, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044891}, 0x80) r4 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r4, 0x8000000) r5 = io_uring_setup(0x4a38, &(0x7f0000000740)) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x8000000) [ 3396.804652][T19216] FAT-fs (loop5): bogus number of reserved sectors [ 3396.811212][T19216] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:08 executing program 0: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xb}) 00:18:08 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, 0x0, &(0x7f00000005c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 00:18:08 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) syz_io_uring_setup(0x10d3, &(0x7f00000001c0)={0x0, 0x3646, 0x1, 0x2, 0x23f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c87000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getegid() r2 = getegid() getgroups(0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]) getgroups(0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, r2, r3, 0x0]) 00:18:08 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, 0x0, &(0x7f00000005c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 00:18:08 executing program 0: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) [ 3396.925637][T19255] FAT-fs (loop5): bogus number of reserved sectors [ 3396.932189][T19255] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:08 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) syz_io_uring_setup(0x10d3, &(0x7f00000001c0)={0x0, 0x3646, 0x1, 0x2, 0x23f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c87000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getegid() getegid() getgroups(0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]) 00:18:08 executing program 2: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = io_uring_setup(0x4a38, &(0x7f0000000740)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x8000000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x200000b, 0x11, r2, 0x8000000) 00:18:08 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, 0x0, &(0x7f00000005c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 00:18:08 executing program 0: socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) [ 3397.035225][T19255] FAT-fs (loop5): bogus number of reserved sectors [ 3397.041764][T19255] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:08 executing program 2: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = io_uring_setup(0x4a38, &(0x7f0000000740)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r1, 0x8000000) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80300) io_uring_setup(0x5d4, &(0x7f00000001c0)={0x0, 0xa3e1, 0x8, 0x2, 0xbd, 0x0, r1}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/93) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000000)=""/84) 00:18:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xc}) 00:18:08 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x8000000) 00:18:08 executing program 0: socketpair(0x0, 0x3, 0x2, &(0x7f0000000180)) 00:18:08 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) syz_io_uring_setup(0x10d3, &(0x7f00000001c0)={0x0, 0x3646, 0x1, 0x2, 0x23f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c87000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getegid() getegid() 00:18:08 executing program 0: socketpair(0x0, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = io_uring_setup(0x4a38, &(0x7f0000000740)) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x8000000) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) syz_io_uring_setup(0x10d3, &(0x7f00000001c0)={0x0, 0x3646, 0x1, 0x2, 0x23f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c87000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) getegid() [ 3397.208827][T19308] FAT-fs (loop5): bogus number of reserved sectors [ 3397.215405][T19308] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 0: socketpair(0x0, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) syz_io_uring_setup(0x10d3, &(0x7f00000001c0)={0x0, 0x3646, 0x1, 0x2, 0x23f}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c87000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) [ 3397.310623][T19308] FAT-fs (loop5): bogus number of reserved sectors [ 3397.317213][T19308] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xd}) 00:18:09 executing program 0: socketpair(0xa, 0x0, 0x2, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) r0 = io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) 00:18:09 executing program 0: socketpair(0xa, 0x0, 0x2, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3397.459951][T19352] FAT-fs (loop5): bogus number of reserved sectors [ 3397.466501][T19352] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:09 executing program 0: socketpair(0xa, 0x0, 0x2, &(0x7f0000000180)) [ 3397.540073][T19352] FAT-fs (loop5): bogus number of reserved sectors [ 3397.546616][T19352] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xe}) 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 3: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000140), 0x0) io_uring_setup(0x4a38, &(0x7f0000000000)) syz_io_uring_setup(0x795, &(0x7f0000000500), &(0x7f0000ecc000/0x2000)=nil, &(0x7f0000e95000/0x3000)=nil, &(0x7f0000000580), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000dc4000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) [ 3397.698431][T19399] FAT-fs (loop5): bogus number of reserved sectors [ 3397.705019][T19399] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3397.784454][T19399] FAT-fs (loop5): bogus number of reserved sectors [ 3397.791017][T19399] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xf}) 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x2, 0x0) 00:18:09 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) getegid() syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000340)=0x4, 0x0, 0x4) r3 = syz_io_uring_setup(0x4e49, &(0x7f0000000000)={0x0, 0xc23b, 0x1, 0x0, 0x51, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000007b780)={0x400, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "29115ee11de252"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007c780)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "5044178f6e8ac3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000007d780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000007d980)={0x5025, [{}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e6699030f89afd"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000007e980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000007eb80)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "992c2a50b5d1f8"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000007fb80)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000080b80)={0x0, 0x0, "9267bbf351f35b5b3423128854e17584e66e7199a545e8c337032b5b547567b9fb5c603dc9914870025452451fcf67b1b37e05a67d5f520aada34de86297c1f353fb5acf61ff5e8c56d0f60dc7c6d1812c446b61c11a01b04b48b082ec293b1420a8b673042c77b961bbf1210c8a0d3f071b6efbd7176c528d8244abefd62e2e13fa54cce1d6591538cef04be4ca5033b36c953d85cc09d173181cc96126418a327e83d2568a31d71df4078c40a3c7b5660a4a8b25bc07c4be606a0bdd618a124d72c69321caa5bfbfa044720d7b8ca278510bb6282c1131c8c232bef1f243db23398a7413ac9b52e78aa5f2c487146ae6a7d22095babc77e8a2900c75a92195", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000081b80)={0x0, 0x0, "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", "0d954b0061164b1cca42879fc83d60d30179a712d7b69951838e8c94572fc23e6ae200551e57003b8fec4d6b4e4f06d6bed55568cc9b56ccbcd02fcbb8f71d7e9261a9149bfa015deb4dd19a6b2872c777a3850d21ec32eea866764176ea659d9bc1763645d7646cefbcc213217de3ece4294de95d9d7cc360df09451ecd3212f2e3c437c482ee4850d8efe7b29c4a277f48b1b9bc7a63ab992de1596a6bb4e8a52dbb7c61c7f0c8a4910dca49742d9adc38cc130d2ad810585721591858e6296050dab8b02e2f69c1ad01f10c4eec782a5d9bcc08e12db504d2e90b01c98dec0fa178490e45a2f4956275ea6c3d485379a832658485dc0318d03c474eafacb1716b2f77fc36ddb9770d283aa2dcbaf9bd43fafb1e9df5790511db4ec67d77fa39e166d48035feb3a452594cc864a8421075867bd6e1a51a150cfd5931086fe7575e974421b61cdd4cf254aad2703a06f5ba89aa08e28379483678236776b7710d82cb56cc4ea0f04a07452885bf0f9a168c1c2763d43a9641d113dcc47acfcf732a5830d55e044f76d8b2d440d8db7a7640e284ae5b589e76865cea4c0216876fbe49b13fe72f2db678a8ee7c5975624b30ba06be702145cf8c8d1da5345f27ddc79302bcd5711c1942880e18c3cb046454dea2f1631c26582f7a56eb984c303294dd9ad24e98191a6692cc2e416bff80c71080e9e128b9409561ad21af3b63f40e1809d64eeedac3be559264d6fd92e8ccce0bc604c3f818477148ac2c5361fe8208d816d736349a6ea3555d5ce878dbafca6d6e05ae0ecd14043d9cd821fe003117f58b8ee72f3a5e28df9f89d599f5810e7276610c38bcc671b6114c18479b41baeac053ff4dbcd0d64060c749b8ebb595a20c66a0237ed79c9d5848fd7a7d17e13a7f6410c9828e3d612bca518ea4c89225cc2c2ac120a5a36acc5d576edb20547e7fb0b844ec4821c813bec98d2af4cc6a9d71d6d7932dba1fd9e1f71123c166ffdd22dc110191a0af9a882044502ab0f0a03998d2fb2387a7dc4bd6bde7298ca224e0ac6cfe47172df336bfcb78e44d991536f93146fcc0fd38e229112c3b437148daa9cc4b4d5fab214e49189bc0222534ae5e4631e4176dea4a005ee3c3857e3af66e85a51a397e9798a57dbe994f10ba438c3b068479a51fea49f81a53f9d9b211fa437143ff717be52c9ba733969c7b6792ffff77a5778f4b3b460525f90ba9541a8346e5011493cc46d58a953cd888b6cc055f971e9dbed7c2829a518a16d80b1a4575d7246501018b0eef0393b81b257e26d680e86f6a9bb2a9ec3c0db4dbe90a76b3745076db06634d2864ca5c61032a017b646b883eca30d710f54a99b93d6220dfd95640dee97c0d9d3fe9cad317b91de3146e64296a58936ea95b864ea4890eabadf8c780b8c54cfdcaae3bfd7d7f22f35b32642f09bd2e8ac2968d814563b0aaeeeb3d56ae447541e64102e1691f7858d96b05df817526df2fc3dffaa5ca7888baf33031b54e65b2c16676e1561cc6b520702516e3c8d8129c34225f525da6a29950a7e68ae9c9bf2ad3e2badacb3ad9d3f02020b74920aabf3c6cea694155bd550a0a4d8cde2413d330c0106c4c33cbb82ead41e62d4458936e53afbeeb677302ed7bf9a7509d3264bff91b861ae75a7a15c03d23ff8c3f07f91e460254b984ff5f88f84035a82bfbaf8415e821c63d252a62c2f34eff8ee34f8bb06050e6d152a5cc4f87831b8da69857ff5a61e1f77c77ae88dc63f9257e79692ee4e13bac2076992f7bf9fd5c01ce27b37866a9b34f18c425d726a06c52482debb6c16b6b15234523f997e723562d33fe571df7de650dc51f4dbf6837a7e61f25bd7b200af889058e00c5c651901f63189278c69b1061cf7b0773368e3f638a578ec31a0ecd4e645bd6ae41bc60364a585984a3a362968989109c1504039b1bbc63a71788387e116e6acfe5e1cce4711a48b07239d5c2f4544deac1e798526bb67ef2f24d0436c546e663ecdda8a329973bfaf1ebeda80c65429f6bf02b3d710b16ca8c2a59ec90a66abea7bfd6a37486d90154312976efd334863bcd240658d8306c68ab3e39bd2e08c9d994cbbbd7417d65b07eefef63a4110a1d6d18bc7062199fd7b81ce278af14ea53fdb837948ead0ab8bc958fe135e124e53a6ab6aa10bdef191e04c5f3cb88254f0537afa93015b73cd0d79d611053d1a8dd6defe7716078fcd134a5ecae9b5b5ca82071ba37dedb5e34785db370e794346fac166d08a2a1237394d7e187405471003d7a6007d6b0b67641317e6e1805380453edb88fbb092f928f9fed37ce85ddfc46067d85dcdcfff1f33e5e92e491ae14a5acdf17e5c0382d2d05f3aaa3b29d834d0f34c1d245a813be294da80fbe768912ca027cf4e29c8b3c958e974f0c5f95c40ef84cd750a3601b790c47ef8b6967fc428ddec72ebfa93b33c37bb2589a0efde416c525633720daec7aa45c4d216c031f6b962ce4d9b26b6ae80af4af3d822c11d8f67d01f952cedd209bafa02a5af6d77e97e2678eb71c1d88216a894fe1e9eecc9232842d3f486687e71987b33254c2600a81fc898e75a3ede9946f5e4e75c4ef41d341707948e32ec8129581db2189a09e181a887eab128c2e69e4f1363ed3cae66e4b55728c58fdb9aee1c1c3496b6617c9421ccc9a8654770500288f3186ec10acb3e894a054bf3af637bc84e3652b3a00fce7f87af9cc5f58aae23f3308c5728fac5c488efc81fb1eda41dde6d867c284ed53756222842457507bd6bf5c225b019886ff22c51e9f3365116331e0cb5cf3eed9dcdf2ce87617d46c364c6d5dd68e3a68956b30881165743f3261699b94b718b03c579f326107492bc9102db6a7901ed0c75a77d02baa5f9f69c09e1deec00a2c533e5f838a5a576000fd6b5d57993798b82d0bf1bca7a55674e741c6fcff9a306c78069590b0f31c7fed2c03dd70317a787ed847fff4b2dc760be52709e0aafa8c5bc19342b365923a12b6174da9d1d61d0e8c476d524e1f5bece9e387d6886959377f2385defde6f873f39b7bcf0613f369fb97a849aede967f19f84c88a9851d398d025a9653dfddf69d9c09165f315f552d69b3f38c1a8f56a1116713b31ff0207084c2508fda7e5847e03e733b6394a7e0909d298f55cec378ecde65302b159f0ffced2410625769af65a738f3e0cc1a3dbfcc07c5e811e22b854397c767959b5fdb2cc403f78d41952a6dd9602b6e65a54841207dd23d9313a9ab8a2da90c5ce90f20370af56477b8eaf43f636a47cd4aa77315c4be5c438b4a258658e0d4ecf186a31442b45459fe06ec5f36bb0a58f3aaf2ded260209e59c230c24ae4e6e366e33cae31340988e3dca50bdafcc9697b5d43e3ddbf8911904dfab53788f23a96adb2f6a2300849b87c160c03c7b2c0bf673d0d92303abad3fd1d785895889756e52c17a7fd535b6e5acb8ef822cd00685514f0172e0167973cb5239edddd72e25bd298e4c2596220877fb26826ac491d2933a3115324eabe5ea9808f07fd1bfb58969d521f8755af8899914ec4cb695e4af324e19545bd95e966a41fec5ac5e79c1877ea051c1aa79e15eff410f6921c5bf90606e0dd65a958af5b2dd68d90eac99f929b54929ab66eaa43102ccbd17b884285486d27444314dde3183f4974b5c1be4782fa0acaa162d95feeee4c057503ec17537415bdf492be040f7212aa8a55b23c099b704d5500534e92113f5eb4928d9c4e9af4a7a6d29caf372d3a28ec06b89a43debdf56fe8e6314df0b6fd2b5255584c16174a10b47bb03c6f40b9565017312a121e66beb16e4ff3d01361df55dadef41e083983783b7589847e8f94aa087a835141b87fe5e586f9bbeb69b94fae21b73faf4246a85e081cc25e2b6ca30831890ac617853a2db0938371f9b3a3a1447be89ea04efc1042166bfe586cb8e04604bf8ce25a9e00c6d67f41872e9b90a491795bbd2b0eb2c80fe4316617dfab89e185382445e7cbebbfc27d6e2188f22fe869180b8694d4db6f25cbdbce68ad53e7a0d7d6aaea4dd1c3e55a863382c9843093dc3550e5f9a0c78489ace0a2c7ef0fe0b6abe8626c1f2f7ed8b7f2cc75300e472f83f7008a80f79f6d286dd4c99792b212ad919a1100197efb85cf601b7c58a0224940946e3f1222dda784ce66970ca16f1551fc13b16b46c83364482fe9914bb07729ee74b833d9b47a441c040c12fda7eb152884157253eefaecd78de63a0d63d105799a1d0fecf682166c465051c08968be5cb461d0cf821e92aab19a61c4c59a15a3b285451c1ac7dfdfbb4942cf430dfa198b0965e46c66ae80a9f8740526241e10c29ea4b3f124e301337567eadc7b44abc11aefbb2e4e8f4a82bddc056ff683ee675bf3bddd78c7b725454e6fbfc8931f2623a03a8f2925c18d8fe82d5e6cc0108f6dbd1daa41234cf9b3894cad84d465d5edb1bd17a608daa8cdd0ec455f0397bd9af5bd0ec380925f1084a1e1e6f2a2449bacc370e9b1b05a1205b9f655c26f7e2a3f62f2b0468da79d76636bc3ac19f45d2e5e2752aa70e6ba0c225e64a80f0023247ef1528916843885029806777c3d07ca7238680cd1b852a707a54dbeb1d8bb43ac7bdb00a472d1c5f802d2b9ecabe80dc5ea21d46cc49366680b991c390df0d11088d96faadbdcac7f2b834c83f2a556587dfa1dbabdaf684a08c785368f158ee3730011b7fb2c49b5bda5090497bc5a901cab739122ebb5172c2323a3b4dedd4de79bf2977b0bc7a31df531b19efbde64b7911c68fca12ded0f0dc4a3623d8e9f93fbe20607914e750fb80bc0d765ecffa5d9dcb4f08b2de40ad993862de4d2e2232e85b3638a5308118b46cf827c5c722c304b73c1477a9cac687ac77db3c1779f3f515f0341b2dc90a0401041410f99e926331011d8315399bba8a5babbe1b80b08f47260f69ac2ce46c6152f30a1fd35e31ffe46937fb586900602fd35a6389ba53cd6694a04b9b537e8cfb2f13a3f324b3b1c21cb72e7414266272cbe0aeb6d6ef03a04d134d67e5c9630eb79379944ed219e946d275df75472c03c257f0ad3c11622c6d0ad0f361eef094c02687cde60d89f9e3539ac87c31fa421a7a850123317b9e173ac3e7feb80d70484ae606b7a45a432ddcf8c3e3298e336e417f92c9670d7b23e7171fa0a2750acc722fb05427c8bfe7c9675992ec9cd5f7b19de2388da10295875095f4e8555a11ca00031b3780871408fc2ff9579ae2a763a39ebf3e771b810b639644088a1ea1eee50a0c400dfeeec6e104950b1d07dfe5fb9da0d722dc49b25dfd76d207e936b78f95f13e29d4030e3e022d1de84af24eeb0c0b6757e0ecb35619b78324a9da9f817214d5696e86e04fb0f77a766f9f1542df078d9e3ba972edd"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000082b80)={{0x0, 0x0, 0x8001, 0x9, 0x1, 0x8, 0x0, 0x8, 0x6, 0xfffffff8, 0x9, 0xffffffff, 0x2, 0x3, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000083b80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "986b8b988ceb86"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000084b80)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "43d3e3b68622e7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000085b80)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {}, {0x0, r7}, {}, {r9}, {}, {0x0, r10}, {}, {}, {r11, r12}, {0x0, r13}, {0x0, r14}, {}, {r15, r16}, {r17}], 0x1, "f0e901599c1b85"}) io_uring_setup(0x1967, &(0x7f00000001c0)={0x0, 0xd60a, 0x8, 0x2, 0x3ba, 0x0, r3}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:09 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3397.929877][T19445] FAT-fs (loop5): bogus number of reserved sectors [ 3397.936492][T19445] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x2, 0x0) 00:18:09 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46a, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:09 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) socketpair(0xa, 0x3, 0x2, &(0x7f0000000180)) [ 3398.026454][T19445] FAT-fs (loop5): bogus number of reserved sectors [ 3398.033167][T19445] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x10}) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 0: socketpair(0xa, 0x3, 0x2, 0x0) 00:18:09 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) io_uring_setup(0x4a38, &(0x7f0000000500)={0x0, 0xfffff, 0x20, 0x0, 0x804, 0x0, r1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 1: ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000000)=""/65) r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0xf8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:09 executing program 0: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46a, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:09 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x114, &(0x7f0000000000)=0x1, 0x0, 0x4) syz_io_uring_setup(0x5802, &(0x7f0000000180)={0x0, 0x478, 0x8, 0x1, 0x2fc, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000340)) syz_io_uring_complete(r2) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xfffffffe, 0x20, 0x4, 0x2a8}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000040)={0x3ff, 0x8, 0x14, {0x3ff, 0x9}, 0xfff, 0x1f}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:09 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:09 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3398.161005][T19495] FAT-fs (loop5): bogus number of reserved sectors [ 3398.167551][T19495] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:09 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3398.234291][T19495] FAT-fs (loop5): bogus number of reserved sectors [ 3398.240817][T19495] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x11}) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:10 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3398.397312][T19545] FAT-fs (loop5): bogus number of reserved sectors [ 3398.403862][T19545] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)) r2 = syz_io_uring_complete(r1) syz_io_uring_setup(0x42ac, &(0x7f0000000000)={0x0, 0x362d, 0x0, 0x0, 0x3da, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3398.484437][T19545] FAT-fs (loop5): bogus number of reserved sectors [ 3398.491039][T19545] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x12}) 00:18:10 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x104}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x3e3b, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, "f9dc7543705cf8a1", "b96f03c7eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/93) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f00000001c0)=0xffffffff) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000000)={0x6, 0x8ea, 0x0, 0x8, 0x0, 0x8}) syz_io_uring_complete(0x0) inotify_init() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xffff}, 0x400}) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) [ 3398.582998][T19589] FAT-fs (loop5): bogus number of reserved sectors [ 3398.589619][T19589] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3398.646655][T19589] FAT-fs (loop5): bogus number of reserved sectors [ 3398.653178][T19589] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x22}) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x20040020) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3398.765791][T19627] FAT-fs (loop5): bogus number of reserved sectors [ 3398.772405][T19627] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3398.820125][T19627] FAT-fs (loop5): bogus number of reserved sectors [ 3398.826726][T19627] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000009d21590d28c34ce59cbd5309d5be0992bb3f3bd1ab701b3e601cd30f88ff8c7ced56c51c7ef7b50c3b97eb47e14f7b0c0da66f4728e16c014fd3ffe50e1760c959c4e92a5da81e2e136f0a8fbbd87bf26b1be87b36312351df8b213be0709ecc7c9b4440", @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf251400000008001d00", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) setns(r3, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) memfd_create(&(0x7f0000000080)='\'$\x00', 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0xfc, 0x7}, 0x1, 0x5, 0x80, {0xad, 0x71}, 0xf9, 0x9}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r4 = inotify_init() r5 = inotify_init() r6 = inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0x96000415) inotify_rm_watch(r5, r6) inotify_rm_watch(r1, r6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x25}) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 00:18:10 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3398.974818][T19669] FAT-fs (loop5): bogus number of reserved sectors [ 3398.981375][T19669] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 2: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.045209][T19669] FAT-fs (loop5): bogus number of reserved sectors [ 3399.051832][T19669] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x48}) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 00:18:10 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x3935, &(0x7f0000000000)={0x0, 0xb504, 0x2, 0x0, 0x100, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) 00:18:10 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000480)={0x0, 0xc80d, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 3399.168640][T19710] FAT-fs (loop5): bogus number of reserved sectors [ 3399.175214][T19710] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.263031][T19710] FAT-fs (loop5): bogus number of reserved sectors [ 3399.269604][T19710] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x4c}) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x7b9e, &(0x7f0000000000)={0x0, 0x7be2, 0x4, 0x1, 0x197, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r1, 0x8000000) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="880100001500000227bd7000ffdbdf25fc000000000000000000000005000000fe800000000000000000000000fcff9f80160000000000000000000000000000305a48d251b6f809d45aa84bba96d0cf8fc5a135694a410c67d3ed5e47f55cbdf50b173b88a56fd2fc5a0cd5f7a56744b413c46ec85069d6b1c916f3c75813245cb6e0bd199212ffb7056b8d949f1128820e31a554a48fa0a89e39c4821744a8f58c3a1dfee65ccb65", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e0002000000ac000700ac1e0101000000000000000000000000ac1414bb0000000000000000000000004e2100084e2200050200a08032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="070000000000000004000000000000000400000000000000301f00000000000000ffffffffffffffd6ed0000000000000200000000000000da0000000000000008000000000000000800000000000000e800000000000000580e00000000000008000000b06b6e00000102030000000010000a0028bd700026bd7000070000000c001c00", @ANYRES32=0x0, @ANYBLOB="0000000024000900b52c000000000000ffffffffffffffff0200000000000000000001000000000014000e00000000000000000000000000000000012c001300ac1e01010000000000000000000000000a010102000000000000000000000000000000000a0000000a0010000100000000000000"], 