400000) 2033/05/18 03:46:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfabd, 0xa4440) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/148) ioctl$VT_RESIZE(r0, 0x800442d3, &(0x7f0000000000)) 2033/05/18 03:46:20 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x84202, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000240)) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000540)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x1, r2}) r3 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9, 0x30}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000680)={r4, 0x9, 0x2, 0x401, 0x6a8, 0x5}, &(0x7f00000006c0)=0x14) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) waitid(0x0, r5, &(0x7f00000000c0), 0xa, &(0x7f0000000480)) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000002c0)=""/110) 2033/05/18 03:46:20 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000265000/0x14000)=nil, 0x14000, 0x0, 0x10011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000fd0)={0x4c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840000000000000000000000000000000007f00000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000003fc0)=ANY=[], @ANYPTR=&(0x7f000000eff8)=ANY=[], @ANYBLOB="a6e4000000000000105b6c1330b6373499426b0315ffe18bcfb895463577e53b3579b7ca0d8320ed94eee7ccbac7404340dd"], 0x1dd, 0x0, &(0x7f0000001000)}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000080)=0x100000001) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r4, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x302, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000000c0)=0x100000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpgid(0xffffffffffffffff) timer_create(0x6, &(0x7f0000000180)={0x0, 0x1d, 0x4, @tid=r7}, &(0x7f00000001c0)) sendmsg$nl_generic(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14008f401e9060fa4c5cbbbdfeaf86060000984c904917dc0000000000"], 0x1}, 0x1}, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7fffffff, 0x101000) accept4$packet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x14, 0x800) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host=0x2}, 0x10) 2033/05/18 03:46:20 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f253872", 0x29}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 138.562836] FAT-fs (loop5): bogus number of reserved sectors [ 138.568744] FAT-fs (loop5): Can't find a valid FAT filesystem 2033/05/18 03:46:20 executing program 0: inotify_init() r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, {0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2}}, 0xe) 2033/05/18 03:46:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r3 = getegid() fchown(r1, r2, r3) 2033/05/18 03:46:20 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x8000, 0x1}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000540)={r2, 0x7fffffff, 0xfffffffffffffffd, 0x7ff}, &(0x7f0000000580)=0x10) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x20) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) close(r3) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280)=0x9, &(0x7f0000000300)=0x2) fcntl$setsig(r4, 0xa, 0x2b) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x7f, 0x608080) ioctl$sock_netrom_TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) 2033/05/18 03:46:20 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 0: perf_event_open(&(0x7f0000b5a000)={0x2, 0x70, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080)="a8cbffcf2dd64879cc16cf6f59638572b15dc6d50815", &(0x7f00000000c0)=""/222}, 0x18) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="575bbaf4ca1347085a98431ef41051f5516222d847c5d40124890cd9e8959331cd5c03608cb92b7df7facd1d496b5178a3028e4f1b9b03ea798e582d2d6f23f4710f5f7c08a30935d76f297e117bedf55d4a433059481ebc3898aaa17655343a8d6d79d6a58a4841dcbb0cb5e1d30baf9f80edcb13947ddc27bf88f71a7d63a9be04122600b6e36dc3306eccbff56326") mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x2, 0x4, 0x5, 0xb8, 0x80}, 0x14) vmsplice(r2, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) close(r0) 2033/05/18 03:46:20 executing program 4: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'lo\x00', {0x2, 0x4e22}}) eventfd(0x12ad) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000000000), 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x1, 0x4, 0x4, 0xfffffffffffffffa}}, 0x26) 2033/05/18 03:46:20 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000003a000000004cd9000800"]) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x204202, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040), 0x4) 2033/05/18 03:46:20 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:20 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000a80)=""/4096) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:20 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 139.115547] FAT-fs (loop5): bogus number of reserved sectors [ 139.121463] FAT-fs (loop5): Can't find a valid FAT filesystem 2033/05/18 03:46:21 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x0, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x2, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:21 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x1000) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/174) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x10400) r3 = gettid() r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x840) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@generic={0x1, 0x5b38, 0x3}) bind$inet(r4, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r4, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r4, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r4, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000300)="86", 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000040)=r5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f00000000c0)) tkill(r3, 0x1000000000016) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 139.398443] FAT-fs (loop5): bogus number of reserved sectors [ 139.404451] FAT-fs (loop5): Can't find a valid FAT filesystem 2033/05/18 03:46:21 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) r1 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="ef6b0ffd1a67f31992a94122734b081a4650bb6573059156e31dda21c7e43bd973572a2b397834acf16f89767f877d959fa839db80f7f6d1c071b00027f9c57f17bd1caa78f65e", 0x47, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r1) write(r0, &(0x7f000096f000)="1f000000160007f2000094ffa4000800000000000000000000000000030004", 0x1f) recvfrom$unix(r0, &(0x7f0000408f9a), 0x0, 0x0, &(0x7f000040cffe)=@abs, 0x20000000) 2033/05/18 03:46:22 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x3, 0x85, 0x4, 0x0, 0xfff, 0x5000, 0x10d000, [], 0xffffffffffff5e43}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:22 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 0: rt_sigaction(0x14, &(0x7f0000000080)={0x7, {0x8000}, 0x40000000, 0xb6}, &(0x7f00000000c0), 0x8, &(0x7f0000000140)) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip6gretap0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500001c000000000011967800000000e000000100004e2100089078"], 0x0) 2033/05/18 03:46:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8800}, 0x24000040) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x81, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x24, 0xfff, 0x9, 0x2, 0x2, &(0x7f0000000000)='dummy0\x00', 0x0, 0x3, 0x17e8}) io_setup(0xffffffffffffffc1, &(0x7f0000000540)=0x0) io_cancel(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0xffffffffffff0001, r0, &(0x7f0000000580)="bbc736d42a7146ffd6013dad6eb5a3c26fa7447eda9dc2e5adb27ff9452a620a05dc61ea30741d040aa6b78048c7a60c9e71393c04f3381c3192f0c87cb59f0b099f0574c1bfa7c6ed8df8bb201bd5bbe0b323f05956521553544665eb1f4d4b6b19b0bc3c2ff74789eb89832976e645d8597cefac9c24a3da8b82c3d66a16370907fe03fef0fa520d984b3f23e40ce7c12a98d2444fb303337921eef55965489f0cbef6f8e1b89f6cff", 0xaa, 0x5f7daf49, 0x0, 0x958f628912e0fdd4, r1}, &(0x7f0000000680)) getsockopt$inet_buf(r0, 0x0, 0x482, &(0x7f000082cfe8)=""/24, &(0x7f0000f08ffc)=0x8) munlockall() ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00006fcff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r5 = dup2(r4, 0xffffffffffffffff) getsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='#security\x00', &(0x7f0000000340)='/dev/snd/seq\x00', &(0x7f0000000380)='IPVS\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='md5sum[\x00', &(0x7f0000000440)="5ee000", &(0x7f0000000480)='dummy0\x00', &(0x7f00000004c0)='dummy0\x00']) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f00000000c0)={0x3, 0x5, 0x6, {}, 0xa9fa, 0xfffffffffffffff7}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000006c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) clone(0x40000000, &(0x7f0000000740)="637259a8d94929006cdab3d28aff49387af4c729ae90d08e6f4c0791e1357b496e79c8aa028a20c6d118716fd8c6545342ded43d26d4b547a22d1c7e90b163a4c6bbae8fa7f6ce11d65b9556ed6486c23bacc76b242cd2da42e01615cace3b781320a4", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="37e488d0001353e58100ed6e0146796a535ce50aa17ee26ffae882b0127947b37cb17191bf90cbee62fd3fc447f133a4767dcceb6ee0e2911ae7389d243318a2fd087d5f52469a719e66c6ee8be429fae1de8d29403ba537164ae9cc8db1e566bd4e3c1c3396a468") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x4, "81950d18"}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000008c0)={r6, 0x401, 0x2, 0x100000000, 0x3f, 0x4292}, &(0x7f0000000900)=0x14) 2033/05/18 03:46:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0x415) r2 = dup(r0) mq_timedreceive(r2, &(0x7f0000000280)=""/141, 0x8d, 0xfffffffffffffffc, &(0x7f0000000340)={0x0, 0x1c9c380}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000003180)={@loopback, 0x0}, &(0x7f00000031c0)=0x14) getpeername$packet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000580)=0xfffffffffffffe91) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000004b40)={0x0, @multicast1, @multicast2}, &(0x7f0000004b80)=0xc) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080300c}, 0x102, &(0x7f00006bcff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000001900100027bd7000fcdbdf251c349001ff00ff0200040000000001000000000000000400", @ANYRES32=r3, @ANYBLOB="100695ad0100636a7553856836f3", @ANYRES32=r4, @ANYBLOB="00000400", @ANYRES32=r5, @ANYBLOB="000001000080a00b000200000000000000000000"], 0x1794}, 0x1}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000000000000000000008800000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000aa4a00000000000000200f614ae8b2006465173a5084f524940000000000000d0000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088c2322680664708b68f0579ad43d250980b217f631679ee2c2e5975a798ea5b679bfe4ac9ad7e14d3c8f77045f0a26a61c5c90e2fb7d9cacbe344fe3fddc6504c3bba769239dabe"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 2033/05/18 03:46:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffffffff166}]}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x2000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x0, r2}) 2033/05/18 03:46:22 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000100)=@ethtool_eeprom={0xc}}) [ 140.499345] IPVS: ftp: loaded support on port[0] = 21 [ 140.678290] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:46:22 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:22 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f2538728a34155189641614143d7f09fb09b7fd01000000bef1127c79742e7fff44093b2f29d15aa0952a5f", 0x51}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/211) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x1f, 0x1}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ptrace$peekuser(0x3, r1, 0x1) 2033/05/18 03:46:22 executing program 3 (fault-call:5 fault-nth:0): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000480)={{0x3, 0x2, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/203) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0x10002, 0x88, &(0x7f0000000200)=""/136}, {0xf000, 0xf0, &(0x7f00000002c0)=""/240}, {0x1000, 0x3a, &(0x7f00000003c0)=""/58}]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000500)=@hopopts={0x73, 0xc, [], [@calipso={0x7, 0x28, {0x6, 0x8, 0x8, 0x2, [0x4, 0x308, 0x4, 0x0]}}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffffffffffd}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1={0xff, 0x1, [], 0x1}}, @ra={0x5, 0x2, 0x2}]}, 0x70) syncfs(r1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x29f4, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) 2033/05/18 03:46:22 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x11ecc00a) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0x1000) 2033/05/18 03:46:22 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009000)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f00002d6000)='numa_maps\x00') shmat(0x0, &(0x7f00002f7000/0x4000)=nil, 0x6000) pread64(r1, &(0x7f0000000140), 0x0, 0x800000000000) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r2, 0x500, 0x70bd2d, 0x25dfdbfc, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76ac315c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x65}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x40800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 140.821549] FAULT_INJECTION: forcing a failure. [ 140.821549] name failslab, interval 1, probability 0, space 0, times 1 [ 140.832872] CPU: 0 PID: 13683 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 140.839719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 140.849073] Call Trace: [ 140.851680] dump_stack+0x1b9/0x29f [ 140.855322] ? arch_local_irq_restore+0x52/0x52 [ 140.860008] ? perf_trace_lock+0xd6/0x900 [ 140.864174] should_fail.cold.4+0xa/0x1a [ 140.868249] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 140.873369] ? lock_downgrade+0x8e0/0x8e0 [ 140.877533] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 140.883076] ? proc_fail_nth_write+0x96/0x1f0 [ 140.887585] ? find_held_lock+0x36/0x1c0 [ 140.891659] ? check_same_owner+0x320/0x320 [ 140.895973] ? rcu_note_context_switch+0x710/0x710 [ 140.900891] should_failslab+0x124/0x180 [ 140.905040] __kmalloc_track_caller+0x2c4/0x760 [ 140.909695] ? strncpy_from_user+0x500/0x500 [ 140.914093] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 140.919616] ? strndup_user+0x77/0xd0 [ 140.923398] memdup_user+0x2c/0xa0 [ 140.926922] strndup_user+0x77/0xd0 [ 140.930535] ksys_mount+0x3c/0x140 [ 140.934062] SyS_mount+0x35/0x50 [ 140.937408] ? ksys_mount+0x140/0x140 [ 140.941193] do_syscall_64+0x29e/0x9d0 [ 140.945062] ? vmalloc_sync_all+0x30/0x30 [ 140.949194] ? _raw_spin_unlock_irq+0x27/0x70 [ 140.953673] ? finish_task_switch+0x1ca/0x820 [ 140.958151] ? syscall_return_slowpath+0x5c0/0x5c0 [ 140.963063] ? syscall_return_slowpath+0x30f/0x5c0 [ 140.967979] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 140.973327] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.978160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 140.983331] RIP: 0033:0x4552d9 [ 140.986505] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.994198] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 141.001455] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 141.008705] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:46:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000a92000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235002000000f302e36f6d6c4c3b9495d03000f22846466f20f7024e700b805000000b90d0000000f01d966baf80cb8f4236682ef66bafc0cb00deeb9800000c00f3235008000000f30c744240088000000c744240230160000c7442406000000000f01142426f3e000", 0x70}], 0x1, 0x41, &(0x7f0000000140), 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x101, 0x8202) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000000280)=""/4096, &(0x7f00000001c0)=0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a94000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="48b80d000000000000000f23d80f21f835800000600f23f80f38ccdc420f8b00000000b972050000b86c4b0000ba000000000f3066baa00066b8808666ef66baf80cb8ab4b7588ef66bafc0cb006ee450f1bf166410f610f26440fc7ad02000000c401bdeb3deef10000", 0x6a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) setsockopt$ipx_IPX_TYPE(r3, 0x100, 0x1, &(0x7f0000001280)=0x1f, 0x4) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000240)={0x2000}) [ 141.015955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 141.023205] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000000 2033/05/18 03:46:22 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f253872", 0x29}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:22 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000001c0)={0x7, 0x877, 0x3, 0x100000000, 0x3, 0xfff, 0x6, 0x349, 0x65}) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000040)=0x1f, 0xffa1) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:23 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000480)={{0x3, 0x2, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/203) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0x10002, 0x88, &(0x7f0000000200)=""/136}, {0xf000, 0xf0, &(0x7f00000002c0)=""/240}, {0x1000, 0x3a, &(0x7f00000003c0)=""/58}]}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000500)=@hopopts={0x73, 0xc, [], [@calipso={0x7, 0x28, {0x6, 0x8, 0x8, 0x2, [0x4, 0x308, 0x4, 0x0]}}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffffffffffd}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1={0xff, 0x1, [], 0x1}}, @ra={0x5, 0x2, 0x2}]}, 0x70) syncfs(r1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x29f4, 0x10000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48) 2033/05/18 03:46:23 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = msgget$private(0x0, 0x2) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000004c0)=""/4096) msgget$private(0x0, 0x2b) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}]) 2033/05/18 03:46:23 executing program 3 (fault-call:5 fault-nth:1): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:23 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:23 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:23 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:23 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) set_thread_area(&(0x7f0000000200)={0x10001, 0xffffffff, 0x2400, 0x0, 0x800, 0x100000000, 0x2, 0x0, 0x100000000, 0xb5}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000000000), 0xffffffffffffd1c, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x20004080}, 0x2404c050) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x1f, &(0x7f0000000080)=0x4) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/204, 0xffffffffffffff22) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2033/05/18 03:46:23 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r1, &(0x7f0000009180)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e21, 0x800, @remote={0xfe, 0x80, [], 0xbb}, 0x7fff}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="4f67615c966ab8cff9e9c1566b164c43a03ae957056ed19bbaf6b4a8af142857a6bec376b265a719db8d810a7c3c564a94b9fb40fa26fcbdc7ad9d2b009b68b36dbdf28861837268efad46c17ca65ffd", 0x50}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000001c0)="5295174fdbaa0c6865ebec8ea02f27c22ad43c9d4d56f60b820dcf48aabe3e14783432eb711559a53a850f7f66e2ea994cd4a7197cf5e8e90afe5719a3e23661a9b2ec12583e442cdf9c2f30baabbd646fe108f354d3db892cc632f6f034634a5e43c6521bf2a977acd935cc8fcc1c066884912d22f39b0a149b7c948e3ecb32d0f62b59da528c81254257d0c012c63d667a40ba9f565d3cba9a1558fbae9e97e175dd03d7fae3f2dc5d8c72cbf36dcd355b873eae3a75a4d517768e641fc0beb40f82400bea18064bd4fae6b7e640d79c8e03", 0xd3}, {&(0x7f00000002c0)="9cbcb8654118ecca0cf6e88d47062a54dfff91a9c7c2a301b2a8728f3436f78f4a7864b4dfe14a9e3cf7b54e3e7f6c129e7e12150984b257e57e93558a88863e", 0x40}], 0x4, &(0x7f00000013c0)=[{0x88, 0x11, 0xffffffff, "c39ab1d896545bd2eb9b50d78c8ed621ce24987e9092ff716ca80b3d0711eeebe32878b29ab710ffbe20e7001c9e14a9277c795876bf758b2cd06830e956634ff081b422f00d17c2117f7571006b05d97eb3a4a128f0c0e8923d6bcd1e5171c782d0cfecf8d20296e7e2ade2c3434aa5df1e82d8"}, {0xa0, 0x0, 0x80000001, "27d5956935c564898d462fa1abeddb0cb847629af67d2b463eec8b176776869c020e71be012b12c2c0bf4f94994a494a4b30325ab32b4149101bdf3542e1a08799623ba62eea24651b6f1c2ed7210b63619f03b76dcfa411c26075a0d9529abcc8ef3de234a12b5eca00ec18444aaac13b63dba3694e95a6e45a5eb17f7f53b41eb7b4da699cd0071b9bfd245ae7"}, {0x98, 0x117, 0x5, "51459e73f81e1a45da66bfe27b94d54886d38d0c7f428587e037a1082cda66189bb616c5f4a9d36e342cf8022786c1dbaa6119cc008ff2132a9fed3ed8ab2d731ae60bbc3eb385789f37c5efc9fe476276cf68f91f56676a2519e1fec5b8d603d059b08ac5e4436df637b7375cc6041884cf118346c82f5388971b2a6844bff22bbb843664"}], 0x1c0, 0x8000}, 0x8}, {{&(0x7f0000001580)=@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xf}, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="cc10019202d650fec629f62d39bcf9dd4dbed5e2ed6e35bbe412a1ae1661e8d1225c9c46ebb9a784f6e19ab138fda42c40a2714241be1e56672caa2700ac9c03c0edfbd2e98980807ee7b21e4201fcaf3c7f3e833e8a752cb4b72b2e7e9e9eab0589379deb51db0fe6e0d3faad7734b97565092acc311eb043cbb9a07cceacde95a777a40a71352cba4a9612241c52294c9629fa58e4de003ad84049a35517b6ecf0b8b298c4e3fd6f111fb7b699d2b234ef6a56702459253d07a06f37d6adabb8", 0xc1}, {&(0x7f0000002700)="7c366b67631cbf25e0caaf3cc1e448d5fe410fdf5e27ac29c54aed1ddce883fd15300c81019faa3147cf78d87ef1f10687ca95a37f98f93b6ace67b05a3f67ba24", 0x41}], 0x3, &(0x7f0000002780)=[{0xc8, 0x10f, 0x4, "1a33f4204944335454fc11cc2c91c2cfd840485d6bfc0ecd9e632e24761b18bc5a562bf9abb863b1b8419206c2d3c65151fcb882b7bc378a33f16f99aaa6655188e9157306e23f57ca95904e82d0ee36fe56f0fd2685989417668e1faa686268568348f1a6ae4708d78c7da506bf696a87d44b92877ea9e11ea24df2d1642b850bf75ae2686ac9d9cfcfa54db4eefb99669c5c187dfcd70849ccbc611935285f160a09e2f7a037e6916f90fefe3805dbec6e"}, {0xf0, 0x0, 0x7, "9d3928603cf0781b8e903b66009eb5ed0931a9bd805f3fbe11c989f1322dfdb337845f3f20c892fce4086dbffeae81df52f23977182a192572ede432b682eb7036d9543995497d5fde74a5275f874484d2574a17271dd96264282b058cbdb26c0f3884828033cc76e9415a27be7caa855119e057123a23cf385bf473c7ea6df77d39ff667fe9ca4873f8b9c69e45a2b2758eb18c261d98eba876dc333d1ef48bbd873fc9cc84bc2cd2eb94ba537829073d350c50348bb2208edd6055ccffb9262edd046395ab29468dd4459cff484a4d75f37e002f45f8f22dccf2eb4a"}, {0xd0, 0x1ff, 0x8, "01f8eae0b8d3d464a041a6ce497b47cd71428aab756dbf5151787f044871a94a63217e1a07d43fd298f0c098027193bae94c002e4efbe7cdf668b969ad68f16d063efcdbda77f50db84aae7ccd50bd6dc0a097088b0c2a4c19847be2113d57f4898ce06daf01e54e36bfdb14e00c8b7b476a649c0787d80c66af61a5370a63b36adb315925a25e68b6c98c194edb285d26dccc2191b9d5032b2a5603f098f360e3a9624ca0afc0bf51846d900b5c7dfc621d5f4cd863a75a11b934ed"}, {0xe0, 0x12f, 0x0, "1a98cef96159b6a74e7d584ec8ab8ab6accb4640120e0d91c0e902a455b59163abfd4a0bd0cff0b8e3f71b58cf89185b6cf90f0b4ab6dfe80504947eebe901c5e30065ef9c896a4b20a35342202a58ac92e755165153d34b16494a15e0f4949ce4fffdad2a8f4b9755f2e2458cdf372c7b592b62db4062603600ee29e76183290ee5b541b6b2be2a675731033a8dff169b424eb3b4e12cfdbf9fcf0e66f898a1529bcedb17d5bfd127c508ceecf25e6ac54f177be1aa4169519b0d5987e717ca7778eb976a386166a260919946"}, {0x50, 0x11f, 0x1, "79ce0698aae3ef299e173a36a71aded01982b78536f93d1e2ff912b86ae4c2803575aa63ff8180bd76e15ff235ef39a53ef93cd2ca426d83b65cf2f6b8"}, {0x70, 0x0, 0xfff, "ef08c0ba07fc7b050ff9e868243f80dad6a4b711aa1671a32d72a8a77fec220303e3d6424868aa6ba68d435d4b70a62d98ce95204214b3718856afa477abdd783b6f48abe2510dfa79f44eaeab8b1dda2ab84599ad72da990c"}, {0xf0, 0x11b, 0x0, "d4bd475e0965ed264472b3b715470f05d89e2d40bd698bcafa82536f876b143cceb74a102156e440846138e05041ccdc0ebe8b4e2b5e51880e9b938d697fe9094054dd8083e1265388d73e9f637d3a088f53223b13169f4997b94b4ad4825912c2f6fd74a48029788d9ca46ab08732b96b8430fdfa43da1f44e52b2ce4d17c323c0be72f1f1b186a55e95a14d7981ede3033f83710d0aace1e1604e0081af91785652ff8b0f2f958ad68e024685c9a9828e390044867af138fa6788f037a4a0c4edafedb37f08c07c981986a23f5d753ff583dc1c666c8f679"}], 0x518, 0x4004080}}, {{&(0x7f0000002cc0)=@ipx={0x4, 0x5, 0x1, "3defc9d875c4", 0x2}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d40)="a23f6c8d2c4523695396cd8d1afce9ba44a1c3d6832a5f6e5489b0aebdd45a688a302f304bbf28", 0x27}, {&(0x7f0000002d80)="dc1dcecd6ab9d280f53162542e101e040ecfd0f98ed2328759bc45eb06a756c12cc871fcca8d58a9d16ac47eec663822dc054602a6f7948174968f6abd7e62ca542bc3b60ae9a490c00b5b984f10735c414d4d6dcb2fb8551eabc9eff64d12bfbbca854f7cc7f22a041954d65fa80ab382a2b64ffc75683165482298930a09", 0x7f}, {&(0x7f0000002e00)="59c8537eae0eb2a3fa748ecd10ea28a0728c38faa71fe2d0926602bffe5b1f19f75127ad04aedd4a8ecf9875bd97e2c2f60327d76360c7a2956ddbf31db95d80d57d35b4694d91057b1e5b5191043cb75734f6f3c7cce4bde2e417c56e8f866e2cdb41583039cf212c8e913028f9ab9bfe77f8c08a2d188f1169041bf8f48e979e6320462a0a0d02db0ca9872e71bd622e2bc9465e07802b814f3d7fe656b8b281aa6905d74216fc2b946f454ef36e6f5fc055218f43317e8eb1228752545f674fb9fd17ee079a5913c3d02726092dc4d67f333e75fee15f78556cb9a6f4b3e0a3862dbe0dfc9563dd37181a559e9acd575e12b9fcb1", 0xf6}], 0x3, &(0x7f0000002f40)=[{0x70, 0x0, 0x5, "e056b279af71c0b86b5dacaaa95340b0a41328000821759af8e8334d3962b63d17f6e881d9d84d55c363fd03d97b63ff237d0b7f80e01a5675ffb791d60138ac5018fe6f823ff8d68ea4ebc3c8877b96d95e3ecf6365166baa17"}, {0x78, 0x107, 0x100000000, "650ca173e9602c1da31515a56a45d37b461dfc2b6ac920b400751d97e21cb6618017e74f2aca82c1eb08915a650f27ce825d033d96ed09decc765211f8adc2f8abe468701916f4aa6c2250ac68fa2d7982828958d992aea18a3bfc7abc3fdbd4e4"}, {0x68, 0x3db6ddc28182a85, 0xffffffff, "7f7937c98a5f83f939a6e64a93a3e9ec10f6f412c1cd847cd8ab0383b19c15fff1945651a8c93dc07117cb633e5328a011a583662fd7e33b9362ab63825c874d47fb2407502228dc0f74fe7f0466aefdcd91c92dd13348f8"}, {0xb8, 0x111, 0x1, "d6f8841744bab00fc29545e94f9f45fea985f96e2dd4a7c24459a4effb4d8d67a1e7881a6e22aef56dbee044ea580c4d8207608af97727f66d2bcf765732007d3132f872a332e7bc4c379b663c536ff3b1c5d4ed95a027600377f779446e467c7d031684c3424883df42c085c70fcf5db8d4fe7b5f8f28f1469524ab4904bf7aa6b58dc8803687a67a1999fd92059833fc9bae101b88018b5a3d89b3f43a466cf3"}, {0x88, 0xff, 0x7ff, "3652b7628d7b12d633e6b26af60814765cea47f491217561ff4c6bd2915d852d1aa2ed42079081e5180e8cb4df862b239474b8e343241218525e368ff3cafa1c80747554e15438cb20494fe53c39d4fe38a424fbaff041833dedeeed5a8a1e363169f023363ad6bb2f5e0f4faa8feca4fb089cf7"}, {0x98, 0x103, 0xa7c, "45aec73dd962a0f3781bcc5848ae6f85571358156ff7a158732dc561582468e66d40b3da557f87bbd6a035c137b037bee448d2f0d4cb1c4aec4d31fe623b23479143dec8bb76daa429af06100a5ad99ae405de32c2ce40a9926ad4b24d31b55c04a75321dfb35700b1e063a549902f3e68d7d8147a1a98da7be4a9b68cd05b209610f1a8ec"}, {0x58, 0x111, 0x3, "7986e5ea7e4f6c20ef91366d5b256f0aac409f758ae57a1540163fb3ae319514cf67c5891ad9bfaabd2e3e1b82a5e0d3508cc8387924f4d354dd6c03e007a9d8f3ee8babdf"}], 0x380, 0x44000}, 0x1ff}, {{&(0x7f00000032c0)=@ax25={0x3, {"0e07bac59af1dd"}, 0x1}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003340)="88e39ff9efcf271b0ece40cc9c1a427a6044b5d57e1a78218301110c93f5c261e1b2c31b542b4057c7b3d53454e0eade9cc9d5a16cd46fdc092813ca93e18ad2da96cb7587b0f8567c99875e29467c75cd39491f930f7557062b1f951eaa7fb0439049c6d8a473cfeb9fc4f2f053603922593a20ba6041de1c", 0x79}, {&(0x7f00000033c0)="8e05258553d725fa33999dafdc", 0xd}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="8f221186d939eb189393c62a0170b12dd96ba19e0d14488b4daf63ddc13015a0ed64586b14851a1f597469495cd13c1917011ecb5d46bd699c5c2cf273ee127c19b3bfadeabc6f056b962439c2df11123edad32ea448660b16358906cc5bf3", 0x5f}, {&(0x7f0000004480)="49264fbacb300b1fb54ee7b7749f1290b76d0e676c3d6e6f94e198f31436c8762c4cdbeebd5a87c4fb763c9d79313c097e7b64ea00fae54bd34b497263494c37557d2f3ce1fbb9fecd910a3d2e926283c7c4682e820b3e19e6f93c58141ffae588b8f73e17e0fe2d751a419af6c1b6da2d8303ca090be17633ca2fc35621049650861400c4e7ba31c13bd6a1f5d7db0c2400c8ff39efb47add97c6655b0b1155dd2d01e95eba4955b1e79f9618c86323cc9acf3b72469433a49504dbdac12f545dadd56e569601ddf31bcd8040370d6e", 0xd0}, {&(0x7f0000004580)="be42abcd341ed6178d73db5d911a9b3068567b5ed5d05895e8ccffa241495cb5414be8", 0x23}, {&(0x7f00000045c0)="82ee97a3fe1961aa6ac11a9d38e5d29c2cea341af8e7611fdcded6ad33701a8d3f2fc173c823d41484715ececa5b6f1dc42f23ad12e7da1002fa73ea81225d87b595f9f0", 0x44}, {&(0x7f0000004640)="dec5a8145356832c32b8c084bc667a96510af273417a0463f31f578ec93a3ca0c1ae011a3e1821c1ea809460987a5182dfe828b7e382640da79abe2e07bf3291b22658e30882e64252d1569d8f56f13fc31c1b221bfd60d67bdef64147a10a5e760f0a1cf55842d006a2c3ff36db89c9bda79480d9623358186d4def6e188fa8dac3514953fd21e05578e797dbcddd072f27632784a636905a888d0364a12539b9549f9bb154eae40ec94ee1c9bbb09fb2ede9c92b9f2c165e81e0fb291b00f85e32635ae38f7b370117d849189914b0473b160c6027b28071", 0xd9}, {&(0x7f0000004740)="8fc8f54a0d884f83344aeb334e907402a9791d44053deb16a33cbb1487c50c7af022979c2464f3c3c2a85ea7f127c91dd9cebbcf32ec1ca07c42f79fea3748ee4a8a88c26dc4225419c2fc", 0x4b}], 0x9, &(0x7f0000004880)=[{0x38, 0x0, 0xd7a4, "a6845f305a1476f98c8f884a55147493d13fbe956c96356aa53864cebba4d347f383e1279ea5a2e6"}, {0x1010, 0x11b, 0x7, "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"}, {0xa8, 0x11f, 0x2, "89c6ac2d8eabbc413e6429447819ff321fb2f291c86bdfefe44c9c2ac644b79e7b6f2695e100008ef89fe3d2affd1fd83e06475b2a4634701148e7c4686e1f1d7fdaa1f34640c0f9dc743c64add27fdde07765aa627d29bead9b49b8968db207b803ab065214b63346f4b2b57e382ae237b6e36ae9232cc04938d52f6ec98912186c301c7ff7d21a109ae4cce7d7c9589eec3e17cc"}, {0x1010, 0x10f, 0x4, "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"}, {0x20, 0x88, 0x9, "075496575a3ce6874b08"}, {0x1010, 0x10a, 0x35, "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"}, {0xa8, 0x116, 0x90, "3b59cd560b7d3fab2fb245315fdcac4de93b644174d7cf13f8cd469a4c4bf11d565a79b3fc2451883774e9d5893eb92806d0c3c0baf53d83b84bf02da6507d829b0d33981d925d511a1157f0bff95f394111df7e98b4526ab5b207df8d002611b41db61506de1746d01473e0f8b759588f69664cb25c39e1899cc8b4b40ba5b0657c4b84ccfde02f5b55284d4586bf381f0a3d1878d847"}], 0x31d8, 0x44080}, 0x9}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000007a80)="527ca3d9b19577c90757ce0fbb0def0d6b39f5a651f8d7b145d374353c31637ae649911783b0121a2600883aa5851f8e723a05af44b378d63f1df150d36b9a513ed9b24150fb213d7d98c1b973ff6e4db6f1a86e0adba67509b889133065b66c172805c2ea3b1f9c19857aa28ed567f35d767315f77b110d3af47aba3cab5b63180df4f45e56e791844a13a4efdcc8e6a7606961e9dbabd10e13c09ab8e1cdde98eccb19114e6e555dc0d7e034d878c8be3c7efa69655a8ad3800a7de07b4d42a6cf328d896e7b4aa87c8c369443be0b796650c57d17a72088b5a63d76b88b4dd2cf199b1ebe7154811c0b", 0xeb}, {&(0x7f0000007b80)="84197957b785de3436f55c78555577aa504d281fe275a0cfb06a4f50bd2d857bbacaca36902d0b057bf8adbc1cfb0e6cc17f53631383bbe5b00269f137e4e5e174ac42bbe674f2f3fe0ae6b62a70e1117eb967c0b6b5094283be0a8ac4369a697da91f873f72786923fe490c9f0510a179542ec43226d04291569d74d9f5b92a49111bd3", 0x84}, {&(0x7f0000007c40)="6e3039b34de56c2e9f9d0edc29198dfd000a8240d626c9366cb43d72b0700efbe3d79a57e76c3a00fdb05ef4f79994056231a69f0c42ae189b4b0e50cbdb15523341c0e5aaaf2b17e25e7383a87b036eded616b344c538c17f55af8e4510ec697fd97a8bd1a52230895ae5cbf680633cda03373faef04b756033b33c4399c3fcc0eb9c400d61b4b4296ae1d5348baea745d8946f376d58d3ee2bfcba03da26c102a0f6c11f6d07d3336492009bdfa97026c35ed388172369ad6ba5a208ef2bc837c78a6167e53cbbb1e3c2a4", 0xcc}, {&(0x7f0000007d40)="e433b979b3362af0f442e8ba58e44c34d6f6cff71aca49764e6251c18068fb9b2a19230de0ed06a0dbaec11e9187bf68b9d978c819429b71e90e31eb8ec4f765655a501f4254da4d6ea6d424bc9d4f641f3c41b4825980f4181a0ad74e8fb18922504cdff9d8d47f2ef473fc1eacabe84202103dd71ba9c5ccc14801027a67f3e0d73c6e615dff2f29cea5b8c667e11eef186559e824ed38", 0x98}, {&(0x7f0000007e00)="fe2bb013a65304e1c8d6c00b0f1bb9c61f6623cc7257eac526b6ae084ec2b1e62e420192d43065dd0e0e5af29ecd3995e802e2aa947109a811aa321e43b778d5b469783f60d20db44b711c416a9bf93e6876239e7a012f6eee3d6a7e5c3dbd61df66f6f375d809c6e6f639dee283f1144035fd3cfcbf1ec368f06e10af7f466bec380881032fa977c57f61691b07a3d4dd0b8b4a9f8bc8361e9f068eaa229bea1a829ee4ead3eb75be29ca8233d355cff0a697d180ddd9574e4e2a280a05be50b753dd245d0619297ec5738de4452bb38387816e16f1fb9ab96fde42e473853f96ed504d70de0f1244a193758f82ba85ec92", 0xf2}], 0x5, 0x0, 0x0, 0x4c000}, 0xffff}, {{&(0x7f0000007f80)=@generic={0x1f, "b8622da8784a1cb6767d5a1a66075c4cf6cc56bb4afdda4c313c92cd6dea83981ecff404a1cae41cf35c868b2697dfe77f275e77e37b79f82a64f8be4f4d3c8d8dc5fcede68ccc82984e411a1fdd3d0a72257d186ea7b31d9593a2398d38d5cab18337464096381a7f220b31c7ab67639bfd60a57d07533596e8f20c5c29"}, 0x80, &(0x7f0000008040)=[{&(0x7f0000008000)="bc4080d622dad738700c262948fceef97d738ea6cd8b4955", 0x18}], 0x1, &(0x7f0000008080)=[{0x1010, 0x11d, 0x0, "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"}, {0x90, 0x108, 0x5, "2ec246e5433fb38abfbf1d1aea788046111db63d33195e56ef126c58f3d7138546162d4782e13c029714ff48bf539b37f2c193dc1e1028fb472365b212761c6163d47e53280eadb3ec4147fe478700d187dbbff4e553e15cb70ecf4fdda001122628e571e5dacab3898f7e1c02b3fcae00b36dad0b044ebfac259be2"}, {0x60, 0x100, 0x2, "2a0a70dd0bfc939fe637b6780346567a8cd8006563a304e241519377c9bbc75d10c6c0969855a7d17786299cc67b3396b21553738102f1d52ae7c1bdecd05be6b2fcd3fd98e1205f04c709b2c5"}], 0x1100}, 0x69}], 0x6, 0x8090) listen(r0, 0xd621) accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x80, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000009380)='/dev/input/mouse#\x00', 0x81, 0x80) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000009400)={0x4, &(0x7f00000093c0)=[{0x627, 0x2, 0x40, 0x8}, {0x1, 0x6, 0xfffffffffffffff8}, {0x3ff, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x100}, {0x80000000, 0x400, 0x6, 0x4}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000009300)='/dev/ppp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000009340)={&(0x7f0000ff9000/0x4000)=nil, 0x100, 0x3, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0xffff}) 2033/05/18 03:46:23 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_unlink(&(0x7f00000001c0)='!security*[ppp0mime_type:[#\x00') pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="ac0fbf55c3", 0x5, 0x0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x80) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000440)="66b8b7d2e5c50f23c80f21f866350c0070000f23f80f1f40000f323d00a0baf80c66b81c6a168e66efbafc0c66eddfaa070036260f0766b8000000000f23c00f21f86635010006000f23f8660fd088670066b97a0800000f32"}], 0x1, 0x0, &(0x7f0000000040), 0x1000000000000072) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="c4e24947470d66b8bf000f00d8653ef767fc66baf80cb8e0fb4f8bef66bafc0c66edb97e0b0000b82ff11332ba000000000f30440f20c03503000000440f22c0c4c185e955d666b8ad000f00d8673636f46485af0c000000", 0x58}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:46:23 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x617, 0x2, 0x80000001}) 2033/05/18 03:46:23 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 141.604019] FAULT_INJECTION: forcing a failure. [ 141.604019] name failslab, interval 1, probability 0, space 0, times 0 [ 141.615376] CPU: 1 PID: 13779 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 141.622224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 141.631577] Call Trace: [ 141.634178] dump_stack+0x1b9/0x29f [ 141.637822] ? arch_local_irq_restore+0x52/0x52 [ 141.642498] ? __save_stack_trace+0x7e/0xd0 [ 141.646834] should_fail.cold.4+0xa/0x1a [ 141.650904] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 141.656011] ? kasan_kmalloc+0xc4/0xe0 [ 141.659906] ? __kmalloc_track_caller+0x14a/0x760 [ 141.664754] ? memdup_user+0x2c/0xa0 [ 141.668482] ? strndup_user+0x77/0xd0 [ 141.672295] ? graph_lock+0x170/0x170 [ 141.676105] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 141.681648] ? proc_fail_nth_write+0x96/0x1f0 [ 141.686146] ? proc_cwd_link+0x1d0/0x1d0 [ 141.690199] ? find_held_lock+0x36/0x1c0 [ 141.694261] ? check_same_owner+0x320/0x320 [ 141.698569] ? lock_release+0xa10/0xa10 [ 141.702528] ? rcu_note_context_switch+0x710/0x710 [ 141.707438] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 141.712438] ? __check_object_size+0x95/0x5d9 [ 141.716920] should_failslab+0x124/0x180 [ 141.720968] __kmalloc_track_caller+0x2c4/0x760 [ 141.725619] ? strncpy_from_user+0x500/0x500 [ 141.730012] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 141.735533] ? strndup_user+0x77/0xd0 [ 141.739321] memdup_user+0x2c/0xa0 [ 141.742842] strndup_user+0x77/0xd0 [ 141.746457] ksys_mount+0x73/0x140 [ 141.749985] SyS_mount+0x35/0x50 [ 141.753337] ? ksys_mount+0x140/0x140 [ 141.757120] do_syscall_64+0x29e/0x9d0 [ 141.760987] ? vmalloc_sync_all+0x30/0x30 [ 141.765119] ? kasan_check_write+0x14/0x20 [ 141.769343] ? syscall_return_slowpath+0x5c0/0x5c0 [ 141.774256] ? syscall_return_slowpath+0x30f/0x5c0 [ 141.779175] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 141.784522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 141.789348] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 141.794520] RIP: 0033:0x4552d9 2033/05/18 03:46:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x2b5, "15834298164df24fcf39ec80f690fd1aaf86a7f1f8d0abe6dfca0b332a8146512a22b1bb9de3f6f79f64b5d969772e8765fe30cac8278fd8b9fd3a24eae3dd73c0577871072b2053410a5580f52bb8740000a818d8833679df8b1c3accc81b477563e6aaf9717654a8af756cf082ab1d3baa818041244973067fb4a84673981abb02b4b6799f854a8d2da7030b443ba8f3f68290dbc23a9031ef276aa7f7b98336b3412740b986bdf3e082acd443cc98f98093bc04c9aa806a5cb3fd5252634269aefb886047b27f6223913a0ea6309be8024b85ea5d932eedc8e13574dc92cbd4fb0a8000c7304d"}, &(0x7f00000001c0)=0xf0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0xffffffffffffff81}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x65f0, 0x1) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000080)={[{0x8, 0x55, 0x0, 0x6, 0x8, 0x79c681cb, 0x10001, 0x80000000, 0x1, 0x10001, 0x6, 0x7, 0x6}, {0x2, 0x6, 0xe6, 0x1f, 0x5, 0x100000000, 0x0, 0x5, 0x0, 0x101, 0x0, 0x10000, 0x1000}, {0xffff, 0xe5, 0x8, 0x8, 0xfffffffffffffffb, 0x3, 0x74b, 0xffffffffffffffff, 0x20, 0x1, 0x1, 0x5, 0x401}], 0x401}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) [ 141.797691] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.805380] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 141.812629] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 141.819879] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 141.827126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 141.834372] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000001 2033/05/18 03:46:23 executing program 3 (fault-call:5 fault-nth:2): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 141.926452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 142.026393] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.076093] FAULT_INJECTION: forcing a failure. [ 142.076093] name failslab, interval 1, probability 0, space 0, times 0 [ 142.087411] CPU: 1 PID: 13823 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 142.094254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.103608] Call Trace: [ 142.106208] dump_stack+0x1b9/0x29f [ 142.109850] ? arch_local_irq_restore+0x52/0x52 [ 142.114537] should_fail.cold.4+0xa/0x1a [ 142.118606] ? lock_downgrade+0x8e0/0x8e0 [ 142.122774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 142.127888] ? kasan_check_read+0x11/0x20 [ 142.132051] ? debug_check_no_locks_freed+0x310/0x310 [ 142.137259] ? find_held_lock+0x36/0x1c0 [ 142.141351] ? check_same_owner+0x320/0x320 [ 142.145686] ? rcu_note_context_switch+0x710/0x710 [ 142.150614] ? perf_trace_lock+0x900/0x900 [ 142.154841] should_failslab+0x124/0x180 [ 142.158890] kmem_cache_alloc+0x2af/0x760 [ 142.163030] ? proc_cwd_link+0x1d0/0x1d0 [ 142.167080] ? find_held_lock+0x36/0x1c0 [ 142.171128] getname_flags+0xd0/0x5a0 [ 142.174917] user_path_at_empty+0x2d/0x50 [ 142.179050] do_mount+0x172/0x3070 [ 142.182574] ? lock_downgrade+0x8e0/0x8e0 [ 142.186712] ? copy_mount_string+0x40/0x40 [ 142.190937] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 142.195940] ? __check_object_size+0x95/0x5d9 [ 142.200425] ? __might_sleep+0x95/0x190 [ 142.204386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.209908] ? _copy_from_user+0xdf/0x150 [ 142.214044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.219568] ? copy_mount_options+0x285/0x380 [ 142.224048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.229574] ksys_mount+0x12d/0x140 [ 142.233191] SyS_mount+0x35/0x50 [ 142.236543] ? ksys_mount+0x140/0x140 [ 142.240333] do_syscall_64+0x29e/0x9d0 [ 142.244203] ? vmalloc_sync_all+0x30/0x30 [ 142.248337] ? _raw_spin_unlock_irq+0x27/0x70 [ 142.252816] ? finish_task_switch+0x1ca/0x820 [ 142.257297] ? syscall_return_slowpath+0x5c0/0x5c0 [ 142.262211] ? syscall_return_slowpath+0x30f/0x5c0 [ 142.267131] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 142.272482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 142.277313] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 142.282483] RIP: 0033:0x4552d9 [ 142.285654] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.293347] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 142.300601] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 142.307854] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 142.315102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 142.322353] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000002 [ 142.353139] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. 2033/05/18 03:46:24 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000400)={0x0, {{0x2}}}, 0x90) 2033/05/18 03:46:24 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) r3 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{r3}, {r0, 0x1000}, {r2}, {r1, 0x80}, {r2, 0x642}, {r2, 0x2000}], 0x6, 0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:24 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 1: r0 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x400) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x26584a9822156bf9}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000240)=@known='system.sockprotoname\x00') r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) tee(r1, r2, 0xb649, 0x4) r3 = getpgrp(0x0) write$cgroup_int(r0, &(0x7f0000000380)={[0x3f, 0x0]}, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x100, 0x7, r3, 0x80000000, r4, 0xe000000000000000, 0x3f, 0x100}) epoll_create1(0x80002) pselect6(0x43c, &(0x7f00000abfc0)={0x2}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2033/05/18 03:46:24 executing program 3 (fault-call:5 fault-nth:3): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x10001, {{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r2, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = msgget(0x1, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000d80)=0xe8) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getpid() r11 = getpid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000000d00)={{0x1, r6, r7, r8, r9, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, r10, r11}) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="04f4e8c4a7020000dcd713348b75583cccf5b2bf0532984b855741320d992aeb39d145403076edaf0dc60774b6808849c229f4300f3db3861e2ecb7a5d0bde74eeaca5625b37ad5df6"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x40054) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f0000000200)=0xfffffffffffffcc3) getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r13, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) ptrace$setregs(0xd, r14, 0x2, &(0x7f0000000140)="bf392927c7fce1ae0d082eb065fb5f12f87b08780342c96afbca800db4f7a1ad08141a0d230b67e614def7a19d13736fee6c9993524b612d904017974f8cc228d7754449835f0e47ff8dc9573830086e9fad694c64317ae920652be80f4b4a2c0a1bb8faeacbceae3ed7a5f86af37896fc6b9d55c30c37039abeb8f825857341e829f353a19a9849ea22b931c2ef00ab68d7efc9f31fdbb8f5c382264d364fd70997b592a82b0823d1c591a97429b9bbf653356e7cbf6dac446a85dab5fa86c2134e498d2eb5bffd056cb91f720f455d3d4878c1dd940043afb4d974979faa1334fdb71ef96faadcbe4ca2abe6b0cd3c68df84") setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000240)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000280)='/dev/rtc\x00') [ 142.639988] __ntfs_error: 125 callbacks suppressed [ 142.639998] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 142.653421] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 142.665517] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 142.689312] FAULT_INJECTION: forcing a failure. [ 142.689312] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 142.694808] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 142.701147] CPU: 0 PID: 13848 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 142.701160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 142.701171] Call Trace: [ 142.709589] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 142.716406] dump_stack+0x1b9/0x29f [ 142.716430] ? arch_local_irq_restore+0x52/0x52 [ 142.725775] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 142.728332] ? debug_check_no_locks_freed+0x310/0x310 [ 142.728355] should_fail.cold.4+0xa/0x1a [ 142.745160] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 142.748638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 142.748660] ? debug_check_no_locks_freed+0x310/0x310 [ 142.755484] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 142.760649] ? graph_lock+0x170/0x170 [ 142.760667] ? graph_lock+0x170/0x170 [ 142.764710] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 142.773081] ? do_raw_spin_lock+0xc1/0x200 [ 142.773098] ? print_usage_bug+0xc0/0xc0 [ 142.773120] ? perf_trace_lock+0xd6/0x900 [ 142.822907] ? find_held_lock+0x36/0x1c0 [ 142.826962] ? zap_class+0x720/0x720 [ 142.830665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 142.836196] ? should_fail+0x21b/0xbcd [ 142.840067] ? lock_downgrade+0x8e0/0x8e0 [ 142.844213] __alloc_pages_nodemask+0x34e/0xd70 [ 142.848870] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 142.853867] ? debug_check_no_locks_freed+0x310/0x310 [ 142.859043] ? find_held_lock+0x36/0x1c0 [ 142.863100] ? check_same_owner+0x320/0x320 [ 142.867406] ? zap_class+0x720/0x720 [ 142.871109] cache_grow_begin+0x72/0x6c0 [ 142.875156] kmem_cache_alloc+0x689/0x760 [ 142.879298] getname_flags+0xd0/0x5a0 [ 142.883081] user_path_at_empty+0x2d/0x50 [ 142.887215] do_mount+0x172/0x3070 [ 142.890740] ? lock_downgrade+0x8e0/0x8e0 [ 142.894871] ? copy_mount_string+0x40/0x40 [ 142.899089] ? check_same_owner+0x320/0x320 [ 142.903395] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 142.908397] ? __check_object_size+0x95/0x5d9 [ 142.912880] ? __might_sleep+0x95/0x190 [ 142.916842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.922362] ? _copy_from_user+0xdf/0x150 [ 142.926497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.932021] ? copy_mount_options+0x285/0x380 [ 142.936501] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 142.942030] ksys_mount+0x12d/0x140 [ 142.945644] SyS_mount+0x35/0x50 [ 142.948993] ? ksys_mount+0x140/0x140 [ 142.952783] do_syscall_64+0x29e/0x9d0 [ 142.956652] ? vmalloc_sync_all+0x30/0x30 [ 142.960781] ? kasan_check_write+0x14/0x20 [ 142.965003] ? syscall_return_slowpath+0x5c0/0x5c0 [ 142.969920] ? syscall_return_slowpath+0x30f/0x5c0 [ 142.974837] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 142.980192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 142.985031] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 142.990204] RIP: 0033:0x4552d9 [ 142.993373] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.001063] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 143.008311] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 143.015560] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 143.022809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 143.030061] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000003 2033/05/18 03:46:24 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x1881, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc000, 0x0) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000040)=""/93) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000e049141412000000438582f883acdc251d36ca4beb1e920bc6593e0920b49860c47459724e4550f28a5272dde30464d82cd95c63f57517a564f66c4e2b9f38f691bff3e8d71e288d2ec483a244"], 0x14) [ 143.045708] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. 