0x188}, 0x1, 0x0, 0x0, 0x40805}, 0x800) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x80010, r0, 0x8000000) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x52bc, &(0x7f0000000000)={0x0, 0x595c, 0x10, 0x0, 0x261, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd_index=0x9, 0xfffffffffffffffa, 0x0, 0x0, 0x1, 0x1, {0x2}}, 0x1) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.413525][T19756] FAT-fs (loop5): bogus number of reserved sectors [ 3399.420066][T19756] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3399.496455][T19756] FAT-fs (loop5): bogus number of reserved sectors [ 3399.502984][T19756] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x60}) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x400000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000340)=""/232) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.614046][T19795] FAT-fs (loop5): bogus number of reserved sectors [ 3399.620585][T19795] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x364, 0x13, 0x8, 0x70bd2b, 0x25dfdbfb, {0x15, 0x3, 0xb7, 0x1, {0x4e21, 0x4e22, [0x8, 0x7, 0xfffffff8, 0xee], [0x0, 0x4, 0x7f], 0x0, [0x4, 0x9]}, 0xad9c, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x26, 0x1, "d276a83b7b27a8347fe3909d6cc3aebce70f35c85585a60b5c793f3a9a7c2f761cf6"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "71235621d3a4d46fa4646a3a592821d4c8025bed4b46cc6758579b7041a64e905cb4ad6e06976d977ac5faf2b059e4a9a302fc19e840d7aa722f0532c9246ea88ebaef976cf7842e2577944c91d7275fc581ea0396ddcd62e34f2cfa617f738e71cceaf7b5fa999159"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "da4c23a5ebde728e2f596f0baeae75d6e4a35adb66f27ebe9017384b716eedab8f92d04f8aff08c2f6f08d5bc7eb32d04fd0f2fd91fb3055b42efee183c20e3f5a63cbebb16d28e56354917f74af35b18c52b07a432c8a23fd963115acc5fbda4d1c8f34e2e1ec88fff2ce3c2942acf8104c921e454974a10d7de8f99115064f13696706c7f04d42"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "93c2e8e2593410bd3e2c7d3a8abc1cab953a484d8b9db74d53bc491ec76d501071fceff228357ba545398543140decae0533b583721504a397a7098d3317b74d4dafb75ac8ebc09274d02ff4f2910023e542b432408bc550abc940e3fc5adbe74b781cba91eac49de9117671e05c5484a70c71ec5432b60a28254fd023ac8e61166d3ccdc738f570c0191ccc60d83cb93fb1eb74486081d6f2ccb4529c09c4aaffbc8b2a87298541241c8e4345db50a53b8f4aa05eeee03d1f"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "fec2c13377ee91dd01867216d439d7a7c4dffcce5253183cccbdeef6afe1a0b86e54e3c5c4b4f4298fa47ee2751d3db264871a62325ce61c458879699021ef393339c1ea7fb58098461ec517cf4870bd5f3b28b87b9cce20cf57d7531b171f266c7972fef51ae57d9a1bc240609ba6ee94f9cb1b60484addda82670bfbeb4f89145639b299131082c752538e19c2fc6c3cf3590c309903863cc1eaec26f56afe2c704eb3d788625f69241b6ea44e37b303081f411e157f360b69506ace0d519dfad337682699c3384e78"}, @INET_DIAG_REQ_BYTECODE={0x61, 0x1, "e745bf103ec9e02135486a8b4cd192a26027e83fa664dfcd795b20f12be6e89a9cd25e810c158bc0630f8600dd703f3dcf18c901168b55a4dad6b12988ee5f9508869d0e561cd970508fb5cc86dfe8851d9ac3a0282eb90abb8b4e052f"}]}, 0x364}, 0x1, 0x0, 0x0, 0x4}, 0x81) r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x8a101, 0x1e2, 0x10}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x12345}, 0x9) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000700)=""/4096) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.705347][T19795] FAT-fs (loop5): bogus number of reserved sectors [ 3399.711902][T19795] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x68}) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_io_uring_setup(0x6bc5, &(0x7f0000000040)={0x0, 0x496b, 0x0, 0x1, 0x2f8, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x0, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3399.824408][T19839] FAT-fs (loop5): bogus number of reserved sectors [ 3399.830983][T19839] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 1: syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x6c}) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x0, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x52bc, &(0x7f0000000000)={0x0, 0x595c, 0x10, 0x0, 0x261, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd_index=0x9, 0xfffffffffffffffa, 0x0, 0x0, 0x1, 0x1, {0x2}}, 0x1) [ 3399.937216][T19839] FAT-fs (loop5): bogus number of reserved sectors [ 3399.943749][T19839] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x0, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3400.016467][T19883] FAT-fs (loop5): bogus number of reserved sectors [ 3400.023002][T19883] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 1: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.084485][T19883] FAT-fs (loop5): bogus number of reserved sectors [ 3400.091045][T19883] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x74}) 00:18:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:11 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:11 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)) r2 = syz_io_uring_complete(r1) syz_io_uring_setup(0x42ac, &(0x7f0000000000)={0x0, 0x362d, 0x0, 0x0, 0x3da, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:11 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.189786][T19918] FAT-fs (loop5): bogus number of reserved sectors [ 3400.196454][T19918] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in6=@private2}, [@srcaddr={0x14, 0xd, @in=@local}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3400.263234][T19918] FAT-fs (loop5): bogus number of reserved sectors [ 3400.269989][T19918] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0x7a}) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.394142][T19964] FAT-fs (loop5): bogus number of reserved sectors [ 3400.400686][T19964] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.487312][T19964] FAT-fs (loop5): bogus number of reserved sectors [ 3400.493872][T19964] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xfe}) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@local}]}, 0x3c}}, 0x0) [ 3400.595447][T20005] FAT-fs (loop5): bogus number of reserved sectors [ 3400.601985][T20005] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="0c00b4ef994bf1ff84bb7022f25fa2b5399ab1f2bd54c2f85a6656af11da047dcb1b37f81d16f4cfc1f566c75187d4a20af57aefdd5a13997f80005d00506e7877ad898aed37b45320818e13d84aa2f8d5f5c112530a5e931bfb38e64c0011aceed89677"]) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) [ 3400.654864][T20005] FAT-fs (loop5): bogus number of reserved sectors [ 3400.661419][T20005] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [], 0xff}) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r4, r1, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x0, 0x0, 0x1}, 0xaf29) [ 3400.734333][T20038] FAT-fs (loop0): Unrecognized mount option "gid=0xffffffffffffffff " or missing value 00:18:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) r3 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r3, 0x8000000) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.836981][T20057] FAT-fs (loop5): bogus number of reserved sectors [ 3400.843521][T20057] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) r3 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r3, 0x8000000) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3400.896926][T20057] FAT-fs (loop5): bogus number of reserved sectors [ 3400.903485][T20057] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) truncate(&(0x7f0000000000)='./file0\x00', 0xdef3) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) sendmmsg$sock(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="7f40b07b51b95da520e0dd558a8fa3315741ec8bff43b6b73ae11b0fe3d0474f807d58edb2f994e671f4ab43571c7d81a389e2d352e373d09392b4000f3924ef300b6378b803d84eeffd893564b6e39fc8275f6c62f0fec0ad01d45151b18aff1048e7559f4460e05c10a345bb4698e41dc60f1e23581dbb7e9829e4fdb5e78d417ab460d69c80e9321d40a145811f9646db148cb15d6494a8f8c3d2ffa351da60d652361d04cec1805d94433e260e72a79762216bd591e0d0f32cc48630bbfd2a1b5a894c35be5c469b0f9eb7b2319c0f3e37a9fb0dd59a4f3fa2e784f262ae035b5fbb8c277f0e1f946099b55088", 0xef}, {&(0x7f0000000240)="2942c38f1b02b190605b854cd7a30fd4d3b33e9d29a2add04601790f8434dfd12a3f8bcd26d3af9d56bff74cbfd17e1da81ace832b6be0cff804e26e3a", 0x3d}, {&(0x7f0000000280)="00b352c4f5c78f92409f11cb7c9be0589108e8db3332d378643914d88e6cc979c1bfb86edc2d472f6675ff6d9eceeef05db897a43241887786b1f64965249dd52d5c98c5c290d880bc49158a4b1206fcdbc673fb2e09a679633f9b4d4ac6e836a77b328beed9c31345d1b30e", 0x6c}, {&(0x7f0000000300)="868165250d9de1f89691ef378615a6aa71ac9d2a7db6b3fa997fdaa35b46fab75038cc8ff7e3d1abf4bf6f7bd580ce858d0a4cd5c91532c2f53cae2ebf53315e51d6116a1c919fb000b7db82714697d9e6c38cc7b300583170ae3fff7c94f0ba7ecc561d452c6a9405189943f484837fd0bb47fe069ad75e5e547431919b43694f50171f7531274cc9bbd15be5221f3afdb8248d9fcb4693ef3d11e6e6", 0x9d}, {&(0x7f00000003c0)="cc215e06486e1bbda149879339c466a99d72888fc4d71c36c14ea535b0c70ead79f513791513fd0d2585f105a39ef610db7b5dfb4e5b6d22a3876a813e99e6a1f5c3e0552dab348484c41366920cee9be8cf2ea9e6cbc19b5b7a7278c03d7bd24cae607f0adaddd64d48aa8897ae74d4fcf2e45624ce4be3cde8e3a1c28626ef91c64be18b5e13c39ddf3a203c4063c0c66e5c24adb36269d4d9bd256363c2493aeee0e855b2474f039782304e56990c72dd886fcfb1399773d2b77ed44ca76e2c1ce091967580", 0xc7}, {&(0x7f00000004c0)="ed660dee3c871d9f372baf25fc5ec0ca9ec9fef2af9eda59077cbc62e1736efd0b27622eab81a0f94b24f4108167eeb13fc4bd93267a99b8444c0daeebdbf488f2626e494017f00ee5ee214a20ab1efcced36bdcd33a7d51b125b96685ec7dc2c7b5b9e5a7dfd7b880e09fe9c29a64e47c3dc5741c13b8f54ae027b93c3c1aa769d9bb2ba752a2a916a44bf43ac7c523d5dfe22dec462df0b80adc199f3900948e4a072d06f4940b66cf5c38220d3cc348172666", 0xb4}, {&(0x7f0000000580)="b48a88886556c3697ede2d07e723fc1cee5f10a41b369480e6f4c56b4e475f9c8de15852b65adccc14740b702a4bf8f1b6", 0x31}, {&(0x7f00000005c0)="2e765b95d54a91ddfbf31f8ed803950db0aacf29630a3d947af6181ac9475d47496f1a359f5749ac07a58cc0ea2f2e0f80d0f11d3046744acd783ca8262fd191ef25d6b01d2ccb7b938cfd58b26468b593c0811eca33b10b556d0c3d2680f74c65df5c8933886ef75e03bfe3472c2a1a8bdf26c3b740c257ee5ca3f6c44fb7c091c4e440f2f45951fd4ff72feed7f612c6358c56363f6260e4af19cbdd82e9ac6d4d2b7a2c8e4fc996f3747401b05f1367b2db104cb60ea348d78ab9b5807ce2f8506088a6c93f1215da7fe9a7847ce2594647922ec8", 0xd6}, {&(0x7f00000006c0)="7678e08fafd8e4f588fa4ad4001dc6ed8919bffc438cbcd8a0ba5894", 0x1c}], 0x9, &(0x7f00000007c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x78}}, {{&(0x7f0000000840)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth0_to_hsr\x00'}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="cdc3ba6988", 0x5}, {&(0x7f0000000900)="d2bb5b0d0cf970c0938a0fc86cfa1d0edce272eaa5cadb55a9d70c16b22a890e8484d93e286d324d7a2115a0ffdae0223319ef2b3454d64907fdb2c49a281db7176ccd1ba5107699965d33e6205e1a73dc4f17ea9ff162813fb5068d36fdfd400b1aa10433e24c195687fc7ff0f17b13cc06932e243d95fafdf6865e48d210299097974841b46c8efc9909ade48359efd1a93313d0d8de2022eb778354db6bdb39e267e4cd23505b8325ba", 0xab}, {&(0x7f00000009c0)="6a882466a5f4aa2b0e6c8d60d3302e6d2a6fd6922132a3a1b3adbc496e3f2bc3d6a18f80f79f65de2e742fb4bfa11720e7d512e1c34d524a", 0x38}, {&(0x7f0000000a00)="624edf90a30e20926369c14286ec578348ddb601a49cfbb78dba1bfef696390cb5e7b786763e774feef2ef8ef3ee352ce2d16f65f9dc7561933d4fb7b93fe6c5d3230507694bf5e5b3fa35d4fdb8c42b7515352fd8de762fe4c3be54975e14dd82f4cade64707bff61dbe8504467c0459e02bfa70a8e49825d200808d037d6cb0c2d43365c2cced2fa3f78b4500e1894ea14f9d7", 0x94}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000ac0)="4c6d438d47364781ac789868ff55d1bd7e291f351ff98d22d017d917fc75c5fa4cdfdc8db1af52bb65e60681a8bf20e8d5fd9a77d503d2365cda883c414a983f8d7b86f759010db24bdf62d8a2f4fafc4fd33c4b497b470736a0432a50a4a4cd8bdc8941004e42e9d8efa1ddb805a5d0d5b64927b74f311c477e1bc67c7120b75b822d8ed86524ec666d04b937fbd2a7b6f8c185b0d4ba130bf6b6ad816d06426f1de0113f3eb780989c97b4c359e3b79d71bc61fea239c5", 0xb8}, {&(0x7f0000000b80)="d02c20e37cde115f", 0x8}], 0x7, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0xc27}}], 0x18}}, {{&(0x7f0000000c80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="a14c4f957e47a73523085958e1c9a0498dda7e06453d1e7753b85718eff382a15170137957c58d6c11864c7c5f78d147dca17beb232cddbdbc0480c3a0c19501185d4792a1fc045da54bb9dc97e07d8b223856570ba98ba4f2a5aa97fb8e11012ec25c0f5fd40274db370cf41bd05f50c9848af60a5ec77c12fbb5a601e6016c18948f96e357766ebb4c52a9210522587bd5", 0x92}, {&(0x7f0000002500)="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", 0x1000}], 0x2}}, {{&(0x7f0000000e00)=@caif=@util={0x25, "0c5fc204b5e60f76c3d5b93e17cb4fa3"}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="8e934ee3d31ce582033e5f", 0xb}], 0x1}}], 0x4, 0x4000000) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000100), 0x0, 0x4) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) r3 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r3, 0x8000000) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000100), 0x0, 0x4) [ 3401.042029][T20109] loop5: detected capacity change from 0 to 264192 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:12 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, 0x0, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, "f9dc7543705cf8a1", "b96f03c7eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x4, 0x22}, 'port1\x00', 0x8a, 0x42, 0x7, 0x5, 0x9, 0x3, 0x4, 0x0, 0x5, 0x80}) 00:18:12 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3401.126625][T20109] loop5: detected capacity change from 0 to 264192 00:18:12 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000100), 0x0, 0x4) 00:18:12 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3401.225572][T20153] FAT-fs (loop5): bogus number of reserved sectors [ 3401.232133][T20153] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3401.317237][T20153] FAT-fs (loop5): bogus number of reserved sectors [ 3401.323806][T20153] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6769643d2ee6088fc375a66c57cf26a2c49a0d8ebe4cabd0302c6de7f703440bd84ede9995b9eb77a243e7d387eed4bbfb7394d48666d1e3d9f2539aad2479e81d857e729cd29e31af611819f23660c1fcdc3c1b99e9539ea58708e9b0423096037fe2b2933be501638d", @ANYRES64=r0, @ANYRESOCT]) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"f1efc2fbaaef208b0d8291893d6d5975", 0x0, 0x0, {0x3, 0x7ff}, {0x6ed5}, 0x47, [0x1, 0x0, 0x3ff, 0x9, 0x7fffffff, 0x400, 0x80000000000, 0x10000, 0x7ff, 0xffffffffffffffe1, 0x4, 0x0, 0x3, 0x2bca, 0x100, 0x2]}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x6ca71f72863b57aa}, 0x40000) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x1c}}, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3401.508161][T20206] FAT-fs (loop5): Unrecognized mount option "gid=.æÃu¦lWÏ&¢ÄšŽ¾L«Ð0" or missing value 00:18:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x0, 0x2, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3401.587368][T20243] FAT-fs (loop5): Unrecognized mount option "gid=.æÃu¦lWÏ&¢ÄšŽ¾L«Ð0" or missing value 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x282, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3401.668419][T20262] FAT-fs (loop5): bogus number of reserved sectors [ 3401.675088][T20262] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) [ 3401.745378][T20262] FAT-fs (loop5): bogus number of reserved sectors [ 3401.751966][T20262] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:13 executing program 5: r0 = gettid() sched_rr_get_interval(r0, &(0x7f00000000c0)) wait4(r0, 0x0, 0x40000000, &(0x7f0000000140)) r1 = gettid() waitid(0x0, r1, &(0x7f0000000200), 0x2, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="7dbd", @ANYRESHEX, @ANYBLOB=',\x00']) getpid() 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3401.865494][T20315] FAT-fs (loop5): Unrecognized mount option "}½0xffff" or missing value 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) getsockname(r0, &(0x7f00000000c0)=@ax25={{0x3, @default}, [@remote, @netrom, @null, @null, @netrom, @bcast, @netrom, @bcast]}, &(0x7f0000000140)=0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x2055050, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32=0x0]) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x5, 0x1e4, 0x98f6, 0x23, 0x7}) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:13 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3401.958276][T20333] FAT-fs (loop5): Unrecognized mount option "}½0xffff" or missing value 00:18:13 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:13 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:13 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:13 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f00000003c0)) 00:18:13 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 5: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@local, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)=@delpolicy={0x59c, 0x14, 0x800, 0x70bd26, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@multicast1, 0x4e24, 0x46a0, 0x4e24, 0x5, 0xa, 0x10, 0x20, 0x2c, r0}, 0x6e6bbe, 0x1}, [@XFRMA_IF_ID={0x8}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d6, 0x6c}, 0xa, @in=@remote, 0x3503, 0x1, 0x3, 0x1, 0x7ff, 0x7, 0x66}, {{@in=@private=0xa010100, 0x4d4, 0xff}, 0xa, @in=@loopback, 0x0, 0x1, 0x2, 0xb8, 0xa0, 0x4, 0x7}, {{@in=@multicast1, 0x4d6, 0x1}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3504, 0x2, 0x0, 0x7, 0x100, 0x10000, 0x6}]}, @coaddr={0x14, 0xe, @in=@multicast2}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd29, 0x70bd2b, 0x70bd2b, 0x70bd25, 0x3, [0x9cb, 0x10000, 0x1000, 0x40, 0x0, 0x7, 0x0, 0x7fffffff]}}, @algo_aead={0x104, 0x12, {{'aegis128l-aesni\x00'}, 0x5c0, 0xc0, "d6c6a784773ab4662f7ae087d42b7e7d7130944d1f4a3e5ec5f97ebd99a70dc49940484572129a4dde705a4850dd86a2b88d322a6f3d44a44887921812cea172a5978237fa2163c6ac8546f3d07885d4280984b8446726e9dfae2c82df2fe6a799c6642952e186f9bfb9e23799f97f64c2cfbd1d4d6e3ce6ac741e360de6817e9177775813ba793ccb665c7fbde3fb39576aaa54e7a574ba43e65e3115e02d84b813cda359da1ac2187b88ee2383f8904d4200834331ab15"}}, @algo_auth_trunc={0x110, 0x14, {{'sha1-ssse3\x00'}, 0x620, 0x80, "8a7b464c1d9b9072e2f77e8f4ec43210331b663b6ca3d0993cef669ea1340c5726571c53d79f84d06c57cd8614ffd455fd080fb991456cc31cd2bba019468c9456f9ebdfaf4af9e81bbfc73eee3169be3ba023aa2e53d77885b63d3402b1cf2e89c37ee6e0814cf6c81d6ee82218ba5d8da5b495e552bba824da738e46dcbc261253609391360b2cdd184888b5395a5e9a13a7c615c118a4ffb0b1ea525075fe590de6f1354f7885c7619e1a7b5cb0bf3bdad6ad42efbe7806b034a9a0df19e962df824a"}}, @sec_ctx={0x87, 0x8, {0x83, 0x8, 0x0, 0x1f, 0x7b, "e48fe0f76da304368990bea35bafb367e72b897c1e853b93f9b3589399518b79bbea97617394d453cb636882358b2e2fb14218c75fd48c9f0c9dcfc30064a2b4a750d9197eca7cc042483c188485b6a637202e19c3cccd2f2eddb5fbd4c5e320e9dd18c8abdcadb9ffe6e4985132ab8c960b8dad4dca2aa46c5018"}}, @migrate={0x180, 0x11, [{@in6=@local, @in=@broadcast, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x32, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in=@rand_addr=0x64010100, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x31}, @in6=@local, 0x33, 0x0, 0x0, 0x3506, 0xa, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in=@empty, 0x32, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in=@loopback, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3c, 0x2, 0x0, 0x3507, 0xa, 0xa}, {@in6=@mcast2, @in=@loopback, @in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x33, 0x4, 0x0, 0x3502, 0x2, 0x2}]}]}, 0x59c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) socketpair(0x15, 0x4, 0x1, &(0x7f0000000780)) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:14 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:14 executing program 0: syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) syz_io_uring_complete(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:14 executing program 4: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0xffff8000, 0x13, r0, 0x8000000) 00:18:14 executing program 0: syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3402.303168][T20400] FAT-fs (loop5): bogus number of reserved sectors [ 3402.309795][T20400] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:14 executing program 5: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/221) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000280)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff19}}], [{@subj_role={'subj_role', 0x3d, '-)\xcb{!'}}, {@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@euid_gt={'euid>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'time_offset'}}, {@fsname={'fsname', 0x3d, 'msdos\x00'}}, {@fowner_gt={'fowner>', r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) 00:18:14 executing program 4: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0xffff8000, 0x13, r0, 0x8000000) 00:18:14 executing program 0: syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:14 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), 0x0) 00:18:14 executing program 4: r0 = syz_io_uring_setup(0xdea, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) 00:18:14 executing program 0: syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3402.475469][T20439] FAT-fs (loop5): Unrecognized mount option "subj_role=-)Ë{!" or missing value 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:14 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3402.553968][T20461] FAT-fs (loop5): Unrecognized mount option "subj_role=-)Ë{!" or missing value [ 3402.580030][T20468] FAULT_INJECTION: forcing a failure. [ 3402.580030][T20468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3402.593109][T20468] CPU: 0 PID: 20468 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3402.601860][T20468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3402.611907][T20468] Call Trace: [ 3402.615207][T20468] dump_stack_lvl+0xb7/0x103 [ 3402.619798][T20468] dump_stack+0x11/0x1a [ 3402.623970][T20468] should_fail+0x23c/0x250 [ 3402.628387][T20468] should_fail_usercopy+0x16/0x20 [ 3402.633421][T20468] _copy_from_user+0x1c/0xd0 [ 3402.638042][T20468] __x64_sys_io_uring_setup+0x4b/0x120 [ 3402.638894][T20470] FAULT_INJECTION: forcing a failure. [ 3402.638894][T20470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3402.643500][T20468] ? fput+0x2d/0x130 [ 3402.643523][T20468] ? ksys_write+0x157/0x180 [ 3402.643541][T20468] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3402.643559][T20468] ? exit_to_user_mode_prepare+0x65/0x190 [ 3402.676631][T20468] do_syscall_64+0x3d/0x90 [ 3402.681035][T20468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3402.686915][T20468] RIP: 0033:0x4665f9 [ 3402.690789][T20468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3402.710433][T20468] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3402.719025][T20468] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3402.726988][T20468] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3402.734942][T20468] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3402.742908][T20468] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3402.750862][T20468] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3402.758863][T20470] CPU: 1 PID: 20470 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3402.767621][T20470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3402.777672][T20470] Call Trace: [ 3402.780943][T20470] dump_stack_lvl+0xb7/0x103 [ 3402.785595][T20470] dump_stack+0x11/0x1a [ 3402.789805][T20470] should_fail+0x23c/0x250 [ 3402.794342][T20470] should_fail_usercopy+0x16/0x20 [ 3402.799364][T20470] _copy_from_user+0x1c/0xd0 [ 3402.803947][T20470] __x64_sys_io_uring_setup+0x4b/0x120 [ 3402.809533][T20470] ? fput+0x2d/0x130 [ 3402.813419][T20470] ? ksys_write+0x157/0x180 [ 3402.817899][T20470] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3402.823941][T20470] ? exit_to_user_mode_prepare+0x65/0x190 [ 3402.829715][T20470] do_syscall_64+0x3d/0x90 [ 3402.834110][T20470] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3402.839994][T20470] RIP: 0033:0x4665f9 [ 3402.843863][T20470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3402.863468][T20470] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3402.871892][T20470] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3402.879838][T20470] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3402.887800][T20470] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3402.895749][T20470] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 00:18:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="17100000475b6ee13b727db21d5424981b29adf3d10c4a351278c3662c1103a9b8269bef05dd5c27989b6986080f7a8ad42aa75be77964cc34ff0f0000000000007e609cce9c984339f896c2e15362391c7f494137f496a71b887f0643d9d28006b2b20bf02b7816d88bb48f04aad16a23d99e723808b73c0e0000000000", @ANYRESHEX, @ANYBLOB=',\x00']) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/123) 00:18:14 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:14 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:14 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3402.903710][T20470] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:14 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3402.963133][T20486] FAULT_INJECTION: forcing a failure. [ 3402.963133][T20486] name failslab, interval 1, probability 0, space 0, times 0 [ 3402.975798][T20486] CPU: 0 PID: 20486 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3402.978716][T20488] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 3402.984566][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3402.984580][T20486] Call Trace: [ 3402.984586][T20486] dump_stack_lvl+0xb7/0x103 00:18:14 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000002500)=[{&(0x7f0000000080)="4e085c655f79df246341395a4516263289148925b449f8d599c3decd27c458feda419255692f3118dd77bade6f4c03d31b9274cd263095ea7fde0747e5a5b7d0105e005d383af5e499dc4b80b23506e24f0f3e2b", 0x54, 0x1f}, {&(0x7f0000000140)="0a12c5d3172b02c6df6b43b7756626efba612f6fcdaa31882b14e94d8a7422a1a5493151ca1d616041eab63fb5cbbf3e6e777cedcfff82583d3a6b450be76d05ac3fe46380179822a8ec7428a32cd6cf21fb67fc091ccbde55c697f1afd195bef85561f5297deaa1fa98aeaef923d92fa1f622c6a7a73928c93777083b1ad68af3fdd9c2e0d9b93bd66fe369b6d87351f22e28987e9c159e55711d6241359cad5d2eb7cd2bc80b2f82e9719d12f0c9c3871635014abc4356e3180dc461243bb3e5cdf5922f5ed74e9965", 0xca, 0x7c}, {&(0x7f0000000240)="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", 0x1000, 0x8}, {&(0x7f0000001240)="5a6e2ce9cf7191a19cba868bb8bae6791780314115b889554ad3b8d3e9eae8aa7af6c736fdf93e139a56167aa45978dfa79b9df64c7caaad5d969ccd3640bd1a3da5bc2be1255c20f7cb176e58ca63bd1e262f3643526eaa6d96ac9f258e7c912388c4a1f6b69ade6267af99d6754f089705cf3b6545f3138a07e07e69312abe5c0baa37c4c185949f480bf6852674216516375550af172a4ad7d5ef377fce47665cc1cc87c5b4ab8a01b0194a29f413715792faf01b71dfb94f8a607187d10520f713d08caba11bf19624687285b61266fe737b0dc5836970b3273adb888cadc1c02416851f14b40aa37ab77666de", 0xef, 0x9}, {&(0x7f0000000000), 0x0, 0x100000000}, {&(0x7f0000001340)="d0a9fcbe02ab099904fda18400ce7afcd076938b00ead065cacefc68dfc4bdebb91bb7934eb653d7e412f6d8b6816fd57265762ece61be2d27bcdd170bf0227876fd8834ebb0ec88e9098eaf185726bddb7625293ad2680a29ff72e4f5f823e04475660ab2cc7235f7d7b0a1c8e6468700db819dfcffda30527b4539670ea7edc6031ca7c65b5ea6c7ac9dd1b09b7c26d3c9b92bec27a4f88700e38208c4f8bbfe18c31e9d89421d24f1309fe58592371a33f0530da538f249d96a458764b3", 0xbf, 0x50000000}, {&(0x7f0000001400)="5a59eb631aef74", 0x7, 0x6}, {&(0x7f0000001500)="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", 0x1000, 0xfffffffffffffffe}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2cf22fa961701444f2ef08193641ba446b"]) 00:18:14 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3403.010306][T20486] dump_stack+0x11/0x1a [ 3403.014452][T20486] should_fail+0x23c/0x250 [ 3403.018876][T20486] __should_failslab+0x81/0x90 [ 3403.023634][T20486] ? io_uring_create+0x121/0x1940 [ 3403.028650][T20486] should_failslab+0x5/0x20 [ 3403.033179][T20486] kmem_cache_alloc_trace+0x49/0x310 [ 3403.038462][T20486] io_uring_create+0x121/0x1940 [ 3403.043362][T20486] ? vfs_write+0x50c/0x770 [ 3403.047772][T20486] ? should_fail+0xd6/0x250 [ 3403.052321][T20486] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.057777][T20486] do_syscall_64+0x3d/0x90 00:18:14 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3403.062192][T20486] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3403.068085][T20486] RIP: 0033:0x4665f9 [ 3403.071963][T20486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3403.091658][T20486] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3403.100175][T20486] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:14 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3403.108167][T20486] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3403.116175][T20486] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3403.124133][T20486] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3403.132089][T20486] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:14 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3403.163662][T20507] loop5: detected capacity change from 0 to 264192 [ 3403.196649][T20508] FAULT_INJECTION: forcing a failure. [ 3403.196649][T20508] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.209419][T20508] CPU: 1 PID: 20508 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3403.218173][T20508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3403.228245][T20508] Call Trace: [ 3403.231513][T20508] dump_stack_lvl+0xb7/0x103 [ 3403.236092][T20508] dump_stack+0x11/0x1a [ 3403.240252][T20508] should_fail+0x23c/0x250 [ 3403.244675][T20508] __should_failslab+0x81/0x90 [ 3403.249432][T20508] ? io_uring_create+0x121/0x1940 [ 3403.254498][T20508] should_failslab+0x5/0x20 [ 3403.258996][T20508] kmem_cache_alloc_trace+0x49/0x310 00:18:15 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_io_uring_setup(0x595f, &(0x7f0000000000)={0x0, 0x165f, 0x4, 0x3, 0x9a}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000340)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:15 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:15 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:15 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x841000, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:devicekit_var_lib_t:s0\x00', 0x29, 0x6) [ 3403.264328][T20508] io_uring_create+0x121/0x1940 [ 3403.269173][T20508] ? vfs_write+0x50c/0x770 [ 3403.273604][T20508] ? should_fail+0xd6/0x250 [ 3403.278102][T20508] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.283577][T20508] do_syscall_64+0x3d/0x90 [ 3403.287988][T20508] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3403.293881][T20508] RIP: 0033:0x4665f9 [ 3403.297873][T20508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3403.317556][T20508] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3403.325957][T20508] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3403.333948][T20508] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3403.341952][T20508] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3403.349913][T20508] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3403.357884][T20508] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3403.371025][T20531] FAULT_INJECTION: forcing a failure. [ 3403.371025][T20531] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.383660][T20531] CPU: 0 PID: 20531 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3403.392396][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3403.402432][T20531] Call Trace: [ 3403.405704][T20531] dump_stack_lvl+0xb7/0x103 [ 3403.410282][T20531] dump_stack+0x11/0x1a [ 3403.413054][T20540] FAULT_INJECTION: forcing a failure. [ 3403.413054][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.414483][T20531] should_fail+0x23c/0x250 [ 3403.414511][T20531] ? io_uring_create+0x18e/0x1940 [ 3403.436558][T20531] __should_failslab+0x81/0x90 [ 3403.441308][T20531] should_failslab+0x5/0x20 [ 3403.445860][T20531] __kmalloc+0x66/0x340 [ 3403.450000][T20531] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3403.455608][T20531] ? io_uring_create+0x121/0x1940 [ 3403.460635][T20531] io_uring_create+0x18e/0x1940 [ 3403.465555][T20531] ? vfs_write+0x50c/0x770 [ 3403.470146][T20531] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.475765][T20531] do_syscall_64+0x3d/0x90 [ 3403.480166][T20531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3403.486049][T20531] RIP: 0033:0x4665f9 [ 3403.490017][T20531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:15 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:15 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:15 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:15 executing program 1: r0 = syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3403.509634][T20531] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3403.518050][T20531] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3403.526004][T20531] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3403.533953][T20531] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3403.541905][T20531] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3403.549863][T20531] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3403.557816][T20540] CPU: 1 PID: 20540 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3403.566577][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3403.576679][T20540] Call Trace: [ 3403.579990][T20540] dump_stack_lvl+0xb7/0x103 [ 3403.584663][T20540] dump_stack+0x11/0x1a [ 3403.588812][T20540] should_fail+0x23c/0x250 [ 3403.593224][T20540] ? io_uring_create+0x18e/0x1940 [ 3403.598241][T20540] __should_failslab+0x81/0x90 [ 3403.603056][T20540] should_failslab+0x5/0x20 [ 3403.607587][T20540] __kmalloc+0x66/0x340 [ 3403.611891][T20540] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3403.617481][T20540] ? io_uring_create+0x121/0x1940 [ 3403.622039][T20522] FAT-fs (loop5): bogus number of reserved sectors [ 3403.622506][T20540] io_uring_create+0x18e/0x1940 [ 3403.629034][T20522] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3403.633810][T20540] ? vfs_write+0x50c/0x770 [ 3403.633831][T20540] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.650328][T20540] do_syscall_64+0x3d/0x90 [ 3403.654836][T20540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3403.660733][T20540] RIP: 0033:0x4665f9 00:18:15 executing program 1: r0 = syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:15 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:15 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3403.664714][T20540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3403.684322][T20540] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3403.692728][T20540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3403.700692][T20540] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3403.708726][T20540] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3403.716736][T20540] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3403.724700][T20540] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3403.732630][T20559] FAULT_INJECTION: forcing a failure. [ 3403.732630][T20559] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.745377][T20559] CPU: 0 PID: 20559 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3403.754128][T20559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3403.764172][T20559] Call Trace: [ 3403.767445][T20559] dump_stack_lvl+0xb7/0x103 [ 3403.772058][T20559] dump_stack+0x11/0x1a [ 3403.776219][T20559] should_fail+0x23c/0x250 [ 3403.780693][T20559] __should_failslab+0x81/0x90 [ 3403.785450][T20559] ? io_uring_create+0x1df/0x1940 [ 3403.790561][T20559] should_failslab+0x5/0x20 [ 3403.795063][T20559] kmem_cache_alloc_trace+0x49/0x310 [ 3403.800346][T20559] ? io_uring_create+0x18e/0x1940 [ 3403.805430][T20559] io_uring_create+0x1df/0x1940 [ 3403.810276][T20559] ? vfs_write+0x50c/0x770 00:18:15 executing program 1: r0 = syz_io_uring_setup(0xdea, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:15 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), 0x0) r3 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:15 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:15 executing program 4 (fault-call:2 fault-nth:3): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3403.814695][T20559] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.820200][T20559] do_syscall_64+0x3d/0x90 [ 3403.824644][T20559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3403.830540][T20559] RIP: 0033:0x4665f9 [ 3403.834426][T20559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3403.854021][T20559] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3403.862447][T20559] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3403.870411][T20559] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3403.878398][T20559] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3403.886360][T20559] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3403.894346][T20559] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3403.896352][T20571] FAULT_INJECTION: forcing a failure. [ 3403.896352][T20571] name failslab, interval 1, probability 0, space 0, times 0 [ 3403.914924][T20571] CPU: 1 PID: 20571 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3403.923862][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3403.933984][T20571] Call Trace: [ 3403.937251][T20571] dump_stack_lvl+0xb7/0x103 [ 3403.941844][T20571] dump_stack+0x11/0x1a [ 3403.945988][T20571] should_fail+0x23c/0x250 [ 3403.950487][T20571] __should_failslab+0x81/0x90 [ 3403.955242][T20571] ? io_uring_create+0x1df/0x1940 [ 3403.960262][T20571] should_failslab+0x5/0x20 [ 3403.964757][T20571] kmem_cache_alloc_trace+0x49/0x310 [ 3403.970161][T20571] ? io_uring_create+0x18e/0x1940 [ 3403.975161][T20571] io_uring_create+0x1df/0x1940 [ 3403.980031][T20571] ? vfs_write+0x50c/0x770 [ 3403.984421][T20571] __x64_sys_io_uring_setup+0xe1/0x120 [ 3403.989927][T20571] do_syscall_64+0x3d/0x90 [ 3403.994322][T20571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.000269][T20571] RIP: 0033:0x4665f9 [ 3404.004147][T20571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.023751][T20571] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.032299][T20571] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3404.040258][T20571] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3404.048207][T20571] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.056159][T20571] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 00:18:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c00815101b7b0dfa7d561059d04f87122de65534a72d18cf8f672fa4a0046201c3cfc7a58a6042c5fa2ddaa9631e7a01ce09f616490959f4476d92a1a72ea09"]) rmdir(&(0x7f0000000000)='./file0\x00') 00:18:15 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:15 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:15 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) r2 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r2, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:15 executing program 3 (fault-call:2 fault-nth:4): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:15 executing program 4 (fault-call:2 fault-nth:4): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3404.064116][T20571] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3404.120158][T20591] FAULT_INJECTION: forcing a failure. [ 3404.120158][T20591] name failslab, interval 1, probability 0, space 0, times 0 [ 3404.128958][T20595] FAULT_INJECTION: forcing a failure. [ 3404.128958][T20595] name failslab, interval 1, probability 0, space 0, times 0 [ 3404.132897][T20591] CPU: 1 PID: 20591 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3404.154130][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.164169][T20591] Call Trace: [ 3404.167443][T20591] dump_stack_lvl+0xb7/0x103 [ 3404.172024][T20591] dump_stack+0x11/0x1a [ 3404.176163][T20591] should_fail+0x23c/0x250 [ 3404.180629][T20591] ? io_uring_create+0x1940/0x1940 [ 3404.185774][T20591] __should_failslab+0x81/0x90 [ 3404.190525][T20591] ? percpu_ref_init+0x96/0x250 [ 3404.195356][T20591] should_failslab+0x5/0x20 [ 3404.199843][T20591] kmem_cache_alloc_trace+0x49/0x310 [ 3404.205115][T20591] ? io_uring_create+0x1940/0x1940 [ 3404.210215][T20591] percpu_ref_init+0x96/0x250 [ 3404.214915][T20591] io_uring_create+0x226/0x1940 [ 3404.219809][T20591] ? vfs_write+0x50c/0x770 [ 3404.224273][T20591] __x64_sys_io_uring_setup+0xe1/0x120 [ 3404.229741][T20591] do_syscall_64+0x3d/0x90 [ 3404.234169][T20591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.240050][T20591] RIP: 0033:0x4665f9 [ 3404.243926][T20591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.263513][T20591] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.271912][T20591] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3404.279866][T20591] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3404.287833][T20591] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.295895][T20591] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3404.303879][T20591] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3404.311896][T20595] CPU: 0 PID: 20595 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3404.320697][T20595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.330742][T20595] Call Trace: [ 3404.334011][T20595] dump_stack_lvl+0xb7/0x103 [ 3404.338620][T20595] dump_stack+0x11/0x1a [ 3404.342778][T20595] should_fail+0x23c/0x250 [ 3404.347232][T20595] ? io_uring_create+0x1940/0x1940 [ 3404.352343][T20595] __should_failslab+0x81/0x90 [ 3404.357102][T20595] ? percpu_ref_init+0x96/0x250 [ 3404.361989][T20595] should_failslab+0x5/0x20 00:18:16 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:16 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:16 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:16 executing program 3 (fault-call:2 fault-nth:5): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3404.366527][T20595] kmem_cache_alloc_trace+0x49/0x310 [ 3404.371816][T20595] ? io_uring_create+0x1940/0x1940 [ 3404.376923][T20595] percpu_ref_init+0x96/0x250 [ 3404.381593][T20595] io_uring_create+0x226/0x1940 [ 3404.386437][T20595] ? vfs_write+0x50c/0x770 [ 3404.390851][T20595] __x64_sys_io_uring_setup+0xe1/0x120 [ 3404.396307][T20595] do_syscall_64+0x3d/0x90 [ 3404.400723][T20595] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.406658][T20595] RIP: 0033:0x4665f9 00:18:16 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3404.410637][T20595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.430232][T20595] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.438635][T20595] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3404.446660][T20595] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3404.454621][T20595] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.462582][T20595] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 00:18:16 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3404.470540][T20595] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3404.490598][T20604] FAULT_INJECTION: forcing a failure. [ 3404.490598][T20604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3404.503877][T20604] CPU: 0 PID: 20604 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3404.512634][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.522680][T20604] Call Trace: [ 3404.525942][T20604] dump_stack_lvl+0xb7/0x103 [ 3404.530536][T20604] dump_stack+0x11/0x1a [ 3404.534685][T20604] should_fail+0x23c/0x250 [ 3404.539104][T20604] __alloc_pages+0x102/0x320 [ 3404.543691][T20604] alloc_pages+0x2e8/0x340 [ 3404.548172][T20604] __get_free_pages+0x8/0x30 [ 3404.552886][T20604] io_uring_create+0x904/0x1940 [ 3404.557800][T20604] ? vfs_write+0x50c/0x770 [ 3404.562286][T20604] __x64_sys_io_uring_setup+0xe1/0x120 [ 3404.567748][T20604] do_syscall_64+0x3d/0x90 [ 3404.572172][T20604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.578070][T20604] RIP: 0033:0x4665f9 [ 3404.581938][T20604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.601645][T20604] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.610029][T20604] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:16 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:16 executing program 4 (fault-call:2 fault-nth:5): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='debuRo\x00']) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 00:18:16 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:16 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:16 executing program 3 (fault-call:2 fault-nth:6): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3404.617984][T20604] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3404.625993][T20604] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.633940][T20604] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3404.641887][T20604] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3404.693786][T20633] FAULT_INJECTION: forcing a failure. [ 3404.693786][T20633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3404.696136][T20635] FAULT_INJECTION: forcing a failure. [ 3404.696136][T20635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3404.707028][T20633] CPU: 1 PID: 20633 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3404.728942][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.738978][T20633] Call Trace: [ 3404.742237][T20633] dump_stack_lvl+0xb7/0x103 [ 3404.746873][T20633] dump_stack+0x11/0x1a [ 