2033/05/18 03:46:24 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 143.104464] 8021q: VLANs not supported on lo 2033/05/18 03:46:24 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x902, 0x4) sendto$inet6(r2, &(0x7f000005d000), 0x0, 0x0, &(0x7f0000737000)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvfrom$inet6(r2, &(0x7f00000002c0)=""/246, 0x3f34487329ce96f, 0x2000, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:24 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f253872", 0x29}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 3 (fault-call:5 fault-nth:4): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:24 executing program 1: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f00007a2000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) [ 143.207597] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 143.216707] IPVS: stopping backup sync thread 13890 ... 2033/05/18 03:46:25 executing program 0: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x6) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[]]) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000580)=ANY=[@ANYRES16], 0x2) fallocate(r1, 0x3, 0x0, 0x3000000000) [ 143.324971] FAULT_INJECTION: forcing a failure. [ 143.324971] name failslab, interval 1, probability 0, space 0, times 0 [ 143.336306] CPU: 1 PID: 13907 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 143.343152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.352506] Call Trace: [ 143.355106] dump_stack+0x1b9/0x29f [ 143.358740] ? arch_local_irq_restore+0x52/0x52 [ 143.361142] 8021q: VLANs not supported on lo [ 143.363424] should_fail.cold.4+0xa/0x1a [ 143.363447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 143.363468] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 143.363494] ? is_bpf_text_address+0xd7/0x170 [ 143.386680] ? find_held_lock+0x36/0x1c0 [ 143.390773] ? check_same_owner+0x320/0x320 [ 143.395089] ? kasan_slab_free+0xe/0x10 [ 143.399050] ? kmem_cache_free+0x86/0x2d0 [ 143.403183] ? putname+0xf2/0x130 [ 143.406619] ? rcu_note_context_switch+0x710/0x710 [ 143.411535] ? ksys_mount+0x12d/0x140 [ 143.415320] ? SyS_mount+0x35/0x50 [ 143.418844] ? do_syscall_64+0x29e/0x9d0 [ 143.422891] should_failslab+0x124/0x180 [ 143.426941] kmem_cache_alloc+0x2af/0x760 [ 143.431073] ? perf_trace_lock+0xd6/0x900 [ 143.435202] ? kasan_check_write+0x14/0x20 [ 143.439420] ? do_raw_spin_lock+0xc1/0x200 [ 143.443660] alloc_vfsmnt+0xe0/0x9d0 [ 143.447360] ? mnt_free_id.isra.27+0x60/0x60 [ 143.451755] ? kasan_check_read+0x11/0x20 [ 143.455887] ? graph_lock+0x170/0x170 [ 143.459670] ? rcu_pm_notify+0xc0/0xc0 [ 143.463538] ? trace_hardirqs_off+0xd/0x10 [ 143.467758] ? putname+0xf2/0x130 [ 143.471198] ? putname+0xf2/0x130 [ 143.474640] ? find_held_lock+0x36/0x1c0 [ 143.478689] ? lock_downgrade+0x8e0/0x8e0 [ 143.482820] ? module_unload_free+0x5b0/0x5b0 [ 143.487298] ? lock_release+0xa10/0xa10 [ 143.491258] ? mpi_free.cold.1+0x19/0x19 [ 143.495305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 143.500828] vfs_kern_mount.part.34+0x88/0x4d0 [ 143.505396] ? may_umount+0xb0/0xb0 [ 143.509008] ? _raw_read_unlock+0x22/0x30 [ 143.513147] ? __get_fs_type+0x97/0xc0 [ 143.517029] do_mount+0x564/0x3070 [ 143.520553] ? lock_downgrade+0x8e0/0x8e0 [ 143.524687] ? copy_mount_string+0x40/0x40 [ 143.528904] ? check_same_owner+0x320/0x320 [ 143.533206] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 143.538203] ? __check_object_size+0x95/0x5d9 [ 143.542685] ? __might_sleep+0x95/0x190 [ 143.546650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 143.552168] ? _copy_from_user+0xdf/0x150 [ 143.556301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 143.561823] ? copy_mount_options+0x285/0x380 [ 143.566303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 143.571826] ksys_mount+0x12d/0x140 [ 143.575436] SyS_mount+0x35/0x50 [ 143.578787] ? ksys_mount+0x140/0x140 [ 143.582574] do_syscall_64+0x29e/0x9d0 [ 143.586442] ? vmalloc_sync_all+0x30/0x30 [ 143.590574] ? _raw_spin_unlock_irq+0x27/0x70 [ 143.595053] ? finish_task_switch+0x1ca/0x820 [ 143.599533] ? syscall_return_slowpath+0x5c0/0x5c0 [ 143.604445] ? syscall_return_slowpath+0x30f/0x5c0 [ 143.609361] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 143.614713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 143.619542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2033/05/18 03:46:25 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x801, 0x0) pwritev(r0, &(0x7f0000000200), 0x0, 0x0) [ 143.624711] RIP: 0033:0x4552d9 [ 143.627882] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 143.635573] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 143.642824] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 143.650075] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 143.657325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 143.664576] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000004 2033/05/18 03:46:25 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:25 executing program 0: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f253872", 0x29}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 143.747515] IPVS: Error joining to the multicast group 2033/05/18 03:46:25 executing program 7 (fault-call:5 fault-nth:0): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 143.912451] FAULT_INJECTION: forcing a failure. [ 143.912451] name failslab, interval 1, probability 0, space 0, times 0 [ 143.923749] CPU: 1 PID: 13949 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 143.930597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 143.939953] Call Trace: [ 143.942554] dump_stack+0x1b9/0x29f [ 143.946199] ? arch_local_irq_restore+0x52/0x52 [ 143.950882] ? perf_trace_lock+0xd6/0x900 [ 143.955051] should_fail.cold.4+0xa/0x1a [ 143.959128] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 143.964241] ? lock_downgrade+0x8e0/0x8e0 [ 143.968401] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 143.973940] ? proc_fail_nth_write+0x96/0x1f0 [ 143.978446] ? find_held_lock+0x36/0x1c0 [ 143.982534] ? check_same_owner+0x320/0x320 [ 143.986863] ? rcu_note_context_switch+0x710/0x710 [ 143.991801] should_failslab+0x124/0x180 [ 143.995867] __kmalloc_track_caller+0x2c4/0x760 [ 144.000537] ? strncpy_from_user+0x500/0x500 [ 144.004942] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 144.010479] ? strndup_user+0x77/0xd0 [ 144.014276] memdup_user+0x2c/0xa0 [ 144.017815] strndup_user+0x77/0xd0 [ 144.021450] ksys_mount+0x3c/0x140 [ 144.024995] SyS_mount+0x35/0x50 [ 144.028357] ? ksys_mount+0x140/0x140 [ 144.032160] do_syscall_64+0x29e/0x9d0 [ 144.036044] ? vmalloc_sync_all+0x30/0x30 [ 144.040199] ? _raw_spin_unlock_irq+0x27/0x70 [ 144.044691] ? finish_task_switch+0x1ca/0x820 [ 144.049186] ? syscall_return_slowpath+0x5c0/0x5c0 [ 144.054116] ? syscall_return_slowpath+0x30f/0x5c0 [ 144.059051] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 144.064430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 144.069283] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 144.074454] RIP: 0033:0x4552d9 [ 144.077626] RSP: 002b:00007efe841b7c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.085319] RAX: ffffffffffffffda RBX: 00007efe841b86d4 RCX: 00000000004552d9 [ 144.092571] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 144.099826] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 144.107074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 144.114325] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000000 2033/05/18 03:46:26 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:26 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x6, 0x82100) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff]}, 0x9, 0x2, 0x0, 0x321e30bbbe18ae05, 0x3, 0x76, 0x4}, 0x20) 2033/05/18 03:46:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x400000000002) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x9, 0x0, 0x8, 0x1, 0x0, 0x3f, 0x41, 0xb, 0xa322, 0x1, 0x0, 0xfa1, 0x800, 0x1ff, 0x7, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x152, 0x4, 0xb2, 0x81, 0xfffffffffffffbff, 0xe4, 0x3, 0x9, 0x9, 0xd82, 0x7, 0x4, 0x625, 0x7ff, 0x6, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x4}, 0x2000, 0x2, 0xe637, 0x1, 0x80000001, 0x2, 0x200}, r2, 0x9, r0, 0x1) ioctl(r1, 0x227b, &(0x7f0000000000)) 2033/05/18 03:46:26 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:26 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x4, 0x4a9f, 0x4, 0x8001, 0x2}, &(0x7f0000000140)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x200200, 0x104) accept$nfc_llcp(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x60) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) 2033/05/18 03:46:26 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x111000) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x8b0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000140)={0xffffffffffff5720, 0x0, 'client1\x00', 0x0, "9942af6b91fb0640", "55d6e988152940d5ab92eb57a97b0ab1bb3437b9298ea48813ed11d29f9e206c"}) 2033/05/18 03:46:26 executing program 7 (fault-call:5 fault-nth:1): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:26 executing program 3 (fault-call:5 fault-nth:5): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 144.410304] FAULT_INJECTION: forcing a failure. [ 144.410304] name failslab, interval 1, probability 0, space 0, times 0 [ 144.421618] CPU: 1 PID: 13985 Comm: syz-executor7 Not tainted 4.16.0+ #1 [ 144.428461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.437813] Call Trace: [ 144.440400] dump_stack+0x1b9/0x29f [ 144.444029] ? arch_local_irq_restore+0x52/0x52 [ 144.448691] ? __save_stack_trace+0x7e/0xd0 [ 144.453003] should_fail.cold.4+0xa/0x1a [ 144.457055] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 144.462141] ? kasan_kmalloc+0xc4/0xe0 [ 144.466014] ? __kmalloc_track_caller+0x14a/0x760 [ 144.470838] ? memdup_user+0x2c/0xa0 [ 144.474532] ? strndup_user+0x77/0xd0 [ 144.478319] ? graph_lock+0x170/0x170 [ 144.482104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 144.487627] ? proc_fail_nth_write+0x96/0x1f0 [ 144.492109] ? proc_cwd_link+0x1d0/0x1d0 [ 144.496242] ? find_held_lock+0x36/0x1c0 [ 144.500297] ? check_same_owner+0x320/0x320 [ 144.504602] ? lock_release+0xa10/0xa10 [ 144.508566] ? rcu_note_context_switch+0x710/0x710 [ 144.513480] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 144.518479] ? __check_object_size+0x95/0x5d9 [ 144.522960] should_failslab+0x124/0x180 [ 144.527013] __kmalloc_track_caller+0x2c4/0x760 [ 144.531668] ? strncpy_from_user+0x500/0x500 [ 144.536062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.541583] ? strndup_user+0x77/0xd0 [ 144.545369] memdup_user+0x2c/0xa0 [ 144.548892] strndup_user+0x77/0xd0 [ 144.552504] ksys_mount+0x73/0x140 [ 144.556028] SyS_mount+0x35/0x50 [ 144.559376] ? ksys_mount+0x140/0x140 [ 144.563168] do_syscall_64+0x29e/0x9d0 [ 144.567037] ? vmalloc_sync_all+0x30/0x30 [ 144.571171] ? _raw_spin_unlock_irq+0x27/0x70 [ 144.575651] ? finish_task_switch+0x1ca/0x820 [ 144.580127] ? syscall_return_slowpath+0x5c0/0x5c0 [ 144.585049] ? syscall_return_slowpath+0x30f/0x5c0 [ 144.589967] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 144.595313] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 144.600165] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 144.605334] RIP: 0033:0x4552d9 2033/05/18 03:46:26 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000480)=ANY=[]) fallocate(r0, 0x8, 0x0, 0x3000000000) openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 2033/05/18 03:46:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/207, 0xffff}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}]}, 0x20}, 0x1}, 0x0) [ 144.608503] RSP: 002b:00007efe841b7c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.616192] RAX: ffffffffffffffda RBX: 00007efe841b86d4 RCX: 00000000004552d9 [ 144.623530] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 144.631690] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 144.638942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 144.646191] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000001 [ 144.679738] FAULT_INJECTION: forcing a failure. [ 144.679738] name failslab, interval 1, probability 0, space 0, times 0 [ 144.691077] CPU: 0 PID: 13998 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 144.697923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.707277] Call Trace: [ 144.709878] dump_stack+0x1b9/0x29f [ 144.713517] ? arch_local_irq_restore+0x52/0x52 [ 144.718197] ? __unwind_start+0x166/0x330 [ 144.722371] ? __kernel_text_address+0xd/0x40 2033/05/18 03:46:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_cache\x00') read$eventfd(r1, &(0x7f0000000000), 0x8) sendfile(r0, r1, &(0x7f0000493000)=0x200000, 0x3) [ 144.726883] should_fail.cold.4+0xa/0x1a [ 144.730961] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 144.736074] ? save_stack+0xa9/0xd0 [ 144.739704] ? save_stack+0x43/0xd0 [ 144.743332] ? kasan_kmalloc+0xc4/0xe0 [ 144.747219] ? kasan_slab_alloc+0x12/0x20 [ 144.751366] ? kmem_cache_alloc+0x12e/0x760 [ 144.755688] ? alloc_vfsmnt+0xe0/0x9d0 [ 144.759579] ? vfs_kern_mount.part.34+0x88/0x4d0 [ 144.764348] ? find_held_lock+0x36/0x1c0 [ 144.768434] ? check_same_owner+0x320/0x320 [ 144.772763] ? rcu_note_context_switch+0x710/0x710 2033/05/18 03:46:26 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000008ff1)='/dev/sequencer\x00', 0x1, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) keyctl$session_to_parent(0x12) ioctl$EVIOCGLED(r0, 0xc0046d00, &(0x7f0000007000)) [ 144.777706] should_failslab+0x124/0x180 [ 144.781776] __kmalloc_track_caller+0x2c4/0x760 [ 144.786454] ? kasan_check_read+0x11/0x20 [ 144.790610] ? do_raw_spin_unlock+0x9e/0x2e0 [ 144.795112] ? kstrdup_const+0x66/0x80 [ 144.799024] kstrdup+0x39/0x70 [ 144.802221] kstrdup_const+0x66/0x80 [ 144.805939] alloc_vfsmnt+0x1b3/0x9d0 [ 144.809741] ? mnt_free_id.isra.27+0x60/0x60 [ 144.814154] ? kasan_check_read+0x11/0x20 [ 144.818310] ? graph_lock+0x170/0x170 [ 144.822109] ? rcu_pm_notify+0xc0/0xc0 [ 144.826000] ? trace_hardirqs_off+0xd/0x10 2033/05/18 03:46:26 executing program 1: mkdir(&(0x7f0000cb3ff8)='./file0\x00', 0x0) mount(&(0x7f00005b9ff8)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='msdos\x00', 0x1002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0x401) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x17c, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1) syz_mount_image$gfs2(&(0x7f00000002c0)='gfs2\x00', &(0x7f0000000300)='../file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x28, &(0x7f0000001740)=ANY=[@ANYBLOB='commit=8']) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='../file0\x00', 0xfffffffffffffeff, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="b7fb7bfe127fed833b275edbe2e3aa11", 0x10, 0xfffffffffffff000}, {&(0x7f0000000180)="fdb36c492809017a26e25cc31c0a913b4360c6079340c9a04afdd066e7e0028f09e5b3afcfb65d902bab9eaebf8331e9dec8", 0x32, 0x2}, {&(0x7f00000001c0)="4247257176e15a839882b95d07a7cb2aefc00b752a413a5bc9af45131467438669c85a787d9aa46af6df36215fc662b112d0b2", 0x33, 0x7}, {&(0x7f0000000200)="bb28f86bf3567574c36de23701c85e00a6b63adc7b4ba4d38b02cf86ef9139cfae0884ce7bfca87fd8fa074e47459a75c65b657c4af4835ea80b9acf251a1d9c990f98b56d5087d67f", 0x49, 0x3}, {&(0x7f0000000280)="e4335d880d2fa77de36713a6e74f555993759c7e01dbed4dff6062d184278525151ac8045a987e385b7e5a51e4b78e12c3bbe167d039d911044547c0c3", 0x3d}, {&(0x7f0000000340)="67fc028ab6b055b5b981386c645cb4702d7b253b9861d3c2dfee20e2c7e2e05066fa481b064beefae86c02d5f5d78e7cb8eead5629d2c36a83309482a4d0e3d063302448f6d3bd4207de00e26a85b1152864efa5bbcf19982b49e8bd450c4d5ca02192703cd15ddac7ed7c0fbd123d587e0ec8caac6831b2a75942fb3e022a77c3b580c6d734ace626598e0df1fb5890e5d2e4685aeede1cf99e4d15d5032e3d1941f304dcb30ce2ad60591dcdbb4edff672a17117146f2f67f2ff1b6e3b51003ad1b02af98b089530552b70381cfa634837e36933ebbb506f8912a1307d7088f91024c0", 0xe4, 0x5}], 0x20000, &(0x7f0000000500)={[{@part={'part', 0x3d, [0x2d, 0x3d, 0x0, 0x3f]}, 0x2c}]}) prctl$setfpexc(0xc, 0x10000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000540)={'syzkaller1\x00', 0x8}) [ 144.830242] ? putname+0xf2/0x130 [ 144.833700] ? putname+0xf2/0x130 [ 144.837162] ? find_held_lock+0x36/0x1c0 [ 144.841239] ? lock_downgrade+0x8e0/0x8e0 [ 144.845399] ? module_unload_free+0x5b0/0x5b0 [ 144.849901] ? lock_release+0xa10/0xa10 [ 144.853881] ? mpi_free.cold.1+0x19/0x19 [ 144.857956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 144.863495] vfs_kern_mount.part.34+0x88/0x4d0 [ 144.868077] ? may_umount+0xb0/0xb0 [ 144.871700] ? _raw_read_unlock+0x22/0x30 [ 144.875850] ? __get_fs_type+0x97/0xc0 [ 144.879746] do_mount+0x564/0x3070 [ 144.883288] ? lock_downgrade+0x8e0/0x8e0 [ 144.887439] ? copy_mount_string+0x40/0x40 [ 144.892461] ? check_same_owner+0x320/0x320 [ 144.896778] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 144.901791] ? __check_object_size+0x95/0x5d9 [ 144.906293] ? __might_sleep+0x95/0x190 [ 144.910269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.915805] ? _copy_from_user+0xdf/0x150 [ 144.919953] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.925487] ? copy_mount_options+0x285/0x380 [ 144.929978] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 144.935515] ksys_mount+0x12d/0x140 [ 144.939143] SyS_mount+0x35/0x50 [ 144.942509] ? ksys_mount+0x140/0x140 [ 144.946309] do_syscall_64+0x29e/0x9d0 [ 144.950189] ? vmalloc_sync_all+0x30/0x30 [ 144.954335] ? _raw_spin_unlock_irq+0x27/0x70 [ 144.958829] ? finish_task_switch+0x1ca/0x820 [ 144.963671] ? syscall_return_slowpath+0x5c0/0x5c0 [ 144.968598] ? syscall_return_slowpath+0x30f/0x5c0 [ 144.973529] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 144.978895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 144.983739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 144.988921] RIP: 0033:0x4552d9 [ 144.992101] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.999804] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 145.007064] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 145.014323] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 145.021584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000400)=""/69) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x200, 0x0) connect$vsock_dgram(r2, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host=0x2}, 0x10) r3 = accept$alg(r0, 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000300)=""/129) sendmmsg$alg(r3, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002780)}], 0x1, 0x8881) r4 = accept(r2, 0x0, &(0x7f0000000140)=0xffffffffffffff6d) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="10002cbd7000ffdbdf2501000000680001000c00070000000000000000000800080009e1000014000300ac14140e00000000000000000000000014000300fe8000100000000000000000000000bb0c00070001000062dd00002400000008000b007369700014000300fe8000000000000000000000000000bb3000030008000300040000000800010001000000080008000800000014000600ff010000000000000000000000"], 0xac}, 0x1}, 0x80) 2033/05/18 03:46:26 executing program 6: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000180)={0x7, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x3b, @multicast2=0xe0000002, 0x4e22, 0x3, 'lblcr\x00', 0x18, 0x0, 0x1e}, 0x2c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x50000000af01, &(0x7f0000000a40)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x800) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 145.028851] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000005 2033/05/18 03:46:26 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:26 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000400000060000000731656a010000000400000007000000"]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x40}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="3f000000bcd55284e8c686483503f56529634a6b2d28259fbdf9eacd311d8a71ded33540c383883dbfed8bd65f1b4b70df86f556750dcd3f7182c888c24e2d2b9c03"], &(0x7f0000000180)=0x46) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) accept4$ipx(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80800) 2033/05/18 03:46:27 executing program 4: r0 = mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0x8c2, 0x0, &(0x7f000004b000)={0xffffffffffffffff, 0x1, 0x3}) mq_timedsend(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000036000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000000c0)=""/84, 0x54, 0xffffffffffffffff, &(0x7f0000000080)={r1, r2+10000000}) 2033/05/18 03:46:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x6, 0x80000000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f00000001c0)={r1, &(0x7f0000000140)=""/86}) fcntl$notify(r0, 0x402, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000c40)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) 2033/05/18 03:46:27 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000080)=""/142, &(0x7f00000001c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x2, 0x0, 0x80, &(0x7f0000ffe000/0x1000)=nil}) 2033/05/18 03:46:27 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xeb8) pread64(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090020080"], &(0x7f00000002c0)) 2033/05/18 03:46:27 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002a00)='|', 0x1}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000001580)={0x1, &(0x7f00000014c0)=[{}]}) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000040)=@sco, 0x8, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/66}, {&(0x7f0000000080)=""/52}, {&(0x7f00000000c0)=""/120}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/120}, {&(0x7f0000001280)=""/177}, {&(0x7f0000000180)=""/17}, {&(0x7f0000001340)=""/2}, {&(0x7f0000001380)=""/16}], 0x133, 0x0, 0x301}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001480)={0x3fc, 0x7ff, 0x1f, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, 'gre0\x00'}) 2033/05/18 03:46:27 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) fcntl$setsig(r0, 0xa, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2000}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x7, 0x10, 0x1, 0xffff}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r3, 0xc8, "9049d969736c8b828ae4fc09af31ea260baa008333daa64e209efcf9cd77af13304833e781a0be88b6765f86e55a4d97bd8672db4fcbc3b1836acde6ec15d1af29f484b58da8bc6a8be1068a9b5fb68aacacb1bf83c8d444dced5d0145da3c9fc1bfdb77ae1a9694819a1ee4c5f4b91468e3de8b0b23ba1d6c135ab82dc8aa9d7465fec1d32f8b02acf2ea1c35029c583e578febae99eda16dddf8c9fbc9848062fe42040cb89be784d15910b8f228ad5221b0b1278f65a79f15649b7b3a63c22d736007533d47d6"}, &(0x7f0000000340)=0xd0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:27 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea69abe39b4799187172584c1df3518bb9d076b1f45df3ba7293f730cdbd1cb43148bf01084f253872", 0x29}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_crypto(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@get={0x128, 0x13, 0x10, 0x70bd26, 0x25dfdbfd, {{'drbg_nopr_sha1\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x11e5}, {0x8, 0x1, 0x7f}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7fffffff}]}, 0x128}, 0x1, 0x0, 0x0, 0x400c1}, 0x4000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={"6c6f3a2c000081800000faffdfe700", &(0x7f0000002d80)=@ethtool_gfeatures={0x3a}}) 2033/05/18 03:46:27 executing program 3 (fault-call:5 fault-nth:6): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x7ffffffe, {0x0, 0x0, 0x0, 0x7}, 0x9}, 0xe) 2033/05/18 03:46:27 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) poll(&(0x7f0000000040)=[{r0, 0x40}, {r0, 0xc1fa2171ef21c8f8}, {r0, 0x2014}, {r0, 0x10}, {r0, 0x200}], 0x5, 0x4000000000010001) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:27 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:27 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0xc2}}}}}}, &(0x7f00000000c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x40202) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x5000, 0x1, 0x1, 0xa}) [ 146.016535] FAULT_INJECTION: forcing a failure. [ 146.016535] name failslab, interval 1, probability 0, space 0, times 0 [ 146.027864] CPU: 1 PID: 14167 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 146.034702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 146.044043] Call Trace: [ 146.046620] dump_stack+0x1b9/0x29f [ 146.050238] ? arch_local_irq_restore+0x52/0x52 [ 146.054894] should_fail.cold.4+0xa/0x1a [ 146.058942] ? pcpu_alloc+0x188/0x1380 [ 146.062813] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 146.067904] ? pcpu_balance_workfn+0x16d0/0x16d0 [ 146.072651] ? find_held_lock+0x36/0x1c0 [ 146.076709] ? check_same_owner+0x320/0x320 [ 146.081022] ? lockdep_init_map+0x9/0x10 [ 146.085066] ? rcu_note_context_switch+0x710/0x710 [ 146.089982] ? init_wait_entry+0x1b0/0x1b0 [ 146.094202] should_failslab+0x124/0x180 [ 146.098252] kmem_cache_alloc+0x2af/0x760 [ 146.102383] ? alloc_vfsmnt+0x771/0x9d0 [ 146.106346] ? mnt_free_id.isra.27+0x60/0x60 [ 146.110741] getname_kernel+0x54/0x370 [ 146.114611] kern_path+0x1e/0x40 [ 146.117962] lookup_bdev+0xfa/0x240 [ 146.121575] ? blkdev_open+0x280/0x280 [ 146.125450] ? find_held_lock+0x36/0x1c0 [ 146.129495] blkdev_get_by_path+0x1f/0xe0 [ 146.133626] mount_bdev+0x5d/0x3e0 [ 146.137149] ? load_system_files+0x7f70/0x7f70 [ 146.141713] ntfs_mount+0x34/0x40 [ 146.145147] mount_fs+0xae/0x328 [ 146.148494] ? mpi_free.cold.1+0x19/0x19 [ 146.152543] vfs_kern_mount.part.34+0xd4/0x4d0 [ 146.157110] ? may_umount+0xb0/0xb0 [ 146.160721] ? _raw_read_unlock+0x22/0x30 [ 146.164854] ? __get_fs_type+0x97/0xc0 [ 146.168727] do_mount+0x564/0x3070 [ 146.172249] ? lock_downgrade+0x8e0/0x8e0 [ 146.176383] ? copy_mount_string+0x40/0x40 [ 146.180605] ? check_same_owner+0x320/0x320 [ 146.184907] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 146.189909] ? __check_object_size+0x95/0x5d9 [ 146.194389] ? __might_sleep+0x95/0x190 [ 146.198352] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 146.203870] ? _copy_from_user+0xdf/0x150 [ 146.208003] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 146.213531] ? copy_mount_options+0x285/0x380 [ 146.218009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 146.223536] ksys_mount+0x12d/0x140 [ 146.227146] SyS_mount+0x35/0x50 [ 146.230493] ? ksys_mount+0x140/0x140 [ 146.234281] do_syscall_64+0x29e/0x9d0 [ 146.238150] ? vmalloc_sync_all+0x30/0x30 [ 146.242280] ? _raw_spin_unlock_irq+0x27/0x70 [ 146.246759] ? finish_task_switch+0x1ca/0x820 [ 146.251236] ? syscall_return_slowpath+0x5c0/0x5c0 [ 146.256146] ? syscall_return_slowpath+0x30f/0x5c0 [ 146.261059] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 146.266408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 146.271235] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 146.276406] RIP: 0033:0x4552d9 [ 146.279577] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 146.287265] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 146.294513] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 146.301761] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 146.309012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 146.316264] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000006 2033/05/18 03:46:29 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='//file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="7fc4f33f1ebd3eb86be2986cf6f49d04404c2e3a24506a4abeec3ca1d87a2eb8fe76b2ffb71be193cad451154b54520c9225b238ff2f9bb7705d348ad0dab2424489aff18e88aaac9f3156115716c30c4da21e28d06c606e9f22a5d7c5ba", @ANYRES32=r1, @ANYRES16=r2, @ANYRES16=r2, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64], @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYPTR, @ANYBLOB="0022f195dc2e6a9b"], @ANYPTR, @ANYRES32=r1, @ANYBLOB="90e4c4b7f17333ba7f2f671f78941b41c19e82a66a428b005c63b0083d550e266695ac5a7a", @ANYRES16=r1, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR], @ANYRES32], @ANYRES64=r2, @ANYRES16=r1, @ANYPTR64], &(0x7f0000000900)=""/130, 0x2502424fc7219140) r3 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0xffc5) r4 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) sendfile(r4, r2, 0x0, 0x7) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540)=""/140, &(0x7f0000000200)=0xfffffffffffffff9) lstat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="600100000d0b0004a9f0c91d6117fe25000000004c0135003f0500f678644c0314002000218100000000000000000000000000aa"], 0x34}, 0x1}, 0x0) fallocate(r1, 0x3, 0x0, 0xffff) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000), 0xffffffffffffff15) getpid() ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000003000/0x2000)=nil) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) ioctl(r6, 0x2283, &(0x7f0000979fff)="a6") clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_gettime(0x0, &(0x7f0000000400)) getgroups(0x2, &(0x7f0000000280)=[r5, r5]) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000380)=""/17) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r6, &(0x7f00000001c0)=[{{r7}, 0x1, 0x100000000}, {{}, 0x0, 0x0, 0x7cd3}, {{}, 0x7, 0x0, 0x6}, {{}, 0x20, 0x0, 0x5}, {{0x0, r8/1000+10000}, 0x0, 0x0, 0x52}, {}, {{r9, r10/1000+10000}, 0x6, 0x0, 0x9}], 0xa8) 2033/05/18 03:46:29 executing program 1: io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) setns(r1, 0x8000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) io_submit(r0, 0x3da, &(0x7f0000000740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000880)="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", 0x0, 0x6, 0x0, 0x1, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, &(0x7f0000000780)="7170212202ce527697e16e20bbc3e98f8fd0b4782da4f4c9dce8bab63885211c472a4208d1c12e4acd14a972f0b2376b81fc3c9d77bf7e312bdddb530759372e7ef2c9edcb4208cdfbf528e9af70830273612ce13fce90c32ec311b9660668c09be521bd86f70cd2403415a6f40821a677e90cf17dd31923bad81bd8e3912975229ee9bc5c9112b382348db823fc15e3e2ca369627aa4ed33544e91761b67132a49f38e9dd96c5e2783404b189eaa576278d2a4de24da0a618bb4741db745a622c3b3b391fef215dcaaac92a7c7ebd9d58161a3e721b59dab8c0ce09c84194542f75c007fa49cd1786191b04327e8d389b4ca6124899b4c820", 0x0, 0x0, 0x0, 0x1, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0xd89, r2, &(0x7f0000000440)="91cff17a46cf4e66c23dba3fd8b7b609cd3914b9beebf4149566f10b830ea14098dc864548a0e4e5007fe5d1520a661bed61bd91a7ea9a2c72639af1cf55a38a0ec15b", 0x0, 0x9, 0x0, 0x0, r2}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffff801, r1, &(0x7f0000000500)="41fed02bc1bf495cecd252229067b14ee0534a071284f5d630fcb4edae8801bbd7fb4ed52053c38e834b56e67c87b472027b72cc041bb27410c956258b797bf0c2b8", 0x0, 0xfffffffffffffff8, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xf, 0x2, r1, &(0x7f00000005c0)="daa37d12724eb4b0a15ffad362621aeacc8826855130f54010b98ac9464869e8a0cb5c4bab414f0e8b582c03349c28f0dc538e8fd5291a7f75f91e4514f186a415e30cfd29", 0x0, 0x5, 0x0, 0x0, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000680)="84435d8357807cbf346311bdec0fc93805c10a80c8a7298c3504de42c22b891dbcb433298958bbe7364c2981a00a1bb8b2b62594f3fade60c978b8cf35fc7785aeb6f22eecb9f6ec54750c112f5281b9017d01579e9b9d63460981a183309e1a225c180207adde86a07fb66010b4e3fba58c1104", 0x0, 0x80000001, 0x0, 0x1, r2}]) 2033/05/18 03:46:29 executing program 4: modify_ldt$write2(0x11, &(0x7f0000002d00)={0x8}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) 2033/05/18 03:46:29 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:29 executing program 2 (fault-call:5 fault-nth:0): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:29 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x4}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x3ff, 0x20, 0x4, 0x2, 0x8}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000300)={0xfffffffffffffffe, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) modify_ldt$write2(0x11, &(0x7f0000000340)={0x81, 0x0, 0x0, 0x7, 0x6, 0x6, 0x1, 0xd9, 0x6}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x10b000) 2033/05/18 03:46:29 executing program 3 (fault-call:5 fault-nth:7): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 147.373954] FAULT_INJECTION: forcing a failure. [ 147.373954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.385803] CPU: 0 PID: 14197 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 147.392639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.401983] Call Trace: [ 147.404562] dump_stack+0x1b9/0x29f [ 147.408177] ? arch_local_irq_restore+0x52/0x52 [ 147.412834] ? lock_downgrade+0x8e0/0x8e0 [ 147.416974] should_fail.cold.4+0xa/0x1a [ 147.421026] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 147.426130] ? debug_check_no_locks_freed+0x310/0x310 [ 147.431310] ? wait_for_completion+0x870/0x870 [ 147.435879] ? lock_downgrade+0x8e0/0x8e0 [ 147.440020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.445548] ? find_next_zero_bit+0x111/0x140 [ 147.450039] ? kasan_check_read+0x11/0x20 [ 147.454174] ? rcu_is_watching+0x85/0x140 [ 147.458309] ? rcu_pm_notify+0xc0/0xc0 [ 147.462195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 147.467714] ? should_fail+0x21b/0xbcd [ 147.471584] ? pcpu_alloc+0x188/0x1380 [ 147.475460] __alloc_pages_nodemask+0x34e/0xd70 [ 147.480122] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 147.485130] ? find_held_lock+0x36/0x1c0 [ 147.489198] ? check_same_owner+0x320/0x320 [ 147.493508] ? lockdep_init_map+0x9/0x10 [ 147.497557] cache_grow_begin+0x72/0x6c0 [ 147.501612] kmem_cache_alloc+0x689/0x760 [ 147.505747] ? alloc_vfsmnt+0x771/0x9d0 [ 147.509714] ? mnt_free_id.isra.27+0x60/0x60 [ 147.514114] getname_kernel+0x54/0x370 [ 147.517992] kern_path+0x1e/0x40 [ 147.521352] lookup_bdev+0xfa/0x240 [ 147.524967] ? blkdev_open+0x280/0x280 [ 147.528843] ? find_held_lock+0x36/0x1c0 [ 147.532893] blkdev_get_by_path+0x1f/0xe0 [ 147.537035] mount_bdev+0x5d/0x3e0 [ 147.540564] ? load_system_files+0x7f70/0x7f70 [ 147.545137] ntfs_mount+0x34/0x40 [ 147.548578] mount_fs+0xae/0x328 [ 147.551929] ? mpi_free.cold.1+0x19/0x19 [ 147.555981] vfs_kern_mount.part.34+0xd4/0x4d0 [ 147.560552] ? may_umount+0xb0/0xb0 [ 147.564164] ? _raw_read_unlock+0x22/0x30 [ 147.568296] ? __get_fs_type+0x97/0xc0 [ 147.572173] do_mount+0x564/0x3070 [ 147.575699] ? lock_downgrade+0x8e0/0x8e0 [ 147.579837] ? copy_mount_string+0x40/0x40 [ 147.584055] ? check_same_owner+0x320/0x320 [ 147.588360] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 147.593362] ? __check_object_size+0x95/0x5d9 [ 147.597846] ? __might_sleep+0x95/0x190 [ 147.601815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.607339] ? _copy_from_user+0xdf/0x150 [ 147.611562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.617084] ? copy_mount_options+0x285/0x380 [ 147.621566] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 147.627091] ksys_mount+0x12d/0x140 [ 147.630706] SyS_mount+0x35/0x50 [ 147.634057] ? ksys_mount+0x140/0x140 [ 147.637845] do_syscall_64+0x29e/0x9d0 [ 147.641718] ? vmalloc_sync_all+0x30/0x30 [ 147.645853] ? _raw_spin_unlock_irq+0x27/0x70 [ 147.650332] ? finish_task_switch+0x1ca/0x820 [ 147.654815] ? syscall_return_slowpath+0x5c0/0x5c0 [ 147.659731] ? syscall_return_slowpath+0x30f/0x5c0 [ 147.664650] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 147.670002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.674841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 147.680018] RIP: 0033:0x4552d9 [ 147.683192] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.690888] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 147.698143] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 147.705398] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 147.712650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 147.719904] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000007 [ 147.727571] __ntfs_error: 37 callbacks suppressed [ 147.727582] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 147.740921] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 147.753044] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 147.783898] FAULT_INJECTION: forcing a failure. [ 147.783898] name failslab, interval 1, probability 0, space 0, times 0 [ 147.795875] CPU: 0 PID: 14200 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 147.802721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 147.806411] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 147.812072] Call Trace: [ 147.812101] dump_stack+0x1b9/0x29f [ 147.812129] ? arch_local_irq_restore+0x52/0x52 [ 147.820528] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 147.823087] ? perf_trace_lock+0xd6/0x900 [ 147.823113] should_fail.cold.4+0xa/0x1a [ 147.826715] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 147.831362] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 147.831381] ? lock_downgrade+0x8e0/0x8e0 [ 147.867571] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.873092] ? proc_fail_nth_write+0x96/0x1f0 [ 147.877578] ? find_held_lock+0x36/0x1c0 [ 147.881638] ? check_same_owner+0x320/0x320 [ 147.885947] ? rcu_note_context_switch+0x710/0x710 [ 147.890862] should_failslab+0x124/0x180 [ 147.894909] __kmalloc_track_caller+0x2c4/0x760 [ 147.899567] ? strncpy_from_user+0x500/0x500 [ 147.903958] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 147.909477] ? strndup_user+0x77/0xd0 [ 147.913260] memdup_user+0x2c/0xa0 [ 147.916789] strndup_user+0x77/0xd0 [ 147.920405] ksys_mount+0x3c/0x140 [ 147.923932] SyS_mount+0x35/0x50 [ 147.927283] ? ksys_mount+0x140/0x140 [ 147.931069] do_syscall_64+0x29e/0x9d0 [ 147.934938] ? vmalloc_sync_all+0x30/0x30 [ 147.939068] ? kasan_check_write+0x14/0x20 [ 147.943289] ? syscall_return_slowpath+0x5c0/0x5c0 [ 147.948207] ? syscall_return_slowpath+0x30f/0x5c0 [ 147.953125] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 147.958473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 147.963302] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 147.968473] RIP: 0033:0x4552d9 [ 147.971644] RSP: 002b:00007fde3ed70c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 147.979335] RAX: ffffffffffffffda RBX: 00007fde3ed716d4 RCX: 00000000004552d9 [ 147.986584] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 147.993834] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.001086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 148.008334] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000000 2033/05/18 03:46:30 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f}, 0xe) listen(r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 2033/05/18 03:46:30 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000402000409004bddd9de4117eebea6b26046f891fe10eebf000ee9a90f798058561a9b6dfa01004ade49a2860cdce901d2da75af1f24e4ffaa26d7a0a1aacded9589661f6c") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, &(0x7f0000000140)}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x9, 0x3, [{0x80000001, 0x0, 0x1}, {0x4, 0x0, 0x7}, {0x1, 0x0, 0x7}, {0x4, 0x0, 0x3}, {0x6, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0xffffffff, 0x0, 0x7}, {0x83, 0x0, 0x10000}, {0xfffffffffffffffb, 0x0, 0x4}]}) 2033/05/18 03:46:30 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) r1 = memfd_create(&(0x7f0000000000)='vcan0\x00', 0x3) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000280)=""/4096) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0xd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x93cca066bcd113d5}, 0x98) 2033/05/18 03:46:30 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:30 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./.ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:30 executing program 3 (fault-call:5 fault-nth:8): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:30 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x5, 0xccc, 0xffffffffffffffff, 0x2, 0x4, 0x20, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, 0xa99b, 0x7, 0x0, 0x3}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_id=r2, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:30 executing program 2 (fault-call:5 fault-nth:1): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 148.305784] FAULT_INJECTION: forcing a failure. [ 148.305784] name failslab, interval 1, probability 0, space 0, times 0 [ 148.317122] CPU: 1 PID: 14248 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 148.323963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.333311] Call Trace: [ 148.335898] dump_stack+0x1b9/0x29f [ 148.339519] ? arch_local_irq_restore+0x52/0x52 [ 148.344174] ? __save_stack_trace+0x7e/0xd0 [ 148.348488] should_fail.cold.4+0xa/0x1a [ 148.352537] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.357624] ? kasan_kmalloc+0xc4/0xe0 [ 148.361496] ? __kmalloc_track_caller+0x14a/0x760 [ 148.366322] ? memdup_user+0x2c/0xa0 [ 148.370024] ? strndup_user+0x77/0xd0 [ 148.373817] ? graph_lock+0x170/0x170 [ 148.377603] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 148.383129] ? proc_fail_nth_write+0x96/0x1f0 [ 148.387609] ? proc_cwd_link+0x1d0/0x1d0 [ 148.391665] ? find_held_lock+0x36/0x1c0 [ 148.395733] ? check_same_owner+0x320/0x320 [ 148.400045] ? lock_release+0xa10/0xa10 [ 148.404011] ? rcu_note_context_switch+0x710/0x710 [ 148.408930] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 148.413932] ? __check_object_size+0x95/0x5d9 [ 148.418419] should_failslab+0x124/0x180 [ 148.422485] __kmalloc_track_caller+0x2c4/0x760 [ 148.427144] ? strncpy_from_user+0x500/0x500 [ 148.431540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.437066] ? strndup_user+0x77/0xd0 [ 148.440854] memdup_user+0x2c/0xa0 [ 148.444382] strndup_user+0x77/0xd0 [ 148.448000] ksys_mount+0x73/0x140 [ 148.451533] SyS_mount+0x35/0x50 [ 148.454888] ? ksys_mount+0x140/0x140 [ 148.458677] do_syscall_64+0x29e/0x9d0 [ 148.462553] ? vmalloc_sync_all+0x30/0x30 [ 148.466688] ? _raw_spin_unlock_irq+0x27/0x70 [ 148.471170] ? finish_task_switch+0x1ca/0x820 [ 148.475649] ? syscall_return_slowpath+0x5c0/0x5c0 [ 148.480567] ? syscall_return_slowpath+0x30f/0x5c0 [ 148.485486] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 148.490839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 148.495675] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 148.500848] RIP: 0033:0x4552d9 [ 148.504024] RSP: 002b:00007fde3ed70c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.511721] RAX: ffffffffffffffda RBX: 00007fde3ed716d4 RCX: 00000000004552d9 [ 148.518977] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 148.526231] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.533484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 148.540734] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000001 [ 148.551664] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 148.560147] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 148.572214] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 148.592218] FAULT_INJECTION: forcing a failure. [ 148.592218] name failslab, interval 1, probability 0, space 0, times 0 2033/05/18 03:46:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4180, 0x80) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x800) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) getsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2033/05/18 03:46:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x800000000009}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000000000), &(0x7f0000b88000), 0x3}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 148.603920] CPU: 0 PID: 14247 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 148.610777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 148.620128] Call Trace: [ 148.622736] dump_stack+0x1b9/0x29f [ 148.626381] ? arch_local_irq_restore+0x52/0x52 [ 148.631061] ? perf_trace_lock+0xd6/0x900 [ 148.635230] should_fail.cold.4+0xa/0x1a [ 148.639306] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 148.644422] ? zap_class+0x720/0x720 [ 148.648144] ? lock_acquire+0x1dc/0x520 [ 148.652126] ? mount_bdev+0xa5/0x3e0 [ 148.655850] ? graph_lock+0x170/0x170 [ 148.659672] ? find_held_lock+0x36/0x1c0 [ 148.663749] ? __lock_is_held+0xb5/0x140 [ 148.667829] ? check_same_owner+0x320/0x320 [ 148.672168] ? rcu_note_context_switch+0x710/0x710 [ 148.677111] should_failslab+0x124/0x180 [ 148.681176] kmem_cache_alloc_trace+0x2cb/0x780 [ 148.685832] ? kasan_check_write+0x14/0x20 [ 148.690053] ? do_raw_spin_lock+0xc1/0x200 [ 148.694275] sget_userns+0x1c7/0xf20 [ 148.697970] ? kill_litter_super+0x90/0x90 [ 148.702190] ? ns_test_super+0x50/0x50 [ 148.706067] ? destroy_unused_super.part.9+0x100/0x100 [ 148.711327] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 148.715897] ? kasan_check_write+0x14/0x20 [ 148.720116] ? do_raw_spin_lock+0xc1/0x200 [ 148.724340] ? blkdev_get+0xc0/0xb30 [ 148.728042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.733563] ? cap_capable+0x1f9/0x260 [ 148.737437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.742955] ? security_capable+0xa4/0xd0 [ 148.747088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 148.752612] ? ns_capable_common+0x13f/0x170 [ 148.757013] ? kill_litter_super+0x90/0x90 [ 148.761233] sget+0x10b/0x150 [ 148.764321] ? ns_test_super+0x50/0x50 [ 148.768192] mount_bdev+0x111/0x3e0 [ 148.771810] ? load_system_files+0x7f70/0x7f70 [ 148.776378] ntfs_mount+0x34/0x40 [ 148.779816] mount_fs+0xae/0x328 [ 148.783168] vfs_kern_mount.part.34+0xd4/0x4d0 [ 148.787736] ? may_umount+0xb0/0xb0 [ 148.791348] ? _raw_read_unlock+0x22/0x30 [ 148.795479] ? __get_fs_type+0x97/0xc0 [ 148.799354] do_mount+0x564/0x3070 [ 148.802883] ? lock_downgrade+0x8e0/0x8e0 [ 148.807024] ? copy_mount_string+0x40/0x40 [ 148.811243] ? check_same_owner+0x320/0x320 [ 148.815559] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 148.820557] ? __check_object_size+0x95/0x5d9 [ 148.825048] ? __might_sleep+0x95/0x190 [ 148.829018] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.834543] ? _copy_from_user+0xdf/0x150 [ 148.838675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.844207] ? copy_mount_options+0x285/0x380 [ 148.848695] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 148.854219] ksys_mount+0x12d/0x140 [ 148.857832] SyS_mount+0x35/0x50 [ 148.861180] ? ksys_mount+0x140/0x140 [ 148.864967] do_syscall_64+0x29e/0x9d0 [ 148.868837] ? vmalloc_sync_all+0x30/0x30 [ 148.872986] ? _raw_spin_unlock_irq+0x27/0x70 [ 148.877466] ? finish_task_switch+0x1ca/0x820 [ 148.881944] ? syscall_return_slowpath+0x5c0/0x5c0 [ 148.886856] ? syscall_return_slowpath+0x30f/0x5c0 [ 148.891772] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 148.897121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 148.901951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2033/05/18 03:46:30 executing program 2 (fault-call:5 fault-nth:2): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 148.907123] RIP: 0033:0x4552d9 [ 148.910292] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.917984] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 148.925236] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 148.932486] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 148.939744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 148.946995] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000008 2033/05/18 03:46:30 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='.//ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:30 executing program 5: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:30 executing program 1: perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000b080)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f0000009640)=[{&(0x7f000000a080)="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", 0x12d}], 0x1, &(0x7f0000009680)}}], 0x1, 0x0) mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000080)=""/252) bind$inet6(0xffffffffffffffff, &(0x7f000097f000)={0x11, 0x0, 0x7ffff}, 0x1c) ioctl$KDENABIO(r0, 0x4b36) [ 149.102875] FAULT_INJECTION: forcing a failure. [ 149.102875] name failslab, interval 1, probability 0, space 0, times 0 [ 149.114322] CPU: 0 PID: 14295 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 149.121177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.130545] Call Trace: [ 149.133318] dump_stack+0x1b9/0x29f [ 149.136960] ? arch_local_irq_restore+0x52/0x52 [ 149.141646] should_fail.cold.4+0xa/0x1a [ 149.145722] ? lock_downgrade+0x8e0/0x8e0 2033/05/18 03:46:30 executing program 4: r0 = socket$inet(0x2, 0x803, 0x11) sendto$inet(r0, &(0x7f0000000040), 0x0, 0xfffffffffffffffd, &(0x7f000032b000)={0x2, 0x0, @multicast2=0xe0000002}, 0xa) [ 149.149881] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.154995] ? kasan_check_read+0x11/0x20 [ 149.159162] ? debug_check_no_locks_freed+0x310/0x310 [ 149.164369] ? find_held_lock+0x36/0x1c0 [ 149.168460] ? check_same_owner+0x320/0x320 [ 149.172798] ? rcu_note_context_switch+0x710/0x710 [ 149.177742] should_failslab+0x124/0x180 [ 149.181818] kmem_cache_alloc+0x2af/0x760 [ 149.185977] ? proc_cwd_link+0x1d0/0x1d0 [ 149.190056] ? find_held_lock+0x36/0x1c0 [ 149.194117] getname_flags+0xd0/0x5a0 [ 149.197908] user_path_at_empty+0x2d/0x50 [ 149.202044] do_mount+0x172/0x3070 [ 149.205568] ? lock_downgrade+0x8e0/0x8e0 [ 149.209706] ? copy_mount_string+0x40/0x40 [ 149.213923] ? check_same_owner+0x320/0x320 [ 149.218228] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 149.223228] ? __check_object_size+0x95/0x5d9 [ 149.227711] ? __might_sleep+0x95/0x190 [ 149.231699] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.237221] ? _copy_from_user+0xdf/0x150 [ 149.241360] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.246880] ? copy_mount_options+0x285/0x380 [ 149.251355] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.256878] ksys_mount+0x12d/0x140 [ 149.260494] SyS_mount+0x35/0x50 [ 149.263843] ? ksys_mount+0x140/0x140 [ 149.267631] do_syscall_64+0x29e/0x9d0 [ 149.271507] ? vmalloc_sync_all+0x30/0x30 [ 149.275638] ? _raw_spin_unlock_irq+0x27/0x70 [ 149.280118] ? finish_task_switch+0x1ca/0x820 [ 149.284597] ? syscall_return_slowpath+0x5c0/0x5c0 [ 149.289521] ? syscall_return_slowpath+0x30f/0x5c0 [ 149.294437] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 149.299787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.304620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.309791] RIP: 0033:0x4552d9 [ 149.312958] RSP: 002b:00007fde3ed70c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.320656] RAX: ffffffffffffffda RBX: 00007fde3ed716d4 RCX: 00000000004552d9 [ 149.327907] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 149.335156] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.342409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:31 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) recvfrom(r1, &(0x7f0000000500)=""/74, 0x4a, 0x10000, &(0x7f0000000580)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x401, 0x0, "6fc6512253c7dfe745dfc60321d1c7bdf599fab18b9e6a7c4e9327ac9ec6e4b65fdca494129cefefb2b2d95c83330203f1e91f9bb73ecd46713ea8e6c4144a", 0x17}, 0x80) sendmsg$nl_generic(r1, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="c5780000320024000c134b000800770000000000000000e8ff000000ca4e5e59b666c520e1769c142b7070236ac40320594afa87e119c3976400a6456be8341a1e78c27ce3a2f0e839a53ae506ff7f00007bdb8438c41e69", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x3, 0x1, &(0x7f00000001c0)=""/189, &(0x7f0000000280)=""/253, &(0x7f0000000480)=""/77}) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000640), &(0x7f0000000700)=0x4) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 149.349665] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000002 2033/05/18 03:46:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x10000000}) r2 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mem_exclusive\x00', 0x2, 0x0) read(r2, &(0x7f0000000140)=""/232, 0xe8) 2033/05/18 03:46:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x400000) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0xffffffffffff0001, &(0x7f0000000100)=0x4) sendfile(r1, r1, &(0x7f0000000040), 0x1) 2033/05/18 03:46:31 executing program 3 (fault-call:5 fault-nth:9): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 149.398793] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 149.508191] FAULT_INJECTION: forcing a failure. [ 149.508191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.520044] CPU: 0 PID: 14337 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 149.526883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.536236] Call Trace: [ 149.538829] dump_stack+0x1b9/0x29f [ 149.542474] ? arch_local_irq_restore+0x52/0x52 [ 149.547155] ? debug_check_no_locks_freed+0x310/0x310 [ 149.552361] should_fail.cold.4+0xa/0x1a [ 149.556432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.561549] ? debug_check_no_locks_freed+0x310/0x310 [ 149.566743] ? rcu_note_context_switch+0x710/0x710 [ 149.571685] ? blkdev_get+0x5d8/0xb30 [ 149.575492] ? __lock_acquire+0x7f5/0x5130 [ 149.579718] ? lock_release+0xa10/0xa10 [ 149.583688] ? check_same_owner+0x320/0x320 [ 149.588008] ? rcu_note_context_switch+0x710/0x710 [ 149.592942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 149.598468] ? should_fail+0x21b/0xbcd [ 149.602348] __alloc_pages_nodemask+0x34e/0xd70 [ 149.607010] ? lock_acquire+0x1dc/0x520 [ 149.610983] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 149.615997] ? find_held_lock+0x36/0x1c0 [ 149.620061] ? __lock_is_held+0xb5/0x140 [ 149.624110] ? mnt_init+0x38/0x3ec [ 149.627667] ? check_same_owner+0x320/0x320 [ 149.631986] cache_grow_begin+0x72/0x6c0 [ 149.636054] kmem_cache_alloc_trace+0x6a5/0x780 [ 149.640716] ? kasan_check_write+0x14/0x20 [ 149.644938] ? do_raw_spin_lock+0xc1/0x200 [ 149.649161] sget_userns+0x1c7/0xf20 [ 149.652863] ? kill_litter_super+0x90/0x90 [ 149.657089] ? ns_test_super+0x50/0x50 [ 149.660965] ? destroy_unused_super.part.9+0x100/0x100 [ 149.666232] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 149.670805] ? kasan_check_write+0x14/0x20 [ 149.675034] ? do_raw_spin_lock+0xc1/0x200 [ 149.679263] ? blkdev_get+0xc0/0xb30 [ 149.682967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 149.688492] ? cap_capable+0x1f9/0x260 [ 149.692369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 149.697893] ? security_capable+0xa4/0xd0 [ 149.702038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 149.707560] ? ns_capable_common+0x13f/0x170 [ 149.711984] ? kill_litter_super+0x90/0x90 [ 149.716204] sget+0x10b/0x150 [ 149.719296] ? ns_test_super+0x50/0x50 [ 149.723170] mount_bdev+0x111/0x3e0 [ 149.726781] ? load_system_files+0x7f70/0x7f70 [ 149.731352] ntfs_mount+0x34/0x40 [ 149.734792] mount_fs+0xae/0x328 [ 149.738146] ? mpi_free.cold.1+0x19/0x19 [ 149.742197] vfs_kern_mount.part.34+0xd4/0x4d0 [ 149.746767] ? may_umount+0xb0/0xb0 [ 149.750380] ? _raw_read_unlock+0x22/0x30 [ 149.754521] ? __get_fs_type+0x97/0xc0 [ 149.758399] do_mount+0x564/0x3070 [ 149.761927] ? lock_downgrade+0x8e0/0x8e0 [ 149.766065] ? copy_mount_string+0x40/0x40 [ 149.770287] ? check_same_owner+0x320/0x320 [ 149.774593] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 149.779596] ? __check_object_size+0x95/0x5d9 [ 149.784086] ? __might_sleep+0x95/0x190 [ 149.788056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.794949] ? _copy_from_user+0xdf/0x150 [ 149.799089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.804616] ? copy_mount_options+0x285/0x380 [ 149.809096] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 149.814633] ksys_mount+0x12d/0x140 [ 149.818252] SyS_mount+0x35/0x50 [ 149.821609] ? ksys_mount+0x140/0x140 [ 149.825397] do_syscall_64+0x29e/0x9d0 [ 149.829268] ? vmalloc_sync_all+0x30/0x30 [ 149.833402] ? _raw_spin_unlock_irq+0x27/0x70 [ 149.837883] ? finish_task_switch+0x1ca/0x820 [ 149.842370] ? syscall_return_slowpath+0x5c0/0x5c0 [ 149.847285] ? syscall_return_slowpath+0x30f/0x5c0 [ 149.852203] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 149.857555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 149.862391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 149.867564] RIP: 0033:0x4552d9 [ 149.870740] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 149.878435] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 149.885689] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 149.892942] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 149.900201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 149.907455] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000009 2033/05/18 03:46:31 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400de5d7982537a675e766c5bcfd78e34ee5ea50c996196c80000070afdff0000"], 0x14}, 0x1}, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) 2033/05/18 03:46:31 executing program 2 (fault-call:5 fault-nth:3): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:31 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000f8000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, [], "80002a0800000000"}}}}}}}, 0x0) socketpair(0xb, 0x80007, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(r0, &(0x7f0000000040)=""/208, 0xd0, 0x40002000, &(0x7f0000000140)={0xa, 0x4e24, 0x80, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) 2033/05/18 03:46:31 executing program 3 (fault-call:5 fault-nth:10): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:31 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x2000, 0x0) getdents64(r1, &(0x7f0000000280)=""/135, 0x87) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000340)={0x3, r2}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000001c0)=0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000380)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="92ece15b427367844c97570439eb0253", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000004280)}, 0x0) sysfs$1(0x1, &(0x7f0000000000)='aead\x00') 2033/05/18 03:46:31 executing program 5 (fault-call:5 fault-nth:0): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 150.137146] FAULT_INJECTION: forcing a failure. [ 150.137146] name failslab, interval 1, probability 0, space 0, times 0 [ 150.148530] CPU: 0 PID: 14366 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 150.155378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.164738] Call Trace: [ 150.167343] dump_stack+0x1b9/0x29f [ 150.168544] FAULT_INJECTION: forcing a failure. [ 150.168544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.170987] ? arch_local_irq_restore+0x52/0x52 [ 150.187422] ? perf_trace_lock+0xd6/0x900 [ 150.191577] should_fail.cold.4+0xa/0x1a [ 150.195632] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.200725] ? lock_downgrade+0x8e0/0x8e0 [ 150.204864] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 150.210391] ? proc_fail_nth_write+0x96/0x1f0 [ 150.214883] ? find_held_lock+0x36/0x1c0 [ 150.218954] ? check_same_owner+0x320/0x320 [ 150.223275] ? rcu_note_context_switch+0x710/0x710 [ 150.228203] should_failslab+0x124/0x180 [ 150.232259] __kmalloc_track_caller+0x2c4/0x760 [ 150.236921] ? strncpy_from_user+0x500/0x500 [ 150.241317] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 150.246842] ? strndup_user+0x77/0xd0 [ 150.250635] memdup_user+0x2c/0xa0 [ 150.254163] strndup_user+0x77/0xd0 [ 150.257781] ksys_mount+0x3c/0x140 [ 150.261314] SyS_mount+0x35/0x50 [ 150.264668] ? ksys_mount+0x140/0x140 [ 150.268463] do_syscall_64+0x29e/0x9d0 [ 150.272342] ? vmalloc_sync_all+0x30/0x30 [ 150.276484] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.280967] ? finish_task_switch+0x1ca/0x820 [ 150.285455] ? syscall_return_slowpath+0x5c0/0x5c0 [ 150.290462] ? syscall_return_slowpath+0x30f/0x5c0 [ 150.295388] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.300744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.305598] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.310773] RIP: 0033:0x4552d9 [ 150.313951] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.321649] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 150.328909] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 150.336164] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.343420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 150.350676] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000000 [ 150.357955] CPU: 1 PID: 14381 Comm: syz-executor2 Not tainted 4.16.0+ #1 [ 150.364794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.374147] Call Trace: [ 150.376740] dump_stack+0x1b9/0x29f [ 150.380381] ? arch_local_irq_restore+0x52/0x52 [ 150.385052] ? debug_check_no_locks_freed+0x310/0x310 [ 150.390262] should_fail.cold.4+0xa/0x1a [ 150.394334] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.399450] ? debug_check_no_locks_freed+0x310/0x310 [ 150.404655] ? graph_lock+0x170/0x170 [ 150.408461] ? perf_trace_lock+0x900/0x900 [ 150.412701] ? perf_trace_lock_acquire+0xe3/0x980 [ 150.417551] ? print_usage_bug+0xc0/0xc0 [ 150.421631] ? perf_trace_lock+0xd6/0x900 [ 150.425782] ? perf_trace_lock_acquire+0xe3/0x980 [ 150.430634] ? zap_class+0x720/0x720 [ 150.434356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 150.439895] ? should_fail+0x21b/0xbcd [ 150.443783] ? lock_downgrade+0x8e0/0x8e0 [ 150.447950] __alloc_pages_nodemask+0x34e/0xd70 [ 150.452634] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 150.457653] ? debug_check_no_locks_freed+0x310/0x310 [ 150.462853] ? find_held_lock+0x36/0x1c0 [ 150.466942] ? check_same_owner+0x320/0x320 [ 150.471265] ? zap_class+0x720/0x720 [ 150.474992] cache_grow_begin+0x72/0x6c0 [ 150.479080] kmem_cache_alloc+0x689/0x760 [ 150.483233] getname_flags+0xd0/0x5a0 [ 150.487028] user_path_at_empty+0x2d/0x50 [ 150.491167] do_mount+0x172/0x3070 [ 150.494694] ? lock_downgrade+0x8e0/0x8e0 [ 150.498829] ? copy_mount_string+0x40/0x40 [ 150.503058] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 150.508061] ? __check_object_size+0x95/0x5d9 [ 150.512547] ? __might_sleep+0x95/0x190 [ 150.516510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 150.522034] ? _copy_from_user+0xdf/0x150 [ 150.526172] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 150.531694] ? copy_mount_options+0x285/0x380 [ 150.536173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 150.541695] ksys_mount+0x12d/0x140 [ 150.545311] SyS_mount+0x35/0x50 [ 150.548661] ? ksys_mount+0x140/0x140 [ 150.552448] do_syscall_64+0x29e/0x9d0 [ 150.556320] ? vmalloc_sync_all+0x30/0x30 [ 150.560451] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.564929] ? finish_task_switch+0x1ca/0x820 [ 150.569505] ? syscall_return_slowpath+0x5c0/0x5c0 [ 150.574854] ? syscall_return_slowpath+0x30f/0x5c0 [ 150.579772] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.585124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.589959] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.595133] RIP: 0033:0x4552d9 [ 150.598306] RSP: 002b:00007fde3ed70c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.606014] RAX: ffffffffffffffda RBX: 00007fde3ed716d4 RCX: 00000000004552d9 [ 150.613280] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 150.620543] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.628268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:32 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="0209000000000090120c5c0020129aab9cddebad50f45ccb95d8d3efd0fc063440ce97880815abb3"], &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f000045c000)=0x10) shutdown(r0, 0x2000000000000002) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80, 0x0) sendto$ax25(r3, &(0x7f00000000c0)="a7b0e1302002cd60e1d2d02f976a38244449fb03f8fd0f30d2b57da5ba7a81b78e513cc692ff51a57fd3137c5da45cbb42a03043ad90b3ab8954c8fdd1520d46ce5f7bdccf4ce1c306d0c346b88dd6edef7ee303116656956fc285efdf23ef3be6ece1b57294208c5be2a6d8957f245aeaffe139f07516a71fa4974050a15b95f3e7", 0x82, 0x1, &(0x7f0000000180)={0x3, {"21e0d9b30468ec"}, 0xfffffffffffffffd}, 0x10) [ 150.635518] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000003 [ 150.703958] FAULT_INJECTION: forcing a failure. [ 150.703958] name failslab, interval 1, probability 0, space 0, times 0 [ 150.715762] CPU: 0 PID: 14369 Comm: syz-executor3 Not tainted 4.16.0+ #1 [ 150.722614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.731974] Call Trace: [ 150.734565] dump_stack+0x1b9/0x29f [ 150.738181] ? arch_local_irq_restore+0x52/0x52 [ 150.742840] ? __save_stack_trace+0x7e/0xd0 [ 150.747149] should_fail.cold.4+0xa/0x1a [ 150.751198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.756285] ? kasan_kmalloc+0xc4/0xe0 [ 150.760159] ? kmem_cache_alloc_trace+0x152/0x780 [ 150.764990] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 150.770164] ? __list_lru_init+0x45e/0x7b0 [ 150.774385] ? sget_userns+0x6d9/0xf20 [ 150.778255] ? sget+0x10b/0x150 [ 150.781522] ? graph_lock+0x170/0x170 [ 150.785317] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 150.790054] ? do_mount+0x564/0x3070 [ 150.793755] ? ksys_mount+0x12d/0x140 [ 150.797545] ? SyS_mount+0x35/0x50 [ 150.801075] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.806429] ? find_held_lock+0x36/0x1c0 [ 150.810480] ? __lock_is_held+0xb5/0x140 [ 150.814542] ? check_same_owner+0x320/0x320 [ 150.818848] ? rcu_note_context_switch+0x710/0x710 [ 150.823766] should_failslab+0x124/0x180 [ 150.827817] kmem_cache_alloc_trace+0x2cb/0x780 [ 150.832473] ? __kmalloc_node+0x33/0x70 [ 150.836431] ? __kmalloc_node+0x33/0x70 [ 150.840405] ? rcu_read_lock_sched_held+0x108/0x120 [ 150.845509] __memcg_init_list_lru_node+0x17c/0x2c0 [ 150.850517] ? list_lru_add+0x850/0x850 [ 150.854483] ? __kmalloc_node+0x47/0x70 [ 150.858450] __list_lru_init+0x45e/0x7b0 [ 150.862500] ? list_lru_destroy+0x4c0/0x4c0 [ 150.866816] ? __raw_spin_lock_init+0x1c/0x100 [ 150.871385] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 150.876388] ? __lockdep_init_map+0x105/0x590 [ 150.880872] ? lockdep_init_map+0x9/0x10 [ 150.884917] sget_userns+0x6d9/0xf20 [ 150.888616] ? kill_litter_super+0x90/0x90 [ 150.892836] ? ns_test_super+0x50/0x50 [ 150.896705] ? destroy_unused_super.part.9+0x100/0x100 [ 150.901967] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 150.906536] ? kasan_check_write+0x14/0x20 [ 150.910840] ? do_raw_spin_lock+0xc1/0x200 [ 150.915061] ? blkdev_get+0xc0/0xb30 [ 150.918762] ? cap_capable+0x1f9/0x260 [ 150.922638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 150.928158] ? security_capable+0xa4/0xd0 [ 150.932290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 150.937811] ? ns_capable_common+0x13f/0x170 [ 150.942204] ? kill_litter_super+0x90/0x90 [ 150.946418] sget+0x10b/0x150 [ 150.949507] ? ns_test_super+0x50/0x50 [ 150.953383] mount_bdev+0x111/0x3e0 [ 150.956992] ? load_system_files+0x7f70/0x7f70 [ 150.961562] ntfs_mount+0x34/0x40 [ 150.964999] mount_fs+0xae/0x328 [ 150.968359] ? mpi_free.cold.1+0x19/0x19 [ 150.972407] vfs_kern_mount.part.34+0xd4/0x4d0 [ 150.976974] ? may_umount+0xb0/0xb0 [ 150.980584] ? _raw_read_unlock+0x22/0x30 [ 150.984715] ? __get_fs_type+0x97/0xc0 [ 150.988590] do_mount+0x564/0x3070 [ 150.992113] ? lock_downgrade+0x8e0/0x8e0 [ 150.996248] ? copy_mount_string+0x40/0x40 [ 151.000466] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 151.005467] ? __check_object_size+0x95/0x5d9 [ 151.009954] ? __might_sleep+0x95/0x190 [ 151.013918] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.019445] ? _copy_from_user+0xdf/0x150 [ 151.023576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.029100] ? copy_mount_options+0x285/0x380 [ 151.033582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.039105] ksys_mount+0x12d/0x140 [ 151.042716] SyS_mount+0x35/0x50 [ 151.046064] ? ksys_mount+0x140/0x140 [ 151.049848] do_syscall_64+0x29e/0x9d0 [ 151.053716] ? vmalloc_sync_all+0x30/0x30 [ 151.057846] ? _raw_spin_unlock_irq+0x27/0x70 [ 151.062330] ? finish_task_switch+0x1ca/0x820 [ 151.066810] ? syscall_return_slowpath+0x5c0/0x5c0 [ 151.071723] ? syscall_return_slowpath+0x30f/0x5c0 [ 151.076645] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 151.081997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.086833] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 151.092009] RIP: 0033:0x4552d9 [ 151.095185] RSP: 002b:00007fc7e4d54c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2033/05/18 03:46:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x410802, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f}, 0xe) poll(&(0x7f0000002280)=[{r0}], 0x1, 0x0) 2033/05/18 03:46:32 executing program 4: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00') pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001540)={@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x13}}, 0x20}}}, {&(0x7f0000001480)=""/173, 0xad}, &(0x7f00000013c0), 0x30}, 0xa0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f000001cff0)={0x2, 0xfffffffffffffffd, @loopback=0x7f000001}, 0x10) sendmsg$rds(r3, &(0x7f000000dfc8)={&(0x7f0000014000)={0x2, 0x0, @rand_addr=0x31a00dfb}, 0x10, &(0x7f0000001fc0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001401000099756026b94719a700000000"], 0x18}, 0x0) personality(0xffffffffffffffff) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000200)='./file0\x00', 0x81, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="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", 0x1000, 0xfffffffffffff001}, {&(0x7f0000001300)="1ffc1b34cc302f7e86daba5eefe1f7460d1fa4995f97bd917e0df07ce42e5c77e64874b4c07a78a9afad3cdf7d4bc0496e4a609bd3d8dd521a7bdeda5814ff0c4ae9890b88b2d40307320074e5f745fa14fd7581c26b8fd34f6c6033ce", 0x5d, 0xfffffffffffffffd}], 0x200040, &(0x7f0000001240)=ANY=[@ANYBLOB="002c002dc5c084995c1311c92218f8276867a99af6ba698da05a601a51051065b092992bd345f73f94f6b53314a52f9fd39157f2ef848201625a4e6fff7fee76d6e9098a2523b4"]) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001440)=0x3dbb, 0x2) getdents(r4, &(0x7f0000000040)=""/22, 0x16) [ 151.102878] RAX: ffffffffffffffda RBX: 00007fc7e4d556d4 RCX: 00000000004552d9 [ 151.110128] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 151.117379] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.124628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 151.131877] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000a 2033/05/18 03:46:32 executing program 6: ioctl$int_in(0xffffffffffffffff, 0x50000000af01, &(0x7f0000000540)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0xc0, &(0x7f00000001c0)) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x0, @random="a0e559a383f8", 'ip6tnl0\x00'}}, 0x1e) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='.\x00') r2 = getuid() setreuid(r1, r2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000500)=0x104000000) 2033/05/18 03:46:32 executing program 5 (fault-call:5 fault-nth:1): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:32 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:33 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00000014c0)='./file0\x00', 0x14) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001500)) r3 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r0, 0x8000) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000001400)) sendfile(r1, r3, &(0x7f0000001300), 0x100420000000fee) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) recvmmsg(r0, &(0x7f000000df00)=[{{&(0x7f0000010000)=@alg, 0x58, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/116}, {&(0x7f0000000140)=""/50}, {&(0x7f0000000180)=""/4096}, {&(0x7f0000001180)=""/103}, {&(0x7f0000001200)=""/66}, {&(0x7f0000001280)=""/113, 0xfffffffffffffed1}], 0x0, &(0x7f000000efc1)=""/63, 0x3f}}], 0x288, 0x0, 0x0) bind$ipx(r3, &(0x7f0000001480)={0x4, 0x15a9, 0x20, "3e1f369d5e49", 0x7d7}, 0x10) sendfile(r0, r3, &(0x7f0000001340), 0x81) 2033/05/18 03:46:33 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:33 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x40) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x1ff, 0x14, 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x80000000, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r3 = getegid() lchown(&(0x7f0000000080)='./file0\x00', r2, r3) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2033/05/18 03:46:33 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000001c0)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x103ffffff) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) close(r2) 2033/05/18 03:46:33 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 151.437701] FAULT_INJECTION: forcing a failure. [ 151.437701] name failslab, interval 1, probability 0, space 0, times 0 [ 151.449090] CPU: 0 PID: 14439 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 151.455943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.465302] Call Trace: [ 151.467906] dump_stack+0x1b9/0x29f [ 151.471549] ? arch_local_irq_restore+0x52/0x52 [ 151.476224] ? __save_stack_trace+0x7e/0xd0 [ 151.480567] should_fail.cold.4+0xa/0x1a [ 151.484640] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.489748] ? kasan_kmalloc+0xc4/0xe0 [ 151.493649] ? __kmalloc_track_caller+0x14a/0x760 [ 151.498498] ? memdup_user+0x2c/0xa0 [ 151.502218] ? strndup_user+0x77/0xd0 [ 151.506027] ? graph_lock+0x170/0x170 [ 151.509839] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 151.515391] ? proc_fail_nth_write+0x96/0x1f0 [ 151.519892] ? proc_cwd_link+0x1d0/0x1d0 [ 151.523965] ? find_held_lock+0x36/0x1c0 [ 151.528056] ? check_same_owner+0x320/0x320 [ 151.532379] ? lock_release+0xa10/0xa10 2033/05/18 03:46:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001140)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000001180)=[{&(0x7f0000001f80)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xffffff25}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00000004c0)={0x80}) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x4, 0x1, 0x0, 0x1}}, {&(0x7f00000002c0)=""/179, 0xb3}, &(0x7f0000000380), 0x3a}, 0xa0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x4, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e21, @broadcast=0xffffffff}}, {{0x2, 0x4e22, @rand_addr=0x672}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}]}, 0x290) socket$alg(0x26, 0x5, 0x0) [ 151.536364] ? rcu_note_context_switch+0x710/0x710 [ 151.541303] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 151.546327] ? __check_object_size+0x95/0x5d9 [ 151.550838] should_failslab+0x124/0x180 [ 151.554906] __kmalloc_track_caller+0x2c4/0x760 [ 151.559580] ? strncpy_from_user+0x500/0x500 [ 151.563983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.569512] ? strndup_user+0x77/0xd0 [ 151.573302] memdup_user+0x2c/0xa0 [ 151.576829] strndup_user+0x77/0xd0 [ 151.580444] ksys_mount+0x73/0x140 [ 151.583980] SyS_mount+0x35/0x50 [ 151.587334] ? ksys_mount+0x140/0x140 [ 151.591125] do_syscall_64+0x29e/0x9d0 [ 151.594999] ? vmalloc_sync_all+0x30/0x30 [ 151.599147] ? _raw_spin_unlock_irq+0x27/0x70 [ 151.603637] ? finish_task_switch+0x1ca/0x820 [ 151.608130] ? syscall_return_slowpath+0x5c0/0x5c0 [ 151.613052] ? syscall_return_slowpath+0x30f/0x5c0 [ 151.617973] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 151.623344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.628184] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 151.633357] RIP: 0033:0x4552d9 [ 151.636532] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.644226] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 151.651481] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 151.658736] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.665992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 151.673248] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000001 2033/05/18 03:46:33 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:33 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='//file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:33 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='//file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001800)=""/222, 0xde}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x200700) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000100)={0xf2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x16, 0x301}, 0x14}, 0x1}, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000400)=0x14) accept4$packet(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={"4e70366772657a45ffffff00003b00", r3}) 2033/05/18 03:46:34 executing program 5 (fault-call:5 fault-nth:2): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 4: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:34 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./.ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./.ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="8190e2b180b2e9160f8fab58f37d7fc95953350553f5f86d2144d9b788cde28bbfe41fd7cfeb66d2a836003077f7d08144db1d41fa7f1255dff1fe48d081fadc68a93a7adde602d9d01034199ebd5e4b0ed5358a454cc0916d6c0d3f00a7064305ccd46be9553b978243ab9b8e6108f50d9ce98a064592b4a1e4c65d178ed27971639ee2611147ce5f1a3f1ddf213fe4dbb0e1a9e4f307b80ce853ead942049f8c56dc2b880eb0e9e66c679e2b5c2299bd20b39433033ae7119fc61baaab9e67a2d1b24c8f416f2da9a7324e456a1230efeade28f89d03cdee5d867d155e232bb8447512e4a9baee76fd436acd568f285e08fede7e556b7e6f674c34bbc115ec3d94d3928a47ef03ac3e29a0bdb3d5d9eba7bba7d9fd25e76daee480f39831fabbeddd3cd2291d11ba8a2fdafd0387919e2930ba5e91552811b3b90252420a6608fbe93ead3ee66a9283ffb109b32059a9e2fce77fffefdfb7d99b6a61887e320bc019d2463c1a665088be9ca6b9f8c2fe56e5b861cd6f4897a1386d294c73e1c5350ca74b43280f898a30cac1ec91ead092123de6f2b6e9165da84ec60f1c682d7288a75819779f6b071dbf080beee6408268e876adf49fa41231bfb907755e1f2a9ea159b1c09032e797046139547c0fb88167a7780d689106e0303a2c1c9f057776b4f7bd62064f72ae1a080e39e5a1d467f774298f755f64c451f9e01aed896ed84ab1ac72b1448bef1495774573f30131f3b02a35f74222430251b5b1246cdef5b7535f3d32d5ae315d2a0a8f3485d07c257d3f3da00ef2a276db61537e8e0b520a1b1c069d13682a73767ead8a83904873eff3b427f7c2fe6e59196aa2e98b947c996816fe6f62328fe8e052d88641c56dc83eaa3bab293f46698845b7a71e2db4a4c89f187e97d2af64f9ceb8bce27707275d98070187d3004bbcc8f9940b0cef24e9cb87fa4a77470b245a2a3d63fccdf318abe40c78471e660f4ef3b315ed513eb24476e34fadc020c2fd82fa08b4a5e6eb656275f845af9234b3c5dfad9ae378ee466d83d024bf527911f74fe7215aa7fe756eeea25d885c0caec53b7dfff006251375e2c703f0ae1b79d80e3d030b4eec9484510aa699bf34dee845a64ec0342058df9f7471896c64e6a10e4b07ed55562d2c905b2b47bc4d364779fbe260ce382db49d525c70cd6b8ab1868ce9d060879b75045f9de6348c6aea1e5722d2bbdef660652063bb212ef2554aa5326d79be5083ac53e325281adb0dc5637e9897e64f64c5db043d4af11ae4e1d7d88b46f9f0b0cb389924f26f60d6b3a52124450ec82b8a0038dcb36c1572dc90f38bef14c8836096b5d8cf8a5766ea5735420a0d7ffb6cca15edd85fd14d4a98ce4f1eadfbdb181bbdd60c94a3c3b707b0ffe80efbefeda5c3079c231f8457f1eb81d52fd85dcb2b1febce6ee23f69d88e79741e9ee1750c6166934bf3ef48a466769dfac5b7881386bcf7237a9902adde5dbc0f7dc66ce90e08d314b0eda1c70ef5394288e9e57fa5acb68903ec1885fffeaab75c7c9f3e763356f533d71be0f3578a5eae8d1962a45550e75913205ed69b7dd238df01f474335d7aff5eeb504bd3fdf1d63983a822b471d2535f333f5d86cdb7f12531deb00e30b74e60de4288fcd7d5865e576852e09f9d6fa8ef33e2f3a84c960419f6ab0fa29ffae466fb191017f935bfed886e92f61d0ffffe700d8cf4051338e693259eb92263dda7", 0x4d1, 0x0, &(0x7f0000606fe4)={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) listen(r0, 0x7) accept(r0, &(0x7f0000000180), &(0x7f0000000200)=0x80) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 152.456627] FAULT_INJECTION: forcing a failure. [ 152.456627] name failslab, interval 1, probability 0, space 0, times 0 [ 152.467970] CPU: 1 PID: 14538 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 152.474816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.484167] Call Trace: [ 152.486772] dump_stack+0x1b9/0x29f [ 152.490417] ? arch_local_irq_restore+0x52/0x52 [ 152.495100] should_fail.cold.4+0xa/0x1a [ 152.499168] ? lock_downgrade+0x8e0/0x8e0 [ 152.503327] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.508437] ? kasan_check_read+0x11/0x20 [ 152.512602] ? debug_check_no_locks_freed+0x310/0x310 [ 152.517807] ? find_held_lock+0x36/0x1c0 [ 152.521907] ? check_same_owner+0x320/0x320 [ 152.526239] ? rcu_note_context_switch+0x710/0x710 [ 152.531190] should_failslab+0x124/0x180 [ 152.535264] kmem_cache_alloc+0x2af/0x760 [ 152.539425] ? proc_cwd_link+0x1d0/0x1d0 [ 152.543500] ? find_held_lock+0x36/0x1c0 [ 152.547575] getname_flags+0xd0/0x5a0 [ 152.551388] user_path_at_empty+0x2d/0x50 [ 152.555553] do_mount+0x172/0x3070 [ 152.559103] ? lock_downgrade+0x8e0/0x8e0 [ 152.563268] ? copy_mount_string+0x40/0x40 [ 152.567512] ? check_same_owner+0x320/0x320 [ 152.571844] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 152.576872] ? __check_object_size+0x95/0x5d9 [ 152.581391] ? __might_sleep+0x95/0x190 [ 152.585385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.590931] ? _copy_from_user+0xdf/0x150 [ 152.595092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.600639] ? copy_mount_options+0x285/0x380 [ 152.605144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.610691] ksys_mount+0x12d/0x140 [ 152.614335] SyS_mount+0x35/0x50 [ 152.617710] ? ksys_mount+0x140/0x140 [ 152.621525] do_syscall_64+0x29e/0x9d0 [ 152.626183] ? vmalloc_sync_all+0x30/0x30 [ 152.630342] ? _raw_spin_unlock_irq+0x27/0x70 [ 152.634852] ? finish_task_switch+0x1ca/0x820 [ 152.639352] ? syscall_return_slowpath+0x5c0/0x5c0 [ 152.644284] ? syscall_return_slowpath+0x30f/0x5c0 [ 152.649214] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 152.654566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.659394] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 152.664565] RIP: 0033:0x4552d9 [ 152.667735] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.675427] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 152.682679] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 152.689933] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.697185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:34 executing program 4: setrlimit(0x8, &(0x7f00000a3ff0)) r0 = socket(0x11, 0xaeb0a83ca6566e2a, 0x400000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000200)=0xffffffffffffffcb) setreuid(0x0, r1) mmap(&(0x7f0000912000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 2033/05/18 03:46:34 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='.//ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 152.704438] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000002 2033/05/18 03:46:34 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='.