3404.751010][T20633] should_fail+0x23c/0x250 [ 3404.755517][T20633] __alloc_pages+0x102/0x320 [ 3404.760092][T20633] alloc_pages+0x2e8/0x340 [ 3404.764593][T20633] __get_free_pages+0x8/0x30 [ 3404.769164][T20633] io_uring_create+0x9f7/0x1940 [ 3404.774059][T20633] ? vfs_write+0x50c/0x770 [ 3404.778457][T20633] __x64_sys_io_uring_setup+0xe1/0x120 [ 3404.783909][T20633] do_syscall_64+0x3d/0x90 [ 3404.788316][T20633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.794202][T20633] RIP: 0033:0x4665f9 [ 3404.798076][T20633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.817762][T20633] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.826168][T20633] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3404.834120][T20633] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca 00:18:16 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 3404.842073][T20633] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.850024][T20633] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3404.858039][T20633] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3404.865997][T20635] CPU: 0 PID: 20635 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3404.874761][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3404.884809][T20635] Call Trace: [ 3404.888157][T20635] dump_stack_lvl+0xb7/0x103 00:18:16 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) 00:18:16 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) [ 3404.892749][T20635] dump_stack+0x11/0x1a [ 3404.896898][T20635] should_fail+0x23c/0x250 [ 3404.901314][T20635] __alloc_pages+0x102/0x320 [ 3404.905905][T20635] alloc_pages+0x2e8/0x340 [ 3404.910321][T20635] __get_free_pages+0x8/0x30 [ 3404.915043][T20635] io_uring_create+0x904/0x1940 [ 3404.919936][T20635] ? vfs_write+0x50c/0x770 [ 3404.924344][T20635] __x64_sys_io_uring_setup+0xe1/0x120 [ 3404.929797][T20635] do_syscall_64+0x3d/0x90 [ 3404.934204][T20635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3404.940092][T20635] RIP: 0033:0x4665f9 00:18:16 executing program 3 (fault-call:2 fault-nth:7): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:16 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) [ 3404.944015][T20635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3404.963678][T20635] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3404.972123][T20635] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3404.980080][T20635] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca 00:18:16 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:16 executing program 0: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3404.988045][T20635] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3404.996006][T20635] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3405.004000][T20635] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3405.025553][T20647] FAULT_INJECTION: forcing a failure. [ 3405.025553][T20647] name failslab, interval 1, probability 0, space 0, times 0 [ 3405.038188][T20647] CPU: 1 PID: 20647 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3405.046945][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.056992][T20647] Call Trace: [ 3405.060262][T20647] dump_stack_lvl+0xb7/0x103 [ 3405.064933][T20647] dump_stack+0x11/0x1a [ 3405.069127][T20647] should_fail+0x23c/0x250 [ 3405.073539][T20647] __should_failslab+0x81/0x90 [ 3405.078296][T20647] ? io_uring_create+0x1466/0x1940 [ 3405.082338][T20659] FAULT_INJECTION: forcing a failure. [ 3405.082338][T20659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3405.083398][T20647] should_failslab+0x5/0x20 [ 3405.083420][T20647] kmem_cache_alloc_trace+0x49/0x310 [ 3405.106404][T20647] ? alloc_pages+0x2e8/0x340 [ 3405.111016][T20647] io_uring_create+0x1466/0x1940 [ 3405.115955][T20647] ? vfs_write+0x50c/0x770 [ 3405.120395][T20647] __x64_sys_io_uring_setup+0xe1/0x120 [ 3405.125835][T20647] do_syscall_64+0x3d/0x90 [ 3405.130240][T20647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3405.136120][T20647] RIP: 0033:0x4665f9 [ 3405.140009][T20647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3405.159647][T20647] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3405.168124][T20647] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3405.176078][T20647] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3405.184029][T20647] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 00:18:16 executing program 4 (fault-call:2 fault-nth:6): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3405.191981][T20647] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3405.199935][T20647] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3405.207892][T20659] CPU: 0 PID: 20659 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3405.216735][T20659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.226786][T20659] Call Trace: [ 3405.230056][T20659] dump_stack_lvl+0xb7/0x103 [ 3405.234662][T20659] dump_stack+0x11/0x1a [ 3405.238809][T20659] should_fail+0x23c/0x250 [ 3405.243295][T20659] __alloc_pages+0x102/0x320 [ 3405.247197][T20661] FAT-fs (loop5): Unrecognized mount option "debuRo" or missing value [ 3405.247879][T20659] alloc_pages+0x2e8/0x340 [ 3405.260428][T20659] __get_free_pages+0x8/0x30 [ 3405.265015][T20659] io_uring_create+0x9f7/0x1940 [ 3405.269924][T20659] ? vfs_write+0x50c/0x770 [ 3405.274338][T20659] __x64_sys_io_uring_setup+0xe1/0x120 [ 3405.279796][T20659] do_syscall_64+0x3d/0x90 [ 3405.284212][T20659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3405.290106][T20659] RIP: 0033:0x4665f9 [ 3405.293991][T20659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3405.313587][T20659] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3405.322112][T20659] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3405.330137][T20659] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3405.338101][T20659] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 00:18:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="2c00f16129e027ec082daa1e3b6bc8ffbd3d84ef37ba254b826ecd7bb1d51951de7a8013ce6442f3389bcf0a79529a679483d4ec556f15066abb7c62ad0c652f2ea8a2258dc355736f839c1a65f2f9c7abbb761dbd4d1723c94e8f467dfc5befcd0be3cfcab57ffa36d9628cf1d9a85c6b3d52550cc63cb9e64d4133fca8ff9e159eb663a2cb7fc1b497239b6939d461dedeea9c0040"]) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L+', 0x7}, 0x16, 0x1) r0 = socket$inet(0x2, 0xa, 0xffff) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f00000001c0)}, 0x7}], 0x1, 0x40, &(0x7f0000000240)={0x0, 0x3938700}) 00:18:17 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:17 executing program 3 (fault-call:2 fault-nth:8): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:17 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:17 executing program 0 (fault-call:1 fault-nth:0): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:17 executing program 4 (fault-call:2 fault-nth:7): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3405.346062][T20659] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3405.354080][T20659] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3405.379594][T20661] FAT-fs (loop5): Unrecognized mount option "debuRo" or missing value [ 3405.428610][T20687] FAULT_INJECTION: forcing a failure. [ 3405.428610][T20687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3405.441674][T20687] CPU: 1 PID: 20687 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3405.445650][T20691] FAT-fs (loop5): Unrecognized mount option "gid=„‘ãÈf½y<&'æ‚tþÄ •Þ¼µC\»+dÆ$\À›j…ã(ª>4ájqø-/TÑ`'Æ›.tÄ)OñÑÐK»t¼îÜÄ “ð”ö€ñbÖ ”“ãÕ'½€" or missing value [ 3405.450428][T20687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.450441][T20687] Call Trace: [ 3405.450448][T20687] dump_stack_lvl+0xb7/0x103 [ 3405.484186][T20687] dump_stack+0x11/0x1a [ 3405.488330][T20687] should_fail+0x23c/0x250 [ 3405.488630][T20690] FAULT_INJECTION: forcing a failure. [ 3405.488630][T20690] name failslab, interval 1, probability 0, space 0, times 0 [ 3405.492807][T20687] should_fail_usercopy+0x16/0x20 [ 3405.492836][T20687] _copy_from_user+0x1c/0xd0 [ 3405.492854][T20687] __x64_sys_io_uring_setup+0x4b/0x120 [ 3405.520455][T20687] ? fput+0x2d/0x130 [ 3405.524337][T20687] ? ksys_write+0x157/0x180 [ 3405.528834][T20687] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3405.534906][T20687] ? exit_to_user_mode_prepare+0x65/0x190 [ 3405.540617][T20687] do_syscall_64+0x3d/0x90 [ 3405.545017][T20687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3405.550895][T20687] RIP: 0033:0x4665f9 [ 3405.554770][T20687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:17 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3405.574359][T20687] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3405.582755][T20687] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3405.590719][T20687] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3405.598757][T20687] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3405.606711][T20687] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3405.614665][T20687] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:17 executing program 0 (fault-call:1 fault-nth:1): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3405.622661][T20690] CPU: 0 PID: 20690 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3405.631418][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.641576][T20690] Call Trace: [ 3405.644842][T20690] dump_stack_lvl+0xb7/0x103 [ 3405.649426][T20690] dump_stack+0x11/0x1a [ 3405.653654][T20690] should_fail+0x23c/0x250 [ 3405.655188][T20689] FAULT_INJECTION: forcing a failure. [ 3405.655188][T20689] name failslab, interval 1, probability 0, space 0, times 0 [ 3405.658063][T20690] __should_failslab+0x81/0x90 [ 3405.658084][T20690] ? io_uring_create+0x1466/0x1940 [ 3405.680561][T20690] should_failslab+0x5/0x20 [ 3405.685093][T20690] kmem_cache_alloc_trace+0x49/0x310 [ 3405.690367][T20690] ? alloc_pages+0x2e8/0x340 [ 3405.694938][T20690] io_uring_create+0x1466/0x1940 [ 3405.699859][T20690] ? vfs_write+0x50c/0x770 [ 3405.704267][T20690] __x64_sys_io_uring_setup+0xe1/0x120 [ 3405.709709][T20690] do_syscall_64+0x3d/0x90 [ 3405.714107][T20690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3405.719983][T20690] RIP: 0033:0x4665f9 [ 3405.723854][T20690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3405.743441][T20690] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3405.751833][T20690] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3405.759834][T20690] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3405.767783][T20690] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3405.775770][T20690] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3405.783722][T20690] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3405.791674][T20689] CPU: 1 PID: 20689 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3405.800484][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.810588][T20689] Call Trace: [ 3405.813858][T20689] dump_stack_lvl+0xb7/0x103 [ 3405.818440][T20689] dump_stack+0x11/0x1a [ 3405.818746][T20702] FAULT_INJECTION: forcing a failure. [ 3405.818746][T20702] name failslab, interval 1, probability 0, space 0, times 0 [ 3405.822616][T20689] should_fail+0x23c/0x250 [ 3405.839594][T20689] ? kzalloc+0x20/0x20 [ 3405.843662][T20689] __should_failslab+0x81/0x90 [ 3405.848418][T20689] ? percpu_ref_init+0x96/0x250 [ 3405.853282][T20689] should_failslab+0x5/0x20 [ 3405.857765][T20689] kmem_cache_alloc_trace+0x49/0x310 [ 3405.863104][T20689] ? kzalloc+0x20/0x20 [ 3405.867202][T20689] percpu_ref_init+0x96/0x250 [ 3405.871862][T20689] io_uring_create+0x1488/0x1940 [ 3405.876793][T20689] ? vfs_write+0x50c/0x770 [ 3405.881203][T20689] __x64_sys_io_uring_setup+0xe1/0x120 [ 3405.886645][T20689] do_syscall_64+0x3d/0x90 [ 3405.891071][T20689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3405.897022][T20689] RIP: 0033:0x4665f9 [ 3405.900898][T20689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3405.920500][T20689] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3405.928962][T20689] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3405.936943][T20689] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3405.944896][T20689] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3405.952862][T20689] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3405.961262][T20689] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3405.969219][T20702] CPU: 0 PID: 20702 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 00:18:17 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:17 executing program 4 (fault-call:2 fault-nth:8): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:17 executing program 3 (fault-call:2 fault-nth:9): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3405.977975][T20702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3405.988017][T20702] Call Trace: [ 3405.991365][T20702] dump_stack_lvl+0xb7/0x103 [ 3405.995991][T20702] dump_stack+0x11/0x1a [ 3406.000135][T20702] should_fail+0x23c/0x250 [ 3406.004568][T20702] __should_failslab+0x81/0x90 [ 3406.009326][T20702] ? io_uring_create+0x121/0x1940 [ 3406.014344][T20702] should_failslab+0x5/0x20 [ 3406.018856][T20702] kmem_cache_alloc_trace+0x49/0x310 [ 3406.024148][T20702] io_uring_create+0x121/0x1940 [ 3406.028997][T20702] ? vfs_write+0x50c/0x770 [ 3406.033408][T20702] ? should_fail+0xd6/0x250 [ 3406.037910][T20702] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.043440][T20702] do_syscall_64+0x3d/0x90 [ 3406.047856][T20702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.053748][T20702] RIP: 0033:0x4665f9 [ 3406.054392][T20710] FAULT_INJECTION: forcing a failure. [ 3406.054392][T20710] name failslab, interval 1, probability 0, space 0, times 0 [ 3406.057632][T20702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.057651][T20702] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3406.098401][T20702] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.106375][T20702] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3406.114328][T20702] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3406.122277][T20702] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3406.130230][T20702] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3406.138224][T20710] CPU: 1 PID: 20710 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3406.147000][T20710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.157050][T20710] Call Trace: [ 3406.160363][T20710] dump_stack_lvl+0xb7/0x103 [ 3406.165039][T20710] dump_stack+0x11/0x1a [ 3406.169250][T20710] should_fail+0x23c/0x250 [ 3406.173665][T20710] ? kzalloc+0x20/0x20 [ 3406.177788][T20710] __should_failslab+0x81/0x90 [ 3406.182622][T20710] ? percpu_ref_init+0x96/0x250 [ 3406.183376][T20711] FAULT_INJECTION: forcing a failure. [ 3406.183376][T20711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3406.187464][T20710] should_failslab+0x5/0x20 [ 3406.187487][T20710] kmem_cache_alloc_trace+0x49/0x310 [ 3406.210270][T20710] ? kzalloc+0x20/0x20 [ 3406.214324][T20710] percpu_ref_init+0x96/0x250 [ 3406.219016][T20710] io_uring_create+0x1488/0x1940 [ 3406.224010][T20710] ? vfs_write+0x50c/0x770 [ 3406.228572][T20710] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.234066][T20710] do_syscall_64+0x3d/0x90 [ 3406.238531][T20710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.244409][T20710] RIP: 0033:0x4665f9 [ 3406.248287][T20710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.268484][T20710] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:17 executing program 0 (fault-call:1 fault-nth:2): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3406.276893][T20710] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.284943][T20710] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3406.292896][T20710] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3406.300846][T20710] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3406.308800][T20710] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3406.316761][T20711] CPU: 0 PID: 20711 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3406.325540][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.335583][T20711] Call Trace: [ 3406.338851][T20711] dump_stack_lvl+0xb7/0x103 [ 3406.343432][T20711] dump_stack+0x11/0x1a [ 3406.347576][T20711] should_fail+0x23c/0x250 [ 3406.352033][T20711] should_fail_usercopy+0x16/0x20 [ 3406.357069][T20711] _copy_to_user+0x1c/0x90 [ 3406.361554][T20711] io_uring_create+0x160d/0x1940 [ 3406.365434][T20720] FAULT_INJECTION: forcing a failure. [ 3406.365434][T20720] name failslab, interval 1, probability 0, space 0, times 0 [ 3406.366491][T20711] ? vfs_write+0x50c/0x770 [ 3406.383449][T20711] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.388897][T20711] do_syscall_64+0x3d/0x90 [ 3406.393299][T20711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.399241][T20711] RIP: 0033:0x4665f9 [ 3406.403112][T20711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.422703][T20711] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3406.431153][T20711] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.439121][T20711] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3406.447075][T20711] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3406.455051][T20711] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3406.463060][T20711] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3406.471016][T20720] CPU: 1 PID: 20720 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3406.479775][T20720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.489840][T20720] Call Trace: [ 3406.493131][T20720] dump_stack_lvl+0xb7/0x103 [ 3406.497778][T20720] dump_stack+0x11/0x1a [ 3406.501996][T20720] should_fail+0x23c/0x250 [ 3406.506411][T20720] ? io_uring_create+0x18e/0x1940 [ 3406.511530][T20720] __should_failslab+0x81/0x90 [ 3406.516349][T20720] should_failslab+0x5/0x20 [ 3406.520836][T20720] __kmalloc+0x66/0x340 [ 3406.524984][T20720] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3406.530588][T20720] ? io_uring_create+0x121/0x1940 [ 3406.535615][T20720] io_uring_create+0x18e/0x1940 [ 3406.540484][T20720] ? vfs_write+0x50c/0x770 [ 3406.544893][T20720] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.550402][T20720] do_syscall_64+0x3d/0x90 [ 3406.554824][T20720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.560717][T20720] RIP: 0033:0x4665f9 [ 3406.564661][T20720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.584389][T20720] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3406.592785][T20720] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.600730][T20720] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3406.608727][T20720] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3406.616675][T20720] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3406.624621][T20720] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="2d00ec00", @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:18 executing program 4 (fault-call:2 fault-nth:9): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:18 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:18 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:18 executing program 3 (fault-call:2 fault-nth:10): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:18 executing program 0 (fault-call:1 fault-nth:3): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3406.634132][T20691] FAT-fs (loop5): Unrecognized mount option "gid=„‘ãÈf½y<&'æ‚tþÄ •Þ¼µC\»+dÆ$\À›j…ã(ª>4ájqø-/TÑ`'Æ›.tÄ)OñÑÐK»t¼îÜÄ “ð”ö€ñbÖ ”“ãÕ'½€" or missing value [ 3406.677873][T20738] FAULT_INJECTION: forcing a failure. [ 3406.677873][T20738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3406.690947][T20738] CPU: 0 PID: 20738 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3406.694133][T20744] FAULT_INJECTION: forcing a failure. [ 3406.694133][T20744] name failslab, interval 1, probability 0, space 0, times 0 [ 3406.699706][T20738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.699719][T20738] Call Trace: [ 3406.699726][T20738] dump_stack_lvl+0xb7/0x103 [ 3406.699746][T20738] dump_stack+0x11/0x1a [ 3406.734443][T20738] should_fail+0x23c/0x250 [ 3406.738924][T20738] should_fail_usercopy+0x16/0x20 [ 3406.743934][T20738] _copy_to_user+0x1c/0x90 [ 3406.748367][T20738] io_uring_create+0x160d/0x1940 [ 3406.753359][T20738] ? vfs_write+0x50c/0x770 [ 3406.757761][T20738] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.763203][T20738] do_syscall_64+0x3d/0x90 [ 3406.767612][T20738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.773492][T20738] RIP: 0033:0x4665f9 [ 3406.777401][T20738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.797015][T20738] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3406.805406][T20738] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.813363][T20738] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca 00:18:18 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3406.821324][T20738] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3406.829279][T20738] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3406.837232][T20738] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3406.845186][T20744] CPU: 1 PID: 20744 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3406.853948][T20744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3406.864064][T20744] Call Trace: [ 3406.867332][T20744] dump_stack_lvl+0xb7/0x103 [ 3406.871918][T20744] dump_stack+0x11/0x1a 00:18:18 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:18 executing program 4 (fault-call:2 fault-nth:10): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3406.876064][T20744] should_fail+0x23c/0x250 [ 3406.880500][T20744] __should_failslab+0x81/0x90 [ 3406.885254][T20744] ? io_uring_create+0x1df/0x1940 [ 3406.890272][T20744] should_failslab+0x5/0x20 [ 3406.894763][T20744] kmem_cache_alloc_trace+0x49/0x310 [ 3406.900176][T20744] ? io_uring_create+0x18e/0x1940 [ 3406.905200][T20744] io_uring_create+0x1df/0x1940 [ 3406.910052][T20744] ? vfs_write+0x50c/0x770 [ 3406.914462][T20744] __x64_sys_io_uring_setup+0xe1/0x120 [ 3406.919926][T20744] do_syscall_64+0x3d/0x90 [ 3406.921424][T20743] FAULT_INJECTION: forcing a failure. [ 3406.921424][T20743] name failslab, interval 1, probability 0, space 0, times 0 [ 3406.924341][T20744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3406.924368][T20744] RIP: 0033:0x4665f9 [ 3406.946687][T20744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3406.966297][T20744] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3406.974694][T20744] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3406.982649][T20744] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3406.990781][T20744] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3406.998909][T20744] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3407.006872][T20744] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3407.014835][T20743] CPU: 