//ile0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:34 executing program 5 (fault-call:5 fault-nth:3): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 152.743476] __ntfs_error: 26 callbacks suppressed [ 152.743488] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 152.756868] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 152.768965] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:34 executing program 4: r0 = socket(0x10, 0x3, 0x0) recvmsg$netrom(r0, &(0x7f0000000040)={&(0x7f0000000000)=@ax25={0x3, {"8aafabddcfcc23"}}, 0x10, &(0x7f00000004c0)}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r2, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x2a, 0x3, 0x2, &(0x7f0000ffd000/0x1000)=nil, 0x2}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000440)={0x7fff, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) recvfrom$unix(r0, &(0x7f0000000540), 0x0, 0x2000, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket(0x18, 0xc, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='vcan0\x00') ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f00000002c0)={0x4de, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x2}) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000540)=""/2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x2000000004, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000003c0)={r5, 0x80000, r3}) syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000380)={r4, r6, 0x1000000000}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) write(r0, &(0x7f0000000140)="240000005a005f191415f507125a000009037b1595a7f1d6d8210308001000fff708ff", 0x23) socket(0x11, 0x100000802, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x1001}) 2033/05/18 03:46:34 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r2, 0x202, &(0x7f00000002c0)={&(0x7f00000001c0)=""/223, 0xdf}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:34 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 152.913668] FAULT_INJECTION: forcing a failure. [ 152.913668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.925528] CPU: 1 PID: 14593 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 152.932371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.941724] Call Trace: [ 152.944322] dump_stack+0x1b9/0x29f [ 152.947959] ? arch_local_irq_restore+0x52/0x52 [ 152.952638] ? debug_check_no_locks_freed+0x310/0x310 [ 152.957850] should_fail.cold.4+0xa/0x1a [ 152.961922] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.967053] ? debug_check_no_locks_freed+0x310/0x310 [ 152.972248] ? graph_lock+0x170/0x170 [ 152.976047] ? graph_lock+0x170/0x170 [ 152.979839] ? do_raw_spin_lock+0xc1/0x200 [ 152.984078] ? print_usage_bug+0xc0/0xc0 [ 152.988141] ? find_held_lock+0x36/0x1c0 [ 152.992202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.997725] ? should_fail+0x21b/0xbcd [ 153.001602] ? lock_downgrade+0x8e0/0x8e0 [ 153.005746] __alloc_pages_nodemask+0x34e/0xd70 [ 153.010404] ? kasan_check_read+0x11/0x20 [ 153.014545] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 153.019547] ? debug_check_no_locks_freed+0x310/0x310 [ 153.024727] ? find_held_lock+0x36/0x1c0 [ 153.028795] ? check_same_owner+0x320/0x320 [ 153.033110] cache_grow_begin+0x72/0x6c0 [ 153.037168] kmem_cache_alloc+0x689/0x760 [ 153.041301] ? proc_cwd_link+0x1d0/0x1d0 [ 153.045355] getname_flags+0xd0/0x5a0 [ 153.049149] user_path_at_empty+0x2d/0x50 [ 153.053289] do_mount+0x172/0x3070 [ 153.056816] ? lock_downgrade+0x8e0/0x8e0 [ 153.060958] ? copy_mount_string+0x40/0x40 [ 153.065181] ? check_same_owner+0x320/0x320 [ 153.069489] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 153.074490] ? __check_object_size+0x95/0x5d9 [ 153.078984] ? __might_sleep+0x95/0x190 [ 153.082954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.088476] ? _copy_from_user+0xdf/0x150 [ 153.092611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.098140] ? copy_mount_options+0x285/0x380 [ 153.102619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 153.108147] ksys_mount+0x12d/0x140 [ 153.111766] SyS_mount+0x35/0x50 [ 153.115119] ? ksys_mount+0x140/0x140 [ 153.118910] do_syscall_64+0x29e/0x9d0 [ 153.122784] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 153.127615] ? syscall_return_slowpath+0x5c0/0x5c0 [ 153.132535] ? syscall_return_slowpath+0x30f/0x5c0 [ 153.137457] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 153.142810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.148082] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 153.153255] RIP: 0033:0x4552d9 [ 153.156426] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.164139] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 153.171391] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 153.178645] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.185898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 153.193151] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000003 2033/05/18 03:46:35 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./fime0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 153.212511] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 153.220993] ntfs: (device loop5): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 153.233077] ntfs: (device loop5): ntfs_fill_super(): Not an NTFS volume. [ 153.284368] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 153.292858] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 153.304959] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="6599581ddb833d97136d0ffb6181b4e78e828e2b4bb8e496a5a53b0e55b3241ec4e17da6015ff160560b3b722a18a5db768b679393805dc56c966f641fce8eb8c77a4bab62c555773dbe3edf0932799e0ab869f46f14a881b1cb6154411792cb9cc321d8ffc6bf55a084c8ce7f6f46acf3e3f8744326362a3983896c90916c783ac6fa1e0b00293aee05b9b5f9359251e76772ec375eff31d0ce41ef84e2360be005f207d598"]]], &(0x7f0000000340)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x0, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x400, 0x309801) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'rose0\x00', 0x218b}) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f00000000c0)={0x7, 0x9}) 2033/05/18 03:46:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e20, @loopback=0x7f000001}, 0xdd) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) times(&(0x7f0000000040)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000880)="17846cb783cff3c3751b1773674da5b9c6c6e08b6e73d1a4053f984bb504b66e3dc02a03af826514d0b83a2b8b", 0x2d, 0x0, 0x0, 0x0) 2033/05/18 03:46:35 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000340)=@buf={0x9f, &(0x7f0000000480)="7a0160fe9626116b76110b48807e15f127d133d75c951329373ac22e1aa67e6a1fcbdefb3d4382d2555fb21463bcb7e7cfae79b8e052fb84375fa0ab9d46081cb7fda618723c91586974078c4ca1742c11a2cb62c71f36cdc8d2729150495f27ac07349d56e163efd5a068583430581c45fd3f7218d740607aac86accf545eda5ff7afd34abc5889643cbf8e8d6076ed854f114dfaadf4c3fae05b9373b99e"}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r3, &(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_gettime(r1, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000280)={{0xffffffffffffffff, 0x1, 0x7, 0x3, 0xe5}, 0x15, 0x2, 0x8}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000240)=0x103fffffc) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xf3c, 0x420000) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f00000001c0)="8f6ece7af0a331632048655f1dd5eab20f23762234537793266df74b58d7097c9419548216fe646edb2d897dc13b2c94fba4892a9b686d5434d5c0361f3df883269a6703b2e95f6b55b8473855065ed2ba279b", 0x53) 2033/05/18 03:46:35 executing program 4: capset(&(0x7f0000000140)={0x19980330}, &(0x7f00005ccfe8)={0x0, 0x0, 0x8, 0x800000000000, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00008f2000)={0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)="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") 2033/05/18 03:46:35 executing program 5 (fault-call:5 fault-nth:4): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:35 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:35 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f6", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:35 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 154.147610] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 154.164975] FAULT_INJECTION: forcing a failure. [ 154.164975] name failslab, interval 1, probability 0, space 0, times 0 [ 154.176357] CPU: 0 PID: 14670 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 154.183201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.192551] Call Trace: [ 154.195130] dump_stack+0x1b9/0x29f [ 154.198749] ? arch_local_irq_restore+0x52/0x52 [ 154.203408] ? __unwind_start+0x166/0x330 [ 154.207538] ? __kernel_text_address+0xd/0x40 [ 154.212028] should_fail.cold.4+0xa/0x1a [ 154.216080] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.221168] ? save_stack+0xa9/0xd0 [ 154.224778] ? save_stack+0x43/0xd0 [ 154.228386] ? kasan_kmalloc+0xc4/0xe0 [ 154.232265] ? kasan_slab_alloc+0x12/0x20 [ 154.236398] ? kmem_cache_alloc+0x12e/0x760 [ 154.240708] ? alloc_vfsmnt+0xe0/0x9d0 [ 154.244582] ? vfs_kern_mount.part.34+0x88/0x4d0 [ 154.249330] ? find_held_lock+0x36/0x1c0 [ 154.253399] ? check_same_owner+0x320/0x320 [ 154.257705] ? rcu_note_context_switch+0x710/0x710 [ 154.262622] should_failslab+0x124/0x180 [ 154.266688] __kmalloc_track_caller+0x2c4/0x760 [ 154.271338] ? kasan_check_read+0x11/0x20 [ 154.275470] ? do_raw_spin_unlock+0x9e/0x2e0 [ 154.279860] ? kstrdup_const+0x66/0x80 [ 154.283729] kstrdup+0x39/0x70 [ 154.286906] kstrdup_const+0x66/0x80 [ 154.290607] alloc_vfsmnt+0x1b3/0x9d0 [ 154.294391] ? mnt_free_id.isra.27+0x60/0x60 [ 154.298790] ? kasan_check_read+0x11/0x20 [ 154.302924] ? graph_lock+0x170/0x170 [ 154.306706] ? rcu_pm_notify+0xc0/0xc0 [ 154.310580] ? trace_hardirqs_off+0xd/0x10 [ 154.314801] ? putname+0xf2/0x130 [ 154.318245] ? putname+0xf2/0x130 [ 154.321687] ? find_held_lock+0x36/0x1c0 [ 154.325738] ? lock_downgrade+0x8e0/0x8e0 [ 154.329867] ? module_unload_free+0x5b0/0x5b0 [ 154.334343] ? lock_release+0xa10/0xa10 [ 154.338301] ? mpi_free.cold.1+0x19/0x19 [ 154.342346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.347867] vfs_kern_mount.part.34+0x88/0x4d0 [ 154.352436] ? may_umount+0xb0/0xb0 [ 154.356048] ? _raw_read_unlock+0x22/0x30 [ 154.360179] ? __get_fs_type+0x97/0xc0 [ 154.364061] do_mount+0x564/0x3070 [ 154.367602] ? lock_downgrade+0x8e0/0x8e0 [ 154.371738] ? copy_mount_string+0x40/0x40 [ 154.375956] ? check_same_owner+0x320/0x320 [ 154.380259] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 154.385255] ? __check_object_size+0x95/0x5d9 [ 154.389736] ? __might_sleep+0x95/0x190 [ 154.393695] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.399217] ? _copy_from_user+0xdf/0x150 [ 154.403363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.408885] ? copy_mount_options+0x285/0x380 [ 154.413365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.418885] ksys_mount+0x12d/0x140 [ 154.422496] SyS_mount+0x35/0x50 [ 154.425843] ? ksys_mount+0x140/0x140 [ 154.429627] do_syscall_64+0x29e/0x9d0 [ 154.433493] ? vmalloc_sync_all+0x30/0x30 [ 154.437624] ? _raw_spin_unlock_irq+0x27/0x70 [ 154.442104] ? finish_task_switch+0x1ca/0x820 [ 154.446583] ? syscall_return_slowpath+0x5c0/0x5c0 [ 154.451496] ? syscall_return_slowpath+0x30f/0x5c0 [ 154.456414] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 154.461760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.466588] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 154.471757] RIP: 0033:0x4552d9 [ 154.474927] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.482617] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 154.489866] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 2033/05/18 03:46:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="58000000090000a1681680040dfffffffffffffcb66cc66738b6c801000004ca7f64643e890084c645de5a0004fbf510a40ffff5000022000d000100040005007c0b1505d0ee40480000000000000000000000000000000000000000000000", 0x5f}], 0x1) [ 154.497115] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 154.504363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 154.511613] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000004 2033/05/18 03:46:36 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\b', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:36 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:36 executing program 5 (fault-call:5 fault-nth:5): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 154.575960] FAT-fs (loop6): Unrecognized mount option "/dev/audio" or missing value 2033/05/18 03:46:36 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 154.692424] FAULT_INJECTION: forcing a failure. [ 154.692424] name failslab, interval 1, probability 0, space 0, times 0 [ 154.703721] CPU: 0 PID: 14711 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 154.710567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.719921] Call Trace: [ 154.722511] dump_stack+0x1b9/0x29f [ 154.726134] ? arch_local_irq_restore+0x52/0x52 [ 154.730798] ? __unwind_start+0x166/0x330 [ 154.734939] ? __kernel_text_address+0xd/0x40 [ 154.739428] should_fail.cold.4+0xa/0x1a [ 154.743485] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 154.748576] ? save_stack+0xa9/0xd0 [ 154.752189] ? save_stack+0x43/0xd0 [ 154.755805] ? kasan_kmalloc+0xc4/0xe0 [ 154.759679] ? kasan_slab_alloc+0x12/0x20 [ 154.763814] ? kmem_cache_alloc+0x12e/0x760 [ 154.768135] ? alloc_vfsmnt+0xe0/0x9d0 [ 154.772020] ? vfs_kern_mount.part.34+0x88/0x4d0 [ 154.776771] ? find_held_lock+0x36/0x1c0 [ 154.780836] ? check_same_owner+0x320/0x320 [ 154.785152] ? rcu_note_context_switch+0x710/0x710 [ 154.790084] should_failslab+0x124/0x180 [ 154.794136] __kmalloc_track_caller+0x2c4/0x760 [ 154.798789] ? kasan_check_read+0x11/0x20 [ 154.802923] ? do_raw_spin_unlock+0x9e/0x2e0 [ 154.807319] ? kstrdup_const+0x66/0x80 [ 154.811196] kstrdup+0x39/0x70 [ 154.814380] kstrdup_const+0x66/0x80 [ 154.818090] alloc_vfsmnt+0x1b3/0x9d0 [ 154.821880] ? mnt_free_id.isra.27+0x60/0x60 [ 154.826280] ? kasan_check_read+0x11/0x20 [ 154.830417] ? graph_lock+0x170/0x170 [ 154.834208] ? rcu_pm_notify+0xc0/0xc0 [ 154.838083] ? trace_hardirqs_off+0xd/0x10 [ 154.842307] ? putname+0xf2/0x130 [ 154.845749] ? putname+0xf2/0x130 [ 154.849197] ? find_held_lock+0x36/0x1c0 [ 154.853251] ? lock_downgrade+0x8e0/0x8e0 [ 154.857387] ? module_unload_free+0x5b0/0x5b0 [ 154.861867] ? lock_release+0xa10/0xa10 [ 154.865830] ? mpi_free.cold.1+0x19/0x19 [ 154.869879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 154.875405] vfs_kern_mount.part.34+0x88/0x4d0 [ 154.879975] ? may_umount+0xb0/0xb0 [ 154.883588] ? _raw_read_unlock+0x22/0x30 [ 154.887722] ? __get_fs_type+0x97/0xc0 [ 154.891601] do_mount+0x564/0x3070 [ 154.895125] ? lock_downgrade+0x8e0/0x8e0 [ 154.899261] ? copy_mount_string+0x40/0x40 [ 154.903479] ? check_same_owner+0x320/0x320 [ 154.907787] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 154.912785] ? __check_object_size+0x95/0x5d9 [ 154.917269] ? __might_sleep+0x95/0x190 [ 154.921233] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.926756] ? _copy_from_user+0xdf/0x150 [ 154.930890] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.936412] ? copy_mount_options+0x285/0x380 [ 154.940890] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 154.946414] ksys_mount+0x12d/0x140 [ 154.950035] SyS_mount+0x35/0x50 [ 154.953386] ? ksys_mount+0x140/0x140 [ 154.957173] do_syscall_64+0x29e/0x9d0 [ 154.961052] ? vmalloc_sync_all+0x30/0x30 [ 154.965188] ? _raw_spin_unlock_irq+0x27/0x70 [ 154.969670] ? finish_task_switch+0x1ca/0x820 [ 154.974155] ? syscall_return_slowpath+0x5c0/0x5c0 [ 154.979075] ? syscall_return_slowpath+0x30f/0x5c0 [ 154.983993] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 154.989351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 154.994192] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 154.999363] RIP: 0033:0x4552d9 [ 155.002533] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.010226] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 155.017477] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 155.024728] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.031979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r0, 0x40086610, &(0x7f0000000100)) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)=""/64, &(0x7f0000000080)=0x40) [ 155.039234] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000005 2033/05/18 03:46:36 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:36 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 155.174824] FAT-fs (loop6): Unrecognized mount option "/dev/audio" or missing value 2033/05/18 03:46:37 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 5 (fault-call:5 fault-nth:6): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00005a5000)={&(0x7f00008d1ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000faffa0)={0x14, 0x1d, 0x3, 0x0, 0x0, {0x8005f}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) getpriority(0x0, r2) 2033/05/18 03:46:37 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socketpair$inet(0x2, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) dup3(r0, r1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000040)={0x0, 0x5}) 2033/05/18 03:46:37 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) listen$netrom(r1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:37 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x12000) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xcb, "7022c35541fde4fb53935987c5c4ffe5e153c17f7b9b5d9971c2ae2b811bc471c1e4487f11415f367cf79aa73d018d73bab4d39b35000aed702e88147286026a01623d8bc0a9e35a7fa8922b5f7ad89cad41613b7d0ffe264d705788f9c4d21322a86741dea769063be5b35624c251fe282a412dae0014ea796560bd59981c60841976ac1a7a82d2236932541725d0cc72dddc0e943b350df25a2949bc80a76e87ed63a913790c4e5eedcb1ee9534225ce16a82a6f9d7c19f1c74b510c7eb2e3bb410e8a84ebd2338f427d"}, &(0x7f00000001c0)=0xd3) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0x50}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r2, 0xd3}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={r2, 0x4}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x9}}}, &(0x7f0000000400)=0x84) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)="d94e123770c6a5be445301ad04d4398c22309e9524bd061a61c7afbf5e49eaa81fa369a0602a840754c34c27d04bedb5e32a52577a260337c2c166e6b19b6976cde695e09ed1ee4a5a6218bfecd039e442b21678c7c270d2909bbbeeb56d0a1bcce26a723974e998845e3b36393b582c8ce8359c7bdeffb9db341b59f8978785a77bfb37bab2ecc07f63deb5631883181ce9ef5a2cb63ba6f0bee098ceddf99f1c3d92b129d47933b2") setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000500)={0x20, 0x200, 0x8, 0x10000, r3}, 0x10) ioctl$TIOCNOTTY(r0, 0x5422) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x6) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000005c0)) connect$unix(r0, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={r4, 0x80000000}, 0x8) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000700)={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}) mkdirat$cgroup(r0, &(0x7f0000000740)='syz0\x00', 0x1ff) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000780)) time(&(0x7f00000007c0)) socket$pppoe(0x18, 0x1, 0x0) sendto$packet(r0, &(0x7f0000000800)="cc473fa78263d89f7eda109840fc9544cc9941c213ff34152036b2c99716a2cd74ab36bf8cd60975f0ab74b2e2e973f858b40f5a48fa12ae50b480a04c883b76edf1ee550c7cd2fded1b5d2b19e669d41b279911d1f5ea0cd78e2c97d6a6ca03f3713fde9f1cbc3522472f8bd67bdf4cdd4c3a58008bf6c55300281b0f3cca833e356bc2d20340361ed7468644cd97dd2a9df5037cfcc92c685b18a279e57033779b2e18cfc820d1a419c7ec6041b504ed120b4a04e7b48123cfb4eae64a2ad0d9733336260856d06e35294cdec3e7645b0c12595a3be76bdb54c1971496e44b1b6b4cf00e874e5be90939d6adb8334b81ff6e90ad0e4c9a7532b5d639253cd40785526f310fc15f818ed527803fe17548bd8ed940fac5724ee8edc11fd0946964ec6524d5827fc863a0291045aae53c44c7f91311d1a33b1fc9f986e952af19b79c0710074ccf4c3a72e51f35714542904eb89d156bc5bda50cbfc6cb7910eedc70eae638a141d8c2bab87eef50cdce3bb632a5c551b825acef2ec56b744cce9737af5317ec5b2fa995b33e94d7fe3a56cfd127b087704a51ebbab0f87e428175aefc313ab5382258f5444e3ff5c470ec53cf4a72c75fa8574c95c3241bf3a2c56d76e90067ff389a40b9a34412016677c93114cff4e54f6f8a72bbfe089761970d8ae6f94576948369e32ea2e65026e117d990f86a7f4ea8539756227f512e31fb37e36852248714290b0da6e0b5f387973dd3d79fd4e30fc11f3a21197c043360f2fbab03abaa9669e292de1f9af337a216303122e00416661a520113a51c4aa651a4ef93e63fafb7272acf2da37cb17db7f3357f5c4d2bae07dbc1e4171189cff53a01ed0b4497b6a4ffc361bedd871d33fee66db6620e74835095911e427a7275bf7ccec6a9d120a210aedf6da582a691f74d299bace42a3600c7cf4dec2c4424dea383845d65af16d39762525da80fbfcd2625c20fb0858d1af40af9b8e12c316f672efd82ef87d76b3e0467d0ee00c57674f72c5338c25bc9e00f963f9be38b03170f2b0427b611b78896e6c2fe8d1006e3c372dfef9c0c5d14131ac7c11030a959193b23676f40f898d8843f413d463cca1dd44757c813f258d1b18e66bbcd64dc2d704218380dfefd097dd71145ba4d36926f86fe5800f729c26ab65e849325b8807dc90e4f3dc80b345e271bb837feb33c2e5b72648e614f0b02aa0104ede803f6dfdddc00d5871ba35960cf17a93634c65f592c8577c4cf58ca22caec41088165351a023884c9fa7ace6309738686902009e573caa78c635ef924428ab798441c76d51ec9496b710c11dd3ae4e23a4969412a6a2576e24ca8502ece93f5f86f68fd84ca69047c6bc2d8356e14d2f6c01f54a9721d4c42e08ad2fe089d53dd63d026d6e9eb01efa0df4aec0f6d0a3c8b885a7defe1670935ca175c70fbbe4bbc1be5cbd433ea4b52d883061a915aa270b8c1936ffd3264138b7a49adb72746a4ca556f88116c58045937295798d09d59c17de0cd8bf30c06946a15e49b2cb393ad26f2f0e286a2de79e94bce38158b8f37ce251da5a660475d639022539b9f51d7c342857d72354204ff8a413fd8c588d7d9ee9efb3af6a097a78dc1c212543ae070f6c30f1755e36a4b01c5e01d722a626a4b811d8b85dca09618095a17761a775fb99d9bf576b906daaaa2f97dec18a06aa18425a50a4f891e9bad301fe32755add8e00e2439430a86d84c0192dc6525ca0cf94db9990e8a0452a7e4d44ec487c825c9142efb224e3055a59995a107fe7c0b001febc8beedcb7631334baec00fe6c02c06b4fe6c8828c06b30c8e5707f2b9551614edf554c9165334b00c1d16d3bb01a476970687b5c6949732e9c3dd11d8d32e3da4c689b99d30ce39ce8ac84c6a596de427ca2ed5669a3f5a21077068c168efc3f9ab5f841aa5cfee16ea4cb5b35955d9e3e38cc9da4cd688f65bc261f1b0b996fca06f39366450fa4b4f3f81af127acf937001e6fb9d27b1049e7a9666f4ec30641184d21a9865906d6f3a82c789bbee596ba3bc7b2d14159cab248d3d11d2bfc4482bbb1dcaf8fe280e3f77e46a259adc0ada9e9edb2576654a987aeda5d58d2f3920e2d50c58d0a13419b40cd447e16b414dced0ec52d6b646fce6c3cf070a091591b7272df5c32d9bd7dd49bd5498a5dd5d0ca065b146e9418013a50e5a3e901a6bcb7f6546129374d6d04f5fe55debaa12d8100790542c1e12616adce678a49fb3b7a64079d50916d64a8077933d27a2cb287a841172027710601b686fde87846ba49c76461405f2b5cd260497947927339ff5b3cb6a05127655ecb33c7c2b1c9b3154a5cf5ae342f1195a72c77f174243e1ceafe16adfd7670d8e87c1ab900cc6a345455ff2fa3f60d9c5651d466e4bb0199efe19be5950dc1cd491e411e2df31dcbea056ce1aba2758b584f90613f498245f31c87546a58bce61d42dc504e585536abafc5aca1341a7d72ea75adb65edd0ff331e3003476ace7c1eacf04f354aaf5f769dda385dcce870ad7e5e75a9834c6156b5c494a7a281e58c17a54dae7f36b77367af795eac6da1a5f09dc2d0c2c9503f8e63d8e5d1879fd43b7eeec45a68028e44e540748a94ce0c1fd63ac982b901ffe9c3e578fe96fa82665fc9167f729b9dc8cc6e03757c62ebd3bfc54016f7bb5f82c47b1de57f223c298589dde059e32a73d7772bf621679129c382a2c261d5ebd8a91ec054d9fc88a07c4590fbd1229ce9bff59813c156fc6bf965cee23d3d749f70fa6aa82232b53906f1cddfcacf5edc30a896169f763a7bd8057f990c2995295d29ed1c19196f1bf5a6732dce88b03c03b476273ae0dca3c14506cc70e0927bf0e934a9b89cb35f0b7c5047f87964c37b9f3dca225827fd066be2e1c5dc639c2a856ceafa0a536d42a6a15491075a44ddc2c42f96fc0b26e3b0184d0e01ecf9dcfa11c98a0377232fd6f3b3a7d5a9102fa7f2a9de5be7b5a6b02c932b545564fb2c3d5b5e53c51628fbdc80a9d707c3076fcd4648545f2b1c2d16232fd84cd4a21dee271a8abd1a63ca311b865cf172164941ee24df179a153facb60051838e9fe5898d610e5e19ce63366a68a24fc0d1cfe50ad5418fb5d81f00c97655341eec2706083f29c6daf37dd1637ea38398a563b037ce36da49b23e355dc57e8ac8e1531efc0342a2a696e490a0fdb1e8e01c902af6768be0ee3337fa64fc7e7a2b0bdb1b83b5b2a28833de1bba01b6308566305a1e6f2daa09bd572c79e6e693131cdc7b4aaec44c49efd5adcfa0662321a6d4acc5907f035971373ec5a3d2dfcf9b835e92916b19d03bd9456ba7c90e37b3e04bc9a0b8bad20e85c4d4b2dae3e9237702c115ecf8e7f4ec0adbe2a1e23fad58f925dc0bd2238bc27f18e2009ccc67bf124f3bc46c0468ca9c5cda934ffc5df0ba4bc8c07b5aed348d0a6bc5eb654afc1ac98df90a9678e98a04b88e9668cf14702e4b6d2e244497e5ef6c688c13a65ace8c0567b7df8efe9e8355042e007cffac727b1afd76903394c92ede265803c3592f5a0a506fd3802e8f40efe252400d494063947c762949b6f276d98a81fedcf4f4f2ff3c5d33d433cb8789582a10a3feeceab22eabfdf2b048f78655b17fd0e87c412456b10b8b26e73945c2c3bbb2e30ac0d930144f5f7ea9e9359f805b83f0c5df0f9af90fe454fd4e640ed38411ba89736e0eeb253295b65c4a350f20e899f4566407b65e6eddbd4e17ae5f88513135194de9ff43e7ddd0a8563e0cb50a33e3303f6914ca3d2710204c557a9f2bdea93b46eb5fb48107aa6eb79d2cf67fca445f4ff3ab21d0e834d014e60b1d4d95f91575bea156a57cb5691df391950c7fde821083471011289fc6643b938363a106d06492d40ca511be5ba1d8c01e6b16b6fd38356130d15f1b2610403c9155b17dfe6194759f70362ed0d47e8247c99aba4eb1ae4ae96fa42fa4c69a6c51e3e7ca4672b5047c449daa20cb98445116ac2e16a18d1229df662eec7b1f0b253018b6a32b6e08ef40d8fc65b40ea426dabee65d638fc708eff06c6bc215ac20768a6741cffdce30fa59516bb88f0aaeafa5603c25f642b930fca77c9cdf9b4f7af70922007dc51d7ad8b4a3e13abb3bf3abeff95587c9d4e1a77e36db87d4d161cfd4623398da4bf8f2dae2f00be0fdedbe700455171738f9fcbf636cff410d32397afd1a11f230e6a5ab0fb3fe0972200ebbe61e5db38d51816f574b4da0ea9e224bda54340f199f3a0a905330934295b2dccb4c690bae98f1ec519bae36c0c8b6df8778831295cddbbae101858b38bc2f3f76f9081d5f2984fead774d3d96b7f7d6277cd5f2d2cf4f109820ea40c7106ffd320e4243f30ac7f2be4ecc1533fd99174914282d55bea884fd12c312ce7e5f72b1039b31891dc029ec58164eb1702b128ac9e9b900bfe27745e6541489157b7d667e1d319274c5e0dac3d29faead8c90126ac1e4456989e42dc24e5f7c27f7482d78b18940446201fa66b4e67e2f0e6cc92969c719439b80b3d66bd358d227aee3fd3c98cea0e6413ee1d39002a87721de13304c59ceb04909a87c2029a7369fdef4d060510ea3f3b2ae13765ab35517f9c01d919b5b3239c58547f2bb1e81528b3368fe3c30af6a56e5ddcfbf213efe13b6ac1d8cb64350a3eeb894a69b0d061f7b13b4f38df2abdfc71ca2d8deb534b525aa5ec2dbdeee0ca108e24a069689f6aab3f613fb6f1584c3c46db468174051c4e24ee914b923a4971eda704ab4964f8e7558fea4d9cea53d4f54687ffc5de445893ab1cf3ca0fe5aea5e184c2a79c43904c318a4ef874de052a60860efb1e02b828986302ee6ac730833b65adb9331af8cebc3bb98665f3cdd738f94de9a739b81a0ca2930c7c6091adbc12d155bd058f062b719bff752d9728c49e339696ed1cb6d9317f251f9cdfc723fb818b357d465e98d46662cd5d943cb9b20a058904cc9edeb29c357d4ed694f7a06935e7d7189e27332d979154d6a29647af2e396141db4f73f1b926a62d6cbbd7d9143433acdd5177975b6cd932fc5c6e0060a10316d44aba929026fddc08ec2d78a9b5302e937b0544b36294a41f3706c5260de2ab9dd855e060f68b55707036734d29cbac080e7eaf10acf42cddfa3272a3c0ed2a11b26da6fbad03ac8881087bf6346ec62e85436bdda184b987116101241e6aa2be79267c577b8282119b6685e11b0326f75844e32dd2578983c214f6224a759ccd2aa6c309579124fabf1df079fae0edd1abe8a431d1fdc47cc4bec3f9025ba0201229980f5dda6edfb91b550afe78c136de25908dd15dc6dab2fbc483b1e19c8ab53073a93ff2428bff39278cdc151c60a324d3bbdbe99d3d77e78636c87d748a3360ec38d4f7110c2fb8c29d6e0c2bcdc55ed704a843df2e97424af7f66737727a3d7c27f5f49b3597cfd7fe50ef0a1ce534f9ceba073542b4227ff845b60947492e28e10cb714cfd11f1cedda44728f61e24b86ce5468506384255588948d84d473b4ba4e987d7647ab03d39b7228794a929863f81fcdd9156c5cc6498f13b25c43324ba8b212dd287ac9a18fcaa904fe2f17d4a3b7c95e581cdb8afd6a281589a4d71d76444530886e5d5b1a32cb2cb87743ae5d2c876b81bee2cebe527498ed9fb3b4177fa3a6008665603c93a7d2ab60220dee6304cf66c817740cb6a05999e014fb5501e0013f5fb5f89ea9b058c56eb7d89c0cc97a844d23cec5953029023630501c6d965950483d443b57849ffbcf6061656b20", 0x1000, 0x40800, 0x0, 0x0) socket$inet(0x2, 0x80000, 0x15d) syz_mount_image$hfsplus(&(0x7f0000001800)='hfsplus\x00', &(0x7f0000001840)='./file0\x00', 0x6, 0x8, &(0x7f0000002d40)=[{&(0x7f0000001880)="893155e8a1d461031c8de8ce8169771c919c2ce31e5866cf5e55317b76c5ba35e259aa17804e554e1b1fc202529c712cfcc023283d9859883571defc6bce21948194dae5480ba5d7b1477333dd23be60d527ba078e1512f778238eb8a0f694e04dd24ae3eea1d7833a678159df900e5ff8283a94cb6a0456aa72379339b58312a2223f62", 0x84, 0x8}, {&(0x7f0000001940), 0x0, 0x7fffffff}, {&(0x7f0000001980)="0873fdb5173c8480f9dc597c5438d007b40702ab83cadf5121f927b79e907175a036eba9337733aef99e7c0de752de85a3163681006e3a77dbfe89780f6ac106889874c61dafb366dc11a768024de1e95b1814413f9fdc7797c994dfbe3bd44bd9f2006d4dd04cc0a12a90d155546662bdfeed9d7f6110c67b00ba8ade3bc715308e0f2eb176207d300da23d4560bacf13146a5420e444e9899268af99b247ee8963d91dbc6179e9e520d95744b40b2a58667234", 0xb4, 0x1}, {&(0x7f0000001a40)="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", 0x1000, 0x6}, {&(0x7f0000002a40)="9ae7edc212624f2d69aa47d2e0b022d70a66cbc4bfd4cf9ae5ea1100bbe3e053ea7559c606954906fb008b2ebd0a9821f3c0f228e89bba76657b4529c3540553bfe62c6b6b14d4f31979ff5e8145df07f35aaeb8e57ef71d72d71fde2a21c16e17036533f0ecee52e5cd715e82d5d2ebe17fd1b56ebf6d21a3cbd58179be1aea0376f3acce4c5ec34b1a6d4e5f82688caefcf3cc24848cb9fdda7ef70d7eba862621f9ca796cfb50ad3f6543823d7a0b5253e9cd07fd1bcde2ffd455a73a0ddd0a26e9afed73efa20e3106fe0d1a61b1056b52bb2d", 0xd5, 0x1}, {&(0x7f0000002b40)="a1ddc53d9870f13a85e5551902e7a32f8728d00d0d892ea880dbf31220c30c8389196081cbe0e5bc86fc7062fdeaab46f5632d47e03952602e532f1ed24ce273b4bd8b4040f2cf43a6d2fc3b431cf1cd9fd6decc40a8235ad4e5f51b1a240062453db445feb943d02f725b44f41afe14cca76a157a8235472b85d57b8cdbe07dbd945060ddd60459990b47cb6cf5530751a84733ebfff2e8c146a257f17cb7c3", 0xa0, 0x6}, {&(0x7f0000002c00)="68ab203feee75a2e29a23ea54c594f72c85d9f0ee04d091e20cf57fa674cd1dd7d297935987046a7ad753ac2c400ea89442670f84e4182070a4874aad4d10c3306d76644e1e63c93c60e8b7d2b046d2f527048c83adec02c537b56e85dbc9afa26084461dda1e180ad25f179ab0c713034a59af980904a967471f44713e55269c9c1fc60353bb251cd8bfd2269e2c893f11d8c9c0c771175a6cbe0a25541421a2ddfcfa54deda1f9d257acb1280822a2529a7b", 0xb3, 0x5}, {&(0x7f0000002cc0)="bb98b1dcf50259f84c3cccf52713b480d1ae402950869b81adbdc8fe22ab244447a46a8640af626ff8598ed502e43722b35d6db7286a43a2c9196ddae2b0560653c335889a1e6159b8ee568fa952f207e581573d9304c0a69194bcf9", 0x5c, 0x8000000000000000}], 0x8010, &(0x7f0000002e00)={[{@type={'type', 0x3d, "67821e7e"}, 0x2c}, {@creator={'creator', 0x3d, "2c8c350e"}, 0x2c}, {@uid={'uid', 0x3d, [0x36, 0x32, 0x37, 0x31, 0x2d, 0x36]}, 0x2c}]}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000002e40)={'filter\x00'}, &(0x7f0000002ec0)=0x44) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002f00)={r4, 0xc44}, 0x8) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000002f40)={0x5, 0x3f, 0x7, 0xb1, 0x8}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002f80)=@assoc_id=r4, &(0x7f0000002fc0)=0x4) seccomp(0x1, 0x0, &(0x7f0000003040)={0x2, &(0x7f0000003000)=[{0x101, 0x8000, 0x9, 0x1}, {0x20, 0x4, 0x234e, 0xfffffffffffffc00}]}) getrlimit(0xc, &(0x7f0000003080)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000004100)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x4, &(0x7f00000030c0)=[{}, {}, {}, {}], &(0x7f0000003100)=""/4096}, &(0x7f0000004180)=0x78) [ 155.480693] hfsplus: unable to parse mount options 2033/05/18 03:46:37 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0x9, 0x6, 0x800}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x281}, &(0x7f0000000180)=0x8) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0xa1, &(0x7f0000fff000/0x1000)=nil, 0x2) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x8, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0xf55, 0x24202) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x18, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3, 0x2}], 0x46, 0x0, &(0x7f00000003c0)="3bd628f0df669f6517289804d1d765755643e88af7a89645ba87487cb38a85e4d882be28cad87c9ad697f3450d1c85ac10f4fc30ed356ede43d671f2418ba325be4909fe93d4"}) recvmmsg(r3, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/63, 0x3f}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/12, 0xc}, {&(0x7f0000000640)=""/188, 0xbc}, {&(0x7f0000000700)=""/222, 0xde}], 0x6, &(0x7f0000000880)=""/4096, 0x1000, 0x7fff}, 0x1f}, {{&(0x7f0000001880)=@in6, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001900)=""/253, 0xfd}, {&(0x7f0000001a00)=""/179, 0xb3}, {&(0x7f0000001ac0)=""/232, 0xe8}, {&(0x7f0000001bc0)=""/56, 0x38}, {&(0x7f0000001c00)=""/188, 0xbc}, {&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d00)=""/250, 0xfa}, {&(0x7f0000001e00)=""/72, 0x48}], 0x8, &(0x7f0000001f00)=""/137, 0x89, 0x10001}, 0x3}, {{&(0x7f0000001fc0)=@sco, 0x80, &(0x7f0000002180)=[{&(0x7f0000002040)=""/59, 0x3b}, {&(0x7f0000002080)=""/253, 0xfd}], 0x2, 0x0, 0x0, 0x6}, 0x2}, {{&(0x7f00000021c0)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1, &(0x7f0000003280)=""/15, 0xf, 0xfff}, 0x3}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f00000032c0)=""/247, 0xf7}, {&(0x7f00000033c0)}, {&(0x7f0000003400)=""/54, 0x36}, {&(0x7f0000003440)=""/43, 0x2b}, {&(0x7f0000003480)=""/150, 0x96}, {&(0x7f0000003540)=""/239, 0xef}, {&(0x7f0000003640)=""/101, 0x65}], 0x7, &(0x7f0000003740)=""/202, 0xca, 0x1}, 0x6}], 0x5, 0x12023, &(0x7f0000003980)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000039c0)={r2, 0xffff}, 0x8) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003a40)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a80)={0xe4, r5, 0x500, 0x70bd28, 0x25dfdbfb, {0x11}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003c00)='/dev/mixer\x00', 0x400, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000003c40)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000003d00)=0x9, 0x4) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000003d40)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000060c0)={'sit0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000006b80)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000006c80)=0xe8) sendmmsg(r4, &(0x7f0000008b40)=[{{&(0x7f0000006100)=@hci={0x1f, r7, 0x3}, 0x80, &(0x7f0000006280)=[{&(0x7f0000006180)="a055a6f8450494cb217b1340751758555232d7f4f21bff2c81791179ee095de040bbb2d27d044180f3e5ab499f7c33c6032dbe24f7f97cf5e27056bd510bab5cb523ced679285bb7abb3bddfafaa529f1d3831affbc46af2109e1e0dfc56961a0d83292b65d0a8a57ad0fb4f447afcaf666879fc37c4f6c99b05f6f5", 0x7c}, {&(0x7f0000006200)="eb092ae75a241b4b6040f1af96b9e0e6d5a75663a50905b1e2afd6242c5c6c44502a77b5d2303f288a3a4296beed621bae427552270eafdc5308a383d5a1f52ad385255318ddb6139484a6ff928c7bda174d6122a1fbdb21", 0x58}], 0x2, &(0x7f00000062c0)=[{0xd8, 0x112, 0xffffffffffff44c0, "cd1a574a84b64b6638133ef94c1acf8d9d3ed8a90b9748fe57fb3ad7cdaf6d2596ed879ded3674f830e43ff94898750429e2f59c030b216cfd0af08876038a8909ef7ce7574e43878a6c27df7444cfd16b75435cf23b645e4831e1ef557ab6d800c84d4944d280a65436c0f65725fd982f81536aa290cf02a220e6d198ca8cde4ac4084861e7f543c2cfb8ad7134429fe4022dd0029f5651a1d36b30b56cfd609383f460a95532916d0cf1a3c9abc0478481ddd91ee2d2e2a2d4ad5b9b059c3cdabc4d51ca312200"}, {0x18, 0xff, 0x392e8e9f, "0ff9311a76"}], 0xf0, 0x80}, 0x9}, {{&(0x7f00000063c0)=@l2={0x1f, 0x100, {0x80000000, 0x5, 0xff, 0x800, 0x0, 0x6}, 0x2400000, 0x3f}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000006440)="66fa077b1ee1e782ca96504f56f65eec04b218b95729afd03165725b657f573f8d9b12feada9d025c34f5f9abf41a238fd5a560ed6c470a3d55a9759f2a9212c5fc27b695419df2e3e9b757a4572a795079ac983cac51c6767a9ac7036e00bccd35522f48c66ef9d2a916450fc66aa17a72857f552bec68be58c0bcc3d1ac150f05224028b6b7fef398420d7e7d919a11c8917a40129", 0x96}, {&(0x7f0000006500)="667a5676f44b1dfa61ddee2330bf7a43d41bff2f359ab9cd8c2581c00cde0b97c9062fea5b6b5ec788b91a0ce932d1f2b901dbd7bee9a6498af5e181dfd1589a18f6713cf98037c19eef12d70cf4b2036720846c6ecd413da10e00af62fd9f96107b2cb296f61ac167b42198d73041dd68fa55c2567173c6b2143c7dce46f0975e1d9ff4d32b985417d7373d0c6f0665e3c5e9185af80bd31aa5e874214fa5ac469799d0799a845b17d8c57a", 0xac}, {&(0x7f00000065c0)="9c936ca274eea376606d9298d6ba62a133afbcdbda4e235109f0945e95035a9775898dfe96340d23167fc5033a61eed4ff65a1547459ed0072cc83a533477ec9c15014ee7b88b3956905d87bbf4be200b04fc1a4f96334d9147d0065baf993", 0x5f}, {&(0x7f0000006640)="0b846642a3bf391e9ea0b514ae1a87e577db049d529ad72b89cf2f456892a5a9987514cb3833bc53540a4a88d2b95b6713929e0308a7c089fc9a2bc94db2943d55faab7a669ca3d56a530bfc037bd6a0724beba161468cb0131f43e2ae0afd033bd3eb37790461283dc2661a2a3d641a9a12c5e944185b816cf8cd8b93d83099ef3fff11293753719c5cc4fbd1ccf48bc7a85e8420a0b7b3442c72a44109b2ae3e292209", 0xa4}, {&(0x7f0000006700)="cebde85238fa248bdf9e0cafeb622874070dc6679913f59c4a23fe460c2b3045823d0da3ac18ed2d0968a6efff59fcb36563a41ad801e70bbffac2b400ef349b8f386f26dab3090cee6c97aaab476d31d5c2c8c853e51465c22eeeea371f3ed5dc6f1b17c9e884beb0bd0bb431d67883ca06f1f4c3aaa015092510093f549ab945efd2b22725972658308e2480e1", 0x8e}, {&(0x7f00000067c0)="f40d44a62f4d143e394aa098b276eae2c162a585b2d0ca770741a3d050226eb2ba9d3747412e2cc2f519748e4a1bd7fc005a3d38a104ef8d1594cd4202d692e56329b1f6dc73045c0e56d39bed9da82ebea5", 0x52}, {&(0x7f0000006840)="d94e6a6430cab2e5b13b0aa96e15108b6f9b07c67ef8f3e72dcbf3eee2f454522d21063fa848bfba56d5a059a890259d74d0d155cdbc070705aeb999e8cebfdaa416e13b8ce2811be601fe5cddd754e5dbe9255d346f4b6bd818b3f5be397e49034d", 0x62}, {&(0x7f00000068c0)="b16b405a4dd168cf20eb4f48ec55f568a882d83a1f99ebe4924354609e0e48b59971ebcac585438fdfcd037aadcd431c343a4b0a4b65", 0x36}, {&(0x7f0000006900)="9a4accf42e259975156ec6647d99429a2b117377e56ea360e8a8457ca008959ebbf9e5bf667b2f14ee890c449116aac4f63e620b40ab64211b12c50a12f4e1a8d0583eed5cf048b4a86cf5782c9db5af27892a6d7e09969536ad0ae20d3a094f38b734fc7faf2c5fc422e9719ff64569b7bb3f372c2600ffa285c55e5f17d8ae7fd9681b877216dd66f143df898f117f9ff6139835dc2c0443e41bab", 0x9c}, {&(0x7f00000069c0)="d90182e5528cb79e0e366f68ceccf049c7151b54c68c6538ef12d57c21802c0f3852ce7a3418e0acb619e9fb18aaf0f9b96aa80366f0ee4556d5e5ef956363b05f368d083d884310e1d407b532c49d470ef3f158aaee7493ab92d897b7f7f5f6cac6cded70b0929bfb4d84da294a63481849003f64a4f616305870d823c753b235d2d29b384d2bee7b92cd7f53f0c40e3a6a6184c139a57ae0f143dd744364d0ec873412562bf3c56a14df27c7f7e08b78acaec24d0297fd0652d9b87535cdc657fb9efa3b51921530eec6c4d28ac3", 0xcf}], 0xa, 0x0, 0x0, 0x40}, 0x101}, {{&(0x7f0000006cc0)=@can={0x1d, r8}, 0x80, &(0x7f0000008000)=[{&(0x7f0000006d40)="aa4ab4350cf7da808efb618b11dadc2fb49c2469429811271e8184b53d2a33dc2f", 0x21}, {&(0x7f0000006d80)="fb1d8d4204bc69997886ba27b79fdad09c1fdd8762d2bc37b9a767de06a3b4e8733511dce34575e3e79b5efc569412f485ff1da5a9eb38030a07c7b2a5b1591565af910fbc377256e1f6c1b1324f0556ce37745ab29ef9f353a89d22d24b99b7f82fbcd0450162173dd7827e8968f11a4de1c4b0327198bb8155bd22e424a320572414a5b9738aaff2ccadb5e56047ed3079632ea739c9a75fcc54388d04f937e19e4e2a31135cc42813f67bb77c2731731bc1a01cf3cf0f60820c", 0xbb}, {&(0x7f0000006e40)="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", 0x1000}, {&(0x7f0000007e40)="676007bfb93603174fd941cc90c9a864316b262346b96651ba3676bf74f09e03c6c0c1535567187b227498567c94e441e6134dd07bcbc3d7ff72c6344771623269e0074464f21fc216bc39558b2e0d6d1ef5c01a9fa4b6a7dd4b124a4d13632d3b0d0124cdda50e227aca95ba43f5107a52e948c8f0f449e62aec2fb3b5b31da151434", 0x83}, {&(0x7f0000007f00)="2eb8e4155d66aecdad8e6e84ab4f9a4dc7b39c2d904e5258df4489c4b1acb07db33d84542484ad7418d711049625c968503ca26acfe6926d8a4efb47", 0x3c}, {&(0x7f0000007f40)="1c538737592b971ae519fa2bf51ac6ec7290682ad8b7e65110b9870d8b36238d99db3b5253bbe83fdb1bd9e6c834fed045c5c13e18bd5d79ec8adb52903ce0dba51b9e86a60752457e5be4182c01b9f35ef12888dbae4c73418abf5c14cfe66a007e989a53a92a3590d515e4723194cced2e00a3e6e3a64302d7a4efe4a6", 0x7e}, {&(0x7f0000007fc0)="0f4f392d72bfbc838579d39d82eecd0848aeec9fd3be7a89652431ca", 0x1c}], 0x7, &(0x7f0000008080)=[{0x98, 0x100, 0xb86, "7896504cc5336d260810c7144ab3a6f8878ac777a3d4c479ff8c842262fcaa8a1568a91d35f1ec989af46da3cd60993693527c87e2ba38bd18d1bab87ed2c8b67fccd15122bd2fb4809b3973fbbc043868d945ab25e78b4b233706b2632e5db28377012c9f99150e5a7d5a0b44ef7691dda21b2802b3d8dad8b99dbcacb8cb5e0786"}, {0xf8, 0x88, 0x3, "be11cb4405640ca8fb025d91861df73315a880fb24dc62ef9d02526ffd1a9d38aa73dc175fa488db6b53ebecba794a42154c5d0f5e4580374c1441b87ee31b07ff82e661ee08bb8a71077472ce75fa82b5eee15f87608ea8052a48a840fb2fbad1c10ce9bf5a5704e3f58dc27eb204efac00461a2fcd96fb59c96026dd9a2d27c82865afa6207c5d110d1989d53e83333baca12f3bddc871dbc5744f8f3dd68cf6e997441bec47d28a247956deb85c0b2adc23ebc84401717148fd5add73bfaf06cac920db19ac08df53478a0a0563c2e51d57614489707f733fb2779b90c19ab5755f69b8"}, {0x88, 0x116, 0x10000, "f3bd241f4c27c7779c019f8e74e72d0bff10aaa3904a378edc3ac9b595ad0943bf405ddc75113f20ccc5e2c2bf6102fb3bed8572d7a95f1b1ea5f73573c9d0c459f5118b9aa2a157c57b55e4510228665d17966cd1b75ad9ae1df4d137d7f03f5d013ad5d0ef88414c39340d8db7df2fdb"}, {0x48, 0x115, 0x4670, "0d174067ced88658bed7547eea068db23b1f41d1d98be265e1c4cadebf78eed752fdb83ac48a93adf1defb4789792567d97faf78d42ac2"}], 0x260, 0x8000}, 0x6}, {{&(0x7f0000008300)=@pppoe={0x18, 0x0, {0x2, @random="437e8b1a85b3", 'yam0\x00'}}, 0x80, &(0x7f0000008680)=[{&(0x7f0000008380)="32a4ae516c31364a05715541814b98726af9ce13c16d921bcc770d98c350e8ce51e82248042b762714e4fdb21fe97e218d7ac3074d3e713834e160180b2951779bd30981af591971482d6600d3b58f7775e26df4be91ba64ee08a8c648f7a83622203727ac17e91ac971c53058ed70fd730448f9312dff748f7f0ebf3bebd2b3a6c2a55530a0530e810eaee031bb1e1cf2b3", 0x92}, {&(0x7f0000008440)="f0262e4db6f6e8bb836266477ecbf2e6d3d2572b40a2", 0x16}, {&(0x7f0000008480)="2aff489eca8ecdda4fcd7ee4ff4babe92ea00b56b4f2aca9c30ef83548a2ff992fa0175ac22f79237c49c2db80ed59385fa643801504b56651c9bc83fcdb55bbdf37d963d2c79819a014beb977815754642e6b6fbd522b2d54eada476d381b", 0x5f}, {&(0x7f0000008500)="7215b48d8c6d0e784acb6371ce99bbf1276c14cf7c07e79c97ac154e0724aec7ff2eb1402cad979794694cb30bcd94f73ad6c6f4189e3c5d2cf6cd435fbe8304d36e52e80d1b07db8cccd9204ef72f21aece3c805435b47ec8961e27d42600278c8019b69560e99e47a7abb47fe6249a11d1ce8b8964eed074f53e0647f0017c5f0b1fda6d394156cf2ec7f6af1aadf1dc5faf672a42c050b9dbc3fabf39a7fce03fdc58bdecbeacb595168d439e9b4db071204729a9ec804602f2aecf1004df3f2ba6f95549722418f24a3770", 0xcd}, {&(0x7f0000008600)="b0c50ce9111d082740711af9b2702cb73a997c13709e4601a085d6493bdb0b31271a11ca2e5ba8687de7db5ff0859897bb3207f1c87b297fac3ff068f9a9585c9da7fdf7196f5038ed37c3ba3ac3cc51f6b6b2ffc2c15b022f2610d27d", 0x5d}], 0x5, &(0x7f0000008700)=[{0x98, 0x88, 0x4, "5a215119e2fb853ca50ff345fc94aa0b64a0aa81e8c91200cb2166a1f6965e883811d6d14a7590797aba2039354e68f72211e46296346dea50105ad101d9de6515146ebc8fb232060d19335f484e90b12c41ad2a20675ffb2acdd6a7f2e4eee99a704077f55cb0ed638053d492d41f00510b1dcacca386819ea41761fc90e598d695"}, {0xa0, 0x1, 0xc65, "22da1a80bb9271bc8e4bf0b2f3d1689eab7a1278277459e6513b18cfe2fe9cf534f94d6fbed0ef9a2cb01aa1e1fadf63841ad4f7b117ec9c3b353070b9db58fc36f836fbccdaab9b6fc737c789bbe37524ed8ea474380bf94287fcb501c0269393cd81af1344a894fc2bf83937c8037727adcbecaa0caed3e3660b00fffbb8b929c59619dac89a3950ea6b117fb09828"}, {0x40, 0x117, 0x1f, "63a5d7d2047548a0e43181a1e6cff0b53c35058ecf26326abbe235e97ec19afdaf7076f97e6122c75d462940e3"}, {0xa0, 0x107, 0x7, "deeb64cf9920beb40eebca75674960c5ec8bd19c31bdd329c8899ec8e72a459ef2a3ae0d1fbdcdf75d7983df7d4084de6f770e085b8c396e897ff24f0fbec1da62bd0babfbd1cd3fa2e0024941401d2473944217787f4a28dfb585b22932b99028422890597d39b8cc2131d06a0e3e5a8a3889e6a290010502e9b63f38ee7aaabca04e06626d83112d"}, {0x20, 0x0, 0x84f, "9e13de2fbad33f9ba8"}, {0xf8, 0x18f, 0x90a1, "e8b9040b811dca2e566122a7ac7279ca4e33d10b1c7202482cc2a76e3de6a8e1c21260348770d8ef647e9c920f96beb00c6c35273753e691b1113f652b9ea1a45bf18f09d1126fe2ab2231cb974a97441e4c99ec393429ddbb22f2ef8e88a4f6ba9cdfb685363a1655139623db4c3993d65566068cbd6bf32291bfacafad4ac1790bddf4be68f0bfa6d5c28e984e3ad036117585273bbbd587fe3bab33fc39df293a5ee8d981a2c3b22d8b7b7289b83579d561f7c36a4c121f48df0790d0f3ff5c17aae1cda7ba7aca9d64f8c6a0c99691cf81c2479487b59127dd0336facb603739089000f9"}, {0x108, 0x113, 0x8, "4892fa4f6fc330073b0812280843fe6c9760e18565d8a66f2d0bea644ebfe3ba228223ef347b3af8232a8c5958a3794d2566bdfb08d3a62ee6bd50af3513b21fb3db04995de98831ff82f74b1d4222da664409972e606e1bea09d9be0b51d6ab4f773f579b0ad00d289bd5e7c8e57213327e6e3705fdb8e5c1057d21e82f75a15ef9507c52985b2b687afaea69285195d97707d707ed5bad213057964d7bd6e0b47c5c40c6738003ee6e164bbb0cfa71012d7d3ab669086233bc12ec19cd42eec3bd149e2e81f94057d29df801e2bbea7e2205a6fd28803e75daa9e6a8efbb1592f200c5b8008b75b1d7432144750624a80508dd8a"}], 0x438, 0x20000000}, 0xf98b}], 0x4, 0x4000000) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000008c40)={{0xc1e3, 0x81}, 0x4}, 0x10) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f0000008c80)={0x5, 0x3, 0x904}) r9 = syz_open_dev$midi(&(0x7f0000008cc0)='/dev/midi#\x00', 0x8000, 0x0) ioctl$LOOP_CLR_FD(r6, 0x4c01) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000008d00)={0x4, [0xff, 0x8, 0x1, 0xf4]}, 0xc) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000008d40)) connect$can_bcm(r3, &(0x7f0000008d80)={0x1d}, 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000008dc0)=""/4096) [ 155.616414] FAULT_INJECTION: forcing a failure. [ 155.616414] name failslab, interval 1, probability 0, space 0, times 0 [ 155.627744] CPU: 1 PID: 14781 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 155.634592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 155.643972] Call Trace: [ 155.646578] dump_stack+0x1b9/0x29f [ 155.647891] hfsplus: unable to parse mount options [ 155.650217] ? arch_local_irq_restore+0x52/0x52 [ 155.650247] ? rcu_note_context_switch+0x710/0x710 [ 155.650266] should_fail.cold.4+0xa/0x1a [ 155.668806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 155.673921] ? lock_acquire+0x1dc/0x520 [ 155.677905] ? mount_bdev+0xa5/0x3e0 [ 155.681639] ? graph_lock+0x170/0x170 [ 155.685460] ? find_held_lock+0x36/0x1c0 [ 155.689533] ? __lock_is_held+0xb5/0x140 [ 155.693615] ? check_same_owner+0x320/0x320 [ 155.697957] ? rcu_note_context_switch+0x710/0x710 [ 155.702900] should_failslab+0x124/0x180 [ 155.706975] kmem_cache_alloc_trace+0x2cb/0x780 [ 155.711656] ? kasan_check_write+0x14/0x20 [ 155.715900] ? do_raw_spin_lock+0xc1/0x200 [ 155.720144] sget_userns+0x1c7/0xf20 [ 155.723873] ? kill_litter_super+0x90/0x90 [ 155.728118] ? ns_test_super+0x50/0x50 [ 155.732020] ? destroy_unused_super.part.9+0x100/0x100 [ 155.737309] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 155.741900] ? kasan_check_write+0x14/0x20 [ 155.746143] ? do_raw_spin_lock+0xc1/0x200 [ 155.750384] ? blkdev_get+0xc0/0xb30 [ 155.754107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.759649] ? cap_capable+0x1f9/0x260 [ 155.763545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.769080] ? security_capable+0xa4/0xd0 [ 155.773226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 155.778754] ? ns_capable_common+0x13f/0x170 [ 155.783156] ? kill_litter_super+0x90/0x90 [ 155.787391] sget+0x10b/0x150 [ 155.790482] ? ns_test_super+0x50/0x50 [ 155.794362] mount_bdev+0x111/0x3e0 [ 155.797978] ? load_system_files+0x7f70/0x7f70 [ 155.802548] ntfs_mount+0x34/0x40 [ 155.805988] mount_fs+0xae/0x328 [ 155.809340] ? mpi_free.cold.1+0x19/0x19 [ 155.813390] vfs_kern_mount.part.34+0xd4/0x4d0 [ 155.817961] ? may_umount+0xb0/0xb0 [ 155.821574] ? _raw_read_unlock+0x22/0x30 [ 155.825709] ? __get_fs_type+0x97/0xc0 [ 155.829587] do_mount+0x564/0x3070 [ 155.833114] ? lock_downgrade+0x8e0/0x8e0 [ 155.837252] ? copy_mount_string+0x40/0x40 [ 155.841473] ? check_same_owner+0x320/0x320 [ 155.845778] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 155.850781] ? __check_object_size+0x95/0x5d9 [ 155.855267] ? __might_sleep+0x95/0x190 [ 155.859231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.864757] ? _copy_from_user+0xdf/0x150 [ 155.868891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.874412] ? copy_mount_options+0x285/0x380 [ 155.878891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 155.884418] ksys_mount+0x12d/0x140 [ 155.888039] SyS_mount+0x35/0x50 [ 155.891392] ? ksys_mount+0x140/0x140 [ 155.895180] do_syscall_64+0x29e/0x9d0 [ 155.899057] ? vmalloc_sync_all+0x30/0x30 [ 155.903189] ? _raw_spin_unlock_irq+0x27/0x70 [ 155.907671] ? finish_task_switch+0x1ca/0x820 [ 155.912151] ? syscall_return_slowpath+0x5c0/0x5c0 [ 155.917064] ? syscall_return_slowpath+0x30f/0x5c0 [ 155.921985] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 155.927340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 155.932173] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 155.937346] RIP: 0033:0x4552d9 [ 155.940520] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.948214] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 155.955467] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 155.962720] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 155.969975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 155.977228] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000006 2033/05/18 03:46:37 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530c0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 5 (fault-call:5 fault-nth:7): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0xed0, 0x7, 0x10001}) r1 = perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x2fc, @dev={0xfe, 0x80, [], 0x13}, 0x2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x8, 0x7, 0x1, 0x80000001, 0xada5}, &(0x7f0000000200)=0x14) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000002c0)=0xc52d) getpgrp(r2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) eventfd(0x53800000) close(r1) r4 = socket$inet(0x2, 0x80003, 0x5) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) accept$inet(r4, &(0x7f0000000240)={0x0, 0x0, @multicast1}, &(0x7f0000000280)=0x10) 2033/05/18 03:46:37 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:37 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2002, 0x0) r1 = memfd_create(&(0x7f0000000100)='dev ', 0x0) ftruncate(r1, 0x800) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a004e220600000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000001000000010000000a004e2100000000fe8000000000000000000000000000bb0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) sendfile(r0, r1, &(0x7f00000000c0), 0xffff) 2033/05/18 03:46:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x153f30ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f00002cf000)='(\x00') r0 = timerfd_create(0x0, 0x0) socketpair(0x6, 0x80000, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) syz_init_net_socket$llc(0x1a, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000714fe0)={{0x0, 0x989680}, {0x0, 0x6}}, &(0x7f0000000fe0)) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1ff, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x84) 2033/05/18 03:46:37 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xfffffffffffffffc, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 156.165326] FAULT_INJECTION: forcing a failure. [ 156.165326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.177160] CPU: 1 PID: 14845 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 156.183991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.193335] Call Trace: [ 156.195915] dump_stack+0x1b9/0x29f [ 156.199535] ? arch_local_irq_restore+0x52/0x52 [ 156.204199] ? lock_downgrade+0x8e0/0x8e0 [ 156.208344] should_fail.cold.4+0xa/0x1a [ 156.212391] ? find_next_bit+0x104/0x130 [ 156.216441] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.221528] ? pcpu_next_unpop+0x83/0xf0 [ 156.225590] ? debug_check_no_locks_freed+0x310/0x310 [ 156.230770] ? wait_for_completion+0x870/0x870 [ 156.235342] ? lock_downgrade+0x8e0/0x8e0 [ 156.239482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.245013] ? kasan_check_read+0x11/0x20 [ 156.249156] ? perf_trace_lock+0xd6/0x900 [ 156.253291] ? perf_trace_lock_acquire+0xe3/0x980 [ 156.258128] ? zap_class+0x720/0x720 [ 156.261833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 156.267354] ? should_fail+0x21b/0xbcd [ 156.271228] ? pcpu_alloc+0x188/0x1380 [ 156.275108] __alloc_pages_nodemask+0x34e/0xd70 [ 156.279770] ? __alloc_pages_slowpath+0x2dc0/0x2dc0 [ 156.284778] ? find_held_lock+0x36/0x1c0 [ 156.288847] ? check_same_owner+0x320/0x320 [ 156.293153] ? lockdep_init_map+0x9/0x10 [ 156.297207] cache_grow_begin+0x72/0x6c0 [ 156.301265] kmem_cache_alloc+0x689/0x760 [ 156.305401] ? alloc_vfsmnt+0x771/0x9d0 [ 156.309364] ? mnt_free_id.isra.27+0x60/0x60 [ 156.313765] getname_kernel+0x54/0x370 [ 156.317641] kern_path+0x1e/0x40 [ 156.320995] lookup_bdev+0xfa/0x240 [ 156.324611] ? blkdev_open+0x280/0x280 [ 156.328488] ? find_held_lock+0x36/0x1c0 [ 156.332537] blkdev_get_by_path+0x1f/0xe0 [ 156.336669] mount_bdev+0x5d/0x3e0 [ 156.340194] ? load_system_files+0x7f70/0x7f70 [ 156.344763] ntfs_mount+0x34/0x40 [ 156.348202] mount_fs+0xae/0x328 [ 156.351551] ? mpi_free.cold.1+0x19/0x19 [ 156.355606] vfs_kern_mount.part.34+0xd4/0x4d0 [ 156.360178] ? may_umount+0xb0/0xb0 [ 156.363791] ? _raw_read_unlock+0x22/0x30 [ 156.367924] ? __get_fs_type+0x97/0xc0 [ 156.371802] do_mount+0x564/0x3070 [ 156.375326] ? lock_downgrade+0x8e0/0x8e0 [ 156.379465] ? copy_mount_string+0x40/0x40 [ 156.383686] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 156.388686] ? __check_object_size+0x95/0x5d9 [ 156.393176] ? __might_sleep+0x95/0x190 [ 156.397146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.402669] ? _copy_from_user+0xdf/0x150 [ 156.406807] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.412330] ? copy_mount_options+0x285/0x380 [ 156.416813] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 156.422340] ksys_mount+0x12d/0x140 [ 156.425956] SyS_mount+0x35/0x50 [ 156.429307] ? ksys_mount+0x140/0x140 [ 156.433099] do_syscall_64+0x29e/0x9d0 [ 156.436974] ? vmalloc_sync_all+0x30/0x30 [ 156.441107] ? _raw_spin_unlock_irq+0x27/0x70 [ 156.445589] ? finish_task_switch+0x1ca/0x820 [ 156.450072] ? syscall_return_slowpath+0x5c0/0x5c0 [ 156.454989] ? syscall_return_slowpath+0x30f/0x5c0 [ 156.459912] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 156.465265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 156.470103] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 156.475273] RIP: 0033:0x4552d9 [ 156.478446] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.486144] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 156.493398] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 156.500650] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 156.507905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 156.515156] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000007 2033/05/18 03:46:38 executing program 5 (fault-call:5 fault-nth:8): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:38 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) accept$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000a34000)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000000140)}, 0x0) 2033/05/18 03:46:38 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x200) timer_create(0x2, &(0x7f0000000040)={0x0, 0x6, 0x3, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000240)={{}, {r3, r4+10000000}}, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:38 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:38 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x3, 0x8000000000004, 0x4, 0x3}, 0x2c) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x6000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xf, 0x4) bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c) 2033/05/18 03:46:38 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x1e}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x82, 0x55) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)) [ 156.916246] FAULT_INJECTION: forcing a failure. [ 156.916246] name failslab, interval 1, probability 0, space 0, times 0 [ 156.927581] CPU: 1 PID: 14898 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 156.934419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 156.943759] Call Trace: [ 156.946340] dump_stack+0x1b9/0x29f [ 156.949956] ? arch_local_irq_restore+0x52/0x52 [ 156.954610] ? rcu_note_context_switch+0x710/0x710 [ 156.959527] should_fail.cold.4+0xa/0x1a [ 156.963570] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 156.968654] ? lock_acquire+0x1dc/0x520 [ 156.972608] ? mount_bdev+0xa5/0x3e0 [ 156.976307] ? graph_lock+0x170/0x170 [ 156.980093] ? find_held_lock+0x36/0x1c0 [ 156.984145] ? __lock_is_held+0xb5/0x140 [ 156.988203] ? check_same_owner+0x320/0x320 [ 156.992520] ? rcu_note_context_switch+0x710/0x710 [ 156.997437] should_failslab+0x124/0x180 [ 157.001485] kmem_cache_alloc_trace+0x2cb/0x780 [ 157.006140] ? kasan_check_write+0x14/0x20 [ 157.010360] ? do_raw_spin_lock+0xc1/0x200 [ 157.014581] sget_userns+0x1c7/0xf20 [ 157.018280] ? kill_litter_super+0x90/0x90 [ 157.022499] ? ns_test_super+0x50/0x50 [ 157.026375] ? destroy_unused_super.part.9+0x100/0x100 [ 157.031632] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 157.036206] ? kasan_check_write+0x14/0x20 [ 157.040421] ? do_raw_spin_lock+0xc1/0x200 [ 157.044641] ? blkdev_get+0xc0/0xb30 [ 157.048341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.053861] ? cap_capable+0x1f9/0x260 [ 157.057733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.063251] ? security_capable+0xa4/0xd0 [ 157.067386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.072907] ? ns_capable_common+0x13f/0x170 [ 157.077303] ? kill_litter_super+0x90/0x90 [ 157.081518] sget+0x10b/0x150 [ 157.084608] ? ns_test_super+0x50/0x50 [ 157.088480] mount_bdev+0x111/0x3e0 [ 157.092092] ? load_system_files+0x7f70/0x7f70 [ 157.096655] ntfs_mount+0x34/0x40 [ 157.100091] mount_fs+0xae/0x328 [ 157.103438] ? mpi_free.cold.1+0x19/0x19 [ 157.107483] vfs_kern_mount.part.34+0xd4/0x4d0 [ 157.112053] ? may_umount+0xb0/0xb0 [ 157.115663] ? _raw_read_unlock+0x22/0x30 [ 157.119790] ? __get_fs_type+0x97/0xc0 [ 157.123663] do_mount+0x564/0x3070 [ 157.127183] ? lock_downgrade+0x8e0/0x8e0 [ 157.131315] ? copy_mount_string+0x40/0x40 [ 157.135529] ? check_same_owner+0x320/0x320 [ 157.139831] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 157.144829] ? __check_object_size+0x95/0x5d9 [ 157.149307] ? __might_sleep+0x95/0x190 [ 157.153266] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.158786] ? _copy_from_user+0xdf/0x150 [ 157.162916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.168434] ? copy_mount_options+0x285/0x380 [ 157.172909] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 157.178429] ksys_mount+0x12d/0x140 [ 157.182039] SyS_mount+0x35/0x50 [ 157.185389] ? ksys_mount+0x140/0x140 [ 157.189173] do_syscall_64+0x29e/0x9d0 [ 157.193039] ? vmalloc_sync_all+0x30/0x30 [ 157.197169] ? _raw_spin_unlock_irq+0x27/0x70 [ 157.201646] ? finish_task_switch+0x1ca/0x820 [ 157.206127] ? syscall_return_slowpath+0x5c0/0x5c0 [ 157.211037] ? syscall_return_slowpath+0x30f/0x5c0 [ 157.215953] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 157.221298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 157.226126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 157.231294] RIP: 0033:0x4552d9 [ 157.234478] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.242173] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 157.249424] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 157.256672] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:46:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r0], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r0]], @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYPTR64, @ANYRES64=r0, @ANYRES32=r0, @ANYRES16, @ANYPTR, @ANYPTR64, @ANYRES32=r0, @ANYRES32=r0, @ANYPTR], @ANYRES64=r0, @ANYBLOB="30925de22bf64e115247f3feda5d6b9167b7aa362b54f18a882288e5a4b7a53c71b3224bdcff13f481a8e1924399764da2221e568899f1cf9a6dd403a8334bf2dc5b5dbc58059604223b8ef8fa930b855e4d24038e4c8523d8cef64e9e0112ac12c4928eaa811158889147d7588fa113a6d2fb5d49caca68fce70c9e931b3873efb189e94dbd81aed18cc2c5074c6208cb24c4941d4bd1603c1aaccce2f59959e1a5080f3a9873bd1e27030a77eff349b33bc8fb8f78b2644e541dcf5e557b1c5406da", @ANYRES32=r0, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYPTR]], @ANYRES32=r0, @ANYRES64=r0, @ANYRES16, @ANYRES64=r0], 0x7) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000071f2114388133c07000000000100000000000000000000000000001d8e25047c5e361dc8b251f6b854adcd9a388a6c941d2c52f05af93638fcf6a701e4bc2de4c04e084fd421ecdbc55c5bd742ee735252e6fc01562b6d5a"], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00002e9000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a004e2000010000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e200000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30000000000000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000e6e000)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x392) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000000)="8539eb4249eb95c05c8482efc483b81c35a5e6bf", &(0x7f0000000040)="49206847427bfb8187d9354d72259d66089d310164d394b7fe3df2605e6727a855ae"}}, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000002c0)=0x235b, &(0x7f0000000300)=0x4) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000a00)={@dev}, &(0x7f0000000a40)=0x14) membarrier(0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x141000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x4000044) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'gre0\x00', 0xff}) r2 = add_key(&(0x7f0000000a80)='trusted\x00', &(0x7f0000000ac0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000d00)="eb99de206ba71b1c9f1ffc12c25d4bbc3cc16053d1681adcd000e80af65689aab36fc06d2794a8166d41cd29acb7a546c73fa8e71f9dac1919bc68c6335eb966d910f66f033e793aaaf8111fd7ca2ed9c37d42053dbfe632fe7f07c758a1dcd9f0d3d0ff00c9833347d74c179bef165435e6fefb3cad6b377328415d29238f13946a12ad4fcd836403dacad918157b5822056ed326c8db3c73506a333cdd742dd753da13f9a7330538c65c537786d9dbff2e169372cfb0b82254a8007e86b4f4b4ff557d8023003350de61ed9f1b8fb2ce8ff6dd375a9084f13b472754734a4b4bba05768c1061a568f42cdfb4730d7a5e94ddd7dc646dcc", 0xf8, 0xfffffffffffffffe) keyctl$get_security(0x11, r2, &(0x7f0000000e00)=""/235, 0xeb) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000006c0)='./file0\x00') clone(0x200, &(0x7f0000000140), &(0x7f0000000600), &(0x7f0000f8b000), &(0x7f0000000740)="8781e007278ea5961e8e6888a862caf0e5e695b69c101531a080547f1f2a4741daf324f1a8d01d9e614545b9b57cc022cd3d56208ffcd7a972d767d3c5d98127a4088b8aebc922eddf61ac5c32851a3aee338ee8c704fb31e3d69e7b6fd77ba5ef9549e652beed2400000000000000000000000000") munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000700), 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000008c0)=""/167, &(0x7f0000000680)=0xa7) [ 157.263921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 157.271167] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000008 2033/05/18 03:46:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000803, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) socketpair(0x1b, 0x8080f, 0x3f, &(0x7f0000000040)) dup2(r2, r0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 2033/05/18 03:46:39 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6, 0x1000}, 0x4) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2033/05/18 03:46:39 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000180)={0x101, 0xfff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x3, 0x8001, 0x3, 0x7fff}}) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'bcsh0\x00'}}, 0x1e) 2033/05/18 03:46:39 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 5 (fault-call:5 fault-nth:9): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\n', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:39 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) sendto$inet6(r0, &(0x7f0000856f71)='1', 0x2e0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000003f40)=@assoc_value, &(0x7f0000003f80)=0x8) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@empty, r1}, 0x14) 2033/05/18 03:46:39 executing program 4: clock_gettime(0x4, &(0x7f0000000200)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000240)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x4000, 0x108) kcmp(r0, r1, 0x0, r2, r3) r4 = socket$inet(0x2, 0x803, 0x20) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x4e24}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000062bfc8)={&(0x7f0000315ff5)={0x10}, 0xc, &(0x7f0000bea000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000002000000000000000480001006469676573745f6e756c6c000000000000000000000000000000000000000066a2da00000000000000000000000000000000000000000000000000000000000000000000fa021fdf287d3c68177b715e94777c4a8741f003e5a8b6f7f0dd33ac8409fef0ee818d4644c8d14099b147668f73f12473903958c6522e33e0964a2c1c69812dacc467c0f7"], 0x138}, 0x1}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$sock_netrom_TIOCOUTQ(r6, 0x5411, &(0x7f00000020c0)) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) accept4$inet(r7, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x800) r8 = dup3(r5, r5, 0x80000) creat(&(0x7f0000000100)='./file0\x00', 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={&(0x7f0000000ff4)={0x10}, 0xc, &(0x7f0000001ff0)={&(0x7f00000009c9)=@newsa={0xfc, 0x10, 0x301, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x2b}, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {}, {}, {}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xfc}, 0x1}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$netlink(r10, &(0x7f0000000000)={0x10}, 0x3) ioctl$TIOCMBIC(r8, 0x5417, &(0x7f0000000040)=0x100000001) ioctl$int_out(r5, 0x5462, &(0x7f0000000000)) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f00000001c0)={0xba34, 0x1ff, 0x5d}) fcntl$getflags(r4, 0x408) 2033/05/18 03:46:39 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x7, 0x6, 0x0, 0xfff, 0x2, 0x8}}, 0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 157.766822] FAULT_INJECTION: forcing a failure. [ 157.766822] name failslab, interval 1, probability 0, space 0, times 0 [ 157.778132] CPU: 0 PID: 14998 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 157.784978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 157.795227] Call Trace: [ 157.797835] dump_stack+0x1b9/0x29f [ 157.801474] ? arch_local_irq_restore+0x52/0x52 [ 157.806148] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 157.811353] should_fail.cold.4+0xa/0x1a 2033/05/18 03:46:39 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0), 0x0) recvmsg(r2, &(0x7f0000000a80)={&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/16, 0x10}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x8, &(0x7f0000000a40)=""/39, 0x27, 0x6}, 0x40000001) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000ac0)={@remote={0xfe, 0x80, [], 0xbb}, 0x7, 0x1, 0x3, 0x4, 0x14bde155, 0x7, 0x2}, &(0x7f0000000cc0)=0x31d) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000001c0)={r6, @in6={{0xa, 0x0, 0xc54, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}}, &(0x7f0000000280)=0x84) getresuid(&(0x7f0000000940), &(0x7f0000000a00), &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) sendmsg$nl_generic(r4, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x21, 0x10000000aff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) r7 = dup3(r4, r0, 0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) flistxattr(r1, &(0x7f0000000b80)=""/204, 0xcc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000000c0)={0x8, 0x5cd, 0x5}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) [ 157.815424] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 157.820535] ? unwind_get_return_address+0x61/0xa0 [ 157.825476] ? __save_stack_trace+0x7e/0xd0 [ 157.829809] ? graph_lock+0x170/0x170 [ 157.833623] ? find_held_lock+0x36/0x1c0 [ 157.837704] ? __lock_is_held+0xb5/0x140 [ 157.841788] ? check_same_owner+0x320/0x320 [ 157.846124] ? rcu_note_context_switch+0x710/0x710 [ 157.851066] should_failslab+0x124/0x180 [ 157.855142] kmem_cache_alloc_trace+0x2cb/0x780 [ 157.859819] ? __kmalloc_node+0x33/0x70 [ 157.863811] ? __kmalloc_node+0x33/0x70 [ 157.867804] ? rcu_read_lock_sched_held+0x108/0x120 [ 157.872820] __memcg_init_list_lru_node+0x17c/0x2c0 [ 157.877836] ? list_lru_add+0x850/0x850 [ 157.881801] ? __kmalloc_node+0x47/0x70 [ 157.885773] __list_lru_init+0x45e/0x7b0 [ 157.889822] ? list_lru_destroy+0x4c0/0x4c0 [ 157.894146] ? __raw_spin_lock_init+0x1c/0x100 [ 157.898737] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 157.903741] ? __lockdep_init_map+0x105/0x590 [ 157.908230] ? lockdep_init_map+0x9/0x10 [ 157.912282] sget_userns+0x6d9/0xf20 [ 157.915982] ? kill_litter_super+0x90/0x90 [ 157.920199] ? ns_test_super+0x50/0x50 [ 157.924076] ? destroy_unused_super.part.9+0x100/0x100 [ 157.929358] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 157.933928] ? kasan_check_write+0x14/0x20 [ 157.938153] ? do_raw_spin_lock+0xc1/0x200 [ 157.942370] ? blkdev_get+0xc0/0xb30 [ 157.946079] ? cap_capable+0x1f9/0x260 [ 157.949958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.955490] ? security_capable+0xa4/0xd0 [ 157.959626] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 157.965151] ? ns_capable_common+0x13f/0x170 [ 157.969554] ? kill_litter_super+0x90/0x90 [ 157.973771] sget+0x10b/0x150 [ 157.976868] ? ns_test_super+0x50/0x50 [ 157.980744] mount_bdev+0x111/0x3e0 [ 157.984353] ? load_system_files+0x7f70/0x7f70 [ 157.988917] ntfs_mount+0x34/0x40 [ 157.992368] mount_fs+0xae/0x328 [ 157.995730] ? mpi_free.cold.1+0x19/0x19 [ 157.999784] vfs_kern_mount.part.34+0xd4/0x4d0 [ 158.004355] ? may_umount+0xb0/0xb0 [ 158.007974] ? _raw_read_unlock+0x22/0x30 [ 158.012132] ? __get_fs_type+0x97/0xc0 [ 158.016020] do_mount+0x564/0x3070 [ 158.019549] ? lock_downgrade+0x8e0/0x8e0 [ 158.023679] ? copy_mount_string+0x40/0x40 [ 158.027903] ? check_same_owner+0x320/0x320 [ 158.032218] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 158.037229] ? __check_object_size+0x95/0x5d9 [ 158.041728] ? __might_sleep+0x95/0x190 [ 158.045705] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.051227] ? _copy_from_user+0xdf/0x150 [ 158.055369] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.060899] ? copy_mount_options+0x285/0x380 [ 158.065396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 158.070937] ksys_mount+0x12d/0x140 [ 158.074549] SyS_mount+0x35/0x50 [ 158.077893] ? ksys_mount+0x140/0x140 [ 158.081684] do_syscall_64+0x29e/0x9d0 [ 158.085559] ? vmalloc_sync_all+0x30/0x30 [ 158.089685] ? _raw_spin_unlock_irq+0x27/0x70 [ 158.094171] ? finish_task_switch+0x1ca/0x820 [ 158.098664] ? syscall_return_slowpath+0x5c0/0x5c0 [ 158.103590] ? syscall_return_slowpath+0x30f/0x5c0 [ 158.108514] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 158.113868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 158.118696] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 158.123872] RIP: 0033:0x4552d9 [ 158.127050] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.134830] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 158.142086] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 158.149332] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 158.156586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:39 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 158.163841] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000009 [ 158.225000] netlink: 72 bytes leftover after parsing attributes in process `syz-executor4'. [ 158.276161] __ntfs_error: 40 callbacks suppressed [ 158.276171] ntfs: (device loop3): ntfs_fill_super(): Unable to determine device size. [ 158.299601] netlink: 72 bytes leftover after parsing attributes in process `syz-executor4'. [ 158.644393] sctp: [Deprecated]: syz-executor1 (pid 15055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.644393] Use struct sctp_sack_info instead [ 158.663917] sctp: [Deprecated]: syz-executor1 (pid 15055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.663917] Use struct sctp_sack_info instead [ 158.818416] sctp: [Deprecated]: syz-executor1 (pid 15055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.818416] Use struct sctp_sack_info instead [ 158.833725] sctp: [Deprecated]: syz-executor1 (pid 15057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.833725] Use struct sctp_sack_info instead 2033/05/18 03:46:40 executing program 5 (fault-call:5 fault-nth:10): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:40 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:40 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:40 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:40 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0), 0x0) recvmsg(r2, &(0x7f0000000a80)={&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/254, 0xfe}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/16, 0x10}, {&(0x7f0000000700)=""/133, 0x85}, {&(0x7f00000007c0)=""/197, 0xc5}], 0x8, &(0x7f0000000a40)=""/39, 0x27, 0x6}, 0x40000001) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000ac0)={@remote={0xfe, 0x80, [], 0xbb}, 0x7, 0x1, 0x3, 0x4, 0x14bde155, 0x7, 0x2}, &(0x7f0000000cc0)=0x31d) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f00000001c0)={r6, @in6={{0xa, 0x0, 0xc54, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}}, &(0x7f0000000280)=0x84) getresuid(&(0x7f0000000940), &(0x7f0000000a00), &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) sendmsg$nl_generic(r4, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x21, 0x10000000aff, 0xffffffffffffffff, 0xffffffffffffffff, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) r7 = dup3(r4, r0, 0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) flistxattr(r1, &(0x7f0000000b80)=""/204, 0xcc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000000c0)={0x8, 0x5cd, 0x5}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 2033/05/18 03:46:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140), 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x10800, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x3, 0xff, 0x2, 0x5, 0xcb0, 0x5, 0x7, 0x6, 0x4, 0x0, 0x80, 0x8001}) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=ANY=[]}, 0x1}, 0x0) prctl$getname(0x10, &(0x7f0000000040)=""/225) 2033/05/18 03:46:40 executing program 4: r0 = syz_fuseblk_mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)={r3}) dup2(r0, r1) 2033/05/18 03:46:40 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 159.013999] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 159.022508] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 159.034587] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 159.047580] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. 2033/05/18 03:46:40 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="3702a9c575bd7e375cb8fd070000"], 0x4) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x9, 0x1, [{0xfffffffffffffffb, 0x7, 0x2, 0x0, 0x0, 0xa08}]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000180)={0x3, 0x1, 0x4, 0xaf, 0x4, 0x4}) [ 159.056053] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 159.068129] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 159.096283] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. 2033/05/18 03:46:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000b9343a)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000171fc4)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff, 0x4, 0xfe}, [@RTA_DST={0x8, 0x1, @loopback=0x7f000001}]}, 0x24}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40002, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x80000000, {0x2, 0x4e21, @rand_addr=0x7}, {0x2, 0x4e22}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x1, 0xf61d, 0x80000001, 0xff, 0x6, &(0x7f00000000c0)='bridge0\x00', 0x126, 0x7f, 0x70d}) [ 159.104832] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 159.116910] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:40 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3, 0x2000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x9, 0x4, 0x5, 0x4}, 0x8) r2 = fcntl$dupfd(r0, 0x40, r0) r3 = epoll_create1(0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000086fff4)) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1000, 0x0) [ 159.156823] FAULT_INJECTION: forcing a failure. [ 159.156823] name failslab, interval 1, probability 0, space 0, times 0 [ 159.168158] CPU: 1 PID: 15074 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 159.174997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.184356] Call Trace: [ 159.186954] dump_stack+0x1b9/0x29f [ 159.190592] ? arch_local_irq_restore+0x52/0x52 [ 159.195271] ? kernel_text_address+0x79/0xf0 [ 159.199686] ? __unwind_start+0x166/0x330 [ 159.203838] ? __kernel_text_address+0xd/0x40 [ 159.208355] should_fail.cold.4+0xa/0x1a [ 159.212401] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 159.217492] ? graph_lock+0x170/0x170 [ 159.221277] ? save_stack+0x43/0xd0 [ 159.224887] ? kasan_kmalloc+0xc4/0xe0 [ 159.228759] ? __kmalloc+0x14e/0x760 [ 159.232454] ? __list_lru_init+0xcf/0x7b0 [ 159.236588] ? find_held_lock+0x36/0x1c0 [ 159.240633] ? __lock_is_held+0xb5/0x140 [ 159.244686] ? check_same_owner+0x320/0x320 [ 159.249004] ? rcu_note_context_switch+0x710/0x710 [ 159.253931] should_failslab+0x124/0x180 [ 159.257976] kmem_cache_alloc_node_trace+0x26f/0x770 [ 159.263067] ? mark_held_locks+0xc9/0x160 [ 159.267198] ? __raw_spin_lock_init+0x1c/0x100 [ 159.271770] __kmalloc_node+0x33/0x70 [ 159.275563] kvmalloc_node+0x6b/0x100 [ 159.279350] __list_lru_init+0x50e/0x7b0 [ 159.283396] ? list_lru_destroy+0x4c0/0x4c0 [ 159.287699] ? __raw_spin_lock_init+0x1c/0x100 [ 159.292270] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 159.297274] ? __lockdep_init_map+0x105/0x590 [ 159.301754] ? lockdep_init_map+0x9/0x10 [ 159.305799] sget_userns+0x6d9/0xf20 [ 159.309496] ? kill_litter_super+0x90/0x90 [ 159.313713] ? ns_test_super+0x50/0x50 [ 159.317583] ? destroy_unused_super.part.9+0x100/0x100 [ 159.322843] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 159.327409] ? kasan_check_write+0x14/0x20 [ 159.331626] ? do_raw_spin_lock+0xc1/0x200 [ 159.335847] ? blkdev_get+0xc0/0xb30 [ 159.339542] ? cap_capable+0x1f9/0x260 [ 159.343416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.348932] ? security_capable+0xa4/0xd0 [ 159.353061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 159.358579] ? ns_capable_common+0x13f/0x170 [ 159.362972] ? kill_litter_super+0x90/0x90 [ 159.367187] sget+0x10b/0x150 [ 159.370273] ? ns_test_super+0x50/0x50 [ 159.374142] mount_bdev+0x111/0x3e0 [ 159.377753] ? load_system_files+0x7f70/0x7f70 [ 159.382322] ntfs_mount+0x34/0x40 [ 159.385759] mount_fs+0xae/0x328 [ 159.389106] ? mpi_free.cold.1+0x19/0x19 [ 159.393152] vfs_kern_mount.part.34+0xd4/0x4d0 [ 159.397720] ? may_umount+0xb0/0xb0 [ 159.401331] ? _raw_read_unlock+0x22/0x30 [ 159.405458] ? __get_fs_type+0x97/0xc0 [ 159.409332] do_mount+0x564/0x3070 [ 159.412856] ? lock_downgrade+0x8e0/0x8e0 [ 159.416986] ? copy_mount_string+0x40/0x40 [ 159.421205] ? check_same_owner+0x320/0x320 [ 159.425506] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 159.430500] ? __check_object_size+0x95/0x5d9 [ 159.434977] ? __might_sleep+0x95/0x190 [ 159.438936] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.444454] ? _copy_from_user+0xdf/0x150 [ 159.448585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.454105] ? copy_mount_options+0x285/0x380 [ 159.458582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 159.464101] ksys_mount+0x12d/0x140 [ 159.467711] SyS_mount+0x35/0x50 [ 159.471061] ? ksys_mount+0x140/0x140 [ 159.474845] do_syscall_64+0x29e/0x9d0 [ 159.478711] ? vmalloc_sync_all+0x30/0x30 [ 159.482852] ? kasan_check_write+0x14/0x20 [ 159.487067] ? syscall_return_slowpath+0x5c0/0x5c0 [ 159.491979] ? syscall_return_slowpath+0x30f/0x5c0 [ 159.496896] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 159.502245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 159.507073] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 159.512239] RIP: 0033:0x4552d9 [ 159.515407] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.523098] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 159.530345] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 159.537594] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 159.544842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:41 executing program 6: r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x50000000af01, &(0x7f0000000a40)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 159.552091] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000a 2033/05/18 03:46:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x80000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r6, 0xd, &(0x7f0000000200)=""/243) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000740)) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000180)="0f20c035010000000f22c0c402f947da0f0059ecf20f5fed450f01d0660f382097a7fb000036f0801900c7442400e6000000c7442402f5ffffffff2c248acd0f5dad041a96a5", 0x46}], 0x1, 0x0, &(0x7f0000000100), 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)="c10135eb84"}, 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), 0x4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000340)={"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"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2033/05/18 03:46:41 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) gettid() getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/66, 0x146) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/249, 0x164) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69) r0 = accept$ipx(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10) lseek(r0, 0x0, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355f44) 2033/05/18 03:46:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x222}, 0x2bb) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x2, &(0x7f0000346fc8)=@raw=[@jmp={0x5, 0x6, 0x9, 0xf, 0x4, 0xfffffff0, 0xfffffffffffffff0}], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x35, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)) 2033/05/18 03:46:41 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 5 (fault-call:5 fault-nth:11): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x80040, 0x1) fcntl$setlease(r1, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0xfffffffffffffffe}, 0x0, 0x8) r2 = fcntl$dupfd(r0, 0x406, r0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f0000039ff0), &(0x7f0000039ff0)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000373000)='./file0\x00', 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000040)=""/163) fcntl$getflags(r1, 0x401) [ 159.930212] FAULT_INJECTION: forcing a failure. [ 159.930212] name failslab, interval 1, probability 0, space 0, times 0 [ 159.941511] CPU: 1 PID: 15170 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 159.948355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.957707] Call Trace: [ 159.960312] dump_stack+0x1b9/0x29f [ 159.963958] ? arch_local_irq_restore+0x52/0x52 [ 159.968636] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 159.973838] should_fail.cold.4+0xa/0x1a [ 159.977912] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 159.983028] ? unwind_get_return_address+0x61/0xa0 [ 159.987966] ? __save_stack_trace+0x7e/0xd0 [ 159.992301] ? graph_lock+0x170/0x170 [ 159.996126] ? find_held_lock+0x36/0x1c0 [ 160.000209] ? __lock_is_held+0xb5/0x140 [ 160.004294] ? check_same_owner+0x320/0x320 [ 160.008628] ? rcu_note_context_switch+0x710/0x710 [ 160.013573] should_failslab+0x124/0x180 [ 160.017652] kmem_cache_alloc_trace+0x2cb/0x780 [ 160.022329] ? __kmalloc_node+0x33/0x70 [ 160.026316] ? __kmalloc_node+0x33/0x70 2033/05/18 03:46:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000014c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x800) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0xfff) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) [ 160.030304] ? rcu_read_lock_sched_held+0x108/0x120 [ 160.035336] __memcg_init_list_lru_node+0x17c/0x2c0 [ 160.040368] ? list_lru_add+0x850/0x850 [ 160.044350] ? __kmalloc_node+0x47/0x70 [ 160.048339] __list_lru_init+0x45e/0x7b0 [ 160.052410] ? list_lru_destroy+0x4c0/0x4c0 [ 160.056737] ? __raw_spin_lock_init+0x1c/0x100 [ 160.061335] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 160.066360] ? __lockdep_init_map+0x105/0x590 [ 160.070865] ? lockdep_init_map+0x9/0x10 [ 160.074932] sget_userns+0x6d9/0xf20 [ 160.078655] ? kill_litter_super+0x90/0x90 [ 160.082895] ? ns_test_super+0x50/0x50 [ 160.086775] ? destroy_unused_super.part.9+0x100/0x100 [ 160.092044] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 160.096621] ? kasan_check_write+0x14/0x20 [ 160.100846] ? do_raw_spin_lock+0xc1/0x200 [ 160.105073] ? blkdev_get+0xc0/0xb30 [ 160.108775] ? cap_capable+0x1f9/0x260 [ 160.112654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.118175] ? security_capable+0xa4/0xd0 [ 160.122311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.127830] ? ns_capable_common+0x13f/0x170 [ 160.132226] ? kill_litter_super+0x90/0x90 [ 160.136466] sget+0x10b/0x150 [ 160.139557] ? ns_test_super+0x50/0x50 [ 160.143433] mount_bdev+0x111/0x3e0 [ 160.147044] ? load_system_files+0x7f70/0x7f70 [ 160.151611] ntfs_mount+0x34/0x40 [ 160.155049] mount_fs+0xae/0x328 [ 160.158404] ? mpi_free.cold.1+0x19/0x19 [ 160.162454] vfs_kern_mount.part.34+0xd4/0x4d0 [ 160.167034] ? may_umount+0xb0/0xb0 [ 160.170647] ? _raw_read_unlock+0x22/0x30 [ 160.174779] ? __get_fs_type+0x97/0xc0 [ 160.178655] do_mount+0x564/0x3070 [ 160.182178] ? lock_downgrade+0x8e0/0x8e0 [ 160.186312] ? copy_mount_string+0x40/0x40 [ 160.190532] ? check_same_owner+0x320/0x320 [ 160.194837] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 160.199839] ? __check_object_size+0x95/0x5d9 [ 160.204323] ? __might_sleep+0x95/0x190 [ 160.208291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.213815] ? _copy_from_user+0xdf/0x150 [ 160.217949] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.223471] ? copy_mount_options+0x285/0x380 [ 160.227950] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.233476] ksys_mount+0x12d/0x140 [ 160.237089] SyS_mount+0x35/0x50 [ 160.240438] ? ksys_mount+0x140/0x140 [ 160.244232] do_syscall_64+0x29e/0x9d0 [ 160.248109] ? vmalloc_sync_all+0x30/0x30 [ 160.252245] ? _raw_spin_unlock_irq+0x27/0x70 [ 160.256725] ? finish_task_switch+0x1ca/0x820 [ 160.261208] ? syscall_return_slowpath+0x5c0/0x5c0 [ 160.266123] ? syscall_return_slowpath+0x30f/0x5c0 [ 160.271048] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 160.276401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.281232] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 160.286410] RIP: 0033:0x4552d9 [ 160.289584] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.297277] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 160.304530] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 160.311784] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 160.319036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 2033/05/18 03:46:42 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xacf, 0x2000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) process_vm_writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/119, 0x77}, {&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/179, 0xb3}], 0x4, &(0x7f0000000880)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000400)=""/134, 0x86}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/86, 0x56}, {&(0x7f0000000800)=""/79, 0x4f}], 0x9, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2000000000004, &(0x7f0000000000), 0x0) 2033/05/18 03:46:42 executing program 6: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 160.326290] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000b 2033/05/18 03:46:42 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 5 (fault-call:5 fault-nth:12): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 0: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:42 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 160.652163] FAULT_INJECTION: forcing a failure. [ 160.652163] name failslab, interval 1, probability 0, space 0, times 0 [ 160.663521] CPU: 1 PID: 15235 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 160.670370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.679721] Call Trace: [ 160.682322] dump_stack+0x1b9/0x29f [ 160.685964] ? arch_local_irq_restore+0x52/0x52 [ 160.690732] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 160.695942] should_fail.cold.4+0xa/0x1a [ 160.700020] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 160.705135] ? unwind_get_return_address+0x61/0xa0 [ 160.710068] ? __save_stack_trace+0x7e/0xd0 [ 160.714382] ? graph_lock+0x170/0x170 [ 160.718172] ? find_held_lock+0x36/0x1c0 [ 160.722224] ? __lock_is_held+0xb5/0x140 [ 160.726276] ? check_same_owner+0x320/0x320 [ 160.730586] ? rcu_note_context_switch+0x710/0x710 [ 160.735509] should_failslab+0x124/0x180 [ 160.739560] kmem_cache_alloc_trace+0x2cb/0x780 [ 160.744222] ? __kmalloc_node+0x33/0x70 [ 160.748184] ? __kmalloc_node+0x33/0x70 [ 160.752152] ? rcu_read_lock_sched_held+0x108/0x120 [ 160.757160] __memcg_init_list_lru_node+0x17c/0x2c0 [ 160.762166] ? list_lru_add+0x850/0x850 [ 160.766133] ? __kmalloc_node+0x47/0x70 [ 160.770097] __list_lru_init+0x45e/0x7b0 [ 160.774147] ? list_lru_destroy+0x4c0/0x4c0 [ 160.778454] ? __raw_spin_lock_init+0x1c/0x100 [ 160.783031] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 160.788035] ? __lockdep_init_map+0x105/0x590 [ 160.792521] ? lockdep_init_map+0x9/0x10 [ 160.796574] sget_userns+0x6d9/0xf20 [ 160.800275] ? kill_litter_super+0x90/0x90 [ 160.804499] ? ns_test_super+0x50/0x50 [ 160.808376] ? destroy_unused_super.part.9+0x100/0x100 [ 160.813637] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 160.818209] ? kasan_check_write+0x14/0x20 [ 160.822427] ? do_raw_spin_lock+0xc1/0x200 [ 160.826651] ? blkdev_get+0xc0/0xb30 [ 160.830461] ? cap_capable+0x1f9/0x260 [ 160.834337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.839856] ? security_capable+0xa4/0xd0 [ 160.843987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 160.849516] ? ns_capable_common+0x13f/0x170 [ 160.853910] ? kill_litter_super+0x90/0x90 [ 160.858127] sget+0x10b/0x150 [ 160.861219] ? ns_test_super+0x50/0x50 [ 160.865089] mount_bdev+0x111/0x3e0 [ 160.868700] ? load_system_files+0x7f70/0x7f70 [ 160.873267] ntfs_mount+0x34/0x40 [ 160.876704] mount_fs+0xae/0x328 [ 160.880055] ? mpi_free.cold.1+0x19/0x19 [ 160.884103] vfs_kern_mount.part.34+0xd4/0x4d0 [ 160.888676] ? may_umount+0xb0/0xb0 [ 160.892288] ? _raw_read_unlock+0x22/0x30 [ 160.896416] ? __get_fs_type+0x97/0xc0 [ 160.900290] do_mount+0x564/0x3070 [ 160.903812] ? lock_downgrade+0x8e0/0x8e0 [ 160.907949] ? copy_mount_string+0x40/0x40 [ 160.912168] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 160.917167] ? __check_object_size+0x95/0x5d9 [ 160.921655] ? __might_sleep+0x95/0x190 [ 160.925616] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.931134] ? _copy_from_user+0xdf/0x150 [ 160.935268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.940787] ? copy_mount_options+0x285/0x380 [ 160.945264] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 160.950786] ksys_mount+0x12d/0x140 [ 160.954397] SyS_mount+0x35/0x50 [ 160.957746] ? ksys_mount+0x140/0x140 [ 160.961533] do_syscall_64+0x29e/0x9d0 [ 160.965403] ? vmalloc_sync_all+0x30/0x30 [ 160.969535] ? _raw_spin_unlock_irq+0x27/0x70 [ 160.974038] ? finish_task_switch+0x1ca/0x820 [ 160.978518] ? syscall_return_slowpath+0x5c0/0x5c0 [ 160.983430] ? syscall_return_slowpath+0x30f/0x5c0 [ 160.988345] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 160.993696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 160.998529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.003698] RIP: 0033:0x4552d9 [ 161.006869] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.014562] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 161.021815] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 161.029065] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.036313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 161.043564] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000c 2033/05/18 03:46:43 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xcb0000000, 0x3, 0xfffffffffffffff8}, 0x8) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x20}, @in={0x2, 0x4e22}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0x3f, @dev={0xfe, 0x80, [], 0x19}, 0x2}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x1}, @in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xf}, 0x5}, @in6={0xa, 0x4e22, 0x8ab, @remote={0xfe, 0x80, [], 0xbb}, 0x5a80000}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0xcc) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:43 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) msgrcv(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0) msgrcv(0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3, 0x200080) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x2) msgctl$IPC_RMID(0x0, 0x0) 2033/05/18 03:46:43 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x11, 0x18}, 0xc) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000740)="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", 0xfe) 2033/05/18 03:46:43 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x10000039, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000500)=""/236, &(0x7f0000000600)=0xec) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x26, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000e6bffc)="47ff3300", 0x5, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x1}, 0x48) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$int_in(r1, 0x5473, &(0x7f0000000140)=0x5b0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xffffffffffffff06) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000300)=0x37) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={r3, @loopback=0x7f000001, @rand_addr=0x9}, 0xc) 2033/05/18 03:46:43 executing program 5 (fault-call:5 fault-nth:13): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 161.386520] FAULT_INJECTION: forcing a failure. [ 161.386520] name failslab, interval 1, probability 0, space 0, times 0 [ 161.397862] CPU: 0 PID: 15299 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 161.404705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.414060] Call Trace: [ 161.416668] dump_stack+0x1b9/0x29f [ 161.420312] ? arch_local_irq_restore+0x52/0x52 [ 161.424989] ? __save_stack_trace+0x7e/0xd0 [ 161.429326] should_fail.cold.4+0xa/0x1a [ 161.433405] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 161.438515] ? kasan_kmalloc+0xc4/0xe0 [ 161.442414] ? kmem_cache_alloc_trace+0x152/0x780 [ 161.447270] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 161.452468] ? __list_lru_init+0x45e/0x7b0 [ 161.456712] ? sget_userns+0x6d9/0xf20 [ 161.460603] ? sget+0x10b/0x150 [ 161.463887] ? graph_lock+0x170/0x170 [ 161.467683] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 161.472430] ? do_mount+0x564/0x3070 [ 161.476132] ? ksys_mount+0x12d/0x140 [ 161.479919] ? SyS_mount+0x35/0x50 [ 161.483444] ? do_syscall_64+0x29e/0x9d0 [ 161.487490] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.492842] ? find_held_lock+0x36/0x1c0 [ 161.496892] ? __lock_is_held+0xb5/0x140 [ 161.500945] ? check_same_owner+0x320/0x320 [ 161.505250] ? rcu_note_context_switch+0x710/0x710 [ 161.510166] should_failslab+0x124/0x180 [ 161.514216] kmem_cache_alloc_trace+0x2cb/0x780 [ 161.518870] ? __kmalloc_node+0x33/0x70 [ 161.522829] ? __kmalloc_node+0x33/0x70 [ 161.526792] ? rcu_read_lock_sched_held+0x108/0x120 [ 161.531799] __memcg_init_list_lru_node+0x17c/0x2c0 [ 161.536805] ? list_lru_add+0x850/0x850 [ 161.540852] ? __kmalloc_node+0x47/0x70 [ 161.544817] __list_lru_init+0x45e/0x7b0 [ 161.548881] ? list_lru_destroy+0x4c0/0x4c0 [ 161.553186] ? __raw_spin_lock_init+0x1c/0x100 [ 161.557754] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 161.562757] ? __lockdep_init_map+0x105/0x590 [ 161.567236] ? lockdep_init_map+0x9/0x10 [ 161.571281] sget_userns+0x6d9/0xf20 [ 161.574977] ? kill_litter_super+0x90/0x90 [ 161.579197] ? ns_test_super+0x50/0x50 [ 161.583075] ? destroy_unused_super.part.9+0x100/0x100 [ 161.588331] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 161.592899] ? kasan_check_write+0x14/0x20 [ 161.597116] ? do_raw_spin_lock+0xc1/0x200 [ 161.601335] ? blkdev_get+0xc0/0xb30 [ 161.605042] ? cap_capable+0x1f9/0x260 [ 161.608917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.614435] ? security_capable+0xa4/0xd0 [ 161.618568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 161.624084] ? ns_capable_common+0x13f/0x170 [ 161.628478] ? kill_litter_super+0x90/0x90 [ 161.632693] sget+0x10b/0x150 [ 161.635782] ? ns_test_super+0x50/0x50 [ 161.639655] mount_bdev+0x111/0x3e0 [ 161.643265] ? load_system_files+0x7f70/0x7f70 [ 161.647830] ntfs_mount+0x34/0x40 [ 161.651265] mount_fs+0xae/0x328 [ 161.654614] ? mpi_free.cold.1+0x19/0x19 [ 161.658667] vfs_kern_mount.part.34+0xd4/0x4d0 [ 161.663234] ? may_umount+0xb0/0xb0 [ 161.666847] ? _raw_read_unlock+0x22/0x30 [ 161.670977] ? __get_fs_type+0x97/0xc0 [ 161.674852] do_mount+0x564/0x3070 [ 161.678373] ? lock_downgrade+0x8e0/0x8e0 [ 