0 PID: 20743 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3407.023635][T20743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.033680][T20743] Call Trace: [ 3407.036969][T20743] dump_stack_lvl+0xb7/0x103 [ 3407.041553][T20743] dump_stack+0x11/0x1a [ 3407.045704][T20743] should_fail+0x23c/0x250 [ 3407.046616][T20753] FAULT_INJECTION: forcing a failure. [ 3407.046616][T20753] name failslab, interval 1, probability 0, space 0, times 0 [ 3407.050224][T20743] ? sock_alloc_inode+0x23/0x90 [ 3407.067762][T20743] __should_failslab+0x81/0x90 [ 3407.072515][T20743] ? sockfs_init_fs_context+0x70/0x70 [ 3407.077886][T20743] should_failslab+0x5/0x20 [ 3407.082371][T20743] kmem_cache_alloc+0x46/0x2e0 [ 3407.087249][T20743] ? selinux_socket_create+0x7c/0x170 [ 3407.092606][T20743] ? sockfs_init_fs_context+0x70/0x70 [ 3407.097977][T20743] sock_alloc_inode+0x23/0x90 [ 3407.102644][T20743] ? sockfs_init_fs_context+0x70/0x70 [ 3407.108082][T20743] new_inode_pseudo+0x38/0x1c0 [ 3407.112845][T20743] __sock_create+0x122/0x4e0 [ 3407.117497][T20743] ? should_fail+0xd6/0x250 [ 3407.121997][T20743] sock_create_kern+0x34/0x40 [ 3407.126661][T20743] io_uring_create+0x1653/0x1940 [ 3407.131652][T20743] ? vfs_write+0x50c/0x770 [ 3407.136061][T20743] __x64_sys_io_uring_setup+0xe1/0x120 [ 3407.141589][T20743] do_syscall_64+0x3d/0x90 [ 3407.145987][T20743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3407.151936][T20743] RIP: 0033:0x4665f9 [ 3407.155876][T20743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3407.175516][T20743] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3407.183915][T20743] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3407.191878][T20743] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3407.199835][T20743] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3407.207860][T20743] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3407.215817][T20743] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:19 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:19 executing program 3 (fault-call:2 fault-nth:11): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3407.223773][T20753] CPU: 1 PID: 20753 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3407.223835][T20743] socket: no more sockets [ 3407.232527][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.246859][T20753] Call Trace: [ 3407.250134][T20753] dump_stack_lvl+0xb7/0x103 [ 3407.254722][T20753] dump_stack+0x11/0x1a [ 3407.258897][T20753] should_fail+0x23c/0x250 [ 3407.263334][T20753] ? sock_alloc_inode+0x23/0x90 [ 3407.268182][T20753] __should_failslab+0x81/0x90 [ 3407.272940][T20753] ? sockfs_init_fs_context+0x70/0x70 00:18:19 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3407.278310][T20753] should_failslab+0x5/0x20 [ 3407.282805][T20753] kmem_cache_alloc+0x46/0x2e0 [ 3407.287647][T20753] ? selinux_socket_create+0x7c/0x170 [ 3407.293053][T20753] ? sockfs_init_fs_context+0x70/0x70 [ 3407.298422][T20753] sock_alloc_inode+0x23/0x90 [ 3407.303144][T20753] ? sockfs_init_fs_context+0x70/0x70 [ 3407.308508][T20753] new_inode_pseudo+0x38/0x1c0 [ 3407.313269][T20753] __sock_create+0x122/0x4e0 [ 3407.317850][T20753] ? should_fail+0xd6/0x250 [ 3407.322360][T20753] sock_create_kern+0x34/0x40 [ 3407.327035][T20753] io_uring_create+0x1653/0x1940 [ 3407.332016][T20753] ? vfs_write+0x50c/0x770 [ 3407.336462][T20753] __x64_sys_io_uring_setup+0xe1/0x120 [ 3407.341915][T20753] do_syscall_64+0x3d/0x90 [ 3407.346331][T20753] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3407.352254][T20753] RIP: 0033:0x4665f9 [ 3407.356140][T20753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3407.370413][T20754] FAT-fs (loop5): Unrecognized mount option "-" or missing value [ 3407.375741][T20753] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3407.375807][T20753] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3407.399834][T20753] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3407.407805][T20753] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3407.415799][T20753] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3407.423843][T20753] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3407.431871][T20753] socket: no more sockets [ 3407.436612][T20772] FAULT_INJECTION: forcing a failure. [ 3407.436612][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 3407.449289][T20772] CPU: 1 PID: 20772 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3407.451679][T20754] FAT-fs (loop5): Unrecognized mount option "-" or missing value [ 3407.458044][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.475845][T20772] Call Trace: [ 3407.479116][T20772] dump_stack_lvl+0xb7/0x103 [ 3407.483703][T20772] dump_stack+0x11/0x1a [ 3407.487857][T20772] should_fail+0x23c/0x250 [ 3407.492308][T20772] ? security_inode_alloc+0x30/0x180 [ 3407.497586][T20772] __should_failslab+0x81/0x90 [ 3407.502359][T20772] should_failslab+0x5/0x20 [ 3407.506885][T20772] kmem_cache_alloc+0x46/0x2e0 [ 3407.511646][T20772] security_inode_alloc+0x30/0x180 [ 3407.516832][T20772] inode_init_always+0x20b/0x420 [ 3407.521764][T20772] ? sockfs_init_fs_context+0x70/0x70 [ 3407.527140][T20772] new_inode_pseudo+0x73/0x1c0 [ 3407.531896][T20772] __sock_create+0x122/0x4e0 [ 3407.536660][T20772] ? should_fail+0xd6/0x250 [ 3407.541144][T20772] sock_create_kern+0x34/0x40 [ 3407.545799][T20772] io_uring_create+0x1653/0x1940 [ 3407.550718][T20772] ? vfs_write+0x50c/0x770 [ 3407.555233][T20772] __x64_sys_io_uring_setup+0xe1/0x120 [ 3407.560737][T20772] do_syscall_64+0x3d/0x90 [ 3407.565132][T20772] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3407.571012][T20772] RIP: 0033:0x4665f9 [ 3407.574881][T20772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3407.594484][T20772] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3407.602871][T20772] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3407.610873][T20772] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3407.618833][T20772] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 00:18:19 executing program 2: r0 = syz_io_uring_setup(0x4dea, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:19 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:19 executing program 0 (fault-call:1 fault-nth:4): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:19 executing program 4 (fault-call:2 fault-nth:11): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3407.626782][T20772] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3407.634731][T20772] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3407.642714][T20772] socket: no more sockets 00:18:19 executing program 3 (fault-call:2 fault-nth:12): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3407.722094][T20792] FAULT_INJECTION: forcing a failure. [ 3407.722094][T20792] name failslab, interval 1, probability 0, space 0, times 0 [ 3407.734772][T20792] CPU: 0 PID: 20792 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3407.743554][T20792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.743821][T20795] FAULT_INJECTION: forcing a failure. [ 3407.743821][T20795] name failslab, interval 1, probability 0, space 0, times 0 [ 3407.753603][T20792] Call Trace: [ 3407.753612][T20792] dump_stack_lvl+0xb7/0x103 [ 3407.774015][T20792] dump_stack+0x11/0x1a [ 3407.778154][T20792] should_fail+0x23c/0x250 [ 3407.782613][T20792] ? security_inode_alloc+0x30/0x180 [ 3407.787879][T20792] __should_failslab+0x81/0x90 [ 3407.792637][T20792] should_failslab+0x5/0x20 [ 3407.797122][T20792] kmem_cache_alloc+0x46/0x2e0 [ 3407.801869][T20792] security_inode_alloc+0x30/0x180 [ 3407.806961][T20792] inode_init_always+0x20b/0x420 [ 3407.811881][T20792] ? sockfs_init_fs_context+0x70/0x70 [ 3407.817268][T20792] new_inode_pseudo+0x73/0x1c0 [ 3407.822017][T20792] __sock_create+0x122/0x4e0 [ 3407.826644][T20792] ? should_fail+0xd6/0x250 [ 3407.831183][T20792] sock_create_kern+0x34/0x40 [ 3407.835846][T20792] io_uring_create+0x1653/0x1940 [ 3407.840876][T20792] ? vfs_write+0x50c/0x770 [ 3407.845274][T20792] __x64_sys_io_uring_setup+0xe1/0x120 [ 3407.850750][T20792] do_syscall_64+0x3d/0x90 [ 3407.855150][T20792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3407.861030][T20792] RIP: 0033:0x4665f9 [ 3407.864926][T20792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3407.884525][T20792] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3407.892919][T20792] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3407.900876][T20792] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3407.908838][T20792] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3407.916787][T20792] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3407.924811][T20792] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3407.932771][T20795] CPU: 1 PID: 20795 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3407.932818][T20792] socket: no more sockets [ 3407.941527][T20795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3407.949011][T20790] FAULT_INJECTION: forcing a failure. [ 3407.949011][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 3407.955948][T20795] Call Trace: [ 3407.955956][T20795] dump_stack_lvl+0xb7/0x103 [ 3407.955977][T20795] dump_stack+0x11/0x1a [ 3407.955990][T20795] should_fail+0x23c/0x250 [ 3407.984861][T20795] ? sk_prot_alloc+0x41/0x190 [ 3407.989521][T20795] __should_failslab+0x81/0x90 [ 3407.994266][T20795] should_failslab+0x5/0x20 [ 3407.998781][T20795] kmem_cache_alloc+0x46/0x2e0 [ 3408.003575][T20795] sk_prot_alloc+0x41/0x190 [ 3408.008057][T20795] sk_alloc+0x2e/0x220 [ 3408.012119][T20795] unix_create1+0x74/0x3c0 [ 3408.016520][T20795] unix_create+0xdc/0x100 [ 3408.020833][T20795] __sock_create+0x2c7/0x4e0 [ 3408.025457][T20795] sock_create_kern+0x34/0x40 [ 3408.030119][T20795] io_uring_create+0x1653/0x1940 [ 3408.035055][T20795] ? vfs_write+0x50c/0x770 [ 3408.039455][T20795] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.044943][T20795] do_syscall_64+0x3d/0x90 [ 3408.049343][T20795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.055234][T20795] RIP: 0033:0x4665f9 [ 3408.059170][T20795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3408.078860][T20795] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3408.087266][T20795] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3408.095296][T20795] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3408.103261][T20795] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3408.111217][T20795] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 00:18:19 executing program 2: r0 = syz_io_uring_setup(0x4dea, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:19 executing program 3 (fault-call:2 fault-nth:13): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3408.119188][T20795] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3408.127167][T20790] CPU: 0 PID: 20790 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3408.135925][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3408.145968][T20790] Call Trace: [ 3408.149232][T20790] dump_stack_lvl+0xb7/0x103 [ 3408.153889][T20790] dump_stack+0x11/0x1a [ 3408.158068][T20790] should_fail+0x23c/0x250 [ 3408.162626][T20790] ? io_uring_create+0x1940/0x1940 [ 3408.167809][T20790] __should_failslab+0x81/0x90 00:18:19 executing program 4 (fault-call:2 fault-nth:12): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:19 executing program 1: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3408.172566][T20790] ? percpu_ref_init+0x96/0x250 [ 3408.177427][T20790] should_failslab+0x5/0x20 [ 3408.181924][T20790] kmem_cache_alloc_trace+0x49/0x310 [ 3408.187288][T20790] ? io_uring_create+0x1940/0x1940 [ 3408.192394][T20790] percpu_ref_init+0x96/0x250 [ 3408.197065][T20790] io_uring_create+0x226/0x1940 [ 3408.201966][T20790] ? vfs_write+0x50c/0x770 [ 3408.206399][T20790] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.211881][T20790] do_syscall_64+0x3d/0x90 [ 3408.216318][T20790] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:18:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00=', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC=0xee00, @ANYBLOB=',obj_user=msdos\x00,obj_type=#-{(&/,\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, '\x00', "b96f0309eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{0x4, 0x1}, 'port1\x00', 0x2, 0x40000, 0x80, 0x2, 0x5, 0x0, 0x81, 0x0, 0x3}) [ 3408.222287][T20790] RIP: 0033:0x4665f9 [ 3408.226168][T20790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3408.245906][T20790] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3408.254409][T20790] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3408.261804][T20807] FAULT_INJECTION: forcing a failure. [ 3408.261804][T20807] name failslab, interval 1, probability 0, space 0, times 0 [ 3408.262456][T20790] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3408.262471][T20790] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3408.262483][T20790] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3408.298875][T20790] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3408.306932][T20807] CPU: 1 PID: 20807 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3408.315717][T20807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3408.321986][T20812] FAULT_INJECTION: forcing a failure. [ 3408.321986][T20812] name failslab, interval 1, probability 0, space 0, times 0 [ 3408.325775][T20807] Call Trace: [ 3408.325784][T20807] dump_stack_lvl+0xb7/0x103 [ 3408.325805][T20807] dump_stack+0x11/0x1a [ 3408.350407][T20807] should_fail+0x23c/0x250 [ 3408.354812][T20807] ? sk_prot_alloc+0x41/0x190 [ 3408.359535][T20807] __should_failslab+0x81/0x90 [ 3408.364281][T20807] should_failslab+0x5/0x20 [ 3408.368859][T20807] kmem_cache_alloc+0x46/0x2e0 [ 3408.373610][T20807] sk_prot_alloc+0x41/0x190 [ 3408.378097][T20807] sk_alloc+0x2e/0x220 [ 3408.382149][T20807] unix_create1+0x74/0x3c0 [ 3408.386551][T20807] unix_create+0xdc/0x100 [ 3408.390950][T20807] __sock_create+0x2c7/0x4e0 [ 3408.395524][T20807] sock_create_kern+0x34/0x40 [ 3408.400193][T20807] io_uring_create+0x1653/0x1940 [ 3408.405122][T20807] ? vfs_write+0x50c/0x770 [ 3408.409522][T20807] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.414983][T20807] do_syscall_64+0x3d/0x90 [ 3408.419383][T20807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.425262][T20807] RIP: 0033:0x4665f9 [ 3408.429155][T20807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3408.448740][T20807] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3408.457129][T20807] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3408.465084][T20807] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3408.473044][T20807] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3408.480994][T20807] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3408.488947][T20807] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3408.496959][T20812] CPU: 0 PID: 20812 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3408.505794][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3408.515843][T20812] Call Trace: [ 3408.519117][T20812] dump_stack_lvl+0xb7/0x103 00:18:20 executing program 4 (fault-call:2 fault-nth:13): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:20 executing program 0 (fault-call:1 fault-nth:5): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3408.523698][T20812] dump_stack+0x11/0x1a [ 3408.527849][T20812] should_fail+0x23c/0x250 [ 3408.529063][T20808] FAT-fs (loop5): bogus number of reserved sectors [ 3408.532256][T20812] __should_failslab+0x81/0x90 [ 3408.532277][T20812] ? selinux_sk_alloc_security+0x61/0x120 [ 3408.538766][T20808] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3408.543577][T20812] should_failslab+0x5/0x20 [ 3408.543599][T20812] kmem_cache_alloc_trace+0x49/0x310 [ 3408.565619][T20812] ? should_fail+0xd6/0x250 [ 3408.570180][T20812] selinux_sk_alloc_security+0x61/0x120 [ 3408.575785][T20812] security_sk_alloc+0x45/0x90 [ 3408.580549][T20812] sk_prot_alloc+0xd2/0x190 [ 3408.583032][T20821] FAULT_INJECTION: forcing a failure. [ 3408.583032][T20821] name failslab, interval 1, probability 0, space 0, times 0 [ 3408.585039][T20812] sk_alloc+0x2e/0x220 [ 3408.585058][T20812] unix_create1+0x74/0x3c0 [ 3408.606142][T20812] unix_create+0xdc/0x100 [ 3408.610487][T20812] __sock_create+0x2c7/0x4e0 [ 3408.615075][T20812] sock_create_kern+0x34/0x40 [ 3408.619735][T20812] io_uring_create+0x1653/0x1940 [ 3408.624701][T20812] ? vfs_write+0x50c/0x770 [ 3408.629101][T20812] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.634564][T20812] do_syscall_64+0x3d/0x90 [ 3408.638977][T20812] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.644900][T20812] RIP: 0033:0x4665f9 [ 3408.648774][T20812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3408.668404][T20812] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3408.676798][T20812] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3408.684753][T20812] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3408.692706][T20812] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3408.700657][T20812] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3408.708615][T20812] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3408.716586][T20821] CPU: 1 PID: 20821 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3408.725350][T20821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3408.735402][T20821] Call Trace: [ 3408.738677][T20821] dump_stack_lvl+0xb7/0x103 [ 3408.743267][T20821] dump_stack+0x11/0x1a [ 3408.747412][T20821] should_fail+0x23c/0x250 [ 3408.751874][T20821] __should_failslab+0x81/0x90 [ 3408.756650][T20821] ? selinux_sk_alloc_security+0x61/0x120 [ 3408.762434][T20821] should_failslab+0x5/0x20 [ 3408.766953][T20821] kmem_cache_alloc_trace+0x49/0x310 [ 3408.772296][T20821] ? should_fail+0xd6/0x250 [ 3408.776792][T20821] selinux_sk_alloc_security+0x61/0x120 [ 3408.777881][T20822] FAULT_INJECTION: forcing a failure. [ 3408.777881][T20822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3408.782345][T20821] security_sk_alloc+0x45/0x90 [ 3408.800282][T20821] sk_prot_alloc+0xd2/0x190 [ 3408.804797][T20821] sk_alloc+0x2e/0x220 [ 3408.808855][T20821] unix_create1+0x74/0x3c0 [ 3408.813334][T20821] unix_create+0xdc/0x100 [ 3408.817673][T20821] __sock_create+0x2c7/0x4e0 [ 3408.822601][T20821] sock_create_kern+0x34/0x40 [ 3408.827261][T20821] io_uring_create+0x1653/0x1940 [ 3408.832215][T20821] ? vfs_write+0x50c/0x770 [ 3408.836616][T20821] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.842202][T20821] do_syscall_64+0x3d/0x90 [ 3408.846617][T20821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.852556][T20821] RIP: 0033:0x4665f9 [ 3408.856433][T20821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:20 executing program 3 (fault-call:2 fault-nth:14): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3408.876024][T20821] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3408.884495][T20821] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3408.892463][T20821] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3408.900516][T20821] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3408.908471][T20821] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3408.916436][T20821] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:20 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:20 executing program 2: r0 = syz_io_uring_setup(0x4dea, 0x0, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:20 executing program 4 (fault-call:2 fault-nth:14): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3408.924415][T20822] CPU: 0 PID: 20822 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3408.933176][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3408.943309][T20822] Call Trace: [ 3408.946598][T20822] dump_stack_lvl+0xb7/0x103 [ 3408.951188][T20822] dump_stack+0x11/0x1a [ 3408.955333][T20822] should_fail+0x23c/0x250 [ 3408.959780][T20822] __alloc_pages+0x102/0x320 [ 3408.964369][T20822] alloc_pages+0x2e8/0x340 [ 3408.968876][T20822] __get_free_pages+0x8/0x30 00:18:20 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3408.973467][T20822] io_uring_create+0x904/0x1940 [ 3408.978313][T20822] ? vfs_write+0x50c/0x770 [ 3408.982727][T20822] __x64_sys_io_uring_setup+0xe1/0x120 [ 3408.988183][T20822] do_syscall_64+0x3d/0x90 [ 3408.992628][T20822] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3408.998554][T20822] RIP: 0033:0x4665f9 [ 3409.002456][T20822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.022056][T20822] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3409.030461][T20822] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3409.033769][T20834] FAULT_INJECTION: forcing a failure. [ 3409.033769][T20834] name failslab, interval 1, probability 0, space 0, times 0 [ 3409.038431][T20822] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3409.038446][T20822] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3409.038458][T20822] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3409.074920][T20822] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3409.082882][T20834] CPU: 1 PID: 20834 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3409.083370][T20835] FAULT_INJECTION: forcing a failure. [ 3409.083370][T20835] name failslab, interval 1, probability 0, space 0, times 0 [ 3409.091675][T20834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3409.091686][T20834] Call Trace: [ 3409.091693][T20834] dump_stack_lvl+0xb7/0x103 [ 3409.122200][T20834] dump_stack+0x11/0x1a [ 3409.126396][T20834] should_fail+0x23c/0x250 [ 3409.130838][T20834] ? __d_alloc+0x36/0x370 [ 3409.135159][T20834] __should_failslab+0x81/0x90 [ 3409.139915][T20834] should_failslab+0x5/0x20 [ 3409.144425][T20834] kmem_cache_alloc+0x46/0x2e0 [ 3409.149199][T20834] __d_alloc+0x36/0x370 [ 3409.153342][T20834] d_alloc_pseudo+0x1a/0x50 [ 3409.157831][T20834] alloc_file_pseudo+0x63/0x130 [ 3409.162697][T20834] anon_inode_getfile+0x9f/0x120 [ 3409.167638][T20834] io_uring_create+0x16a8/0x1940 [ 3409.172562][T20834] ? vfs_write+0x50c/0x770 [ 3409.177157][T20834] __x64_sys_io_uring_setup+0xe1/0x120 [ 3409.182613][T20834] do_syscall_64+0x3d/0x90 [ 3409.187071][T20834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3409.192951][T20834] RIP: 0033:0x4665f9 [ 3409.196825][T20834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.216421][T20834] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3409.224826][T20834] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3409.232782][T20834] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3409.240767][T20834] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3409.248839][T20834] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3409.256794][T20834] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3409.264892][T20835] CPU: 0 PID: 20835 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 