161.682508] ? copy_mount_string+0x40/0x40 [ 161.686726] ? check_same_owner+0x320/0x320 [ 161.691030] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 161.696029] ? __check_object_size+0x95/0x5d9 [ 161.700510] ? __might_sleep+0x95/0x190 [ 161.704470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.709992] ? _copy_from_user+0xdf/0x150 [ 161.714125] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.719645] ? copy_mount_options+0x285/0x380 [ 161.724123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 161.729647] ksys_mount+0x12d/0x140 [ 161.733266] SyS_mount+0x35/0x50 [ 161.736614] ? ksys_mount+0x140/0x140 [ 161.740414] do_syscall_64+0x29e/0x9d0 [ 161.744283] ? vmalloc_sync_all+0x30/0x30 [ 161.748416] ? _raw_spin_unlock_irq+0x27/0x70 [ 161.752894] ? finish_task_switch+0x1ca/0x820 [ 161.757376] ? syscall_return_slowpath+0x5c0/0x5c0 [ 161.762286] ? syscall_return_slowpath+0x30f/0x5c0 [ 161.767203] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 161.772555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 161.777386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 161.782557] RIP: 0033:0x4552d9 2033/05/18 03:46:43 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 161.785729] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.794109] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 161.801363] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 161.808620] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 161.815868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 161.823120] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000d 2033/05/18 03:46:43 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{&(0x7f0000000240)="0ece8cf725415d7bd94e90647dec69a33f7a58a060bbccf20918de6661614db1a1ef52910ec7b2f899da1e2ad97b92af29ece8b423264caa23af482259af32741718ecb994693afc08217417811a4c5ee136bba270439824a638890d819e38764a3d5826682d5aae2d8fd12d2bdcbb0b3ea684190f5181c469cde726e6b343ef512bcdbc85769e3482126ecd1a51939c63a7325c196e91888b3761ed60624ab6babce599165a967a633c", 0xaa, 0x9}, {&(0x7f0000001300)="20aadb40ccdab17a9e6a5d6271bde618094f02f6cb2c035fac09e6688509857f90aef38c2ff50d54a3371cfe8fee8d9cf87af2a2a08924ba31ccb097471e1bc69ac22436445aa977cabd1d46b578d18b2b545c847175dc594a14ec0294773bb20bc728b62ab613a8f3b021", 0x6b, 0xfffffffffffffffa}], 0x804404, &(0x7f00000000c0)={'nouuid,', {[{@ikeep='ikeep', 0x2c}, {@swalloc='swalloc', 0x2c}, {@swalloc='swalloc', 0x2c}, {@pqnoenforce='pqnoenforce', 0x2c}, {@allocsize={'allocsize', 0x3d, [0x33, 0x67]}, 0x2c}, {@prjquota='prjquota', 0x2c}, {@ikeep='ikeep', 0x2c}, {@noattr2='noattr2', 0x2c}, {@nogrpid='nogrpid', 0x2c}, {@nogrpid='nogrpid', 0x2c}]}}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x4000, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000140)=0x7, 0x4) 2033/05/18 03:46:43 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000380)=0x8) syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0x7fffffff, 0x2c080) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000180), &(0x7f0000000300)=0x4) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000001c0)={0x9, 0x4, 0x5, 0x0, 0x0, [], [], [], 0x5, 0x1}) 2033/05/18 03:46:43 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c65300e", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 5 (fault-call:5 fault-nth:14): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0N', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:43 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x11, 0x18}, 0xc) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000740)="13a3903d867b0018ee90da673b65965ce81cc9974da5a520b0a1fecbf6eb9c906c031f11a077ecbe0db5de159b538c931075eee7db2a952b10b00d266693958b37f40c05e4ba5028e6772c58a2e2b81444e01d9ee7e5e981597f35fe1fcc31ac9ff2c84b3730db5cd85e58bf87c91a9b396e14b4665e02f82e2b91f605d9aca69063e54dd7b63cf9ac1c519d06fce363f084c1d58cc408d21f0c1eaa44dc724bc29de55a9b8d706fe43e7bcb985e62bfdcbbdad3c234e67467a91423699c9c7e2caced22e316c5e5002124f0562de188de0c041ba9a94bb761175a5ca49403305aaf3e937b2a1701fdbc2b207456275d248009ec0d5be8fb23c98af3d03a", 0xfe) [ 162.067375] XFS (loop1): Invalid superblock magic number [ 162.090902] FAULT_INJECTION: forcing a failure. [ 162.090902] name failslab, interval 1, probability 0, space 0, times 0 [ 162.102225] CPU: 1 PID: 15351 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 162.109072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.118431] Call Trace: [ 162.121029] dump_stack+0x1b9/0x29f [ 162.124667] ? arch_local_irq_restore+0x52/0x52 [ 162.129343] ? __save_stack_trace+0x7e/0xd0 [ 162.133670] should_fail.cold.4+0xa/0x1a [ 162.137720] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 162.142805] ? kasan_kmalloc+0xc4/0xe0 [ 162.146675] ? kmem_cache_alloc_trace+0x152/0x780 [ 162.151499] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 162.156674] ? __list_lru_init+0x45e/0x7b0 [ 162.160889] ? sget_userns+0x6d9/0xf20 [ 162.164756] ? sget+0x10b/0x150 [ 162.168028] ? graph_lock+0x170/0x170 [ 162.171813] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 162.176553] ? do_mount+0x564/0x3070 [ 162.180250] ? ksys_mount+0x12d/0x140 [ 162.184035] ? SyS_mount+0x35/0x50 [ 162.187559] ? do_syscall_64+0x29e/0x9d0 [ 162.191605] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.196959] ? find_held_lock+0x36/0x1c0 [ 162.201017] ? __lock_is_held+0xb5/0x140 [ 162.205082] ? check_same_owner+0x320/0x320 [ 162.209388] ? rcu_note_context_switch+0x710/0x710 [ 162.214303] should_failslab+0x124/0x180 [ 162.218354] kmem_cache_alloc_trace+0x2cb/0x780 [ 162.223010] ? __kmalloc_node+0x33/0x70 [ 162.226974] ? __kmalloc_node+0x33/0x70 [ 162.230937] ? rcu_read_lock_sched_held+0x108/0x120 [ 162.235945] __memcg_init_list_lru_node+0x17c/0x2c0 [ 162.240947] ? list_lru_add+0x850/0x850 [ 162.244911] ? __kmalloc_node+0x47/0x70 [ 162.248872] __list_lru_init+0x45e/0x7b0 [ 162.252923] ? list_lru_destroy+0x4c0/0x4c0 [ 162.257226] ? __raw_spin_lock_init+0x1c/0x100 [ 162.261797] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 162.266796] ? __lockdep_init_map+0x105/0x590 [ 162.271276] ? lockdep_init_map+0x9/0x10 [ 162.275319] sget_userns+0x6d9/0xf20 [ 162.279020] ? kill_litter_super+0x90/0x90 [ 162.283239] ? ns_test_super+0x50/0x50 [ 162.287107] ? destroy_unused_super.part.9+0x100/0x100 [ 162.292367] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 162.296930] ? kasan_check_write+0x14/0x20 [ 162.301145] ? do_raw_spin_lock+0xc1/0x200 [ 162.305367] ? blkdev_get+0xc0/0xb30 [ 162.309065] ? cap_capable+0x1f9/0x260 [ 162.312946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.318467] ? security_capable+0xa4/0xd0 [ 162.322601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 162.328119] ? ns_capable_common+0x13f/0x170 [ 162.332511] ? kill_litter_super+0x90/0x90 [ 162.336727] sget+0x10b/0x150 [ 162.339814] ? ns_test_super+0x50/0x50 [ 162.343683] mount_bdev+0x111/0x3e0 [ 162.347291] ? load_system_files+0x7f70/0x7f70 [ 162.351856] ntfs_mount+0x34/0x40 [ 162.355292] mount_fs+0xae/0x328 [ 162.358639] ? mpi_free.cold.1+0x19/0x19 [ 162.362684] vfs_kern_mount.part.34+0xd4/0x4d0 [ 162.367251] ? may_umount+0xb0/0xb0 [ 162.370862] ? _raw_read_unlock+0x22/0x30 [ 162.374993] ? __get_fs_type+0x97/0xc0 [ 162.378873] do_mount+0x564/0x3070 [ 162.382398] ? lock_downgrade+0x8e0/0x8e0 [ 162.386530] ? copy_mount_string+0x40/0x40 [ 162.390749] ? check_same_owner+0x320/0x320 [ 162.395053] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 162.400053] ? __check_object_size+0x95/0x5d9 [ 162.404537] ? __might_sleep+0x95/0x190 [ 162.408497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.414024] ? _copy_from_user+0xdf/0x150 [ 162.418159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.423679] ? copy_mount_options+0x285/0x380 [ 162.428159] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 162.433679] ksys_mount+0x12d/0x140 [ 162.437290] SyS_mount+0x35/0x50 [ 162.440647] ? ksys_mount+0x140/0x140 [ 162.444430] do_syscall_64+0x29e/0x9d0 [ 162.448299] ? vmalloc_sync_all+0x30/0x30 [ 162.452430] ? _raw_spin_unlock_irq+0x27/0x70 [ 162.456911] ? finish_task_switch+0x1ca/0x820 [ 162.461389] ? syscall_return_slowpath+0x5c0/0x5c0 [ 162.466301] ? syscall_return_slowpath+0x30f/0x5c0 [ 162.471215] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 162.476567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 162.481396] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 162.486566] RIP: 0033:0x4552d9 [ 162.489736] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.497426] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 162.504676] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 162.511928] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2033/05/18 03:46:44 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 162.519179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 162.526428] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000e 2033/05/18 03:46:44 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) keyctl$set_timeout(0xf, r1, 0x1) r2 = accept$alg(r0, 0x0, 0x0) recvmsg(r2, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000fb0ff4)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000000a000000000000000300000006000000ff0f473002000000020000000000000000000000000000001b0000807f0000000500000008000000ffff00019a0000002d55995300000000000000000000000002000040030000000600000000040000ff0f000000010000050000000000000000000000000000003ea6758ca145bc05bf33b5fb10cee702ba58cda9610caa1755486b5067674999728245488b4ea7ccf5fb9a846d67cc875c2d7f763b8ec38674883f263c9a118829d27ed38183644c5db75fe33d8559acf9fd7e6b3be369b09b529f3f83a9be421f3b1145a46fe40671d317bb9beae9dc7b96ea457840c680f6205e8ddae0df"]) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 2033/05/18 03:46:44 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) set_robust_list(&(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000040)}, 0x18) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:44 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x11, 0x18}, 0xc) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000740)="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", 0xfe) [ 162.634962] XFS (loop1): Invalid superblock magic number 2033/05/18 03:46:44 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x88480, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000520001002bbd7000810000000a0000000800030007000000085435000400000008000500ff0f000008000100690176cc9ca57f32de68e5cf9cb9cd9894c1d8dd4554d921f7f6efc264066bf8b120b7c31c823bc44a57a569068d5faf7539bae43082adbb25447c0497647f0c9b", @ANYRES32=r2, @ANYBLOB="0800050070930000080003000101000008000300ff7f000008000300ffffff7f"], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000300)={0x0, r3}) 2033/05/18 03:46:44 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) bind$inet(r2, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2033/05/18 03:46:44 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x11, 0x18}, 0xc) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000740)="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", 0xfe) 2033/05/18 03:46:44 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:44 executing program 5 (fault-call:5 fault-nth:15): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:44 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:44 executing program 6: ioctl$int_in(0xffffffffffffffff, 0x50000000af01, &(0x7f0000000a40)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)={0x0, r0}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:44 executing program 1: r0 = socket(0xa, 0xf, 0x80000001) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_mount_image$hfs(&(0x7f0000001140)='hfs\x00', &(0x7f0000001180)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000001580)=ANY=[@ANYRES32]) r1 = getpgid(0xffffffffffffffff) process_vm_writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/245, 0xf5}], 0x1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/219, 0xdb}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f00000004c0)=""/224, 0xe0}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/40, 0x28}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/93, 0x5d}], 0x9, 0x0) 2033/05/18 03:46:44 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={r5, 0x11, 0x18}, 0xc) [ 163.050012] FAULT_INJECTION: forcing a failure. [ 163.050012] name failslab, interval 1, probability 0, space 0, times 0 [ 163.061359] CPU: 0 PID: 15470 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 163.068205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.077561] Call Trace: [ 163.080158] dump_stack+0x1b9/0x29f [ 163.083799] ? arch_local_irq_restore+0x52/0x52 [ 163.088478] ? __save_stack_trace+0x7e/0xd0 [ 163.092819] should_fail.cold.4+0xa/0x1a [ 163.096889] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.102003] ? kasan_kmalloc+0xc4/0xe0 [ 163.105906] ? kmem_cache_alloc_trace+0x152/0x780 [ 163.110762] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 163.115964] ? __list_lru_init+0x45e/0x7b0 [ 163.120200] ? sget_userns+0x6d9/0xf20 [ 163.124092] ? sget+0x10b/0x150 [ 163.127384] ? graph_lock+0x170/0x170 [ 163.131190] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 163.135955] ? do_mount+0x564/0x3070 [ 163.139686] ? ksys_mount+0x12d/0x140 [ 163.143496] ? SyS_mount+0x35/0x50 2033/05/18 03:46:44 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) sendto$inet6(r1, &(0x7f0000000140)="cb54ff4e5af3409a218bc7c11fd86125e5867f07325b33d4a62270ef2a1e834031ecf7a6b92e56c31507e8c3c464503213bb3eb57a44dd6860459b6b5c344607438f1f00a258e0cc7e18e22edccef4dca643097cbd2a1d3d895d8d9b934092c2e943ec639157200de876e2986ee358e27b1b77c82abf7b505b269291ec96a2ecb3060336e586f7a18d32b15eae0d8e017b82875e908049de3606f0650fb504d484d5cddc7878bd19c6d8d863a4ed99014439ea831b5144949db35c", 0xbb, 0x4, &(0x7f00000005c0)={0xa, 0x4e20, 0x48, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, 0x1c) [ 163.143966] hfs: unable to parse mount options [ 163.147041] ? do_syscall_64+0x29e/0x9d0 [ 163.155738] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 163.161113] ? find_held_lock+0x36/0x1c0 [ 163.165194] ? __lock_is_held+0xb5/0x140 [ 163.169276] ? check_same_owner+0x320/0x320 [ 163.173609] ? rcu_note_context_switch+0x710/0x710 [ 163.178556] should_failslab+0x124/0x180 [ 163.182629] kmem_cache_alloc_trace+0x2cb/0x780 [ 163.187304] ? __kmalloc_node+0x33/0x70 [ 163.191276] ? __kmalloc_node+0x33/0x70 [ 163.195254] ? rcu_read_lock_sched_held+0x108/0x120 [ 163.200278] __memcg_init_list_lru_node+0x17c/0x2c0 [ 163.205301] ? list_lru_add+0x850/0x850 [ 163.209280] ? __kmalloc_node+0x47/0x70 [ 163.213261] __list_lru_init+0x45e/0x7b0 [ 163.217326] ? list_lru_destroy+0x4c0/0x4c0 [ 163.221650] ? __raw_spin_lock_init+0x1c/0x100 [ 163.226233] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 163.231247] ? __lockdep_init_map+0x105/0x590 [ 163.235737] ? lockdep_init_map+0x9/0x10 [ 163.239785] sget_userns+0x6d9/0xf20 [ 163.243481] ? kill_litter_super+0x90/0x90 [ 163.247731] ? ns_test_super+0x50/0x50 [ 163.251603] ? destroy_unused_super.part.9+0x100/0x100 [ 163.256868] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 163.261433] ? kasan_check_write+0x14/0x20 [ 163.265651] ? do_raw_spin_lock+0xc1/0x200 [ 163.269870] ? blkdev_get+0xc0/0xb30 [ 163.273571] ? cap_capable+0x1f9/0x260 [ 163.277448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.282969] ? security_capable+0xa4/0xd0 [ 163.287104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 163.292621] ? ns_capable_common+0x13f/0x170 [ 163.297016] ? kill_litter_super+0x90/0x90 [ 163.301234] sget+0x10b/0x150 [ 163.304323] ? ns_test_super+0x50/0x50 [ 163.308192] mount_bdev+0x111/0x3e0 [ 163.311802] ? load_system_files+0x7f70/0x7f70 [ 163.316367] ntfs_mount+0x34/0x40 [ 163.319802] mount_fs+0xae/0x328 [ 163.323152] ? mpi_free.cold.1+0x19/0x19 [ 163.327202] vfs_kern_mount.part.34+0xd4/0x4d0 [ 163.331769] ? may_umount+0xb0/0xb0 [ 163.335382] ? _raw_read_unlock+0x22/0x30 [ 163.339515] ? __get_fs_type+0x97/0xc0 [ 163.343389] do_mount+0x564/0x3070 [ 163.346911] ? lock_downgrade+0x8e0/0x8e0 [ 163.351046] ? copy_mount_string+0x40/0x40 [ 163.355263] ? check_same_owner+0x320/0x320 [ 163.359568] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 163.364567] ? __check_object_size+0x95/0x5d9 [ 163.369048] ? __might_sleep+0x95/0x190 [ 163.373011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.378534] ? _copy_from_user+0xdf/0x150 [ 163.382666] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.388186] ? copy_mount_options+0x285/0x380 [ 163.392665] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 163.398188] ksys_mount+0x12d/0x140 [ 163.401801] SyS_mount+0x35/0x50 [ 163.405150] ? ksys_mount+0x140/0x140 [ 163.408933] do_syscall_64+0x29e/0x9d0 [ 163.412803] ? vmalloc_sync_all+0x30/0x30 [ 163.416933] ? _raw_spin_unlock_irq+0x27/0x70 [ 163.421414] ? finish_task_switch+0x1ca/0x820 [ 163.425897] ? syscall_return_slowpath+0x5c0/0x5c0 [ 163.430812] ? syscall_return_slowpath+0x30f/0x5c0 [ 163.435731] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 163.441082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 163.446087] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2033/05/18 03:46:45 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)}, 0x10) connect$llc(r1, &(0x7f0000000580)={0x1a, 0x324, 0xde8c, 0x100000000, 0x101, 0x0, @random="74f4fd302f75"}, 0x10) [ 163.451258] RIP: 0033:0x4552d9 [ 163.454430] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.462124] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 163.469376] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 163.476626] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 163.483875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 163.491141] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000000f 2033/05/18 03:46:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001280)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001240)={0xffffffff}, 0x2, 0x1000}}, 0x20) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="afbe05affd3298f0", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="01"], @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x96) write$rdma_cm(r0, &(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRES32, @ANYBLOB="f80b0000"], 0x10) 2033/05/18 03:46:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) ptrace$peek(0x1, r2, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 163.549309] hfs: unable to parse mount options 2033/05/18 03:46:45 executing program 5 (fault-call:5 fault-nth:16): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:45 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x28, &(0x7f0000000240)}, 0x10) 2033/05/18 03:46:45 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x420) semctl$IPC_RMID(r1, 0x0, 0x0) fsetxattr(r0, &(0x7f0000af1fe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="020000000800000000000000", 0xc, 0x0) 2033/05/18 03:46:45 executing program 4: r0 = request_key(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001440)='/dev/input/mice\x00', 0xfffffffffffffffb) r1 = semget$private(0x0, 0x3, 0x8) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000016c0)=""/232) keyctl$get_keyring_id(0x0, r0, 0xb0d) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) prctl$getname(0x10, &(0x7f00000016c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001580)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001680)=0xe8) keyctl$get_persistent(0x16, r3, r0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x4035, r2, 0xfffffffffffffffe) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x3ffffe) sendmsg$nfc_llcp(r4, &(0x7f0000001340)={&(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x5, 0x100000001, "6da50ff6fa280496156f80754c454ad5c6c93ba80af2a953740dd08cb380df8896e26adafa0c6e9a2e4eb26b9f61a7882f82872e17a561c7c074ceace38fc1", 0x2f}, 0x60, &(0x7f0000001200)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="fddd8639bc252cc3ffa4ac7d9ace73eddc178269a5a0e4d419ee24b48e969bab20963ecf41386897451739d6967445a48a8e8171ab5ab99c1ab38b25e797048d25b76e235624eaa4ac9e6b7dc8b78b838d2d1f919e3435b7b44672d60504f7d5bf589797eee0f4f642b8390370cded", 0x6f}, {&(0x7f0000001140)="7b552a7a14c4cd93e41d081cda9e22d277df71f1f9baa8ee4ebd05f35cb4de69b9ab01bceeb6e48eab7572c7410aa1eed66396b4325713013ae514092fd1b26d3917e5e8cce81c9c53da6186e811cc1eccbc8ed989f141db420d6953a4b931157b821d51753f0b9470603443e9a3bcbc6345a62ca67f1abc6e64dc794f608d4ddf", 0x81}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x100, 0x4044000}, 0x20048000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 2033/05/18 03:46:45 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c65308c", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:45 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0 ', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:45 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:45 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:45 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="c0f9dc6d", @ANYRES16=r4, @ANYBLOB="00002bbd7000fcdbdf25b8fbbe35def90775efc517373ee271c30300000048000300080004000900000014000600fe800000000000000000000000000017080007004e240000080003000000000008000400030000000800010001000000080007004e230000240002000800040003000000080009002c000000080002004e2400000800040008000000400003000800010001000000080007004e2000000800080009000000080005000000000708000800010000001400060000000000000000000000ffffac14140b"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) [ 163.947492] FAULT_INJECTION: forcing a failure. [ 163.947492] name failslab, interval 1, probability 0, space 0, times 0 [ 163.958787] CPU: 1 PID: 15564 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 163.965630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.974983] Call Trace: [ 163.977581] dump_stack+0x1b9/0x29f [ 163.981220] ? arch_local_irq_restore+0x52/0x52 [ 163.985888] ? __save_stack_trace+0x7e/0xd0 [ 163.990221] should_fail.cold.4+0xa/0x1a [ 163.994269] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 163.999354] ? kasan_kmalloc+0xc4/0xe0 [ 164.003226] ? kmem_cache_alloc_trace+0x152/0x780 [ 164.008052] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 164.013224] ? __list_lru_init+0x45e/0x7b0 [ 164.017441] ? sget_userns+0x6d9/0xf20 [ 164.021308] ? sget+0x10b/0x150 [ 164.024570] ? graph_lock+0x170/0x170 [ 164.028356] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 164.033092] ? do_mount+0x564/0x3070 [ 164.036788] ? ksys_mount+0x12d/0x140 [ 164.040574] ? SyS_mount+0x35/0x50 [ 164.044097] ? do_syscall_64+0x29e/0x9d0 [ 164.048145] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 164.053496] ? find_held_lock+0x36/0x1c0 [ 164.057547] ? __lock_is_held+0xb5/0x140 [ 164.061598] ? check_same_owner+0x320/0x320 [ 164.065905] ? rcu_note_context_switch+0x710/0x710 [ 164.070827] should_failslab+0x124/0x180 [ 164.074876] kmem_cache_alloc_trace+0x2cb/0x780 [ 164.079525] ? __kmalloc_node+0x33/0x70 [ 164.083481] ? __kmalloc_node+0x33/0x70 [ 164.087442] ? rcu_read_lock_sched_held+0x108/0x120 [ 164.092451] __memcg_init_list_lru_node+0x17c/0x2c0 [ 164.097453] ? list_lru_add+0x850/0x850 [ 164.101415] ? __kmalloc_node+0x47/0x70 [ 164.105379] __list_lru_init+0x45e/0x7b0 [ 164.109430] ? list_lru_destroy+0x4c0/0x4c0 [ 164.113738] ? __raw_spin_lock_init+0x1c/0x100 [ 164.118316] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 164.123317] ? __lockdep_init_map+0x105/0x590 [ 164.127798] ? lockdep_init_map+0x9/0x10 [ 164.131847] sget_userns+0x6d9/0xf20 [ 164.135550] ? kill_litter_super+0x90/0x90 [ 164.139774] ? ns_test_super+0x50/0x50 [ 164.143648] ? destroy_unused_super.part.9+0x100/0x100 [ 164.148911] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 164.153486] ? kasan_check_write+0x14/0x20 [ 164.157701] ? do_raw_spin_lock+0xc1/0x200 [ 164.161925] ? blkdev_get+0xc0/0xb30 [ 164.165623] ? cap_capable+0x1f9/0x260 [ 164.169499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.175025] ? security_capable+0xa4/0xd0 [ 164.179163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 164.184683] ? ns_capable_common+0x13f/0x170 [ 164.189076] ? kill_litter_super+0x90/0x90 [ 164.193289] sget+0x10b/0x150 [ 164.196378] ? ns_test_super+0x50/0x50 [ 164.200249] mount_bdev+0x111/0x3e0 [ 164.203859] ? load_system_files+0x7f70/0x7f70 [ 164.208425] ntfs_mount+0x34/0x40 [ 164.211864] mount_fs+0xae/0x328 [ 164.215213] ? mpi_free.cold.1+0x19/0x19 [ 164.219260] vfs_kern_mount.part.34+0xd4/0x4d0 [ 164.223825] ? may_umount+0xb0/0xb0 [ 164.227436] ? _raw_read_unlock+0x22/0x30 [ 164.231565] ? __get_fs_type+0x97/0xc0 [ 164.235438] do_mount+0x564/0x3070 [ 164.238964] ? lock_downgrade+0x8e0/0x8e0 [ 164.243099] ? copy_mount_string+0x40/0x40 [ 164.247316] ? check_same_owner+0x320/0x320 [ 164.251618] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 164.256614] ? __check_object_size+0x95/0x5d9 [ 164.261095] ? __might_sleep+0x95/0x190 [ 164.265056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.270575] ? _copy_from_user+0xdf/0x150 [ 164.274705] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.280223] ? copy_mount_options+0x285/0x380 [ 164.284700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 164.290222] ksys_mount+0x12d/0x140 [ 164.293837] SyS_mount+0x35/0x50 [ 164.297190] ? ksys_mount+0x140/0x140 [ 164.300977] do_syscall_64+0x29e/0x9d0 [ 164.304851] ? vmalloc_sync_all+0x30/0x30 [ 164.308983] ? _raw_spin_unlock_irq+0x27/0x70 [ 164.313461] ? finish_task_switch+0x1ca/0x820 [ 164.317943] ? syscall_return_slowpath+0x5c0/0x5c0 [ 164.322857] ? syscall_return_slowpath+0x30f/0x5c0 [ 164.327774] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 164.333124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 164.337956] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 164.343126] RIP: 0033:0x4552d9 2033/05/18 03:46:46 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {0x2000000000}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r2, r3) 2033/05/18 03:46:46 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 164.346295] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.353988] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 164.361242] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 164.368492] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 164.375744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 164.382992] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000010 2033/05/18 03:46:46 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 164.522464] __ntfs_error: 42 callbacks suppressed [ 164.522474] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 164.535808] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 164.547891] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 164.589759] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 164.598230] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 164.610303] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:47 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x6000, 0x0, 0x0, 0x3281, 0x8, 0x81020) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000200)=""/49, 0x31) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:47 executing program 4: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000054df88)={0x2, 0x78, 0x0, 0x303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) clone(0x0, &(0x7f00000000c0), &(0x7f000073fffc), &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x5, 0x202000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x503, 0x8}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0x5000000000, @local={0xfe, 0x80, [], 0xaa}, 0x5}}, [0x39c5, 0x4, 0x1, 0x0, 0x400, 0x8, 0x7, 0x2, 0x108, 0xe13, 0x7fff, 0x7, 0x2b, 0x9c46, 0x4]}, &(0x7f0000000400)=0x100) r3 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x80000) bind$netrom(r3, &(0x7f0000000180)=@ax25={0x3, {"0bb95bad5f41ec"}, 0x2}, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) 2033/05/18 03:46:47 executing program 5 (fault-call:5 fault-nth:17): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000600)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:47 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 165.390382] FAULT_INJECTION: forcing a failure. [ 165.390382] name failslab, interval 1, probability 0, space 0, times 0 [ 165.401723] CPU: 0 PID: 15609 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 165.408571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.417932] Call Trace: [ 165.420531] dump_stack+0x1b9/0x29f [ 165.424176] ? arch_local_irq_restore+0x52/0x52 [ 165.428855] ? __save_stack_trace+0x7e/0xd0 [ 165.433197] should_fail.cold.4+0xa/0x1a [ 165.437275] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 165.442391] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 165.447161] ? graph_lock+0x170/0x170 [ 165.450970] ? retint_kernel+0x10/0x10 [ 165.454891] ? __lock_is_held+0xb5/0x140 [ 165.458975] ? check_same_owner+0x320/0x320 [ 165.463317] ? rcu_note_context_switch+0x710/0x710 [ 165.468267] should_failslab+0x124/0x180 [ 165.472345] kmem_cache_alloc_trace+0x2cb/0x780 [ 165.477026] ? __kmalloc_node+0x33/0x70 [ 165.481009] ? __kmalloc_node+0x33/0x70 [ 165.484997] ? rcu_read_lock_sched_held+0x108/0x120 [ 165.490030] __memcg_init_list_lru_node+0x17c/0x2c0 [ 165.495059] ? list_lru_add+0x850/0x850 [ 165.499044] ? __kmalloc_node+0x47/0x70 [ 165.503034] __list_lru_init+0x45e/0x7b0 [ 165.507114] ? list_lru_destroy+0x4c0/0x4c0 [ 165.511443] ? __raw_spin_lock_init+0x1c/0x100 [ 165.516036] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 165.521065] ? __lockdep_init_map+0x105/0x590 [ 165.525562] ? lockdep_init_map+0x9/0x10 [ 165.529615] sget_userns+0x6d9/0xf20 [ 165.533324] ? kill_litter_super+0x90/0x90 [ 165.537554] ? ns_test_super+0x50/0x50 [ 165.541429] ? destroy_unused_super.part.9+0x100/0x100 [ 165.546691] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 165.551258] ? kasan_check_write+0x14/0x20 [ 165.555475] ? do_raw_spin_lock+0xc1/0x200 [ 165.559695] ? blkdev_get+0xc0/0xb30 [ 165.563396] ? cap_capable+0x1f9/0x260 [ 165.567273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.572793] ? security_capable+0xa4/0xd0 [ 165.576927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 165.582446] ? ns_capable_common+0x13f/0x170 [ 165.586839] ? kill_litter_super+0x90/0x90 [ 165.591055] sget+0x10b/0x150 [ 165.594249] ? ns_test_super+0x50/0x50 [ 165.598118] mount_bdev+0x111/0x3e0 [ 165.601730] ? load_system_files+0x7f70/0x7f70 [ 165.606299] ntfs_mount+0x34/0x40 [ 165.609735] mount_fs+0xae/0x328 [ 165.613086] ? mpi_free.cold.1+0x19/0x19 [ 165.617134] vfs_kern_mount.part.34+0xd4/0x4d0 [ 165.621698] ? may_umount+0xb0/0xb0 [ 165.625311] ? _raw_read_unlock+0x22/0x30 [ 165.629440] ? __get_fs_type+0x97/0xc0 [ 165.633317] do_mount+0x564/0x3070 [ 165.636842] ? lock_downgrade+0x8e0/0x8e0 [ 165.640974] ? copy_mount_string+0x40/0x40 [ 165.645193] ? check_same_owner+0x320/0x320 [ 165.649497] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 165.654496] ? __check_object_size+0x95/0x5d9 [ 165.658985] ? __might_sleep+0x95/0x190 [ 165.662949] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.668470] ? _copy_from_user+0xdf/0x150 [ 165.672604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.678125] ? copy_mount_options+0x285/0x380 [ 165.682604] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 165.688129] ksys_mount+0x12d/0x140 [ 165.691739] SyS_mount+0x35/0x50 [ 165.695086] ? ksys_mount+0x140/0x140 [ 165.698872] do_syscall_64+0x29e/0x9d0 [ 165.702742] ? vmalloc_sync_all+0x30/0x30 [ 165.706872] ? _raw_spin_unlock_irq+0x27/0x70 [ 165.711353] ? finish_task_switch+0x1ca/0x820 [ 165.715833] ? syscall_return_slowpath+0x5c0/0x5c0 [ 165.720746] ? syscall_return_slowpath+0x30f/0x5c0 [ 165.725662] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 165.731018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 165.735850] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 165.741026] RIP: 0033:0x4552d9 [ 165.744200] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.751897] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 165.759151] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 165.766403] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 165.773652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 165.780902] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000011 2033/05/18 03:46:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x2, 0x1, 0xff, 0x0, 0x1}, 0x2c) r1 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x0) dup2(r0, r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800000202000, 0x0) 2033/05/18 03:46:47 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 165.791965] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 165.800495] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 165.812575] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:47 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:47 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000b3d000)={0x0, 0x30, 0x0, @thr={&(0x7f000022f000), &(0x7f0000298000)}}, &(0x7f0000a7e000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)) timer_settime(0x0, 0x80000000000000, &(0x7f0000d9efe0)={{0x0, 0x1c9c380}}, &(0x7f0000ef9fe0)) 2033/05/18 03:46:47 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00000002c0)=""/76) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x17, 0xf4, &(0x7f00000001c0)="16ae9b49ca816562d125935cc9b00aafdeaed468853fb0523878af80a683b33c6184b9c8cb5e23c878e3bbb3c2841949a63e43b002408ff6889d25b089054d909dc4918bf6a35fd53a8fc3855654a2323eeeac4eb86a600366d2f60888bfcea9fb3fbde5e542771e588398b36a801f7b99565db059c7f2c078be5a6d63e57a3dd9550c04e44299d90bf8eb8611857e7e3b74f7978878375b3c4503d5d25dcde90f4de77dea699239237b883eb05fd79a55540e14e241cb971aa25e9b7ee73acac9293063be29e8da09e2ebd50c6c75a1f4ec7d6742474a5fd36a67136a168fcce1b1e2560e2dd965516367cdfbfdb615221c75f2"}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 165.945163] ntfs: (device loop7): ntfs_fill_super(): Unable to determine device size. 2033/05/18 03:46:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f000093affc)=0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2000, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYBLOB="1995c6f56312c8738760bfdbe07cd3e0715887d486af4eca4a0b4d0efe144f960a7566f9f933991747abeba7cfb71d19b0ace36ae1b04a5076bebad01261fc410bc80d51cd18c80ed296ea383514476f4b67c12505f834b9833c928a3b4252cbbb19e49092604bce31863ada2c198b640e97ac8bab6f1a5fe8619cf9b8d4f63bc85a48d3db41e79bb5c0cab76c9d482f1158fc05e7e8892cf8773d609a62257f", @ANYPTR]) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f00000002c0)=""/227, 0xe3}], 0x3, 0x0) 2033/05/18 03:46:47 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:47 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:47 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c653002", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000001c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x146}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000f4"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = socket$unix(0x1, 0x7ed0a69479eb96d1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/mcfilter\x00') ioctl$TCXONC(r2, 0x540a, 0x2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xd, &(0x7f00000001c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)) 2033/05/18 03:46:48 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c653004", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:48 executing program 5 (fault-call:5 fault-nth:18): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x6}) pwrite64(r0, &(0x7f00000000c0)="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", 0x1000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000010c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000001100)={0x0, r1}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000001140)={'TPROXY\x00'}, &(0x7f0000001180)=0x1e) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000001200)={0x16000, &(0x7f00000011c0), 0x4, r0, 0x1}) recvmsg(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001240)=""/105, 0x69}, {&(0x7f00000012c0)=""/247, 0xf7}], 0x2, 0x0, 0x0, 0x4}, 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001440)=0x3ff) futex(&(0x7f0000001480)=0x2, 0x9, 0x2, &(0x7f00000014c0)={0x77359400}, &(0x7f0000001500)=0x2, 0x0) r2 = creat(&(0x7f0000001540)='./file0\x00', 0x20) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000001580)=ANY=[@ANYBLOB="030000000000000002000000010000000000000000000000000000000800000008000000000000000000000000000000000000000100000007000000000000000000000005000000ff01000000000000000000000000000000000000000000feff000000ff0000000300000000000000000000000400000040000000040000000000000000000000000000000000000000000000"]) r3 = accept4$packet(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001680)=0x14, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000016c0)) close(r2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000001700)) getrlimit(0x0, &(0x7f0000001740)) getsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000001780), &(0x7f00000017c0)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7fffffff) pwritev(r0, &(0x7f0000002c00)=[{&(0x7f0000001800)="8b7ef626d8a32b4c9a2cf73eee7e3b856f9260024578fe98670e74ac8503794b2011e8557dd8e9b53c8b9f5caa81725d1b49716722ef1eb0f755a13ce86aa58034f495bef905cec2c3b83b240672e1150448796af32f374e39360963a15bf69ddca0593f4a234f4dae124b5681e7733eb31df2f5991c42148e2bab6b8ea4a148ca2ef921393fb125c33fb6731bdc6a0d65e1274962fe0bd44f375944e3871b89d5afbc4be18ef67afceb87f1c0a06b25f3abe1a6d9f4094d39476abbd3fee0ec9704bec3", 0xc4}, {&(0x7f0000001980)="71e8c5abf2ced9a7170c2716fa9094f842e3d3f46a0828d9f841cf264511624c696a784af7982a4c2c5fb0273318f3f239a782559eb5fe2f1d0f3cc1e98fdd10102bbe84d595df4f62bf17de00d9c3f33298b47081c92ffa43b4458df3ffba86a19bf9ecb5112a9b1cf973559d568a424a74f8e1ed02dc2fd36702163f3b5ebee69b79b9", 0x84}, {&(0x7f0000001ac0)="24a582690a79d4e13ba8abb6978b6bafafaf121e7dcb352195f2a9542a18c6ae", 0x20}, {&(0x7f0000001c00)="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", 0x1000}], 0x4, 0x0) fcntl$setlease(r3, 0x400, 0x2) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000002c80)=""/101) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002d00)) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000002d40), &(0x7f0000002d80)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/mixer\x00', 0x2082, 0x0) r4 = msgget(0x2, 0x100) msgctl$MSG_INFO(r4, 0xc, &(0x7f0000002e00)=""/37) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000002e40)={0x16c9, 0xd, 0x1}) time(&(0x7f0000002e80)) [ 166.463723] FAULT_INJECTION: forcing a failure. [ 166.463723] name failslab, interval 1, probability 0, space 0, times 0 [ 166.475080] CPU: 0 PID: 15736 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 166.481925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.491279] Call Trace: [ 166.493874] dump_stack+0x1b9/0x29f [ 166.497515] ? arch_local_irq_restore+0x52/0x52 [ 166.502192] ? __save_stack_trace+0x7e/0xd0 [ 166.506534] should_fail.cold.4+0xa/0x1a 2033/05/18 03:46:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000503000)=0x12, 0x4) bind$inet6(r0, &(0x7f00003b0fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) [ 166.510606] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 166.515714] ? kasan_kmalloc+0xc4/0xe0 [ 166.519608] ? kmem_cache_alloc_trace+0x152/0x780 [ 166.524461] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 166.529658] ? __list_lru_init+0x45e/0x7b0 [ 166.533897] ? sget_userns+0x6d9/0xf20 [ 166.537792] ? sget+0x10b/0x150 [ 166.541082] ? graph_lock+0x170/0x170 [ 166.544892] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 166.549657] ? do_mount+0x564/0x3070 [ 166.553377] ? ksys_mount+0x12d/0x140 [ 166.557187] ? SyS_mount+0x35/0x50 [ 166.560742] ? do_syscall_64+0x29e/0x9d0 [ 166.564816] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 166.570189] ? find_held_lock+0x36/0x1c0 [ 166.574276] ? __lock_is_held+0xb5/0x140 [ 166.578351] ? check_same_owner+0x320/0x320 [ 166.582668] ? rcu_note_context_switch+0x710/0x710 [ 166.587585] should_failslab+0x124/0x180 [ 166.591632] kmem_cache_alloc_trace+0x2cb/0x780 [ 166.596283] ? __kmalloc_node+0x33/0x70 [ 166.600238] ? __kmalloc_node+0x33/0x70 [ 166.604200] ? rcu_read_lock_sched_held+0x108/0x120 [ 166.609208] __memcg_init_list_lru_node+0x17c/0x2c0 [ 166.614215] ? list_lru_add+0x850/0x850 [ 166.618174] ? __kmalloc_node+0x47/0x70 [ 166.622135] __list_lru_init+0x45e/0x7b0 [ 166.626192] ? list_lru_destroy+0x4c0/0x4c0 [ 166.630501] ? __raw_spin_lock_init+0x1c/0x100 [ 166.635070] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 166.640068] ? __lockdep_init_map+0x105/0x590 [ 166.644548] ? lockdep_init_map+0x9/0x10 [ 166.648591] sget_userns+0x6d9/0xf20 [ 166.652290] ? kill_litter_super+0x90/0x90 [ 166.656511] ? ns_test_super+0x50/0x50 [ 166.660380] ? destroy_unused_super.part.9+0x100/0x100 [ 166.665640] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 166.670206] ? kasan_check_write+0x14/0x20 [ 166.674426] ? do_raw_spin_lock+0xc1/0x200 [ 166.678649] ? blkdev_get+0xc0/0xb30 [ 166.682346] ? cap_capable+0x1f9/0x260 [ 166.686225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.691743] ? security_capable+0xa4/0xd0 [ 166.695874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 166.701390] ? ns_capable_common+0x13f/0x170 [ 166.705786] ? kill_litter_super+0x90/0x90 [ 166.710002] sget+0x10b/0x150 [ 166.713094] ? ns_test_super+0x50/0x50 [ 166.716968] mount_bdev+0x111/0x3e0 [ 166.720577] ? load_system_files+0x7f70/0x7f70 [ 166.725144] ntfs_mount+0x34/0x40 [ 166.728581] mount_fs+0xae/0x328 [ 166.731930] ? mpi_free.cold.1+0x19/0x19 [ 166.735978] vfs_kern_mount.part.34+0xd4/0x4d0 [ 166.740543] ? may_umount+0xb0/0xb0 [ 166.744153] ? _raw_read_unlock+0x22/0x30 [ 166.748282] ? __get_fs_type+0x97/0xc0 [ 166.752154] do_mount+0x564/0x3070 [ 166.755676] ? lock_downgrade+0x8e0/0x8e0 [ 166.759809] ? copy_mount_string+0x40/0x40 [ 166.764030] ? check_same_owner+0x320/0x320 [ 166.768333] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 166.773331] ? __check_object_size+0x95/0x5d9 [ 166.777813] ? __might_sleep+0x95/0x190 [ 166.781773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.787294] ? _copy_from_user+0xdf/0x150 [ 166.791427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.796949] ? copy_mount_options+0x285/0x380 [ 166.801440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 166.806964] ksys_mount+0x12d/0x140 [ 166.810576] SyS_mount+0x35/0x50 [ 166.813924] ? ksys_mount+0x140/0x140 [ 166.817723] do_syscall_64+0x29e/0x9d0 [ 166.821594] ? vmalloc_sync_all+0x30/0x30 [ 166.825723] ? _raw_spin_unlock_irq+0x27/0x70 [ 166.830203] ? finish_task_switch+0x1ca/0x820 [ 166.834683] ? syscall_return_slowpath+0x5c0/0x5c0 [ 166.839596] ? syscall_return_slowpath+0x30f/0x5c0 [ 166.844511] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 166.849860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 166.854687] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 166.859856] RIP: 0033:0x4552d9 2033/05/18 03:46:48 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 166.863028] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.870716] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 166.877969] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 166.885219] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 166.892468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 166.899719] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000012 2033/05/18 03:46:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x3, 0x0, 0x40, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b80e0426f90f23c00f21f86635000008000f23f80fae8a88006466640f011d3736670f01df0f00df670f063e26d8090f23430f07", 0x35}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2033/05/18 03:46:48 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:48 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 4: r0 = socket(0xa, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x8001, 0x3ff, 0xbb9, 0x6, 0x1}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000180)=0xfffffffffffffee9) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) write(r0, &(0x7f00000002c0)="240000002a0025f0002c4300000000000000000400000000000000000011005c060b240006c593287d26d09569c1211d11a8c85aad74f10128d37213d1d9fb59686ddfb958a2f1920d358d8442e2cd19c79dd1e82d346cd3ec67e8886569dfa7edaec1d23815a24c8b75c43f8c8a008bb5ee9630b44b7db0adcdab0512c894affdea64e1271af5cae44d1a1f3e0a5ab9a0cb26ddefcb9e3191645f11f06cc4ef659a08ea7289707a60868ccbfe271858616e1ff4f29ceeb004b773f79b6ed3bffc64204eb61ff907130da86baace7718c925130ef03e8cd17858bc2c3ccb7c3697", 0x30b) 2033/05/18 03:46:48 executing program 5 (fault-call:5 fault-nth:19): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:48 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) recvmmsg(0xffffffffffffff9c, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000780)=""/216, 0xd8}], 0x5, 0x0, 0x0, 0x7f}, 0x101}, {{&(0x7f0000000880)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000900)=""/75, 0x4b}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000001a80)=""/196, 0xc4}, {&(0x7f0000000980)=""/148, 0x94}, {&(0x7f0000001b80)=""/85, 0x55}, {&(0x7f0000000380)=""/41, 0x29}, {&(0x7f0000001c00)=""/38, 0x26}], 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffc1}, {{&(0x7f0000001cc0)=@in6={0x0, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001d40)=""/88, 0x58}, {&(0x7f0000001dc0)=""/140, 0x8c}, {&(0x7f0000001e80)=""/199, 0xc7}], 0x3, &(0x7f0000001fc0)=""/51, 0x33, 0x1f}, 0x2}, {{&(0x7f0000002000)=@nl=@unspec, 0x80, &(0x7f0000002180)=[{&(0x7f0000002080)=""/102, 0x66}, {&(0x7f0000002100)=""/87, 0x57}], 0x2, &(0x7f00000021c0)=""/133, 0x85, 0x81}, 0x9}], 0x4, 0x40, &(0x7f0000002380)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000023c0)=@req3={0xffffffffffffff55, 0x6, 0xffffffff, 0x0, 0x80, 0xb2fb, 0x6725031f}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14, 0xf000}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 167.145549] FAULT_INJECTION: forcing a failure. [ 167.145549] name failslab, interval 1, probability 0, space 0, times 0 [ 167.156845] CPU: 0 PID: 15801 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 167.163686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.173043] Call Trace: [ 167.175649] dump_stack+0x1b9/0x29f [ 167.179289] ? arch_local_irq_restore+0x52/0x52 [ 167.183977] should_fail.cold.4+0xa/0x1a [ 167.188050] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 167.193172] ? print_usage_bug+0xc0/0xc0 [ 167.197250] ? graph_lock+0x170/0x170 [ 167.201060] ? lock_downgrade+0x8e0/0x8e0 [ 167.205224] ? find_held_lock+0x36/0x1c0 [ 167.209302] ? __lock_is_held+0xb5/0x140 [ 167.213388] ? check_same_owner+0x320/0x320 [ 167.217723] ? __might_sleep+0x95/0x190 [ 167.221704] ? rcu_note_context_switch+0x710/0x710 [ 167.226650] should_failslab+0x124/0x180 [ 167.230717] __kmalloc+0x2c8/0x760 [ 167.234274] ? __kmalloc_node+0x47/0x70 [ 167.238258] ? __list_lru_init+0xcf/0x7b0 [ 167.242427] __list_lru_init+0xcf/0x7b0 [ 167.246421] ? list_lru_destroy+0x4c0/0x4c0 [ 167.250754] ? __raw_spin_lock_init+0x1c/0x100 [ 167.255342] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 167.260355] ? lockdep_init_map+0x9/0x10 [ 167.264412] sget_userns+0x706/0xf20 [ 167.268115] ? kill_litter_super+0x90/0x90 [ 167.272340] ? ns_test_super+0x50/0x50 [ 167.276218] ? destroy_unused_super.part.9+0x100/0x100 [ 167.281481] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 167.286053] ? kasan_check_write+0x14/0x20 [ 167.290270] ? do_raw_spin_lock+0xc1/0x200 [ 167.294489] ? blkdev_get+0xc0/0xb30 [ 167.298189] ? cap_capable+0x1f9/0x260 [ 167.302067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.307586] ? security_capable+0xa4/0xd0 [ 167.311720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 167.317238] ? ns_capable_common+0x13f/0x170 [ 167.321636] ? kill_litter_super+0x90/0x90 [ 167.325850] sget+0x10b/0x150 [ 167.328939] ? ns_test_super+0x50/0x50 [ 167.332810] mount_bdev+0x111/0x3e0 [ 167.336419] ? load_system_files+0x7f70/0x7f70 [ 167.340987] ntfs_mount+0x34/0x40 [ 167.344426] mount_fs+0xae/0x328 [ 167.347775] ? mpi_free.cold.1+0x19/0x19 [ 167.351826] vfs_kern_mount.part.34+0xd4/0x4d0 [ 167.356392] ? may_umount+0xb0/0xb0 [ 167.360006] ? _raw_read_unlock+0x22/0x30 [ 167.364140] ? __get_fs_type+0x97/0xc0 [ 167.368021] do_mount+0x564/0x3070 [ 167.371545] ? lock_downgrade+0x8e0/0x8e0 [ 167.375678] ? copy_mount_string+0x40/0x40 [ 167.379896] ? check_same_owner+0x320/0x320 [ 167.384199] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 167.389197] ? __check_object_size+0x95/0x5d9 [ 167.393680] ? __might_sleep+0x95/0x190 [ 167.397643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.403169] ? _copy_from_user+0xdf/0x150 [ 167.407301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.412821] ? copy_mount_options+0x285/0x380 [ 167.417303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 167.422824] ksys_mount+0x12d/0x140 [ 167.426435] SyS_mount+0x35/0x50 [ 167.429782] ? ksys_mount+0x140/0x140 [ 167.433567] do_syscall_64+0x29e/0x9d0 [ 167.437438] ? vmalloc_sync_all+0x30/0x30 [ 167.441566] ? _raw_spin_unlock_irq+0x27/0x70 [ 167.446043] ? finish_task_switch+0x1ca/0x820 [ 167.450521] ? syscall_return_slowpath+0x5c0/0x5c0 [ 167.455434] ? syscall_return_slowpath+0x30f/0x5c0 [ 167.460351] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 167.465701] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.470530] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 167.475700] RIP: 0033:0x4552d9 [ 167.478872] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.486566] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 2033/05/18 03:46:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xffffffff80000001, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x4, 0x8000, 0x4, 0xf2, 0x8000, 0x6, 0x10000, {r3, @in={{0x2, 0x4e23, @rand_addr=0x4}}, 0x81, 0xffffffffffffff77, 0xa10, 0x1, 0x7}}, &(0x7f0000000180)=0xb0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000002c0), 0x4) [ 167.493815] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 167.501066] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 167.508315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 167.515565] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000013 2033/05/18 03:46:49 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r2, 0x700, 0x70bd27, 0x25dfdbff, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:49 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000300)={0x1, @tick=0x4, 0x15, {}, 0x3, 0x0, 0x80000001}) ioctl$int_in(r0, 0x50000000af05, &(0x7f0000000380)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x4, 0x7, 0x6, 0x7f, 0x100000001, 0xc6c3}) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000002c0)={0xb6}, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000480)={0x3, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) readlinkat(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/175, 0xaf) 2033/05/18 03:46:49 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 4: r0 = socket(0x40000000018, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000fc2f95)=""/107, &(0x7f0000090ffc)=0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x408803, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000300)) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file0\x00', r1, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000100)) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x82000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000080)={0x0, 0x4, 0x8, &(0x7f0000000040)}) 2033/05/18 03:46:49 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = memfd_create(&(0x7f00000001c0)='\'\x00', 0x3) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') r5 = getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) kcmp(r5, r6, 0x2, r3, r0) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000002c0)={{0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x7fffffff}, {0xa, 0x4e22, 0x101, @empty, 0x1000}, 0x1c2, [0x9, 0x2, 0xffffffffffff0001, 0x9, 0x1f, 0xfffffffffffffffe, 0x9dc, 0xb05]}, 0x5c) mq_notify(r2, &(0x7f0000000280)={0x0, 0x5, 0x4, @tid=r5}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000100)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0ab8f34a38008b527c55"], 0x0) 2033/05/18 03:46:49 executing program 5 (fault-call:5 fault-nth:20): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000300)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:49 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x88b1, 0x2816, 0xffffffffffff732f, 0xffffffff, 0x1, 0x10001, 0xd0, {0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0xd427, 0x1ff, 0xed8, 0xfffffffffffffffa}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xffffffffffffffa1, 0x2}, &(0x7f0000000300)=0x8) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:49 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xfd, 0x200) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000200)={0x0, 0xffffffffffffffc9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r1, 0x5}, &(0x7f0000000380)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x10800, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x7, 0x0, 0x1, 0x400}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000001c0)={0xffffffffffffff6f, r4}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x488, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_netrom_TIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x10000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000280)="660f72e706b8030000000f23c80f21f8350400d0000f23f8c4e16015a191a70000f3f080b67ba2ccb900b9bc0900000f3266baf80cb8b4f92b88ef66bafc0cec2e650f22a6b90e0a00000f320f06f26e", 0x50}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000500)) 2033/05/18 03:46:49 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x400080) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080045432, &(0x7f0000000080)) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000040)=0x5, 0x4) 2033/05/18 03:46:49 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) fcntl$notify(r0, 0x402, 0x10a908bb04930d49) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:49 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:49 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:49 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48000, 0x80) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb7, 0xfffffffffffffffb, "27d5eae7ee965a53bf35f9fe557967fee23a3933edb37d06bc1d3bffecd5368cbd7786e6c38970067116585b1eea62cdb3db32452409074a1440adf7242f33ae3c0fb0e644465c4bab7aaf5202210c193ff3665422b1e1adaaec624a1f5de72939b372235c052c9a9b45797bae04f29c36c67cccac0dc9aadf0dd202102394cbd02404c15b0855a0596e0395bc2461865a42e98d5daa8f2df89dcd6e0993e8281cd0df25a2f2e84678e98b7cf5e00a"}, &(0x7f0000000180), 0x1400) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0x8}, &(0x7f0000000000), 0x1400) 2033/05/18 03:46:50 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x2, 0x804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) [ 168.549408] FAULT_INJECTION: forcing a failure. [ 168.549408] name failslab, interval 1, probability 0, space 0, times 0 [ 168.560859] CPU: 1 PID: 15916 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 168.567707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.577054] Call Trace: [ 168.579636] dump_stack+0x1b9/0x29f [ 168.583252] ? arch_local_irq_restore+0x52/0x52 [ 168.587907] ? __save_stack_trace+0x7e/0xd0 [ 168.592223] should_fail.cold.4+0xa/0x1a [ 168.596270] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 168.601358] ? kasan_kmalloc+0xc4/0xe0 [ 168.605229] ? kmem_cache_alloc_trace+0x152/0x780 [ 168.610057] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 168.615240] ? __list_lru_init+0x45e/0x7b0 [ 168.619460] ? sget_userns+0x6d9/0xf20 [ 168.623331] ? sget+0x10b/0x150 [ 168.627184] ? graph_lock+0x170/0x170 [ 168.630973] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 168.635711] ? do_mount+0x564/0x3070 [ 168.639408] ? ksys_mount+0x12d/0x140 [ 168.643195] ? SyS_mount+0x35/0x50 [ 168.646718] ? do_syscall_64+0x29e/0x9d0 [ 168.650764] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.656120] ? find_held_lock+0x36/0x1c0 [ 168.660173] ? __lock_is_held+0xb5/0x140 [ 168.664232] ? check_same_owner+0x320/0x320 [ 168.668544] ? rcu_note_context_switch+0x710/0x710 [ 168.673465] should_failslab+0x124/0x180 [ 168.677517] kmem_cache_alloc_trace+0x2cb/0x780 [ 168.682175] ? __kmalloc_node+0x33/0x70 [ 168.686134] ? __kmalloc_node+0x33/0x70 [ 168.690102] ? rcu_read_lock_sched_held+0x108/0x120 [ 168.695112] __memcg_init_list_lru_node+0x17c/0x2c0 [ 168.700117] ? list_lru_add+0x850/0x850 [ 168.704077] ? __kmalloc_node+0x47/0x70 [ 168.708044] __list_lru_init+0x45e/0x7b0 [ 168.712095] ? list_lru_destroy+0x4c0/0x4c0 [ 168.716403] ? __raw_spin_lock_init+0x1c/0x100 [ 168.720973] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 168.725978] ? __lockdep_init_map+0x105/0x590 [ 168.730461] ? lockdep_init_map+0x9/0x10 [ 168.734511] sget_userns+0x6d9/0xf20 [ 168.738211] ? kill_litter_super+0x90/0x90 [ 168.742436] ? ns_test_super+0x50/0x50 [ 168.746311] ? destroy_unused_super.part.9+0x100/0x100 [ 168.751570] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 168.756136] ? kasan_check_write+0x14/0x20 [ 168.760354] ? do_raw_spin_lock+0xc1/0x200 [ 168.764576] ? blkdev_get+0xc0/0xb30 [ 168.768276] ? cap_capable+0x1f9/0x260 [ 168.772585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.778105] ? security_capable+0xa4/0xd0 [ 168.782244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 168.787766] ? ns_capable_common+0x13f/0x170 [ 168.792166] ? kill_litter_super+0x90/0x90 [ 168.796382] sget+0x10b/0x150 [ 168.799473] ? ns_test_super+0x50/0x50 [ 168.803346] mount_bdev+0x111/0x3e0 [ 168.806956] ? load_system_files+0x7f70/0x7f70 [ 168.811523] ntfs_mount+0x34/0x40 [ 168.814963] mount_fs+0xae/0x328 [ 168.818315] ? mpi_free.cold.1+0x19/0x19 [ 168.822369] vfs_kern_mount.part.34+0xd4/0x4d0 [ 168.826936] ? may_umount+0xb0/0xb0 [ 168.830550] ? _raw_read_unlock+0x22/0x30 [ 168.834681] ? __get_fs_type+0x97/0xc0 [ 168.838560] do_mount+0x564/0x3070 [ 168.842086] ? lock_downgrade+0x8e0/0x8e0 [ 168.846223] ? copy_mount_string+0x40/0x40 [ 168.850439] ? check_same_owner+0x320/0x320 [ 168.854743] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 168.859741] ? __check_object_size+0x95/0x5d9 [ 168.864224] ? __might_sleep+0x95/0x190 [ 168.868190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.873708] ? _copy_from_user+0xdf/0x150 [ 168.877845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.883366] ? copy_mount_options+0x285/0x380 [ 168.887845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 168.893371] ksys_mount+0x12d/0x140 [ 168.896984] SyS_mount+0x35/0x50 [ 168.900334] ? ksys_mount+0x140/0x140 [ 168.904122] do_syscall_64+0x29e/0x9d0 [ 168.907992] ? vmalloc_sync_all+0x30/0x30 [ 168.912130] ? kasan_check_write+0x14/0x20 [ 168.916352] ? syscall_return_slowpath+0x5c0/0x5c0 [ 168.921265] ? syscall_return_slowpath+0x30f/0x5c0 [ 168.926202] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 168.931553] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.936387] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.941559] RIP: 0033:0x4552d9 [ 168.944729] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.952425] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 168.959677] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 168.966927] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 168.974178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 168.981434] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000014 2033/05/18 03:46:50 executing program 5 (fault-call:5 fault-nth:21): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x4000, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8fffd, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x401, 0x4) ioctl$KDGETMODE(r0, 0x4004510d, &(0x7f0000000040)) setsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f00000000c0)="32e0be83047b78948c854cd34bcd0b3419536655b9a4c34ab3d27a296d24523b5a4e4952d80bb9e67f0869b8f467592c8a8bc59313eca3090a8393d5b6f63ac174b1ba4bb2e9fcb80d1395f979097d9d65bd1251bffc0904747dd4d8af94e8a731c04a65099804", 0x67) 2033/05/18 03:46:50 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c653002", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0xf000, 0x10f000, 0x1000, 0x0, 0x1ff}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:50 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x5, &(0x7f0000000000)=@framed={{0x18}, [@initr0={0x18}], {0x95}}, &(0x7f0000000040)='GP\x00', 0xfffffffd, 0xaf, &(0x7f0000000200)=""/175}, 0x1e) getitimer(0x1, &(0x7f0000000080)) 2033/05/18 03:46:50 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) [ 169.159922] FAULT_INJECTION: forcing a failure. [ 169.159922] name failslab, interval 1, probability 0, space 0, times 0 [ 169.171285] CPU: 0 PID: 16010 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 169.178132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.187495] Call Trace: [ 169.190097] dump_stack+0x1b9/0x29f [ 169.193737] ? arch_local_irq_restore+0x52/0x52 [ 169.198411] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 169.203619] should_fail.cold.4+0xa/0x1a [ 169.207690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 169.212806] ? unwind_get_return_address+0x61/0xa0 [ 169.217746] ? __save_stack_trace+0x7e/0xd0 [ 169.222081] ? graph_lock+0x170/0x170 [ 169.225899] ? find_held_lock+0x36/0x1c0 [ 169.229977] ? __lock_is_held+0xb5/0x140 [ 169.234068] ? check_same_owner+0x320/0x320 [ 169.238403] ? rcu_note_context_switch+0x710/0x710 [ 169.243354] should_failslab+0x124/0x180 [ 169.247430] kmem_cache_alloc_trace+0x2cb/0x780 [ 169.252106] ? __kmalloc_node+0x33/0x70 [ 169.256090] ? __kmalloc_node+0x33/0x70 2033/05/18 03:46:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)=@delsa={0x28, 0x11, 0x23, 0x0, 0x0, {@in=@dev={0xac, 0x14, 0x14}}}, 0x28}, 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "ad7eff8774e5463f29ad988f18ad735b71232f19b07d47de442015613c54ccd91518656d41aff3b41907c6e72f8bede0bc2efbf13dcd"}, 0x3a) 2033/05/18 03:46:51 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) [ 169.260069] ? rcu_read_lock_sched_held+0x108/0x120 [ 169.265101] __memcg_init_list_lru_node+0x17c/0x2c0 [ 169.270129] ? list_lru_add+0x850/0x850 [ 169.274114] ? __kmalloc_node+0x47/0x70 [ 169.278105] __list_lru_init+0x45e/0x7b0 [ 169.282183] ? list_lru_destroy+0x4c0/0x4c0 [ 169.286509] ? __raw_spin_lock_init+0x1c/0x100 [ 169.291107] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 169.296141] ? lockdep_init_map+0x9/0x10 [ 169.300212] sget_userns+0x706/0xf20 [ 169.303929] ? kill_litter_super+0x90/0x90 2033/05/18 03:46:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000000b000/0xf000)=nil, 0xf000, 0x80000000000, 0x10000000000032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f00000005c0)) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = dup3(r0, r2, 0x0) io_setup(0x8f, &(0x7f0000000080)=0x0) getpeername(r0, &(0x7f00000006c0)=@hci={0x0, 0x0}, &(0x7f0000000400)=0x80) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000740)={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x16}, 0x6, 0xfffffffffffffffd, 0x8, 0x100, 0xffffffffffffff22, 0x10000, r5}) io_submit(r4, 0x6, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x2, r1, &(0x7f00000000c0)="b92758892eca15a1ff33e7a8fd90e079c229626593f7a9be8f5fd8dbaf21e6fdd878365a9b8f9ed4963d0d8d17ad10c0429054584bde3248b4368f1ad90a7480de9dd5db9f83727b30e60b2934c0c7ac1046a4586e4a5931d65e045a5ddf998aa15dd7e67658579c49d18e862edf88b456f5f67c54f62ee825458fdd4ad5fbf234fea548a67e4a8105fa3631f24124682fed066364773f7ae284c029e4dd64d103d133cf2c3f0004af27b937600bdd83b0fe08c64766976c6b4d7d2443d3f823bff6a54d19759051805434", 0xcb, 0x4, 0x0, 0x1, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x80, r1, &(0x7f0000000200)="4abc8f96aed303b6cbe9e23daa73dae053e6938acce4a39f145f4c141cef5026f8cf4640665c17cfabc48e50aa96c1aec8dec6b6cf92f09d56f4328997b905c6e5ff324ab2b6a3223afe909c851cfc7f266a062be51b1a532bb871282a04d53a9d7d070365866960e99943e0f4457a6d63957062f012e745b67e2857", 0x7c, 0x14a, 0x0, 0x0, r3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x5c96, r3, &(0x7f00000002c0)="e71971622ebe9a931e313e32dc87077824d46e80626ebbac137d0d3fb63c10e376c7eec7ca00529175f4e9b1458f404f6e19b42c6f987c80203fc004cbe1db60cb05ad1a41313d4b9ae0524be3850a4770828e4e1959ebb1604ec5e0ce9d294aab3ce0480d6e5e5fccc012e2a08febd6774756f575ce6ec4e5690d9ad81647bb63445148797e8bc1b6a4bc2fb54ef6a313d37ef2cefcda3092619bbbfb655d337d15cef87778e71fdaa97c3307a2c635cda777aa01feb34b477473c68343af55b58e3468c4d59f", 0xc7, 0x7fff, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xfb, r3, &(0x7f0000000400), 0x0, 0x4, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xbb, r1, &(0x7f0000000480)="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", 0xfa, 0x8, 0x0, 0x1, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f00000005c0)="85179e824a39cd09806e4f7975e66756ee704ff460b850eb0c87406b9eda42daeee0b6da4079f8af5cd08db0381700b2e305e8867f24ec584a87e280ee7bd672fae6bf24ba537afb9320256a7b01bb7f9a02282838f6df343bb8af8e27cff10854158b30b2548ba1c483c1b71a81d7d5f31c3e058e53dea7a957fb8c089932", 0x7f, 0x9, 0x0, 0x1, r3}]) 2033/05/18 03:46:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea9}, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mq_getsetattr(r2, &(0x7f0000000000)={0x9, 0xffff, 0x6c, 0x1c67, 0x0, 0x3, 0x8, 0xfff}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xb94, 0x2001) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000080)=0x10) [ 169.308177] ? ns_test_super+0x50/0x50 [ 169.312073] ? destroy_unused_super.part.9+0x100/0x100 [ 169.317354] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 169.321945] ? kasan_check_write+0x14/0x20 [ 169.326190] ? do_raw_spin_lock+0xc1/0x200 [ 169.330434] ? blkdev_get+0xc0/0xb30 [ 169.334166] ? cap_capable+0x1f9/0x260 [ 169.338066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.343605] ? security_capable+0xa4/0xd0 [ 169.347762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 169.353305] ? ns_capable_common+0x13f/0x170 [ 169.357723] ? kill_litter_super+0x90/0x90 [ 169.361960] sget+0x10b/0x150 [ 169.365076] ? ns_test_super+0x50/0x50 [ 169.368974] mount_bdev+0x111/0x3e0 [ 169.372609] ? load_system_files+0x7f70/0x7f70 [ 169.377205] ntfs_mount+0x34/0x40 [ 169.380663] mount_fs+0xae/0x328 [ 169.384033] ? mpi_free.cold.1+0x19/0x19 [ 169.388105] vfs_kern_mount.part.34+0xd4/0x4d0 [ 169.392679] ? may_umount+0xb0/0xb0 [ 169.396294] ? _raw_read_unlock+0x22/0x30 [ 169.400427] ? __get_fs_type+0x97/0xc0 [ 169.404304] do_mount+0x564/0x3070 [ 169.407837] ? lock_downgrade+0x8e0/0x8e0 [ 169.412003] ? copy_mount_string+0x40/0x40 [ 169.416253] ? check_same_owner+0x320/0x320 [ 169.420569] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 169.425574] ? __check_object_size+0x95/0x5d9 [ 169.430078] ? __might_sleep+0x95/0x190 [ 169.434058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.439586] ? _copy_from_user+0xdf/0x150 [ 169.443720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.449256] ? copy_mount_options+0x285/0x380 [ 169.453734] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 169.459266] ksys_mount+0x12d/0x140 [ 169.462876] SyS_mount+0x35/0x50 [ 169.466224] ? ksys_mount+0x140/0x140 [ 169.470018] do_syscall_64+0x29e/0x9d0 [ 169.473901] ? vmalloc_sync_all+0x30/0x30 [ 169.478041] ? kasan_check_write+0x14/0x20 [ 169.482280] ? syscall_return_slowpath+0x5c0/0x5c0 [ 169.487203] ? syscall_return_slowpath+0x30f/0x5c0 [ 169.492125] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 169.497480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.502309] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 169.507487] RIP: 0033:0x4552d9 2033/05/18 03:46:51 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530c0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 169.510655] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.518347] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 169.525604] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 169.532860] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.540109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 169.547364] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000015 2033/05/18 03:46:51 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:51 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9d6, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r1, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:51 executing program 4: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 169.605905] __ntfs_error: 41 callbacks suppressed [ 169.605916] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 169.619282] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 169.631373] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 169.746538] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 169.755045] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 169.767156] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:52 executing program 5 (fault-call:5 fault-nth:22): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:52 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000640)=""/225) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:52 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c65300e", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:52 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x4b, 0x4, "7e924c842b1b07816b46d5252612656527bca2636e8d30d138f2ed9f900b2e582f64e40594a2b4c4e2eb4ff1147c46f654faef5a76aa45817b8c7d7712ec8b724b31cd"}, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080), 0x4) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'erspan0\x00', 0x5095}) 2033/05/18 03:46:52 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa000008004500001c00000000001190785525442a2004921bac1cffaae000000100004e2300089078"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000004fb1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast=0xffffffff, @multicast1=0xe0000001}, @udp={0x0, 0x4e23, 0x8}}}}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x101) 2033/05/18 03:46:52 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:52 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:52 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) socket$kcm(0x29, 0x7, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000200)=""/71) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000001c0)=0xc) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 170.649591] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 170.658071] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 170.659942] FAULT_INJECTION: forcing a failure. [ 170.659942] name failslab, interval 1, probability 0, space 0, times 0 [ 170.670145] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 170.688462] CPU: 1 PID: 16114 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 170.695296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.704636] Call Trace: [ 170.707219] dump_stack+0x1b9/0x29f [ 170.710840] ? arch_local_irq_restore+0x52/0x52 [ 170.715498] ? mutex_trylock+0x2a0/0x2a0 [ 170.719549] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 170.724723] ? __list_lru_init+0x45e/0x7b0 [ 170.728945] should_fail.cold.4+0xa/0x1a [ 170.732993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 170.738089] ? print_usage_bug+0xc0/0xc0 [ 170.742140] ? graph_lock+0x170/0x170 [ 170.745926] ? lock_downgrade+0x8e0/0x8e0 [ 170.750067] ? find_held_lock+0x36/0x1c0 [ 170.754118] ? __lock_is_held+0xb5/0x140 [ 170.758175] ? check_same_owner+0x320/0x320 [ 170.762482] ? __might_sleep+0x95/0x190 [ 170.766442] ? rcu_note_context_switch+0x710/0x710 [ 170.771363] should_failslab+0x124/0x180 [ 170.775421] __kmalloc+0x2c8/0x760 [ 170.778949] ? __kmalloc_node+0x47/0x70 [ 170.782927] ? __list_lru_init+0xcf/0x7b0 [ 170.787067] __list_lru_init+0xcf/0x7b0 [ 170.791039] ? list_lru_destroy+0x4c0/0x4c0 [ 170.795344] ? __raw_spin_lock_init+0x1c/0x100 [ 170.799917] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 170.804928] ? lockdep_init_map+0x9/0x10 [ 170.808976] sget_userns+0x706/0xf20 [ 170.812674] ? kill_litter_super+0x90/0x90 [ 170.816898] ? ns_test_super+0x50/0x50 [ 170.820769] ? destroy_unused_super.part.9+0x100/0x100 [ 170.826036] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 170.830606] ? kasan_check_write+0x14/0x20 [ 170.834824] ? do_raw_spin_lock+0xc1/0x200 [ 170.839052] ? blkdev_get+0xc0/0xb30 [ 170.842755] ? cap_capable+0x1f9/0x260 [ 170.846634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.852158] ? security_capable+0xa4/0xd0 [ 170.856294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 170.861814] ? ns_capable_common+0x13f/0x170 [ 170.866215] ? kill_litter_super+0x90/0x90 [ 170.870434] sget+0x10b/0x150 [ 170.873525] ? ns_test_super+0x50/0x50 [ 170.877397] mount_bdev+0x111/0x3e0 [ 170.881012] ? load_system_files+0x7f70/0x7f70 [ 170.885583] ntfs_mount+0x34/0x40 [ 170.889030] mount_fs+0xae/0x328 [ 170.892382] ? mpi_free.cold.1+0x19/0x19 [ 170.896432] vfs_kern_mount.part.34+0xd4/0x4d0 [ 170.901004] ? may_umount+0xb0/0xb0 [ 170.904623] ? _raw_read_unlock+0x22/0x30 [ 170.908758] ? __get_fs_type+0x97/0xc0 [ 170.912636] do_mount+0x564/0x3070 [ 170.916159] ? lock_downgrade+0x8e0/0x8e0 [ 170.920294] ? copy_mount_string+0x40/0x40 [ 170.924513] ? check_same_owner+0x320/0x320 [ 170.928817] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 170.933819] ? __check_object_size+0x95/0x5d9 [ 170.938304] ? __might_sleep+0x95/0x190 [ 170.942268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.947792] ? _copy_from_user+0xdf/0x150 [ 170.951927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.957452] ? copy_mount_options+0x285/0x380 [ 170.961931] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 170.967455] ksys_mount+0x12d/0x140 [ 170.971068] SyS_mount+0x35/0x50 [ 170.974420] ? ksys_mount+0x140/0x140 [ 170.978206] do_syscall_64+0x29e/0x9d0 [ 170.982078] ? vmalloc_sync_all+0x30/0x30 [ 170.986209] ? _raw_spin_unlock_irq+0x27/0x70 [ 170.990690] ? finish_task_switch+0x1ca/0x820 [ 170.995169] ? syscall_return_slowpath+0x5c0/0x5c0 [ 171.000086] ? syscall_return_slowpath+0x30f/0x5c0 [ 171.005009] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 171.010371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.015203] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.020375] RIP: 0033:0x4552d9 [ 171.023549] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.031243] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 171.038494] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 2033/05/18 03:46:52 executing program 4: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000100)='affs\x00', 0x40, &(0x7f0000000140)="d855a676b381b0a0d809dc1993bd8b09f6f0d1067b1fae8c72c1bf1a52d047c9383011e16007e345bb43") creat(&(0x7f0000000280)='./file0/file0/file0\x00', 0x0) lstat(&(0x7f00000001c0)='./file0/bus\x00', &(0x7f0000000200)) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = semget$private(0x0, 0x6, 0x20) semctl$SEM_INFO(r0, 0x7, 0x13, &(0x7f0000000180)=""/22) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') 2033/05/18 03:46:52 executing program 0: semget(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) [ 171.045744] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.052996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 171.060255] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000016 [ 171.073537] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. 2033/05/18 03:46:52 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000003, 0x3) shutdown(r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') 2033/05/18 03:46:52 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f6", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:52 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 5 (fault-call:5 fault-nth:23): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530f0", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mem_exclusive\x00', 0x2, 0x0) read(r0, &(0x7f0000000140)=""/232, 0xe8) r1 = memfd_create(&(0x7f0000000040)="1700", 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e1e, @rand_addr=0xffffffff}}) socket$unix(0x1, 0x1, 0x0) 2033/05/18 03:46:53 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x5fb, 0x8000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) getsockopt$netlink(r2, 0x10e, 0xf, &(0x7f0000000200)=""/106, &(0x7f0000000040)=0x6a) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x5}}, 0x1f, 0x20, 0x800, "b5264ab6c0c46d30570eb60dcd1cd2b7b033ac0c3388ebc1cd45a61972e94a1aa1d0f949ad89866272e11bfaafca35153b2561a49f55eb5266626ac0d02448d061f20d5de275354a04696669d97a45b4"}, 0xd8) 2033/05/18 03:46:53 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 171.493540] FAULT_INJECTION: forcing a failure. [ 171.493540] name failslab, interval 1, probability 0, space 0, times 0 [ 171.504878] CPU: 0 PID: 16184 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 171.511725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.521071] Call Trace: [ 171.523655] dump_stack+0x1b9/0x29f [ 171.527274] ? arch_local_irq_restore+0x52/0x52 [ 171.531935] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 171.537125] should_fail.cold.4+0xa/0x1a [ 171.541178] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 171.546271] ? unwind_get_return_address+0x61/0xa0 [ 171.551188] ? __save_stack_trace+0x7e/0xd0 [ 171.555502] ? graph_lock+0x170/0x170 [ 171.559296] ? find_held_lock+0x36/0x1c0 [ 171.563350] ? __lock_is_held+0xb5/0x140 [ 171.567407] ? check_same_owner+0x320/0x320 [ 171.571718] ? rcu_note_context_switch+0x710/0x710 [ 171.576638] should_failslab+0x124/0x180 [ 171.580693] kmem_cache_alloc_trace+0x2cb/0x780 [ 171.585352] ? __kmalloc_node+0x33/0x70 [ 171.589317] ? __kmalloc_node+0x33/0x70 [ 171.593278] ? rcu_read_lock_sched_held+0x108/0x120 [ 171.598283] __memcg_init_list_lru_node+0x17c/0x2c0 [ 171.603286] ? list_lru_add+0x850/0x850 [ 171.607251] ? __kmalloc_node+0x47/0x70 [ 171.611214] __list_lru_init+0x45e/0x7b0 [ 171.615263] ? list_lru_destroy+0x4c0/0x4c0 [ 171.619570] ? __raw_spin_lock_init+0x1c/0x100 [ 171.624141] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 171.629147] ? lockdep_init_map+0x9/0x10 [ 171.633194] sget_userns+0x706/0xf20 [ 171.636897] ? kill_litter_super+0x90/0x90 [ 171.641119] ? ns_test_super+0x50/0x50 [ 171.644989] ? destroy_unused_super.part.9+0x100/0x100 [ 171.650250] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 171.654824] ? kasan_check_write+0x14/0x20 [ 171.659045] ? do_raw_spin_lock+0xc1/0x200 [ 171.663268] ? blkdev_get+0xc0/0xb30 [ 171.666967] ? cap_capable+0x1f9/0x260 [ 171.670840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 171.676360] ? security_capable+0xa4/0xd0 [ 171.680489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 171.686015] ? ns_capable_common+0x13f/0x170 [ 171.690410] ? kill_litter_super+0x90/0x90 [ 171.694625] sget+0x10b/0x150 [ 171.697720] ? ns_test_super+0x50/0x50 [ 171.701594] mount_bdev+0x111/0x3e0 [ 171.705207] ? load_system_files+0x7f70/0x7f70 [ 171.709773] ntfs_mount+0x34/0x40 [ 171.713214] mount_fs+0xae/0x328 [ 171.716561] ? mpi_free.cold.1+0x19/0x19 [ 171.720695] vfs_kern_mount.part.34+0xd4/0x4d0 [ 171.725267] ? may_umount+0xb0/0xb0 [ 171.728878] ? _raw_read_unlock+0x22/0x30 [ 171.733010] ? __get_fs_type+0x97/0xc0 [ 171.736888] do_mount+0x564/0x3070 [ 171.740410] ? lock_downgrade+0x8e0/0x8e0 [ 171.744544] ? copy_mount_string+0x40/0x40 [ 171.748762] ? check_same_owner+0x320/0x320 [ 171.753068] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 171.758068] ? __check_object_size+0x95/0x5d9 [ 171.762550] ? __might_sleep+0x95/0x190 [ 171.766510] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 171.772034] ? _copy_from_user+0xdf/0x150 [ 171.776168] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 171.781690] ? copy_mount_options+0x285/0x380 [ 171.786171] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 171.792442] ksys_mount+0x12d/0x140 [ 171.796055] SyS_mount+0x35/0x50 [ 171.799403] ? ksys_mount+0x140/0x140 [ 171.803190] do_syscall_64+0x29e/0x9d0 [ 171.807059] ? vmalloc_sync_all+0x30/0x30 [ 171.811191] ? _raw_spin_unlock_irq+0x27/0x70 [ 171.815669] ? finish_task_switch+0x1ca/0x820 [ 171.820148] ? syscall_return_slowpath+0x5c0/0x5c0 [ 171.825061] ? syscall_return_slowpath+0x30f/0x5c0 [ 171.829974] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 171.835322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.840151] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.845323] RIP: 0033:0x4552d9 [ 171.848491] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 171.856182] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 171.863432] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 171.870693] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.877942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 171.885195] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000017 2033/05/18 03:46:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x14}, 0x1}, 0x0) 2033/05/18 03:46:53 executing program 5 (fault-call:5 fault-nth:24): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7f, 0x1) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000480)={0x4, &(0x7f0000000240)=""/238, &(0x7f0000000400)=[{0x400, 0x8c, 0x10ac, &(0x7f0000000040)=""/140}, {0xed99, 0x29, 0xed31, &(0x7f0000000340)=""/41}, {0x0, 0x4, 0x5810, &(0x7f0000000380)=""/4}, {0x100000000, 0x0, 0x3, &(0x7f00000003c0)}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="874f008e93d9c3234b41804c1e1fec646758b853d941ae3e1b60cf3888b44a3409fe981cbea8af1753b494c61113c261086a1b92bf4138b9bd501ed4f6d1eb72527df710d9da7f5b0880e9f7279c766cd4a5763400000c00000000000000000000000000000000000000000000a87902933bf274d2cc708f7d82630d6f7ee83ef763fd0af42534e9e5707f2102ae1de4355e592835c7df130d57c71b69eed88384c9d9a139fe52ad777556c2e31032eee89868437cf4573e391066b1044b5355f19f3a", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000180)}) 2033/05/18 03:46:53 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file02', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)="53eb7517caf508f5c138efd44fa35028edfe1a554763ccf9a0da296fd67a6e59b2778f9b68ee0160abbb9766f3e1947ca79df6213ede6fc07bd9e74e153b66391cfac5dad8", 0x45) 2033/05/18 03:46:53 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:53 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="e352c90bde32eca4d126d30c0006bc46f13b5449c6c6c4506399d2c0f5e7fb39eeb5a62622fccf5cd1b71e2c1cf02a3e656fe2c9ca56e610cfef1e21b767a86ebc721fa37eb8295031b3139c43086139c75dc3fdc0aeb64613eeb13a0fab6dbd83a56d23e8684dd96464218e27c241d090b1f8bdcce8e2bcd555a8875f4f4756fd9d6978ea35a1324641d486447d15646f69d7a98f598b028afe5c743fc4b75eaf7623d54c9bcb976a2641c60d26b018f557fb2406c94e66c77d2e9a62df8b08eeb5a6549e1d35d417eb3d0e74702dcc821784456e9ceebe232c58d74f2855585a4e111856ddea40e6") ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x420a4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x2, 0x12}, [@IFLA_PHYS_PORT_ID={0x4, 0x22}, @IFLA_EVENT={0x8, 0x2c, 0x6f3}, @IFLA_CARRIER_CHANGES={0x8, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) 2033/05/18 03:46:53 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 172.153709] FAULT_INJECTION: forcing a failure. [ 172.153709] name failslab, interval 1, probability 0, space 0, times 0 [ 172.165048] CPU: 0 PID: 16246 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 172.171890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.181238] Call Trace: [ 172.183831] dump_stack+0x1b9/0x29f [ 172.187466] ? arch_local_irq_restore+0x52/0x52 [ 172.192143] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 172.197346] should_fail.cold.4+0xa/0x1a 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) 2033/05/18 03:46:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x118, 0x40000) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x40000) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="b3", 0x1}]) 2033/05/18 03:46:54 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f00000000c0)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x8012, r0, 0x0) [ 172.201419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.206532] ? unwind_get_return_address+0x61/0xa0 [ 172.211470] ? __save_stack_trace+0x7e/0xd0 [ 172.215804] ? graph_lock+0x170/0x170 [ 172.219621] ? find_held_lock+0x36/0x1c0 [ 172.223697] ? __lock_is_held+0xb5/0x140 [ 172.227785] ? check_same_owner+0x320/0x320 [ 172.232120] ? rcu_note_context_switch+0x710/0x710 [ 172.237068] should_failslab+0x124/0x180 [ 172.241141] kmem_cache_alloc_trace+0x2cb/0x780 [ 172.245819] ? __kmalloc_node+0x33/0x70 [ 172.249800] ? __kmalloc_node+0x33/0x70 [ 172.253788] ? rcu_read_lock_sched_held+0x108/0x120 [ 172.258815] __memcg_init_list_lru_node+0x17c/0x2c0 [ 172.263841] ? list_lru_add+0x850/0x850 [ 172.267812] ? __kmalloc_node+0x47/0x70 [ 172.271786] __list_lru_init+0x45e/0x7b0 [ 172.275845] ? list_lru_destroy+0x4c0/0x4c0 [ 172.280153] ? __raw_spin_lock_init+0x1c/0x100 [ 172.284729] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 172.289745] ? lockdep_init_map+0x9/0x10 [ 172.293798] sget_userns+0x706/0xf20 [ 172.297497] ? kill_litter_super+0x90/0x90 [ 172.301722] ? ns_test_super+0x50/0x50 [ 172.305611] ? destroy_unused_super.part.9+0x100/0x100 [ 172.310874] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 172.315443] ? kasan_check_write+0x14/0x20 [ 172.319664] ? do_raw_spin_lock+0xc1/0x200 [ 172.323891] ? blkdev_get+0xc0/0xb30 [ 172.327593] ? cap_capable+0x1f9/0x260 [ 172.331473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.336994] ? security_capable+0xa4/0xd0 [ 172.341135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 172.346657] ? ns_capable_common+0x13f/0x170 [ 172.351055] ? kill_litter_super+0x90/0x90 [ 172.355271] sget+0x10b/0x150 [ 172.358363] ? ns_test_super+0x50/0x50 [ 172.362242] mount_bdev+0x111/0x3e0 [ 172.365857] ? load_system_files+0x7f70/0x7f70 [ 172.370427] ntfs_mount+0x34/0x40 [ 172.373865] mount_fs+0xae/0x328 [ 172.377216] ? mpi_free.cold.1+0x19/0x19 [ 172.381270] vfs_kern_mount.part.34+0xd4/0x4d0 [ 172.385839] ? may_umount+0xb0/0xb0 [ 172.389453] ? _raw_read_unlock+0x22/0x30 [ 172.393589] ? __get_fs_type+0x97/0xc0 [ 172.397468] do_mount+0x564/0x3070 [ 172.400996] ? lock_downgrade+0x8e0/0x8e0 [ 172.405140] ? copy_mount_string+0x40/0x40 [ 172.409363] ? check_same_owner+0x320/0x320 [ 172.413669] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 172.418669] ? __check_object_size+0x95/0x5d9 [ 172.423154] ? __might_sleep+0x95/0x190 [ 172.427122] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 172.432645] ? _copy_from_user+0xdf/0x150 [ 172.436785] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 172.442306] ? copy_mount_options+0x285/0x380 [ 172.446788] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 172.452311] ksys_mount+0x12d/0x140 [ 172.455928] SyS_mount+0x35/0x50 [ 172.459278] ? ksys_mount+0x140/0x140 [ 172.463064] do_syscall_64+0x29e/0x9d0 [ 172.466935] ? vmalloc_sync_all+0x30/0x30 [ 172.471073] ? _raw_spin_unlock_irq+0x27/0x70 [ 172.475551] ? finish_task_switch+0x1ca/0x820 [ 172.480037] ? syscall_return_slowpath+0x5c0/0x5c0 [ 172.484959] ? syscall_return_slowpath+0x30f/0x5c0 [ 172.489879] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 172.495236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 172.500071] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2033/05/18 03:46:54 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 172.505243] RIP: 0033:0x4552d9 [ 172.508417] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.516110] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 172.523364] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 172.530616] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.537869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 172.545120] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000018 2033/05/18 03:46:54 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000780)={0x9, 0x2, 0x7fffffff, 0x0, 0x0, [], [], [], 0x3, 0x7}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req={0x6, 0x200, 0x7ff, 0x2}, 0x10) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700)='/dev/hwrng\x00', 0x400, 0x0) linkat(r1, &(0x7f00000006c0)='./file0\x00', r2, &(0x7f00000008c0)='./file0\x00', 0x1400) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) syz_mount_image$bfs(&(0x7f0000000280)='bfs\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000480)=[{&(0x7f0000000300)="4fdaf8c2e27a36b0c7e6b5d6fb5f1b33bce4b0729de71738f12d2cf41a3394a0601cf5144b3884197f3355e4199f4f751e0db40babea51a6ce9c71ba80a4b6b843e4c9ec870fd7083ecd28d199d5dedfbcc1f333518db576fca7668324a86dd559e643f882375d483365673b555d9081aa4d1da3f5dd2de55b4cbd85e0f4cebb1e1944f28f508150bfc6b67d6ea7956a07", 0x91, 0xffffffffffff8000}], 0x2010, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x1, 0xe4d}, 0x8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000640)=0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x10000, 0x8, 0x352, 0xffffffffffffff67, 0x0, 0x9e85, 0x1400, 0x4, 0xde9, 0x1, 0x9, 0x8, 0x9232, 0x1ff, 0x1, 0x5, 0x10000, 0x6a, 0x4, 0x5, 0x7f, 0x7, 0x100, 0x800, 0x2, 0x100, 0x20, 0x4, 0x2, 0xdcf, 0x9, 0x3f, 0x40, 0x1, 0x9, 0x4, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000540)}, 0x1000, 0x200, 0x7, 0x0, 0xa8, 0x4cd2, 0x9b6c}, r5, 0x8, r1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:54 executing program 5 (fault-call:5 fault-nth:25): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) 2033/05/18 03:46:54 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) flistxattr(r0, &(0x7f0000000000)=""/87, 0x57) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000152000/0x1000)=nil, 0x1000}) 2033/05/18 03:46:54 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:54 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 172.786325] FAULT_INJECTION: forcing a failure. [ 172.786325] name failslab, interval 1, probability 0, space 0, times 0 [ 172.797629] CPU: 1 PID: 16296 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 172.804475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.813837] Call Trace: [ 172.816438] dump_stack+0x1b9/0x29f [ 172.820077] ? arch_local_irq_restore+0x52/0x52 [ 172.824751] ? __save_stack_trace+0x7e/0xd0 [ 172.829084] should_fail.cold.4+0xa/0x1a [ 172.833154] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 172.838258] ? kasan_kmalloc+0xc4/0xe0 [ 172.842151] ? kmem_cache_alloc_trace+0x152/0x780 [ 172.846999] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 172.852192] ? __list_lru_init+0x45e/0x7b0 [ 172.856437] ? sget_userns+0x706/0xf20 [ 172.860329] ? sget+0x10b/0x150 [ 172.863616] ? graph_lock+0x170/0x170 [ 172.867425] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 