00:18:21 executing program 4 (fault-call:2 fault-nth:15): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3409.273671][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3409.283714][T20835] Call Trace: [ 3409.287020][T20835] dump_stack_lvl+0xb7/0x103 [ 3409.291614][T20835] dump_stack+0x11/0x1a [ 3409.295766][T20835] should_fail+0x23c/0x250 [ 3409.300221][T20835] ? __d_alloc+0x36/0x370 [ 3409.304545][T20835] __should_failslab+0x81/0x90 [ 3409.309303][T20835] should_failslab+0x5/0x20 [ 3409.313803][T20835] kmem_cache_alloc+0x46/0x2e0 [ 3409.318610][T20835] __d_alloc+0x36/0x370 [ 3409.322763][T20835] d_alloc_pseudo+0x1a/0x50 00:18:21 executing program 0 (fault-call:1 fault-nth:6): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:21 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:21 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3409.327301][T20835] alloc_file_pseudo+0x63/0x130 [ 3409.332166][T20835] anon_inode_getfile+0x9f/0x120 [ 3409.337181][T20835] io_uring_create+0x16a8/0x1940 [ 3409.342159][T20835] ? vfs_write+0x50c/0x770 [ 3409.346575][T20835] __x64_sys_io_uring_setup+0xe1/0x120 [ 3409.352049][T20835] do_syscall_64+0x3d/0x90 [ 3409.356513][T20835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3409.362431][T20835] RIP: 0033:0x4665f9 [ 3409.366311][T20835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.385913][T20835] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3409.394321][T20835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3409.402287][T20835] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3409.410254][T20835] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3409.418255][T20835] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3409.421173][T20847] FAULT_INJECTION: forcing a failure. [ 3409.421173][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 3409.426217][T20835] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3409.432931][T20854] FAULT_INJECTION: forcing a failure. [ 3409.432931][T20854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3409.438969][T20847] CPU: 1 PID: 20847 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3409.468744][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3409.478778][T20847] Call Trace: [ 3409.482040][T20847] dump_stack_lvl+0xb7/0x103 [ 3409.486615][T20847] dump_stack+0x11/0x1a [ 3409.490752][T20847] should_fail+0x23c/0x250 [ 3409.495179][T20847] ? __alloc_file+0x2e/0x1a0 [ 3409.499752][T20847] __should_failslab+0x81/0x90 [ 3409.504497][T20847] should_failslab+0x5/0x20 [ 3409.508984][T20847] kmem_cache_alloc+0x46/0x2e0 [ 3409.513872][T20847] __alloc_file+0x2e/0x1a0 [ 3409.518323][T20847] alloc_empty_file+0xcd/0x1c0 [ 3409.523081][T20847] alloc_file+0x3a/0x280 [ 3409.527327][T20847] alloc_file_pseudo+0xe2/0x130 [ 3409.532214][T20847] anon_inode_getfile+0x9f/0x120 [ 3409.537138][T20847] io_uring_create+0x16a8/0x1940 [ 3409.542061][T20847] ? vfs_write+0x50c/0x770 [ 3409.546460][T20847] __x64_sys_io_uring_setup+0xe1/0x120 [ 3409.551903][T20847] do_syscall_64+0x3d/0x90 [ 3409.556377][T20847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3409.562296][T20847] RIP: 0033:0x4665f9 [ 3409.566171][T20847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.585758][T20847] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3409.594198][T20847] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3409.602151][T20847] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3409.610187][T20847] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3409.618141][T20847] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3409.626100][T20847] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3409.634056][T20854] CPU: 0 PID: 20854 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3409.642812][T20854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3409.652854][T20854] Call Trace: [ 3409.656128][T20854] dump_stack_lvl+0xb7/0x103 [ 3409.660707][T20854] dump_stack+0x11/0x1a [ 3409.664851][T20854] should_fail+0x23c/0x250 [ 3409.669262][T20854] __alloc_pages+0x102/0x320 [ 3409.673871][T20854] alloc_pages+0x2e8/0x340 [ 3409.678289][T20854] __get_free_pages+0x8/0x30 [ 3409.682896][T20854] io_uring_create+0x9f7/0x1940 [ 3409.687765][T20854] ? vfs_write+0x50c/0x770 [ 3409.692179][T20854] __x64_sys_io_uring_setup+0xe1/0x120 [ 3409.697668][T20854] do_syscall_64+0x3d/0x90 [ 3409.702079][T20854] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3409.708014][T20854] RIP: 0033:0x4665f9 00:18:21 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:21 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:21 executing program 3 (fault-call:2 fault-nth:15): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:21 executing program 5: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004101}, 0x20000000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x81, 0x0) 00:18:21 executing program 4 (fault-call:2 fault-nth:16): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3409.711886][T20854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3409.731571][T20854] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3409.739958][T20854] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3409.747904][T20854] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3409.755962][T20854] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3409.763908][T20854] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3409.771904][T20854] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:21 executing program 0 (fault-call:1 fault-nth:7): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3409.841424][T20871] FAT-fs (loop5): bogus number of reserved sectors [ 3409.848008][T20871] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3409.852615][T20870] FAULT_INJECTION: forcing a failure. [ 3409.852615][T20870] name failslab, interval 1, probability 0, space 0, times 0 [ 3409.867190][T20870] CPU: 0 PID: 20870 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3409.875942][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3409.884097][T20877] FAULT_INJECTION: forcing a failure. [ 3409.884097][T20877] name failslab, interval 1, probability 0, space 0, times 0 [ 3409.885984][T20870] Call Trace: [ 3409.885993][T20870] dump_stack_lvl+0xb7/0x103 [ 3409.906646][T20870] dump_stack+0x11/0x1a [ 3409.910885][T20870] should_fail+0x23c/0x250 [ 3409.915352][T20870] ? __alloc_file+0x2e/0x1a0 [ 3409.919965][T20870] __should_failslab+0x81/0x90 [ 3409.924707][T20870] should_failslab+0x5/0x20 [ 3409.929190][T20870] kmem_cache_alloc+0x46/0x2e0 [ 3409.933939][T20870] __alloc_file+0x2e/0x1a0 [ 3409.938349][T20870] alloc_empty_file+0xcd/0x1c0 [ 3409.943119][T20870] alloc_file+0x3a/0x280 [ 3409.947419][T20870] alloc_file_pseudo+0xe2/0x130 [ 3409.952283][T20870] anon_inode_getfile+0x9f/0x120 [ 3409.957209][T20870] io_uring_create+0x16a8/0x1940 [ 3409.962132][T20870] ? vfs_write+0x50c/0x770 [ 3409.966532][T20870] __x64_sys_io_uring_setup+0xe1/0x120 [ 3409.971990][T20870] do_syscall_64+0x3d/0x90 [ 3409.976391][T20870] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3409.982364][T20870] RIP: 0033:0x4665f9 [ 3409.986275][T20870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.005861][T20870] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.014251][T20870] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3410.022200][T20870] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3410.030156][T20870] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3410.038108][T20870] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3410.046061][T20870] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3410.054034][T20877] CPU: 1 PID: 20877 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3410.062793][T20877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3410.072915][T20877] Call Trace: [ 3410.074575][T20880] FAULT_INJECTION: forcing a failure. [ 3410.074575][T20880] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.076251][T20877] dump_stack_lvl+0xb7/0x103 [ 3410.076273][T20877] dump_stack+0x11/0x1a [ 3410.097599][T20877] should_fail+0x23c/0x250 [ 3410.102010][T20877] ? security_file_alloc+0x30/0x190 [ 3410.107209][T20877] __should_failslab+0x81/0x90 [ 3410.111990][T20877] should_failslab+0x5/0x20 [ 3410.116491][T20877] kmem_cache_alloc+0x46/0x2e0 [ 3410.121268][T20877] security_file_alloc+0x30/0x190 [ 3410.126299][T20877] __alloc_file+0x83/0x1a0 [ 3410.130712][T20877] alloc_empty_file+0xcd/0x1c0 [ 3410.135461][T20877] alloc_file+0x3a/0x280 [ 3410.139751][T20877] alloc_file_pseudo+0xe2/0x130 [ 3410.144589][T20877] anon_inode_getfile+0x9f/0x120 [ 3410.149563][T20877] io_uring_create+0x16a8/0x1940 [ 3410.154558][T20877] ? vfs_write+0x50c/0x770 [ 3410.159015][T20877] __x64_sys_io_uring_setup+0xe1/0x120 [ 3410.164523][T20877] do_syscall_64+0x3d/0x90 [ 3410.168923][T20877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3410.174875][T20877] RIP: 0033:0x4665f9 [ 3410.178768][T20877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.198476][T20877] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.206887][T20877] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3410.214925][T20877] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3410.222885][T20877] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3410.230891][T20877] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 00:18:21 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3410.238862][T20877] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3410.246818][T20880] CPU: 0 PID: 20880 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3410.255606][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3410.265652][T20880] Call Trace: [ 3410.268992][T20880] dump_stack_lvl+0xb7/0x103 [ 3410.273566][T20880] dump_stack+0x11/0x1a [ 3410.277701][T20880] should_fail+0x23c/0x250 [ 3410.282104][T20880] __should_failslab+0x81/0x90 [ 3410.286854][T20880] ? io_uring_create+0x1466/0x1940 [ 3410.291961][T20880] should_failslab+0x5/0x20 [ 3410.296455][T20880] kmem_cache_alloc_trace+0x49/0x310 [ 3410.301745][T20880] ? alloc_pages+0x2e8/0x340 [ 3410.306320][T20880] io_uring_create+0x1466/0x1940 [ 3410.311244][T20880] ? vfs_write+0x50c/0x770 [ 3410.315656][T20880] __x64_sys_io_uring_setup+0xe1/0x120 [ 3410.321098][T20880] do_syscall_64+0x3d/0x90 [ 3410.325548][T20880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3410.331427][T20880] RIP: 0033:0x4665f9 [ 3410.335306][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.354905][T20880] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.363310][T20880] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3410.371261][T20880] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3410.379215][T20880] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3410.387214][T20880] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3410.395167][T20880] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3410.433676][T20881] FAT-fs (loop5): bogus number of reserved sectors 00:18:22 executing program 3 (fault-call:2 fault-nth:16): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:22 executing program 4 (fault-call:2 fault-nth:17): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:22 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:22 executing program 0 (fault-call:1 fault-nth:8): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3410.440196][T20881] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3410.479659][T20897] FAULT_INJECTION: forcing a failure. [ 3410.479659][T20897] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.491601][T20895] FAULT_INJECTION: forcing a failure. [ 3410.491601][T20895] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.492334][T20897] CPU: 0 PID: 20897 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 [ 3410.513592][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3410.523705][T20897] Call Trace: [ 3410.527080][T20897] dump_stack_lvl+0xb7/0x103 [ 3410.531658][T20897] dump_stack+0x11/0x1a [ 3410.535794][T20897] should_fail+0x23c/0x250 [ 3410.540207][T20897] ? security_file_alloc+0x30/0x190 [ 3410.545410][T20897] __should_failslab+0x81/0x90 [ 3410.550209][T20897] should_failslab+0x5/0x20 [ 3410.554695][T20897] kmem_cache_alloc+0x46/0x2e0 [ 3410.559450][T20897] security_file_alloc+0x30/0x190 [ 3410.564459][T20897] __alloc_file+0x83/0x1a0 [ 3410.568947][T20897] alloc_empty_file+0xcd/0x1c0 [ 3410.573704][T20897] alloc_file+0x3a/0x280 [ 3410.577938][T20897] alloc_file_pseudo+0xe2/0x130 [ 3410.582791][T20897] anon_inode_getfile+0x9f/0x120 [ 3410.587756][T20897] io_uring_create+0x16a8/0x1940 [ 3410.592680][T20897] ? vfs_write+0x50c/0x770 [ 3410.597130][T20897] __x64_sys_io_uring_setup+0xe1/0x120 [ 3410.602589][T20897] do_syscall_64+0x3d/0x90 [ 3410.606990][T20897] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3410.612937][T20897] RIP: 0033:0x4665f9 [ 3410.616812][T20897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.636494][T20897] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.644887][T20897] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3410.652840][T20897] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3410.660801][T20897] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3410.668755][T20897] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3410.676776][T20897] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3410.684734][T20895] CPU: 1 PID: 20895 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3410.691402][T20902] FAULT_INJECTION: forcing a failure. [ 3410.691402][T20902] name failslab, interval 1, probability 0, space 0, times 0 [ 3410.693568][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3410.693580][T20895] Call Trace: [ 3410.693587][T20895] dump_stack_lvl+0xb7/0x103 [ 3410.693606][T20895] dump_stack+0x11/0x1a [ 3410.728184][T20895] should_fail+0x23c/0x250 [ 3410.732640][T20895] __should_failslab+0x81/0x90 [ 3410.737428][T20895] ? io_uring_add_tctx_node+0xdc/0x200 [ 3410.742880][T20895] should_failslab+0x5/0x20 [ 3410.747374][T20895] kmem_cache_alloc_trace+0x49/0x310 [ 3410.752643][T20895] ? xa_load+0x249/0x260 [ 3410.756866][T20895] io_uring_add_tctx_node+0xdc/0x200 [ 3410.762198][T20895] io_uring_create+0x17a0/0x1940 [ 3410.767127][T20895] ? vfs_write+0x50c/0x770 [ 3410.771527][T20895] __x64_sys_io_uring_setup+0xe1/0x120 [ 3410.776999][T20895] do_syscall_64+0x3d/0x90 [ 3410.781542][T20895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3410.787423][T20895] RIP: 0033:0x4665f9 [ 3410.791306][T20895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3410.810928][T20895] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.819331][T20895] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3410.827279][T20895] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3410.835518][T20895] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3410.843480][T20895] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3410.851439][T20895] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3410.859395][T20902] CPU: 0 PID: 20902 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3410.868157][T20902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3410.879142][T20902] Call Trace: [ 3410.882400][T20902] dump_stack_lvl+0xb7/0x103 [ 3410.886991][T20902] dump_stack+0x11/0x1a [ 3410.891128][T20902] should_fail+0x23c/0x250 [ 3410.895528][T20902] ? kzalloc+0x20/0x20 [ 3410.899590][T20902] __should_failslab+0x81/0x90 [ 3410.904337][T20902] ? percpu_ref_init+0x96/0x250 [ 3410.909167][T20902] should_failslab+0x5/0x20 [ 3410.913703][T20902] kmem_cache_alloc_trace+0x49/0x310 [ 3410.919036][T20902] ? kzalloc+0x20/0x20 [ 3410.923166][T20902] percpu_ref_init+0x96/0x250 [ 3410.927823][T20902] io_uring_create+0x1488/0x1940 [ 3410.932854][T20902] ? vfs_write+0x50c/0x770 [ 3410.937335][T20902] __x64_sys_io_uring_setup+0xe1/0x120 [ 3410.942776][T20902] do_syscall_64+0x3d/0x90 [ 3410.947285][T20902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3410.953206][T20902] RIP: 0033:0x4665f9 [ 3410.957079][T20902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:22 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:22 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3410.976699][T20902] RSP: 002b:00007f48c066e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3410.985087][T20902] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3410.993038][T20902] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3411.001011][T20902] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3411.008964][T20902] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3411.016916][T20902] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:22 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) 00:18:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000080)="b3dd74b118b53136e3acfe5978d764c08550b2405aaf8edc45c5067b65a9630353a9f0dde34b36e2dfe1632e494225bb43394a9b27233b22acd436611a4fd4783aeeb730cfcadd5d1910c863014a382d93f2f0e285dcb2c679f9aa782aab97c775", 0x61, 0x5ebbc0e0}, {&(0x7f0000000000)="650b7d9cb5851665f31e43afbb6be9ea525e7534f6385c0fbeeeb44fbc75cdc73f328b5f6bb49b7161a11f898a8931a51b", 0x31, 0x400}], 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYBLOB=',fsmagic=0x0000000000000c47,\x00']) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000380)) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) readlinkat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/120, 0x78) 00:18:22 executing program 3 (fault-call:2 fault-nth:17): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:22 executing program 0 (fault-call:1 fault-nth:9): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:22 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3411.097696][T20916] loop5: detected capacity change from 0 to 264192 00:18:22 executing program 4 (fault-call:2 fault-nth:18): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3411.142991][T20916] FAT-fs (loop5): bogus number of reserved sectors [ 3411.149522][T20916] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3411.158540][T20924] FAULT_INJECTION: forcing a failure. [ 3411.158540][T20924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3411.171595][T20924] CPU: 1 PID: 20924 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3411.180358][T20924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.190406][T20924] Call Trace: [ 3411.193733][T20924] dump_stack_lvl+0xb7/0x103 [ 3411.194795][T20921] FAULT_INJECTION: forcing a failure. [ 3411.194795][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.198323][T20924] dump_stack+0x11/0x1a [ 3411.198345][T20924] should_fail+0x23c/0x250 [ 3411.219498][T20924] should_fail_usercopy+0x16/0x20 [ 3411.224692][T20924] _copy_to_user+0x1c/0x90 [ 3411.229092][T20924] io_uring_create+0x160d/0x1940 [ 3411.234101][T20924] ? vfs_write+0x50c/0x770 [ 3411.238501][T20924] __x64_sys_io_uring_setup+0xe1/0x120 [ 3411.243950][T20924] do_syscall_64+0x3d/0x90 [ 3411.248349][T20924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3411.254226][T20924] RIP: 0033:0x4665f9 [ 3411.258101][T20924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3411.277709][T20924] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3411.286140][T20924] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3411.294105][T20924] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3411.302056][T20924] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3411.310148][T20924] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3411.318097][T20924] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3411.326053][T20921] CPU: 0 PID: 20921 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 00:18:23 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), 0x0) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3411.334862][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.344909][T20921] Call Trace: [ 3411.348179][T20921] dump_stack_lvl+0xb7/0x103 [ 3411.352769][T20921] dump_stack+0x11/0x1a [ 3411.356951][T20921] should_fail+0x23c/0x250 [ 3411.361376][T20921] __should_failslab+0x81/0x90 [ 3411.366141][T20921] ? io_uring_add_tctx_node+0xdc/0x200 [ 3411.371657][T20921] should_failslab+0x5/0x20 [ 3411.376156][T20921] kmem_cache_alloc_trace+0x49/0x310 [ 3411.381535][T20921] ? xa_load+0x249/0x260 [ 3411.385772][T20921] io_uring_add_tctx_node+0xdc/0x200 00:18:23 executing program 0 (fault-call:1 fault-nth:10): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b2b45429df1d589e21c36414840e96b7fe419500d3e572c5d78d29ca4c150e1c373937f005e38dfb25cfb157698a9fb1594b6aa9593a903281d333f39ca4cc9e417235ad67526fadc12c4326642eed190e6d117c1c4957fbfc92ad84c3459066468bfe8474620417f51267e43a2213b5a093c1d564bc11087b8afcee58bb5530d38172f941f660335f83864c14b6953537dffe50c690a1f6cf74035064aa84965fdc55d616d0817e7608e95b37ba3b3106a3d1", @ANYRESHEX, @ANYBLOB=',\x00']) [ 3411.391149][T20921] io_uring_create+0x17a0/0x1940 [ 3411.396088][T20921] ? vfs_write+0x50c/0x770 [ 3411.400497][T20921] __x64_sys_io_uring_setup+0xe1/0x120 [ 3411.405950][T20921] do_syscall_64+0x3d/0x90 [ 3411.410366][T20921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3411.415230][T20939] FAULT_INJECTION: forcing a failure. [ 3411.415230][T20939] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.416258][T20921] RIP: 0033:0x4665f9 [ 3411.416273][T20921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3411.452299][T20921] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3411.460738][T20921] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3411.468688][T20921] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3411.476642][T20921] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3411.484606][T20921] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3411.492558][T20921] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3411.500611][T20939] CPU: 1 PID: 20939 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3411.509372][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.519450][T20939] Call Trace: [ 3411.522723][T20939] dump_stack_lvl+0xb7/0x103 [ 3411.527334][T20939] dump_stack+0x11/0x1a [ 3411.531471][T20939] should_fail+0x23c/0x250 [ 3411.535872][T20939] __should_failslab+0x81/0x90 [ 3411.540617][T20939] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 3411.546667][T20939] should_failslab+0x5/0x20 [ 3411.551315][T20939] kmem_cache_alloc_trace+0x49/0x310 [ 3411.556680][T20939] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 3411.562471][T20939] io_uring_alloc_task_context+0xd9/0x2c0 [ 3411.568208][T20939] ? alloc_fd+0x388/0x3e0 [ 3411.572522][T20939] io_uring_add_tctx_node+0x66/0x200 [ 3411.577906][T20939] io_uring_create+0x17a0/0x1940 [ 3411.582875][T20939] ? vfs_write+0x50c/0x770 [ 3411.587348][T20939] __x64_sys_io_uring_setup+0xe1/0x120 [ 3411.592792][T20939] do_syscall_64+0x3d/0x90 [ 3411.597204][T20939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3411.603105][T20939] RIP: 