172.872191] ? do_mount+0x564/0x3070 [ 172.875910] ? ksys_mount+0x12d/0x140 [ 172.879718] ? SyS_mount+0x35/0x50 [ 172.883265] ? do_syscall_64+0x29e/0x9d0 [ 172.887328] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 172.892701] ? find_held_lock+0x36/0x1c0 [ 172.896769] ? __lock_is_held+0xb5/0x140 [ 172.900849] ? check_same_owner+0x320/0x320 [ 172.905178] ? rcu_note_context_switch+0x710/0x710 [ 172.910129] should_failslab+0x124/0x180 [ 172.914211] kmem_cache_alloc_trace+0x2cb/0x780 [ 172.918886] ? __kmalloc_node+0x33/0x70 [ 172.922863] ? __kmalloc_node+0x33/0x70 [ 172.926848] ? rcu_read_lock_sched_held+0x108/0x120 [ 172.931877] __memcg_init_list_lru_node+0x17c/0x2c0 [ 172.936904] ? list_lru_add+0x850/0x850 [ 172.940969] ? __kmalloc_node+0x47/0x70 [ 172.944949] __list_lru_init+0x45e/0x7b0 [ 172.949020] ? list_lru_destroy+0x4c0/0x4c0 [ 172.953343] ? __raw_spin_lock_init+0x1c/0x100 [ 172.957934] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 172.962961] ? lockdep_init_map+0x9/0x10 [ 172.967023] sget_userns+0x706/0xf20 [ 172.970747] ? kill_litter_super+0x90/0x90 [ 172.974988] ? ns_test_super+0x50/0x50 [ 172.978878] ? destroy_unused_super.part.9+0x100/0x100 [ 172.984155] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 172.988739] ? kasan_check_write+0x14/0x20 [ 172.992971] ? do_raw_spin_lock+0xc1/0x200 [ 172.997214] ? blkdev_get+0xc0/0xb30 [ 173.000933] ? cap_capable+0x1f9/0x260 [ 173.004829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.010364] ? security_capable+0xa4/0xd0 [ 173.014524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.020058] ? ns_capable_common+0x13f/0x170 [ 173.024472] ? kill_litter_super+0x90/0x90 [ 173.028706] sget+0x10b/0x150 [ 173.031797] ? ns_test_super+0x50/0x50 [ 173.035665] mount_bdev+0x111/0x3e0 [ 173.039274] ? load_system_files+0x7f70/0x7f70 [ 173.043839] ntfs_mount+0x34/0x40 [ 173.047273] mount_fs+0xae/0x328 [ 173.050622] ? mpi_free.cold.1+0x19/0x19 [ 173.054667] vfs_kern_mount.part.34+0xd4/0x4d0 [ 173.059230] ? may_umount+0xb0/0xb0 [ 173.062837] ? _raw_read_unlock+0x22/0x30 [ 173.066967] ? __get_fs_type+0x97/0xc0 [ 173.070838] do_mount+0x564/0x3070 [ 173.074361] ? lock_downgrade+0x8e0/0x8e0 [ 173.078495] ? copy_mount_string+0x40/0x40 [ 173.082709] ? check_same_owner+0x320/0x320 [ 173.087017] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 173.092019] ? __check_object_size+0x95/0x5d9 [ 173.096499] ? __might_sleep+0x95/0x190 [ 173.100458] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 173.105977] ? _copy_from_user+0xdf/0x150 [ 173.110107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 173.115624] ? copy_mount_options+0x285/0x380 [ 173.120102] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 173.125621] ksys_mount+0x12d/0x140 [ 173.129230] SyS_mount+0x35/0x50 [ 173.132579] ? ksys_mount+0x140/0x140 [ 173.136361] do_syscall_64+0x29e/0x9d0 [ 173.140229] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 173.145056] ? syscall_return_slowpath+0x5c0/0x5c0 [ 173.149966] ? syscall_return_slowpath+0x30f/0x5c0 [ 173.154879] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 173.160227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 173.165056] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 173.170224] RIP: 0033:0x4552d9 [ 173.173392] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) 2033/05/18 03:46:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7f, 0x200) fcntl$setpipe(r0, 0x407, 0x4ea6c1c3) fadvise64(r1, 0x0, 0x0, 0x4) 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) r1 = semget(0x1, 0x7, 0x2) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000140)=""/234) bind(r0, &(0x7f0000000640)=@generic={0x0, "ea57b0cf6bbe78a25743e4b8a59ba79dc5c0315c16fa5cf033def4b646892547f40841b496b4ef7ed8c7d45a3aa6274a52ef9cb8fe2c76d0ff8f171bfd773803ef28b7b25bd93d9a084a298f780df578943d1d6c44478916cab4738ed7e57dddce45b3ee37303075bfcd2ba2c5aae0fa99d7c5fab40222586021120942e2"}, 0x80) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'em1\x00'}, &(0x7f0000000100)="5ef400", 0x3, 0x1) 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb9952989", 0xb) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000003080)="26fe6bbd22e1c516390d2def920057d19b8834c5f714cf28a5f622f9a64db7c134e76f50cc0e0ee56f0defcca50b1193fb7047512fe18f51719fca6026c58c80ff0b0bc389779cc6dcff86353e65b9762dc50a5f44059df2e170abc6589ac48030b9e1b75ebefea6b5e9ee4dc386ee149e41b0d09f970e0f4862943c663255f686", 0x81}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0xfffffffffffffdc8, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001600)=""/193, 0xc1}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffa) 2033/05/18 03:46:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1565feb9a094498e87e8ab170133deae45b5c94357bb697961d7af0000000000000000bd80ff63b967192b4edd465d773425a70101c5b32ab699d066c8f5af879043d5b5815dd82264c0d49f8f2ad50bd0b7d0000001000000000015ee48da129a54", 0x62, 0x4c07d, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffffffffffffc, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmsg(r0, &(0x7f0000001a80)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000003fc0)="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", 0x3e1}], 0x1}, 0x2404c040) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={r2, r3/1000+30000}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000683ff0)=[{0x6, 0x0, 0x0, 0x803}]}, 0x10) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002840)="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", 0x78b}], 0x1, &(0x7f0000000040)}, 0x0) 2033/05/18 03:46:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) [ 173.181082] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 173.188330] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 173.195581] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.202829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 173.210076] R13: 00000000000003fa R14: 00000000006f9010 R15: 0000000000000019 2033/05/18 03:46:55 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:55 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:55 executing program 6: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:55 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c653006", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000000), 0x356) socket$inet6(0xa, 0x8000f, 0xb3d) 2033/05/18 03:46:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecaffc)=0x0) setpriority(0x0, r2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) 2033/05/18 03:46:55 executing program 5 (fault-call:5 fault-nth:26): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:55 executing program 1: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="b8710000000f23c00f21f835010001000f23f8c4c2fd205e7f0f01d164f20f78d1a30066ba430066b8001066ef0f3526d406b88e2900000f23d80f21f835800000000f23f80f320f07", 0x49}], 0x1, 0x8, &(0x7f00000002c0), 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000002c0)={0x41, &(0x7f0000000240)="bcff56e77d02247a23ad1c541c3e8b17c6fd5546cf731ae4b41376e66c2e8cecc670e7c504c99fe9296abf1fcf9da5b674cf442c02da7deceeaaf504750ac4a11b"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0200000", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf250d0000001c0001000800010000000000080002000000000008000200670000000800050006000000180002001400010000000000000000000000000000000000080005001a0000007800010014000300fe8000000000000000000000000000aa08000100020000000c00070031000000060000000c0007000200000020000000080004004e21000014000300ac1414bb00000000000000000000000008000b00736970000800010002000000080001000a0000000c0007000200000028000000"], 0x1e5}, 0x1, 0x0, 0x0, 0x1}, 0x40080) [ 173.906013] FAULT_INJECTION: forcing a failure. [ 173.906013] name failslab, interval 1, probability 0, space 0, times 0 [ 173.917390] CPU: 0 PID: 16434 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 173.924230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.933577] Call Trace: [ 173.936147] dump_stack+0x1b9/0x29f [ 173.939760] ? arch_local_irq_restore+0x52/0x52 [ 173.944412] ? __save_stack_trace+0x7e/0xd0 [ 173.948720] should_fail.cold.4+0xa/0x1a [ 173.952772] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 173.957859] ? kasan_kmalloc+0xc4/0xe0 [ 173.961727] ? kmem_cache_alloc_trace+0x152/0x780 [ 173.966549] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 173.971721] ? __list_lru_init+0x45e/0x7b0 [ 173.975938] ? sget_userns+0x706/0xf20 [ 173.979801] ? sget+0x10b/0x150 [ 173.983061] ? graph_lock+0x170/0x170 [ 173.986843] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 173.991576] ? do_mount+0x564/0x3070 [ 173.995267] ? ksys_mount+0x12d/0x140 [ 173.999047] ? SyS_mount+0x35/0x50 [ 174.002565] ? do_syscall_64+0x29e/0x9d0 [ 174.006616] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.012065] ? find_held_lock+0x36/0x1c0 [ 174.016111] ? __lock_is_held+0xb5/0x140 [ 174.020162] ? check_same_owner+0x320/0x320 [ 174.024494] ? rcu_note_context_switch+0x710/0x710 [ 174.029415] should_failslab+0x124/0x180 [ 174.033467] kmem_cache_alloc_trace+0x2cb/0x780 [ 174.038117] ? __kmalloc_node+0x33/0x70 [ 174.042083] ? __kmalloc_node+0x33/0x70 [ 174.046042] ? rcu_read_lock_sched_held+0x108/0x120 [ 174.051047] __memcg_init_list_lru_node+0x17c/0x2c0 [ 174.056049] ? list_lru_add+0x850/0x850 [ 174.060004] ? __kmalloc_node+0x47/0x70 [ 174.063967] __list_lru_init+0x45e/0x7b0 [ 174.068020] ? list_lru_destroy+0x4c0/0x4c0 [ 174.072341] ? __raw_spin_lock_init+0x1c/0x100 [ 174.076910] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 174.081906] ? lockdep_init_map+0x9/0x10 [ 174.085948] sget_userns+0x706/0xf20 [ 174.089648] ? kill_litter_super+0x90/0x90 [ 174.093866] ? ns_test_super+0x50/0x50 [ 174.097738] ? destroy_unused_super.part.9+0x100/0x100 [ 174.102991] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 174.107557] ? kasan_check_write+0x14/0x20 [ 174.111770] ? do_raw_spin_lock+0xc1/0x200 [ 174.115988] ? blkdev_get+0xc0/0xb30 [ 174.119685] ? cap_capable+0x1f9/0x260 [ 174.123556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.129071] ? security_capable+0xa4/0xd0 [ 174.133212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.138737] ? ns_capable_common+0x13f/0x170 [ 174.143123] ? kill_litter_super+0x90/0x90 [ 174.147340] sget+0x10b/0x150 [ 174.150433] ? ns_test_super+0x50/0x50 [ 174.154298] mount_bdev+0x111/0x3e0 [ 174.157903] ? load_system_files+0x7f70/0x7f70 [ 174.162465] ntfs_mount+0x34/0x40 [ 174.165974] mount_fs+0xae/0x328 [ 174.169318] ? mpi_free.cold.1+0x19/0x19 [ 174.173362] vfs_kern_mount.part.34+0xd4/0x4d0 [ 174.177923] ? may_umount+0xb0/0xb0 [ 174.181543] ? _raw_read_unlock+0x22/0x30 [ 174.185670] ? __get_fs_type+0x97/0xc0 [ 174.189539] do_mount+0x564/0x3070 [ 174.193057] ? lock_downgrade+0x8e0/0x8e0 [ 174.197187] ? copy_mount_string+0x40/0x40 [ 174.201400] ? check_same_owner+0x320/0x320 [ 174.205699] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 174.210693] ? __check_object_size+0x95/0x5d9 [ 174.215170] ? __might_sleep+0x95/0x190 [ 174.219138] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.224663] ? _copy_from_user+0xdf/0x150 [ 174.228790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.234307] ? copy_mount_options+0x285/0x380 [ 174.238782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.244299] ksys_mount+0x12d/0x140 [ 174.247907] SyS_mount+0x35/0x50 [ 174.251249] ? ksys_mount+0x140/0x140 [ 174.255037] do_syscall_64+0x29e/0x9d0 [ 174.258914] ? vmalloc_sync_all+0x30/0x30 [ 174.263048] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.267524] ? finish_task_switch+0x1ca/0x820 [ 174.271998] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.276923] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.281834] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.287177] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.292005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.297181] RIP: 0033:0x4552d9 [ 174.300348] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2033/05/18 03:46:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:56 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000001c0)={0x0, 0x3f, 0x200, 0x0, 0x5, 0x3, 0x3fc00000, 0x7, 0x629c4bd7, 0x5, 0xffffffff00000001, 0x5}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2033/05/18 03:46:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1ae, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000ae75aee01a8586dd60e3060000183aff00000000000000000000ffffffffffffff020000000000000000000000000001c700907800000000fe8000000000000000000000000000ff"], 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2040, 0x0) ioctl$TCFLSH(r0, 0x540b, 0xa143) 2033/05/18 03:46:56 executing program 5 (fault-call:5 fault-nth:27): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 1: r0 = socket(0x100000001e, 0x1, 0x0) setsockopt(r0, 0x100000040000010f, 0x7f, &(0x7f00000000c0), 0x0) [ 174.308037] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 174.315283] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 174.322539] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.329794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 174.337043] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001a [ 174.462854] FAULT_INJECTION: forcing a failure. [ 174.462854] name failslab, interval 1, probability 0, space 0, times 0 [ 174.474225] CPU: 1 PID: 16468 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 174.481242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.490599] Call Trace: [ 174.493204] dump_stack+0x1b9/0x29f [ 174.496861] ? arch_local_irq_restore+0x52/0x52 [ 174.501544] ? __save_stack_trace+0x7e/0xd0 [ 174.505879] should_fail.cold.4+0xa/0x1a [ 174.509936] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 174.515038] ? kasan_kmalloc+0xc4/0xe0 [ 174.518914] ? kmem_cache_alloc_trace+0x152/0x780 [ 174.523742] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 174.528916] ? __list_lru_init+0x45e/0x7b0 [ 174.533140] ? sget_userns+0x706/0xf20 [ 174.537018] ? sget+0x10b/0x150 [ 174.540295] ? graph_lock+0x170/0x170 [ 174.544085] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 174.548825] ? do_mount+0x564/0x3070 [ 174.552529] ? ksys_mount+0x12d/0x140 [ 174.556317] ? SyS_mount+0x35/0x50 [ 174.559846] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.565202] ? find_held_lock+0x36/0x1c0 [ 174.569256] ? __lock_is_held+0xb5/0x140 [ 174.573317] ? check_same_owner+0x320/0x320 [ 174.577631] ? rcu_note_context_switch+0x710/0x710 [ 174.582556] should_failslab+0x124/0x180 [ 174.586608] kmem_cache_alloc_trace+0x2cb/0x780 [ 174.591264] ? __kmalloc_node+0x33/0x70 [ 174.595227] ? __kmalloc_node+0x33/0x70 [ 174.599194] ? rcu_read_lock_sched_held+0x108/0x120 [ 174.604209] __memcg_init_list_lru_node+0x17c/0x2c0 [ 174.609216] ? list_lru_add+0x850/0x850 [ 174.613185] ? __kmalloc_node+0x47/0x70 [ 174.617154] __list_lru_init+0x45e/0x7b0 [ 174.621208] ? list_lru_destroy+0x4c0/0x4c0 [ 174.626151] ? __raw_spin_lock_init+0x1c/0x100 [ 174.630725] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 174.635738] ? lockdep_init_map+0x9/0x10 [ 174.639787] sget_userns+0x706/0xf20 [ 174.643489] ? kill_litter_super+0x90/0x90 [ 174.647712] ? ns_test_super+0x50/0x50 [ 174.651589] ? destroy_unused_super.part.9+0x100/0x100 [ 174.656848] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 174.661422] ? kasan_check_write+0x14/0x20 [ 174.665639] ? do_raw_spin_lock+0xc1/0x200 [ 174.669866] ? blkdev_get+0xc0/0xb30 [ 174.673568] ? cap_capable+0x1f9/0x260 [ 174.677448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.682971] ? security_capable+0xa4/0xd0 [ 174.687110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 174.692634] ? ns_capable_common+0x13f/0x170 [ 174.697039] ? kill_litter_super+0x90/0x90 [ 174.701259] sget+0x10b/0x150 [ 174.704351] ? ns_test_super+0x50/0x50 [ 174.708227] mount_bdev+0x111/0x3e0 [ 174.711838] ? load_system_files+0x7f70/0x7f70 [ 174.716410] ntfs_mount+0x34/0x40 [ 174.719853] mount_fs+0xae/0x328 [ 174.723203] ? mpi_free.cold.1+0x19/0x19 [ 174.727255] vfs_kern_mount.part.34+0xd4/0x4d0 [ 174.731824] ? may_umount+0xb0/0xb0 [ 174.735439] ? _raw_read_unlock+0x22/0x30 [ 174.739572] ? __get_fs_type+0x97/0xc0 [ 174.743454] do_mount+0x564/0x3070 [ 174.746979] ? lock_downgrade+0x8e0/0x8e0 [ 174.751121] ? copy_mount_string+0x40/0x40 [ 174.755342] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 174.760343] ? __check_object_size+0x95/0x5d9 [ 174.764831] ? __might_sleep+0x95/0x190 [ 174.768799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.774322] ? _copy_from_user+0xdf/0x150 [ 174.778459] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.783984] ? copy_mount_options+0x285/0x380 [ 174.788466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 174.793998] ksys_mount+0x12d/0x140 [ 174.797650] SyS_mount+0x35/0x50 [ 174.801007] ? ksys_mount+0x140/0x140 [ 174.804808] do_syscall_64+0x29e/0x9d0 [ 174.808682] ? vmalloc_sync_all+0x30/0x30 [ 174.812817] ? _raw_spin_unlock_irq+0x27/0x70 [ 174.817303] ? finish_task_switch+0x1ca/0x820 [ 174.821786] ? syscall_return_slowpath+0x5c0/0x5c0 [ 174.826701] ? syscall_return_slowpath+0x30f/0x5c0 [ 174.831622] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 174.836977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 174.841815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 174.846989] RIP: 0033:0x4552d9 [ 174.850167] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.857862] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 174.865116] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 174.872369] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.879621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 174.886872] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001b 2033/05/18 03:46:56 executing program 1: 2033/05/18 03:46:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:56 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 4: 2033/05/18 03:46:56 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c65307f", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:56 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = accept(0xffffffffffffff9c, &(0x7f00000002c0)=@hci, &(0x7f0000000340)=0x80) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000380)={{0x3, 0x1}, 0x4}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r2) getpeername$netrom(r2, &(0x7f0000000240), &(0x7f0000000280)=0x10) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x6) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r2}) write$eventfd(r2, &(0x7f0000000480)=0x81, 0x8) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:56 executing program 5 (fault-call:5 fault-nth:28): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 175.112437] __ntfs_error: 41 callbacks suppressed [ 175.112447] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 175.125794] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 175.137881] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:56 executing program 1: 2033/05/18 03:46:56 executing program 4: [ 175.164913] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 175.173392] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 175.185512] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. 2033/05/18 03:46:57 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x400000, 0x0) close(r1) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000040)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000480)=""/245, &(0x7f0000000180)=0xf5) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000280)={r2, &(0x7f0000000200)=""/67}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:57 executing program 1: 2033/05/18 03:46:57 executing program 4: 2033/05/18 03:46:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:57 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 1: 2033/05/18 03:46:57 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 4: 2033/05/18 03:46:57 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) [ 175.498881] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 175.501721] FAULT_INJECTION: forcing a failure. [ 175.501721] name failslab, interval 1, probability 0, space 0, times 0 [ 175.507363] ntfs: (device loop2): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 175.507382] ntfs: (device loop2): ntfs_fill_super(): Not an NTFS volume. [ 175.518622] CPU: 0 PID: 16564 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 175.544267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.553617] Call Trace: [ 175.556214] dump_stack+0x1b9/0x29f [ 175.559849] ? arch_local_irq_restore+0x52/0x52 [ 175.564523] ? __save_stack_trace+0x7e/0xd0 [ 175.568857] should_fail.cold.4+0xa/0x1a [ 175.572919] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 175.578024] ? kasan_kmalloc+0xc4/0xe0 [ 175.581918] ? kmem_cache_alloc_trace+0x152/0x780 [ 175.586769] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 175.591962] ? __list_lru_init+0x45e/0x7b0 [ 175.596194] ? sget_userns+0x706/0xf20 [ 175.600082] ? sget+0x10b/0x150 [ 175.603362] ? graph_lock+0x170/0x170 [ 175.607162] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 175.611917] ? do_mount+0x564/0x3070 [ 175.615630] ? ksys_mount+0x12d/0x140 [ 175.619433] ? SyS_mount+0x35/0x50 [ 175.622983] ? do_syscall_64+0x29e/0x9d0 [ 175.627048] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.632419] ? find_held_lock+0x36/0x1c0 [ 175.636492] ? __lock_is_held+0xb5/0x140 [ 175.640567] ? check_same_owner+0x320/0x320 [ 175.644892] ? rcu_note_context_switch+0x710/0x710 [ 175.649829] should_failslab+0x124/0x180 [ 175.653898] kmem_cache_alloc_trace+0x2cb/0x780 [ 175.658571] ? __kmalloc_node+0x33/0x70 [ 175.662549] ? __kmalloc_node+0x33/0x70 [ 175.666530] ? rcu_read_lock_sched_held+0x108/0x120 [ 175.671537] __memcg_init_list_lru_node+0x17c/0x2c0 [ 175.676548] ? list_lru_add+0x850/0x850 [ 175.680503] ? __kmalloc_node+0x47/0x70 [ 175.684468] __list_lru_init+0x45e/0x7b0 [ 175.688515] ? list_lru_destroy+0x4c0/0x4c0 [ 175.692818] ? __raw_spin_lock_init+0x1c/0x100 [ 175.697387] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 175.702387] ? lockdep_init_map+0x9/0x10 [ 175.706431] sget_userns+0x706/0xf20 [ 175.710125] ? kill_litter_super+0x90/0x90 [ 175.714344] ? ns_test_super+0x50/0x50 [ 175.718213] ? destroy_unused_super.part.9+0x100/0x100 [ 175.723472] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 175.728040] ? kasan_check_write+0x14/0x20 [ 175.732256] ? do_raw_spin_lock+0xc1/0x200 [ 175.736477] ? blkdev_get+0xc0/0xb30 [ 175.740174] ? cap_capable+0x1f9/0x260 [ 175.744047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.749569] ? security_capable+0xa4/0xd0 [ 175.753701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 175.759223] ? ns_capable_common+0x13f/0x170 [ 175.763615] ? kill_litter_super+0x90/0x90 [ 175.767831] sget+0x10b/0x150 [ 175.770918] ? ns_test_super+0x50/0x50 [ 175.775221] mount_bdev+0x111/0x3e0 [ 175.778832] ? load_system_files+0x7f70/0x7f70 [ 175.783395] ntfs_mount+0x34/0x40 [ 175.786829] mount_fs+0xae/0x328 [ 175.790180] ? mpi_free.cold.1+0x19/0x19 [ 175.794889] vfs_kern_mount.part.34+0xd4/0x4d0 [ 175.799463] ? may_umount+0xb0/0xb0 [ 175.803074] ? _raw_read_unlock+0x22/0x30 [ 175.807203] ? __get_fs_type+0x97/0xc0 [ 175.811075] do_mount+0x564/0x3070 [ 175.814596] ? lock_downgrade+0x8e0/0x8e0 [ 175.818731] ? copy_mount_string+0x40/0x40 [ 175.823037] ? check_same_owner+0x320/0x320 [ 175.827338] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 175.832338] ? __check_object_size+0x95/0x5d9 [ 175.836820] ? __might_sleep+0x95/0x190 [ 175.840778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.846299] ? _copy_from_user+0xdf/0x150 [ 175.850433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.855954] ? copy_mount_options+0x285/0x380 [ 175.860431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 175.865956] ksys_mount+0x12d/0x140 [ 175.869566] SyS_mount+0x35/0x50 [ 175.872915] ? ksys_mount+0x140/0x140 [ 175.876699] do_syscall_64+0x29e/0x9d0 [ 175.880569] ? vmalloc_sync_all+0x30/0x30 [ 175.884703] ? _raw_spin_unlock_irq+0x27/0x70 [ 175.889179] ? finish_task_switch+0x1ca/0x820 [ 175.893655] ? syscall_return_slowpath+0x5c0/0x5c0 [ 175.898566] ? syscall_return_slowpath+0x30f/0x5c0 [ 175.903482] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 175.908833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 175.913661] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 175.918830] RIP: 0033:0x4552d9 [ 175.922000] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 175.929784] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 175.937041] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 2033/05/18 03:46:57 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 175.944288] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.951538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 175.958785] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001c [ 176.001540] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. 2033/05/18 03:46:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000", @ANYRES16=r1, @ANYBLOB="29072900000000002000040000c592000000000000"], 0x3}, 0x1}, 0x0) 2033/05/18 03:46:57 executing program 4: 2033/05/18 03:46:57 executing program 1: 2033/05/18 03:46:57 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 5 (fault-call:5 fault-nth:29): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c653005", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:57 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0xa44}, 0x4) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:58 executing program 4: 2033/05/18 03:46:58 executing program 1: [ 176.308895] FAULT_INJECTION: forcing a failure. [ 176.308895] name failslab, interval 1, probability 0, space 0, times 0 [ 176.320282] CPU: 1 PID: 16635 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 176.327132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.336488] Call Trace: [ 176.339086] dump_stack+0x1b9/0x29f [ 176.342725] ? arch_local_irq_restore+0x52/0x52 [ 176.347406] ? __save_stack_trace+0x7e/0xd0 [ 176.351747] should_fail.cold.4+0xa/0x1a [ 176.355824] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 176.360939] ? kasan_kmalloc+0xc4/0xe0 [ 176.364834] ? kmem_cache_alloc_trace+0x152/0x780 [ 176.369686] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 176.374883] ? __list_lru_init+0x45e/0x7b0 [ 176.379126] ? sget_userns+0x706/0xf20 [ 176.383016] ? sget+0x10b/0x150 [ 176.386303] ? graph_lock+0x170/0x170 [ 176.390112] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 176.394874] ? do_mount+0x564/0x3070 [ 176.398596] ? ksys_mount+0x12d/0x140 [ 176.402407] ? SyS_mount+0x35/0x50 [ 176.405956] ? do_syscall_64+0x29e/0x9d0 [ 176.410026] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.415410] ? find_held_lock+0x36/0x1c0 [ 176.419485] ? __lock_is_held+0xb5/0x140 [ 176.423567] ? check_same_owner+0x320/0x320 [ 176.427889] ? rcu_note_context_switch+0x710/0x710 [ 176.432811] should_failslab+0x124/0x180 [ 176.436857] kmem_cache_alloc_trace+0x2cb/0x780 [ 176.441510] ? __kmalloc_node+0x33/0x70 [ 176.445471] ? __kmalloc_node+0x33/0x70 [ 176.449434] ? rcu_read_lock_sched_held+0x108/0x120 [ 176.454440] __memcg_init_list_lru_node+0x17c/0x2c0 [ 176.459443] ? list_lru_add+0x850/0x850 [ 176.463407] ? __kmalloc_node+0x47/0x70 [ 176.467370] __list_lru_init+0x45e/0x7b0 [ 176.471420] ? list_lru_destroy+0x4c0/0x4c0 [ 176.475722] ? __raw_spin_lock_init+0x1c/0x100 [ 176.480289] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 176.485293] ? lockdep_init_map+0x9/0x10 [ 176.489339] sget_userns+0x706/0xf20 [ 176.493040] ? kill_litter_super+0x90/0x90 [ 176.497263] ? ns_test_super+0x50/0x50 [ 176.501133] ? destroy_unused_super.part.9+0x100/0x100 [ 176.506392] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 176.510961] ? kasan_check_write+0x14/0x20 [ 176.515178] ? do_raw_spin_lock+0xc1/0x200 [ 176.519403] ? blkdev_get+0xc0/0xb30 [ 176.523102] ? cap_capable+0x1f9/0x260 [ 176.526979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 176.532499] ? security_capable+0xa4/0xd0 [ 176.536633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 176.542151] ? ns_capable_common+0x13f/0x170 [ 176.546547] ? kill_litter_super+0x90/0x90 [ 176.550766] sget+0x10b/0x150 [ 176.553854] ? ns_test_super+0x50/0x50 [ 176.557726] mount_bdev+0x111/0x3e0 [ 176.561338] ? load_system_files+0x7f70/0x7f70 [ 176.565904] ntfs_mount+0x34/0x40 [ 176.569342] mount_fs+0xae/0x328 [ 176.572690] ? mpi_free.cold.1+0x19/0x19 [ 176.576738] vfs_kern_mount.part.34+0xd4/0x4d0 [ 176.581305] ? may_umount+0xb0/0xb0 [ 176.584938] ? _raw_read_unlock+0x22/0x30 [ 176.589077] ? __get_fs_type+0x97/0xc0 [ 176.592954] do_mount+0x564/0x3070 [ 176.596479] ? lock_downgrade+0x8e0/0x8e0 [ 176.600615] ? copy_mount_string+0x40/0x40 [ 176.604831] ? check_same_owner+0x320/0x320 [ 176.609136] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 176.614135] ? __check_object_size+0x95/0x5d9 [ 176.618617] ? __might_sleep+0x95/0x190 [ 176.622593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 176.628826] ? _copy_from_user+0xdf/0x150 [ 176.632962] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 176.638482] ? copy_mount_options+0x285/0x380 [ 176.642961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 176.648485] ksys_mount+0x12d/0x140 [ 176.652096] SyS_mount+0x35/0x50 [ 176.655447] ? ksys_mount+0x140/0x140 [ 176.659232] do_syscall_64+0x29e/0x9d0 [ 176.663101] ? vmalloc_sync_all+0x30/0x30 [ 176.667230] ? _raw_spin_unlock_irq+0x27/0x70 [ 176.671708] ? finish_task_switch+0x1ca/0x820 [ 176.676188] ? syscall_return_slowpath+0x5c0/0x5c0 [ 176.681103] ? syscall_return_slowpath+0x30f/0x5c0 [ 176.686025] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 176.691375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 176.696208] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 176.701380] RIP: 0033:0x4552d9 2033/05/18 03:46:58 executing program 1: [ 176.704550] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.712241] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 176.719489] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 176.726741] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 176.733993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 176.741246] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001d 2033/05/18 03:46:58 executing program 4: 2033/05/18 03:46:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) 2033/05/18 03:46:58 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:58 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:58 executing program 5 (fault-call:5 fault-nth:30): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:58 executing program 1: 2033/05/18 03:46:58 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:58 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:58 executing program 4: 2033/05/18 03:46:58 executing program 1: 2033/05/18 03:46:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) [ 177.100643] FAULT_INJECTION: forcing a failure. [ 177.100643] name failslab, interval 1, probability 0, space 0, times 0 [ 177.111944] CPU: 1 PID: 16712 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 177.118788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.128142] Call Trace: [ 177.130719] dump_stack+0x1b9/0x29f [ 177.134332] ? arch_local_irq_restore+0x52/0x52 [ 177.138984] ? __save_stack_trace+0x7e/0xd0 [ 177.143294] should_fail.cold.4+0xa/0x1a [ 177.147337] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 177.152424] ? kasan_kmalloc+0xc4/0xe0 [ 177.156298] ? kmem_cache_alloc_trace+0x152/0x780 [ 177.161122] ? __memcg_init_list_lru_node+0x17c/0x2c0 [ 177.166293] ? __list_lru_init+0x45e/0x7b0 [ 177.170510] ? sget_userns+0x706/0xf20 [ 177.174375] ? sget+0x10b/0x150 [ 177.177638] ? graph_lock+0x170/0x170 [ 177.181422] ? vfs_kern_mount.part.34+0xd4/0x4d0 [ 177.186159] ? do_mount+0x564/0x3070 [ 177.189857] ? ksys_mount+0x12d/0x140 [ 177.193640] ? SyS_mount+0x35/0x50 [ 177.197162] ? do_syscall_64+0x29e/0x9d0 [ 177.201210] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.206558] ? find_held_lock+0x36/0x1c0 [ 177.210609] ? __lock_is_held+0xb5/0x140 [ 177.214665] ? check_same_owner+0x320/0x320 [ 177.218969] ? rcu_note_context_switch+0x710/0x710 [ 177.223883] should_failslab+0x124/0x180 [ 177.227933] kmem_cache_alloc_trace+0x2cb/0x780 [ 177.232587] ? __kmalloc_node+0x33/0x70 [ 177.236541] ? __kmalloc_node+0x33/0x70 [ 177.240497] ? rcu_read_lock_sched_held+0x108/0x120 [ 177.245501] __memcg_init_list_lru_node+0x17c/0x2c0 [ 177.250503] ? list_lru_add+0x850/0x850 [ 177.254460] ? __kmalloc_node+0x47/0x70 [ 177.258422] __list_lru_init+0x45e/0x7b0 [ 177.262468] ? list_lru_destroy+0x4c0/0x4c0 [ 177.266773] ? __raw_spin_lock_init+0x1c/0x100 [ 177.271340] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 177.276339] ? lockdep_init_map+0x9/0x10 [ 177.280385] sget_userns+0x706/0xf20 [ 177.284080] ? kill_litter_super+0x90/0x90 [ 177.288301] ? ns_test_super+0x50/0x50 [ 177.292170] ? destroy_unused_super.part.9+0x100/0x100 [ 177.297426] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 177.301988] ? kasan_check_write+0x14/0x20 [ 177.306204] ? do_raw_spin_lock+0xc1/0x200 [ 177.310425] ? blkdev_get+0xc0/0xb30 [ 177.314120] ? cap_capable+0x1f9/0x260 [ 177.317991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.323510] ? security_capable+0xa4/0xd0 [ 177.327641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 177.333158] ? ns_capable_common+0x13f/0x170 [ 177.337548] ? kill_litter_super+0x90/0x90 [ 177.341761] sget+0x10b/0x150 [ 177.344850] ? ns_test_super+0x50/0x50 [ 177.348717] mount_bdev+0x111/0x3e0 [ 177.352328] ? load_system_files+0x7f70/0x7f70 [ 177.356890] ntfs_mount+0x34/0x40 [ 177.360328] mount_fs+0xae/0x328 [ 177.363677] ? mpi_free.cold.1+0x19/0x19 [ 177.367724] vfs_kern_mount.part.34+0xd4/0x4d0 [ 177.372290] ? may_umount+0xb0/0xb0 [ 177.375901] ? _raw_read_unlock+0x22/0x30 [ 177.380035] ? __get_fs_type+0x97/0xc0 [ 177.383908] do_mount+0x564/0x3070 [ 177.387429] ? lock_downgrade+0x8e0/0x8e0 [ 177.391563] ? copy_mount_string+0x40/0x40 [ 177.395781] ? check_same_owner+0x320/0x320 [ 177.400084] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 177.405084] ? __check_object_size+0x95/0x5d9 [ 177.409565] ? __might_sleep+0x95/0x190 [ 177.413527] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.419045] ? _copy_from_user+0xdf/0x150 [ 177.423176] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.428697] ? copy_mount_options+0x285/0x380 [ 177.433175] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 177.438697] ksys_mount+0x12d/0x140 [ 177.442308] SyS_mount+0x35/0x50 [ 177.445656] ? ksys_mount+0x140/0x140 [ 177.449439] do_syscall_64+0x29e/0x9d0 [ 177.453307] ? vmalloc_sync_all+0x30/0x30 [ 177.457437] ? kasan_check_write+0x14/0x20 [ 177.461657] ? syscall_return_slowpath+0x5c0/0x5c0 [ 177.466571] ? syscall_return_slowpath+0x30f/0x5c0 [ 177.471485] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 177.476838] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 177.481667] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 177.486834] RIP: 0033:0x4552d9 [ 177.490003] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 2033/05/18 03:46:59 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\r', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:59 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) [ 177.497702] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 177.504952] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 177.512201] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.519452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 177.526700] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001e 2033/05/18 03:46:59 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x50000000af01, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x104000000) 2033/05/18 03:46:59 executing program 4: 2033/05/18 03:46:59 executing program 7: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYBLOB="29072900000000002000040000c592000000000000"], 0x2}, 0x1}, 0x0) 2033/05/18 03:46:59 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x804, 0xb3) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0207000902000000000000a895f4e827e496bd0800000000"], 0x18}, 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa}, 0x1c) 2033/05/18 03:46:59 executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/37) 2033/05/18 03:46:59 executing program 2: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)="2e2f66696c6530ff", &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:59 executing program 5 (fault-call:5 fault-nth:31): open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:59 executing program 3: open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) r0 = open$dir(&(0x7f0000000500)='./file0\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x0, &(0x7f0000002900), 0x1001, &(0x7f00000005c0)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ea", 0x1}], 0x1, 0x0) mount(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000540)='ntfs\x00', 0x0, 0x0) 2033/05/18 03:46:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x2}, 0x1}, 0x0) [ 178.023687] FAULT_INJECTION: forcing a failure. [ 178.023687] name failslab, interval 1, probability 0, space 0, times 0 [ 178.035320] CPU: 1 PID: 16785 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 178.042266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.051622] Call Trace: [ 178.054219] dump_stack+0x1b9/0x29f [ 178.057857] ? arch_local_irq_restore+0x52/0x52 [ 178.062542] ? debug_check_no_locks_freed+0x310/0x310 [ 178.067744] should_fail.cold.4+0xa/0x1a [ 178.071821] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 178.076937] ? graph_lock+0x170/0x170 [ 178.080755] ? graph_lock+0x170/0x170 [ 178.084574] ? find_held_lock+0x36/0x1c0 [ 178.088650] ? __lock_is_held+0xb5/0x140 [ 178.092727] ? check_same_owner+0x320/0x320 [ 178.097062] ? __raw_spin_lock_init+0x1c/0x100 [ 178.101658] ? rcu_note_context_switch+0x710/0x710 [ 178.106598] ? find_held_lock+0x36/0x1c0 [ 178.110674] should_failslab+0x124/0x180 [ 178.114750] __kmalloc+0x2c8/0x760 [ 178.118296] ? lock_downgrade+0x8e0/0x8e0 [ 178.122454] ? refcount_add_not_zero+0x320/0x320 [ 178.127222] ? register_shrinker+0x121/0x300 [ 178.131646] register_shrinker+0x121/0x300 [ 178.135887] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 178.140476] ? shrink_slab+0xc0/0xc0 [ 178.144195] ? memcpy+0x45/0x50 [ 178.147486] sget_userns+0xc78/0xf20 [ 178.151207] ? kill_litter_super+0x90/0x90 [ 178.155454] ? ns_test_super+0x50/0x50 [ 178.159355] ? destroy_unused_super.part.9+0x100/0x100 [ 178.164641] ? kasan_check_write+0x14/0x20 [ 178.168891] ? blkdev_get+0xc0/0xb30 [ 178.172616] ? cap_capable+0x1f9/0x260 [ 178.176516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.182058] ? security_capable+0xa4/0xd0 [ 178.186221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.191770] ? ns_capable_common+0x13f/0x170 [ 178.196194] ? kill_litter_super+0x90/0x90 [ 178.200429] sget+0x10b/0x150 [ 178.203538] ? ns_test_super+0x50/0x50 [ 178.207429] mount_bdev+0x111/0x3e0 [ 178.211060] ? load_system_files+0x7f70/0x7f70 [ 178.215648] ntfs_mount+0x34/0x40 [ 178.219102] mount_fs+0xae/0x328 [ 178.222473] ? mpi_free.cold.1+0x19/0x19 [ 178.226542] vfs_kern_mount.part.34+0xd4/0x4d0 [ 178.231131] ? may_umount+0xb0/0xb0 [ 178.234767] ? _raw_read_unlock+0x22/0x30 [ 178.239006] ? __get_fs_type+0x97/0xc0 [ 178.242900] do_mount+0x564/0x3070 [ 178.246440] ? lock_downgrade+0x8e0/0x8e0 [ 178.250596] ? copy_mount_string+0x40/0x40 [ 178.254824] ? check_same_owner+0x320/0x320 [ 178.259138] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 178.264136] ? __check_object_size+0x95/0x5d9 [ 178.268626] ? __might_sleep+0x95/0x190 [ 178.272583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.278101] ? _copy_from_user+0xdf/0x150 [ 178.282232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.287756] ? copy_mount_options+0x285/0x380 [ 178.292249] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.297773] ksys_mount+0x12d/0x140 [ 178.301385] SyS_mount+0x35/0x50 [ 178.304739] ? ksys_mount+0x140/0x140 [ 178.308534] do_syscall_64+0x29e/0x9d0 [ 178.312400] ? vmalloc_sync_all+0x30/0x30 [ 178.316528] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 178.321349] ? syscall_return_slowpath+0x5c0/0x5c0 [ 178.326258] ? syscall_return_slowpath+0x30f/0x5c0 [ 178.331171] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.336529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.341368] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.346542] RIP: 0033:0x4552d9 [ 178.349714] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.357422] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 178.364679] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 178.371925] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.379173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 178.386422] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001f [ 178.395123] WARNING: CPU: 1 PID: 16785 at fs/super.c:1148 kill_block_super+0xd9/0x100 [ 178.403096] Kernel panic - not syncing: panic_on_warn set ... [ 178.403096] [ 178.410463] CPU: 1 PID: 16785 Comm: syz-executor5 Not tainted 4.16.0+ #1 [ 178.417287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.426616] Call Trace: [ 178.429187] dump_stack+0x1b9/0x29f [ 178.432799] ? arch_local_irq_restore+0x52/0x52 [ 178.437466] ? kill_block_super+0x60/0x100 [ 178.441688] panic+0x22f/0x4de [ 178.444856] ? add_taint.cold.5+0x16/0x16 [ 178.448984] ? __warn.cold.8+0x148/0x1a3 [ 178.453037] ? kill_block_super+0xd9/0x100 [ 178.457269] __warn.cold.8+0x163/0x1a3 [ 178.461146] ? kill_block_super+0xd9/0x100 [ 178.465362] report_bug+0x252/0x2d0 [ 178.468969] do_error_trap+0x1bc/0x470 [ 178.472836] ? math_error+0x3f0/0x3f0 [ 178.476614] ? wait_on_page_bit_common+0x770/0x770 [ 178.481520] ? do_writepages+0x161/0x1a0 [ 178.485564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.490389] do_invalid_op+0x1b/0x20 [ 178.494092] invalid_op+0x1b/0x40 [ 178.497535] RIP: 0010:kill_block_super+0xd9/0x100 [ 178.502351] RSP: 0018:ffff8801b66b7778 EFLAGS: 00010246 [ 178.507691] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90004ca7000 [ 178.514938] RDX: 0000000000040000 RSI: ffffffff81bbd179 RDI: 0000000000000005 [ 178.522188] RBP: ffff8801b66b7790 R08: ffff8801ac7103c0 R09: 0000000000000006 [ 178.529435] R10: ffff8801ac7103c0 R11: 0000000000000000 R12: ffff8801c9786100 [ 178.536685] R13: 0000000000000000 R14: ffff88018c41a8c0 R15: dffffc0000000000 [ 178.543947] ? kill_block_super+0xd9/0x100 [ 178.548174] ? kill_block_super+0xd9/0x100 [ 178.552389] deactivate_locked_super+0x97/0x100 [ 178.557045] sget_userns+0xc9d/0xf20 [ 178.560755] ? kill_litter_super+0x90/0x90 [ 178.564978] ? ns_test_super+0x50/0x50 [ 178.568844] ? destroy_unused_super.part.9+0x100/0x100 [ 178.574114] ? kasan_check_write+0x14/0x20 [ 178.578338] ? blkdev_get+0xc0/0xb30 [ 178.582041] ? cap_capable+0x1f9/0x260 [ 178.585913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.591429] ? security_capable+0xa4/0xd0 [ 178.595560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 178.601077] ? ns_capable_common+0x13f/0x170 [ 178.605463] ? kill_litter_super+0x90/0x90 [ 178.609675] sget+0x10b/0x150 [ 178.612760] ? ns_test_super+0x50/0x50 [ 178.616626] mount_bdev+0x111/0x3e0 [ 178.620236] ? load_system_files+0x7f70/0x7f70 [ 178.625181] ntfs_mount+0x34/0x40 [ 178.628613] mount_fs+0xae/0x328 [ 178.631958] ? mpi_free.cold.1+0x19/0x19 [ 178.636000] vfs_kern_mount.part.34+0xd4/0x4d0 [ 178.640567] ? may_umount+0xb0/0xb0 [ 178.644171] ? _raw_read_unlock+0x22/0x30 [ 178.648295] ? __get_fs_type+0x97/0xc0 [ 178.652164] do_mount+0x564/0x3070 [ 178.655681] ? lock_downgrade+0x8e0/0x8e0 [ 178.659812] ? copy_mount_string+0x40/0x40 [ 178.664038] ? check_same_owner+0x320/0x320 [ 178.668339] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 178.673331] ? __check_object_size+0x95/0x5d9 [ 178.677809] ? __might_sleep+0x95/0x190 [ 178.681783] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.687301] ? _copy_from_user+0xdf/0x150 [ 178.691431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.696949] ? copy_mount_options+0x285/0x380 [ 178.701421] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 178.706939] ksys_mount+0x12d/0x140 [ 178.710556] SyS_mount+0x35/0x50 [ 178.713914] ? ksys_mount+0x140/0x140 [ 178.717703] do_syscall_64+0x29e/0x9d0 [ 178.721576] ? vmalloc_sync_all+0x30/0x30 [ 178.725702] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 178.730539] ? syscall_return_slowpath+0x5c0/0x5c0 [ 178.735457] ? syscall_return_slowpath+0x30f/0x5c0 [ 178.740369] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 178.745715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 178.750541] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 178.755714] RIP: 0033:0x4552d9 [ 178.758888] RSP: 002b:00007f6c58b3bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.766587] RAX: ffffffffffffffda RBX: 00007f6c58b3c6d4 RCX: 00000000004552d9 [ 178.773839] RDX: 0000000020000540 RSI: 0000000020000800 RDI: 00000000200007c0 [ 178.781094] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 178.788342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 178.795591] R13: 00000000000003fa R14: 00000000006f9010 R15: 000000000000001f [ 178.803443] Dumping ftrace buffer: [ 178.807291] (ftrace buffer empty) [ 178.810979] Kernel Offset: disabled [ 178.814583] Rebooting in 86400 seconds..