0033:0x4665f9 [ 3411.606978][T20939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3411.626566][T20939] RSP: 002b:00007f8e64b3f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3411.635023][T20939] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3411.642986][T20939] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3411.650945][T20939] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3411.658895][T20939] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3411.666844][T20939] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:23 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) 00:18:23 executing program 4 (fault-call:2 fault-nth:19): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3411.698213][T20946] FAULT_INJECTION: forcing a failure. [ 3411.698213][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.710847][T20946] CPU: 0 PID: 20946 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3411.719757][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.729845][T20946] Call Trace: [ 3411.733119][T20946] dump_stack_lvl+0xb7/0x103 [ 3411.737787][T20946] dump_stack+0x11/0x1a [ 3411.742017][T20946] should_fail+0x23c/0x250 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), 0x0) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:23 executing program 3 (fault-call:2 fault-nth:18): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3411.746432][T20946] ? sock_alloc_inode+0x23/0x90 [ 3411.751302][T20946] __should_failslab+0x81/0x90 [ 3411.756057][T20946] ? sockfs_init_fs_context+0x70/0x70 [ 3411.761431][T20946] should_failslab+0x5/0x20 [ 3411.765964][T20946] kmem_cache_alloc+0x46/0x2e0 [ 3411.770741][T20946] ? selinux_socket_create+0x7c/0x170 [ 3411.776259][T20946] ? sockfs_init_fs_context+0x70/0x70 [ 3411.781632][T20946] sock_alloc_inode+0x23/0x90 [ 3411.786407][T20946] ? sockfs_init_fs_context+0x70/0x70 [ 3411.791826][T20946] new_inode_pseudo+0x38/0x1c0 [ 3411.795233][T20956] FAULT_INJECTION: forcing a failure. [ 3411.795233][T20956] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.796682][T20946] __sock_create+0x122/0x4e0 [ 3411.796706][T20946] ? should_fail+0xd6/0x250 [ 3411.818362][T20946] sock_create_kern+0x34/0x40 [ 3411.823031][T20946] io_uring_create+0x1653/0x1940 [ 3411.828025][T20946] ? vfs_write+0x50c/0x770 [ 3411.832422][T20946] __x64_sys_io_uring_setup+0xe1/0x120 [ 3411.837947][T20946] do_syscall_64+0x3d/0x90 [ 3411.842470][T20946] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3411.848350][T20946] RIP: 0033:0x4665f9 [ 3411.852226][T20946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3411.871842][T20946] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3411.880664][T20946] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3411.888618][T20946] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3411.896576][T20946] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3411.904529][T20946] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3411.912483][T20946] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3411.920440][T20956] CPU: 1 PID: 20956 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3411.920477][T20946] socket: no more sockets [ 3411.929215][T20956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3411.929226][T20956] Call Trace: [ 3411.929232][T20956] dump_stack_lvl+0xb7/0x103 [ 3411.929250][T20956] dump_stack+0x11/0x1a [ 3411.929263][T20956] should_fail+0x23c/0x250 [ 3411.960436][T20956] ? xas_create+0x96b/0xb30 [ 3411.964935][T20956] __should_failslab+0x81/0x90 [ 3411.969786][T20956] should_failslab+0x5/0x20 [ 3411.974284][T20956] kmem_cache_alloc+0x46/0x2e0 [ 3411.979042][T20956] ? xas_create+0x96b/0xb30 [ 3411.983539][T20956] xas_create+0x96b/0xb30 [ 3411.987859][T20956] xas_store+0x70/0xca0 [ 3411.992007][T20956] ? selinux_file_alloc_security+0x9c/0xb0 [ 3411.993088][T20958] FAULT_INJECTION: forcing a failure. [ 3411.993088][T20958] name failslab, interval 1, probability 0, space 0, times 0 [ 3411.997814][T20956] ? security_file_alloc+0x12e/0x190 [ 3411.997838][T20956] ? percpu_counter_add_batch+0x69/0xd0 [ 3412.021195][T20956] __xa_store+0xcb/0x320 [ 3412.025423][T20956] xa_store+0x30/0x70 [ 3412.029413][T20956] io_uring_add_tctx_node+0x111/0x200 [ 3412.034817][T20956] io_uring_create+0x17a0/0x1940 [ 3412.039747][T20956] ? vfs_write+0x50c/0x770 [ 3412.044168][T20956] __x64_sys_io_uring_setup+0xe1/0x120 [ 3412.049696][T20956] do_syscall_64+0x3d/0x90 [ 3412.054150][T20956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3412.060029][T20956] RIP: 0033:0x4665f9 [ 3412.063912][T20956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.083543][T20956] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3412.091940][T20956] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:23 executing program 0 (fault-call:1 fault-nth:11): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), 0x0) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3412.099912][T20956] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3412.107872][T20956] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3412.115826][T20956] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3412.123879][T20956] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3412.131837][T20958] CPU: 0 PID: 20958 Comm: syz-executor.3 Not tainted 5.14.0-rc7-syzkaller #0 00:18:23 executing program 4 (fault-call:2 fault-nth:20): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3412.140600][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.150736][T20958] Call Trace: [ 3412.154010][T20958] dump_stack_lvl+0xb7/0x103 [ 3412.158595][T20958] dump_stack+0x11/0x1a [ 3412.162744][T20958] should_fail+0x23c/0x250 [ 3412.167163][T20958] ? xas_create+0x96b/0xb30 [ 3412.171659][T20958] __should_failslab+0x81/0x90 [ 3412.176417][T20958] should_failslab+0x5/0x20 [ 3412.180926][T20958] kmem_cache_alloc+0x46/0x2e0 [ 3412.185693][T20958] ? should_fail+0xd6/0x250 [ 3412.190221][T20958] xas_create+0x96b/0xb30 [ 3412.194589][T20958] xas_store+0x70/0xca0 [ 3412.198799][T20958] ? selinux_file_alloc_security+0x9c/0xb0 [ 3412.201699][T20967] FAULT_INJECTION: forcing a failure. [ 3412.201699][T20967] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.204650][T20958] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 3412.204679][T20958] __xa_store+0xcb/0x320 [ 3412.227234][T20958] xa_store+0x30/0x70 [ 3412.231298][T20958] io_uring_add_tctx_node+0x111/0x200 [ 3412.236732][T20958] io_uring_create+0x17a0/0x1940 [ 3412.241657][T20958] ? vfs_write+0x50c/0x770 [ 3412.246073][T20958] __x64_sys_io_uring_setup+0xe1/0x120 [ 3412.251515][T20958] do_syscall_64+0x3d/0x90 [ 3412.255933][T20958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3412.261842][T20958] RIP: 0033:0x4665f9 [ 3412.265717][T20958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.285319][T20958] RSP: 002b:00007fe9fb725108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3412.293726][T20958] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3412.301684][T20958] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3412.309658][T20958] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3412.317620][T20958] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3412.325577][T20958] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3412.333565][T20967] CPU: 1 PID: 20967 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3412.342358][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.346092][T20968] FAULT_INJECTION: forcing a failure. [ 3412.346092][T20968] name failslab, interval 1, probability 0, space 0, times 0 [ 3412.352397][T20967] Call Trace: [ 3412.352406][T20967] dump_stack_lvl+0xb7/0x103 [ 3412.372810][T20967] dump_stack+0x11/0x1a [ 3412.376970][T20967] should_fail+0x23c/0x250 [ 3412.381376][T20967] ? xas_create+0x96b/0xb30 [ 3412.385871][T20967] __should_failslab+0x81/0x90 [ 3412.390671][T20967] should_failslab+0x5/0x20 [ 3412.395155][T20967] kmem_cache_alloc+0x46/0x2e0 [ 3412.399905][T20967] ? xas_create+0x96b/0xb30 [ 3412.404391][T20967] xas_create+0x96b/0xb30 [ 3412.408740][T20967] xas_store+0x70/0xca0 [ 3412.412906][T20967] ? selinux_file_alloc_security+0x9c/0xb0 [ 3412.418776][T20967] ? security_file_alloc+0x12e/0x190 [ 3412.424049][T20967] ? percpu_counter_add_batch+0x69/0xd0 [ 3412.429582][T20967] __xa_store+0xcb/0x320 [ 3412.433810][T20967] xa_store+0x30/0x70 [ 3412.437774][T20967] io_uring_add_tctx_node+0x111/0x200 [ 3412.443133][T20967] io_uring_create+0x17a0/0x1940 [ 3412.448119][T20967] ? vfs_write+0x50c/0x770 [ 3412.452518][T20967] __x64_sys_io_uring_setup+0xe1/0x120 [ 3412.457960][T20967] do_syscall_64+0x3d/0x90 [ 3412.462360][T20967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3412.468286][T20967] RIP: 0033:0x4665f9 [ 3412.472165][T20967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.491756][T20967] RSP: 002b:00007f8e64b60108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:24 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3412.500167][T20967] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3412.508134][T20967] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3412.516172][T20967] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3412.524128][T20967] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3412.532081][T20967] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3412.540047][T20968] CPU: 0 PID: 20968 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3412.548848][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.558905][T20968] Call Trace: [ 3412.562181][T20968] dump_stack_lvl+0xb7/0x103 [ 3412.566802][T20968] dump_stack+0x11/0x1a [ 3412.570997][T20968] should_fail+0x23c/0x250 [ 3412.572782][T20974] FAULT_INJECTION: forcing a failure. [ 3412.572782][T20974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3412.575429][T20968] ? sock_alloc_inode+0x23/0x90 [ 3412.575457][T20968] __should_failslab+0x81/0x90 [ 3412.598002][T20968] ? sockfs_init_fs_context+0x70/0x70 [ 3412.603399][T20968] should_failslab+0x5/0x20 [ 3412.607886][T20968] kmem_cache_alloc+0x46/0x2e0 [ 3412.612636][T20968] ? selinux_socket_create+0x7c/0x170 [ 3412.618015][T20968] ? sockfs_init_fs_context+0x70/0x70 [ 3412.623382][T20968] sock_alloc_inode+0x23/0x90 [ 3412.628054][T20968] ? sockfs_init_fs_context+0x70/0x70 [ 3412.633464][T20968] new_inode_pseudo+0x38/0x1c0 [ 3412.638271][T20968] __sock_create+0x122/0x4e0 [ 3412.642913][T20968] ? should_fail+0xd6/0x250 [ 3412.647404][T20968] sock_create_kern+0x34/0x40 [ 3412.652066][T20968] io_uring_create+0x1653/0x1940 [ 3412.656989][T20968] ? vfs_write+0x50c/0x770 [ 3412.661456][T20968] __x64_sys_io_uring_setup+0xe1/0x120 [ 3412.666897][T20968] do_syscall_64+0x3d/0x90 [ 3412.671337][T20968] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3412.677217][T20968] RIP: 0033:0x4665f9 [ 3412.681096][T20968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.700685][T20968] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3412.709079][T20968] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3412.717033][T20968] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3412.724985][T20968] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3412.732935][T20968] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3412.740888][T20968] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3412.749270][T20974] CPU: 1 PID: 20974 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3412.749359][T20968] socket: no more sockets [ 3412.758087][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.758099][T20974] Call Trace: [ 3412.758105][T20974] dump_stack_lvl+0xb7/0x103 [ 3412.780009][T20970] FAT-fs (loop5): Unrecognized mount option "²´T)ßXž!Ãd„–·þA•" or missing value [ 3412.780249][T20974] dump_stack+0x11/0x1a [ 3412.793662][T20974] should_fail+0x23c/0x250 [ 3412.798112][T20974] should_fail_usercopy+0x16/0x20 [ 3412.803200][T20974] _copy_from_user+0x1c/0xd0 [ 3412.807792][T20974] __x64_sys_io_uring_setup+0x4b/0x120 [ 3412.815877][T20974] ? fput+0x2d/0x130 [ 3412.819780][T20974] ? ksys_write+0x157/0x180 [ 3412.824294][T20974] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3412.830357][T20974] ? exit_to_user_mode_prepare+0x65/0x190 [ 3412.836079][T20974] do_syscall_64+0x3d/0x90 [ 3412.840494][T20974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3412.846473][T20974] RIP: 0033:0x4665f9 00:18:24 executing program 4 (fault-call:2 fault-nth:21): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:24 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:24 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3412.850358][T20974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3412.869959][T20974] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3412.878449][T20974] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3412.886412][T20974] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3412.894377][T20974] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3412.902424][T20974] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3412.910440][T20974] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3412.935437][T20989] FAULT_INJECTION: forcing a failure. [ 3412.935437][T20989] name failslab, interval 1, probability 0, space 0, times 0 00:18:24 executing program 0 (fault-call:1 fault-nth:12): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:24 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:24 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:24 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:24 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="0c00d7c7c35759d3dab780ffad727f24cb581a7544e0516315ada8aba08fd7c03b6119d68d1d4e670429527be3e6aabebaad2c40ac6039e1212e6de7248a3a4fc6d123bcf78197307e50a0b41a1516a956bbbf70ca0a7d10fd3a3677e827a715b367d15af64d27284e77e3f1ed8e334c2eb553dc417593ca50e11e"]) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000, 0x6d}], 0x2c5008, &(0x7f0000001140)={[{'/(*(.$&-.'}, {'gid'}, {'msdos\x00'}, {'gid'}, {}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, '!\xa9'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x7f}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '*-:'}}, {@euid_lt={'euid<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) [ 3412.948061][T20989] CPU: 1 PID: 20989 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3412.956847][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3412.966912][T20989] Call Trace: [ 3412.970184][T20989] dump_stack_lvl+0xb7/0x103 [ 3412.974780][T20989] dump_stack+0x11/0x1a [ 3412.978968][T20989] should_fail+0x23c/0x250 [ 3412.983387][T20989] ? vm_area_dup+0x44/0x120 [ 3412.988001][T20989] __should_failslab+0x81/0x90 [ 3412.992761][T20989] should_failslab+0x5/0x20 [ 3412.997265][T20989] kmem_cache_alloc+0x46/0x2e0 [ 3413.002121][T20989] vm_area_dup+0x44/0x120 [ 3413.006446][T20989] ? kmem_cache_alloc+0x1fb/0x2e0 [ 3413.011473][T20989] ? xas_create+0x96b/0xb30 [ 3413.015994][T20989] ? xas_create+0xae3/0xb30 [ 3413.016917][T20996] FAULT_INJECTION: forcing a failure. [ 3413.016917][T20996] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.020547][T20989] __split_vma+0x82/0x320 [ 3413.020569][T20989] ? vmacache_find+0x157/0x320 [ 3413.042254][T20989] __do_munmap+0x27c/0x1330 [ 3413.046864][T20989] ? __xas_nomem+0xfc/0x270 [ 3413.051358][T20989] mmap_region+0x5aa/0x1400 [ 3413.055913][T20989] do_mmap+0x73f/0xc40 [ 3413.060011][T20989] vm_mmap_pgoff+0xf9/0x1d0 [ 3413.064573][T20989] ksys_mmap_pgoff+0x2a8/0x380 [ 3413.069321][T20989] do_syscall_64+0x3d/0x90 [ 3413.073727][T20989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3413.079738][T20989] RIP: 0033:0x466642 [ 3413.083618][T20989] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3413.103276][T20989] RSP: 002b:00007f8e64b600f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3413.111731][T20989] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3413.120030][T20989] RDX: 0000000000000003 RSI: 0000000000082140 RDI: 0000000020c01000 [ 3413.128073][T20989] RBP: 0000000020c01000 R08: 0000000000000005 R09: 0000000000000000 [ 3413.136049][T20989] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 3413.144000][T20989] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3413.151959][T20996] CPU: 0 PID: 20996 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3413.160721][T20996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3413.170791][T20996] Call Trace: [ 3413.174066][T20996] dump_stack_lvl+0xb7/0x103 [ 3413.178651][T20996] dump_stack+0x11/0x1a [ 3413.182796][T20996] should_fail+0x23c/0x250 [ 3413.185742][T20997] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffff " or missing value [ 3413.187408][T20996] __should_failslab+0x81/0x90 [ 3413.187429][T20996] ? io_uring_create+0x121/0x1940 [ 3413.206794][T20996] should_failslab+0x5/0x20 [ 3413.211295][T20996] kmem_cache_alloc_trace+0x49/0x310 [ 3413.216657][T20996] io_uring_create+0x121/0x1940 [ 3413.221514][T20996] ? vfs_write+0x50c/0x770 [ 3413.225922][T20996] ? should_fail+0xd6/0x250 [ 3413.230421][T20996] __x64_sys_io_uring_setup+0xe1/0x120 [ 3413.235934][T20996] do_syscall_64+0x3d/0x90 [ 3413.240354][T20996] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3413.246243][T20996] RIP: 0033:0x4665f9 00:18:25 executing program 4 (fault-call:2 fault-nth:22): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3413.250121][T20996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.260206][T21010] FAULT_INJECTION: forcing a failure. [ 3413.260206][T21010] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.269734][T20996] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3413.269755][T20996] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3413.269767][T20996] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3413.269778][T20996] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3413.314556][T20996] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3413.322595][T20996] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3413.330565][T21010] CPU: 1 PID: 21010 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3413.339323][T21010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3413.349365][T21010] Call Trace: [ 3413.352638][T21010] dump_stack_lvl+0xb7/0x103 [ 3413.357266][T21010] dump_stack+0x11/0x1a [ 3413.361418][T21010] should_fail+0x23c/0x250 [ 3413.365854][T21010] ? sk_prot_alloc+0x41/0x190 [ 3413.370530][T21010] __should_failslab+0x81/0x90 [ 3413.375288][T21010] should_failslab+0x5/0x20 [ 3413.379785][T21010] kmem_cache_alloc+0x46/0x2e0 [ 3413.384551][T21010] sk_prot_alloc+0x41/0x190 [ 3413.389037][T21010] sk_alloc+0x2e/0x220 [ 3413.393084][T21010] unix_create1+0x74/0x3c0 [ 3413.397486][T21010] unix_create+0xdc/0x100 [ 3413.401845][T21010] __sock_create+0x2c7/0x4e0 [ 3413.406449][T21010] sock_create_kern+0x34/0x40 [ 3413.411112][T21010] io_uring_create+0x1653/0x1940 [ 3413.416142][T21010] ? vfs_write+0x50c/0x770 [ 3413.420541][T21010] __x64_sys_io_uring_setup+0xe1/0x120 [ 3413.425996][T21010] do_syscall_64+0x3d/0x90 [ 3413.430448][T21010] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3413.436330][T21010] RIP: 0033:0x4665f9 [ 3413.440209][T21010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.459872][T21010] RSP: 002b:00007f48c066e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3413.468267][T21010] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3413.476291][T21010] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3413.484310][T21010] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3413.492263][T21010] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 00:18:25 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:25 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x9e3e, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:25 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3413.500214][T21010] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3413.518851][T21017] FAULT_INJECTION: forcing a failure. [ 3413.518851][T21017] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.531546][T21017] CPU: 0 PID: 21017 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3413.540298][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3413.550373][T21017] Call Trace: 00:18:25 executing program 0 (fault-call:1 fault-nth:13): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3413.553646][T21017] dump_stack_lvl+0xb7/0x103 [ 3413.558244][T21017] dump_stack+0x11/0x1a [ 3413.562393][T21017] should_fail+0x23c/0x250 [ 3413.566812][T21017] ? xas_create+0x96b/0xb30 [ 3413.571315][T21017] __should_failslab+0x81/0x90 [ 3413.576132][T21017] should_failslab+0x5/0x20 [ 3413.580642][T21017] kmem_cache_alloc+0x46/0x2e0 [ 3413.583768][T20998] loop5: detected capacity change from 0 to 8 [ 3413.585456][T21017] xas_create+0x96b/0xb30 [ 3413.595833][T21017] xas_store+0x70/0xca0 [ 3413.599988][T21017] ? io_wq_create+0x217/0x6e0 [ 3413.604742][T21017] ? io_wq_create+0x4e9/0x6e0 [ 3413.605710][T21021] FAULT_INJECTION: forcing a failure. [ 3413.605710][T21021] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.609467][T21017] __xa_store+0xcb/0x320 [ 3413.609491][T21017] xa_store+0x30/0x70 [ 3413.630243][T21017] io_uring_add_tctx_node+0x111/0x200 [ 3413.635617][T21017] io_uring_create+0x17a0/0x1940 [ 3413.640563][T21017] ? vfs_write+0x50c/0x770 [ 3413.644962][T21017] __x64_sys_io_uring_setup+0xe1/0x120 [ 3413.650407][T21017] do_syscall_64+0x3d/0x90 [ 3413.654808][T21017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3413.660773][T21017] RIP: 0033:0x4665f9 [ 3413.664714][T21017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.684482][T21017] RSP: 002b:00007f8e64b3f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3413.692886][T21017] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3413.700837][T21017] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3413.708788][T21017] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3413.716741][T21017] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3413.724693][T21017] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3413.732649][T21021] CPU: 1 PID: 21021 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3413.741406][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3413.741834][T21030] FAULT_INJECTION: forcing a failure. [ 3413.741834][T21030] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.751460][T21021] Call Trace: [ 3413.751468][T21021] dump_stack_lvl+0xb7/0x103 [ 3413.751512][T21021] dump_stack+0x11/0x1a [ 3413.751525][T21021] should_fail+0x23c/0x250 [ 3413.780505][T21021] ? io_uring_create+0x18e/0x1940 [ 3413.785514][T21021] __should_failslab+0x81/0x90 [ 3413.790274][T21021] should_failslab+0x5/0x20 [ 3413.794864][T21021] __kmalloc+0x66/0x340 [ 3413.799075][T21021] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3413.804678][T21021] ? io_uring_create+0x121/0x1940 [ 3413.809830][T21021] io_uring_create+0x18e/0x1940 [ 3413.814702][T21021] ? vfs_write+0x50c/0x770 [ 3413.819104][T21021] __x64_sys_io_uring_setup+0xe1/0x120 [ 3413.824547][T21021] do_syscall_64+0x3d/0x90 [ 3413.828948][T21021] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3413.834827][T21021] RIP: 0033:0x4665f9 [ 3413.838702][T21021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3413.858297][T21021] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3413.866690][T21021] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3413.874641][T21021] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3413.882663][T21021] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3413.890615][T21021] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3413.898568][T21021] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:25 executing program 4 (fault-call:2 fault-nth:23): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:25 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3413.906615][T21030] CPU: 0 PID: 21030 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3413.915373][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3413.925419][T21030] Call Trace: [ 3413.928686][T21030] dump_stack_lvl+0xb7/0x103 [ 3413.933265][T21030] dump_stack+0x11/0x1a [ 3413.937415][T21030] should_fail+0x23c/0x250 [ 3413.941907][T21030] __should_failslab+0x81/0x90 [ 3413.946722][T21030] ? selinux_sk_alloc_security+0x61/0x120 [ 3413.952441][T21030] should_failslab+0x5/0x20 00:18:25 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3413.956980][T21030] kmem_cache_alloc_trace+0x49/0x310 [ 3413.962291][T21030] ? should_fail+0xd6/0x250 [ 3413.966796][T21030] selinux_sk_alloc_security+0x61/0x120 [ 3413.972344][T21030] security_sk_alloc+0x45/0x90 [ 3413.977170][T21030] sk_prot_alloc+0xd2/0x190 [ 3413.981664][T21030] sk_alloc+0x2e/0x220 [ 3413.981891][T21036] FAULT_INJECTION: forcing a failure. [ 3413.981891][T21036] name failslab, interval 1, probability 0, space 0, times 0 [ 3413.985725][T21030] unix_create1+0x74/0x3c0 [ 3413.985750][T21030] unix_create+0xdc/0x100 [ 3413.985770][T21030] __sock_create+0x2c7/0x4e0 [ 3414.011553][T21030] sock_create_kern+0x34/0x40 [ 3414.016224][T21030] io_uring_create+0x1653/0x1940 [ 3414.021148][T21030] ? vfs_write+0x50c/0x770 [ 3414.025550][T21030] __x64_sys_io_uring_setup+0xe1/0x120 [ 3414.031113][T21030] do_syscall_64+0x3d/0x90 [ 3414.035583][T21030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3414.041459][T21030] RIP: 0033:0x4665f9 [ 3414.045333][T21030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.064951][T21030] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3414.073344][T21030] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3414.081293][T21030] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3414.089249][T21030] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3414.097205][T21030] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3414.105162][T21030] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3414.113340][T21036] CPU: 1 PID: 21036 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3414.122095][T21036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.132139][T21036] Call Trace: [ 3414.135405][T21036] dump_stack_lvl+0xb7/0x103 [ 3414.139999][T21036] dump_stack+0x11/0x1a [ 3414.143419][T21035] FAULT_INJECTION: forcing a failure. [ 3414.143419][T21035] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.144148][T21036] should_fail+0x23c/0x250 [ 3414.144209][T21036] __should_failslab+0x81/0x90 [ 3414.165890][T21036] ? io_uring_create+0x1df/0x1940 [ 3414.170904][T21036] should_failslab+0x5/0x20 [ 3414.175431][T21036] kmem_cache_alloc_trace+0x49/0x310 [ 3414.180700][T21036] ? io_uring_create+0x18e/0x1940 [ 3414.185752][T21036] io_uring_create+0x1df/0x1940 [ 3414.190586][T21036] ? vfs_write+0x50c/0x770 [ 3414.194986][T21036] __x64_sys_io_uring_setup+0xe1/0x120 [ 3414.200514][T21036] do_syscall_64+0x3d/0x90 [ 3414.204929][T21036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3414.210860][T21036] RIP: 0033:0x4665f9 [ 3414.214792][T21036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.234477][T21036] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3414.242887][T21036] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3414.250849][T21036] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c 00:18:25 executing program 0 (fault-call:1 fault-nth:14): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:26 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x1001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3414.258807][T21036] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3414.266766][T21036] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3414.274718][T21036] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3414.282675][T21035] CPU: 0 PID: 21035 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3414.291442][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.301491][T21035] Call Trace: [ 3414.304759][T21035] dump_stack_lvl+0xb7/0x103 00:18:26 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3414.309358][T21035] dump_stack+0x11/0x1a [ 3414.313528][T21035] should_fail+0x23c/0x250 [ 3414.317995][T21035] ? anon_vma_clone+0x8d/0x380 [ 3414.322783][T21035] __should_failslab+0x81/0x90 [ 3414.327605][T21035] should_failslab+0x5/0x20 [ 3414.332105][T21035] kmem_cache_alloc+0x46/0x2e0 [ 3414.336861][T21035] anon_vma_clone+0x8d/0x380 [ 3414.341121][T21041] FAULT_INJECTION: forcing a failure. [ 3414.341121][T21041] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.341451][T21035] __split_vma+0x134/0x320 [ 3414.358457][T21035] ? vmacache_find+0x1e2/0x320 [ 3414.363230][T21035] __do_munmap+0x2ee/0x1330 [ 3414.367721][T21035] ? __xas_nomem+0xfc/0x270 [ 3414.372226][T21035] mmap_region+0x5aa/0x1400 [ 3414.376731][T21035] do_mmap+0x73f/0xc40 [ 3414.380786][T21035] vm_mmap_pgoff+0xf9/0x1d0 [ 3414.385272][T21035] ksys_mmap_pgoff+0x2a8/0x380 [ 3414.390015][T21035] do_syscall_64+0x3d/0x90 [ 3414.394465][T21035] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3414.400385][T21035] RIP: 0033:0x466642 [ 3414.404259][T21035] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3414.423846][T21035] RSP: 002b:00007f8e64b600f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3414.432252][T21035] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3414.440270][T21035] RDX: 0000000000000003 RSI: 0000000000082140 RDI: 0000000020c01000 [ 3414.448320][T21035] RBP: 0000000020c01000 R08: 0000000000000005 R09: 0000000000000000 [ 3414.456292][T21035] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 3414.464316][T21035] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3414.472303][T21041] CPU: 1 PID: 21041 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3414.481058][T21041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.491105][T21041] Call Trace: [ 3414.494374][T21041] dump_stack_lvl+0xb7/0x103 [ 3414.498965][T21041] dump_stack+0x11/0x1a [ 3414.503117][T21041] should_fail+0x23c/0x250 [ 3414.507608][T21041] ? __d_alloc+0x36/0x370 [ 3414.511932][T21041] __should_failslab+0x81/0x90 [ 3414.516775][T21041] should_failslab+0x5/0x20 [ 3414.521273][T21041] kmem_cache_alloc+0x46/0x2e0 [ 3414.526073][T21041] __d_alloc+0x36/0x370 [ 3414.530218][T21041] d_alloc_pseudo+0x1a/0x50 [ 3414.534778][T21041] alloc_file_pseudo+0x63/0x130 [ 3414.539610][T21041] anon_inode_getfile+0x9f/0x120 [ 3414.544525][T21041] io_uring_create+0x16a8/0x1940 [ 3414.549440][T21041] ? vfs_write+0x50c/0x770 [ 3414.553833][T21041] __x64_sys_io_uring_setup+0xe1/0x120 [ 3414.559270][T21041] do_syscall_64+0x3d/0x90 [ 3414.563667][T21041] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3414.569538][T21041] RIP: 0033:0x4665f9 [ 3414.573423][T21041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.593097][T21041] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3414.601491][T21041] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3414.609440][T21041] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3414.617502][T21041] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3414.625469][T21041] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3414.633449][T21041] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)={0xac, 0x29, 0x2, {0x53, [{{0x2, 0x1, 0x4}, 0x2, 0x3, 0xd, './file0/file0'}, {{0x20, 0x1}, 0x6893, 0x4, 0x7, './file0'}, {{0x10, 0x2, 0x8}, 0x1, 0x85, 0x7, './file0'}, {{0x2, 0x4, 0x3}, 0x6, 0x7, 0x7, './file1'}, {{0x4, 0x1, 0x8}, 0x4, 0x7, 0x7, './file0'}]}}, 0xac) 00:18:26 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:26 executing program 4 (fault-call:2 fault-nth:24): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:26 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:26 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x100000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:26 executing program 0 (fault-call:1 fault-nth:15): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3414.763114][T21061] FAULT_INJECTION: forcing a failure. [ 3414.763114][T21061] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.764156][T21064] FAULT_INJECTION: forcing a failure. [ 3414.764156][T21064] name failslab, interval 1, probability 0, space 0, times 0 [ 3414.775786][T21061] CPU: 1 PID: 21061 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3414.797210][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.807306][T21061] Call Trace: [ 3414.810566][T21061] dump_stack_lvl+0xb7/0x103 [ 3414.815144][T21061] dump_stack+0x11/0x1a [ 3414.819279][T21061] should_fail+0x23c/0x250 [ 3414.823682][T21061] ? io_uring_create+0x1940/0x1940 [ 3414.828816][T21061] __should_failslab+0x81/0x90 [ 3414.833562][T21061] ? percpu_ref_init+0x96/0x250 [ 3414.838394][T21061] should_failslab+0x5/0x20 [ 3414.842881][T21061] kmem_cache_alloc_trace+0x49/0x310 [ 3414.848194][T21061] ? io_uring_create+0x1940/0x1940 [ 3414.853361][T21061] percpu_ref_init+0x96/0x250 [ 3414.858126][T21061] io_uring_create+0x226/0x1940 [ 3414.863265][T21061] ? vfs_write+0x50c/0x770 [ 3414.867666][T21061] __x64_sys_io_uring_setup+0xe1/0x120 [ 3414.873180][T21061] do_syscall_64+0x3d/0x90 [ 3414.877596][T21061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3414.883478][T21061] RIP: 0033:0x4665f9 [ 3414.887353][T21061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3414.906947][T21061] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3414.915355][T21061] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3414.923308][T21061] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3414.931268][T21061] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3414.939221][T21061] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3414.947281][T21061] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3414.955236][T21064] CPU: 0 PID: 21064 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 00:18:26 executing program 1 (fault-call:2 fault-nth:5): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3414.963996][T21064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3414.974072][T21064] Call Trace: [ 3414.977343][T21064] dump_stack_lvl+0xb7/0x103 [ 3414.981934][T21064] dump_stack+0x11/0x1a [ 3414.986091][T21064] should_fail+0x23c/0x250 [ 3414.990511][T21064] ? anon_vma_clone+0x8d/0x380 [ 3414.995350][T21064] __should_failslab+0x81/0x90 [ 3415.000082][T21063] FAULT_INJECTION: forcing a failure. [ 3415.000082][T21063] name failslab, interval 1, probability 0, space 0, times 0 [ 3415.000107][T21064] should_failslab+0x5/0x20 [ 3415.017164][T21064] kmem_cache_alloc+0x46/0x2e0 [ 3415.021922][T21064] anon_vma_clone+0x8d/0x380 [ 3415.026512][T21064] __split_vma+0x134/0x320 [ 3415.030911][T21064] ? vmacache_find+0x1e2/0x320 [ 3415.035665][T21064] __do_munmap+0x2ee/0x1330 [ 3415.040154][T21064] ? __xas_nomem+0xfc/0x270 [ 3415.044646][T21064] mmap_region+0x5aa/0x1400 [ 3415.049144][T21064] do_mmap+0x73f/0xc40 [ 3415.053254][T21064] vm_mmap_pgoff+0xf9/0x1d0 [ 3415.057744][T21064] ksys_mmap_pgoff+0x2a8/0x380 [ 3415.062499][T21064] do_syscall_64+0x3d/0x90 [ 3415.066926][T21064] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.072804][T21064] RIP: 0033:0x466642 [ 3415.076683][T21064] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3415.096272][T21064] RSP: 002b:00007f8e64b600f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3415.104669][T21064] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3415.112625][T21064] RDX: 0000000000000003 RSI: 0000000000082140 RDI: 0000000020c01000 [ 3415.120634][T21064] RBP: 0000000020c01000 R08: 0000000000000005 R09: 0000000000000000 [ 3415.128589][T21064] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 3415.136541][T21064] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3415.144496][T21063] CPU: 1 PID: 21063 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3415.153257][T21063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.163226][T21071] FAULT_INJECTION: forcing a failure. [ 3415.163226][T21071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3415.163297][T21063] Call Trace: [ 3415.163305][T21063] dump_stack_lvl+0xb7/0x103 [ 3415.184385][T21063] dump_stack+0x11/0x1a [ 3415.188529][T21063] should_fail+0x23c/0x250 [ 3415.192934][T21063] ? __alloc_file+0x2e/0x1a0 [ 3415.197526][T21063] __should_failslab+0x81/0x90 [ 3415.202286][T21063] should_failslab+0x5/0x20 [ 3415.206820][T21063] kmem_cache_alloc+0x46/0x2e0 [ 3415.211576][T21063] __alloc_file+0x2e/0x1a0 [ 3415.216043][T21063] alloc_empty_file+0xcd/0x1c0 [ 3415.220804][T21063] alloc_file+0x3a/0x280 [ 3415.225034][T21063] alloc_file_pseudo+0xe2/0x130 [ 3415.229870][T21063] anon_inode_getfile+0x9f/0x120 [ 3415.234811][T21063] io_uring_create+0x16a8/0x1940 [ 3415.239739][T21063] ? vfs_write+0x50c/0x770 [ 3415.244193][T21063] __x64_sys_io_uring_setup+0xe1/0x120 [ 3415.249640][T21063] do_syscall_64+0x3d/0x90 [ 3415.254051][T21063] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.259947][T21063] RIP: 0033:0x4665f9 [ 3415.263823][T21063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3415.283419][T21063] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3415.291816][T21063] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3415.299771][T21063] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e 00:18:27 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:27 executing program 0 (fault-call:1 fault-nth:16): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3415.307903][T21063] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3415.315856][T21063] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3415.323849][T21063] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3415.331803][T21071] CPU: 0 PID: 21071 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3415.340587][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.350627][T21071] Call Trace: [ 3415.353896][T21071] dump_stack_lvl+0xb7/0x103 [ 3415.358494][T21071] dump_stack+0x11/0x1a 00:18:27 executing program 4 (fault-call:2 fault-nth:25): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3415.362640][T21071] should_fail+0x23c/0x250 [ 3415.367114][T21071] __alloc_pages+0x102/0x320 [ 3415.371702][T21071] alloc_pages+0x2e8/0x340 [ 3415.376120][T21071] __get_free_pages+0x8/0x30 [ 3415.380706][T21071] io_uring_create+0x904/0x1940 [ 3415.385642][T21071] ? vfs_write+0x50c/0x770 [ 3415.386972][T21078] FAULT_INJECTION: forcing a failure. [ 3415.386972][T21078] name failslab, interval 1, probability 0, space 0, times 0 [ 3415.390053][T21071] __x64_sys_io_uring_setup+0xe1/0x120 [ 3415.390077][T21071] do_syscall_64+0x3d/0x90 [ 3415.412447][T21071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.418328][T21071] RIP: 0033:0x4665f9 [ 3415.422203][T21071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3415.441803][T21071] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3415.450196][T21071] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3415.458153][T21071] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3415.466104][T21071] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3415.474054][T21071] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3415.482192][T21071] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3415.490179][T21078] CPU: 1 PID: 21078 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3415.493430][T21067] FAT-fs (loop5): bogus number of reserved sectors [ 3415.499024][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.499036][T21078] Call Trace: [ 3415.499041][T21078] dump_stack_lvl+0xb7/0x103 [ 3415.505598][T21067] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3415.515621][T21078] dump_stack+0x11/0x1a [ 3415.515639][T21078] should_fail+0x23c/0x250 [ 3415.538564][T21078] ? security_file_alloc+0x30/0x190 [ 3415.543765][T21078] __should_failslab+0x81/0x90 [ 3415.548525][T21078] should_failslab+0x5/0x20 [ 3415.553022][T21078] kmem_cache_alloc+0x46/0x2e0 [ 3415.557788][T21078] security_file_alloc+0x30/0x190 [ 3415.562813][T21078] __alloc_file+0x83/0x1a0 [ 3415.567234][T21078] alloc_empty_file+0xcd/0x1c0 [ 3415.571994][T21078] alloc_file+0x3a/0x280 [ 3415.576243][T21078] alloc_file_pseudo+0xe2/0x130 [ 3415.581130][T21078] anon_inode_getfile+0x9f/0x120 [ 3415.586066][T21078] io_uring_create+0x16a8/0x1940 [ 3415.591070][T21078] ? vfs_write+0x50c/0x770 [ 3415.595325][T21082] FAULT_INJECTION: forcing a failure. [ 3415.595325][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 3415.595477][T21078] __x64_sys_io_uring_setup+0xe1/0x120 [ 3415.613497][T21078] do_syscall_64+0x3d/0x90 [ 3415.617909][T21078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.623899][T21078] RIP: 0033:0x4665f9 [ 3415.627775][T21078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3415.647361][T21078] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3415.655769][T21078] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:27 executing program 1 (fault-call:2 fault-nth:6): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:27 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3415.663723][T21078] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3415.671675][T21078] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3415.679629][T21078] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3415.687585][T21078] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3415.695554][T21082] CPU: 0 PID: 21082 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3415.704317][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.714388][T21082] Call Trace: [ 3415.717655][T21082] dump_stack_lvl+0xb7/0x103 [ 3415.722269][T21082] dump_stack+0x11/0x1a [ 3415.726469][T21082] should_fail+0x23c/0x250 [ 3415.730905][T21082] ? vm_area_dup+0x44/0x120 [ 3415.735425][T21082] __should_failslab+0x81/0x90 [ 3415.740182][T21082] should_failslab+0x5/0x20 [ 3415.744675][T21082] kmem_cache_alloc+0x46/0x2e0 [ 3415.749456][T21082] ? pagerange_is_ram_callback+0xb6/0xd0 [ 3415.755092][T21082] vm_area_dup+0x44/0x120 [ 3415.759417][T21082] ? pgprot_writethrough+0x20/0x20 [ 3415.764529][T21082] ? perf_event_mmap+0x14c/0xce0 [ 3415.769463][T21082] ? pfn_modify_allowed+0xa2/0x1c0 [ 3415.772937][T21092] FAULT_INJECTION: forcing a failure. [ 3415.772937][T21092] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3415.774600][T21082] ? remap_pfn_range_notrack+0x71c/0x770 [ 3415.774621][T21082] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 3415.799714][T21082] __split_vma+0x82/0x320 [ 3415.804029][T21082] ? vmacache_find+0x313/0x320 [ 3415.808800][T21082] __do_munmap+0x27c/0x1330 [ 3415.813304][T21082] ? up_write+0x25/0xc0 [ 3415.817438][T21082] ? vma_link+0x188/0x1a0 [ 3415.821799][T21082] mmap_region+0x5aa/0x1400 [ 3415.826340][T21082] do_mmap+0x73f/0xc40 [ 3415.830389][T21082] vm_mmap_pgoff+0xf9/0x1d0 [ 3415.834873][T21082] ksys_mmap_pgoff+0x2a8/0x380 [ 3415.839699][T21082] do_syscall_64+0x3d/0x90 [ 3415.844126][T21082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.850024][T21082] RIP: 0033:0x466642 [ 3415.853899][T21082] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3415.873485][T21082] RSP: 002b:00007f8e64b600f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3415.881891][T21082] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3415.889866][T21082] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ffd000 [ 3415.897818][T21082] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000010000000 [ 3415.905768][T21082] R10: 0000000000008011 R11: 0000000000000206 R12: 00000000200003c0 [ 3415.913723][T21082] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 [ 3415.921679][T21092] CPU: 1 PID: 21092 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3415.930512][T21092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3415.940579][T21092] Call Trace: [ 3415.943875][T21092] dump_stack_lvl+0xb7/0x103 [ 3415.948525][T21092] dump_stack+0x11/0x1a [ 3415.952669][T21092] should_fail+0x23c/0x250 [ 3415.957089][T21092] __alloc_pages+0x102/0x320 [ 3415.961673][T21092] alloc_pages+0x2e8/0x340 [ 3415.966084][T21092] __get_free_pages+0x8/0x30 [ 3415.970678][T21092] io_uring_create+0x9f7/0x1940 [ 3415.975607][T21092] ? vfs_write+0x50c/0x770 [ 3415.980098][T21092] __x64_sys_io_uring_setup+0xe1/0x120 [ 3415.985552][T21092] do_syscall_64+0x3d/0x90 [ 3415.989979][T21092] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3415.995923][T21092] RIP: 0033:0x4665f9 00:18:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='gd5', @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:27 executing program 0 (fault-call:1 fault-nth:17): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:27 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:27 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:27 executing program 4 (fault-call:2 fault-nth:26): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:27 executing program 1 (fault-call:2 fault-nth:7): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3415.999792][T21092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3416.019387][T21092] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3416.027775][T21092] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3416.035721][T21092] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3416.043795][T21092] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3416.051746][T21092] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3416.059772][T21092] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:27 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3416.123655][T21114] FAULT_INJECTION: forcing a failure. [ 3416.123655][T21114] name failslab, interval 1, probability 0, space 0, times 0 [ 3416.136320][T21114] CPU: 0 PID: 21114 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3416.145181][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3416.155237][T21114] Call Trace: [ 3416.158505][T21114] dump_stack_lvl+0xb7/0x103 [ 3416.163186][T21114] dump_stack+0x11/0x1a [ 3416.167336][T21114] should_fail+0x23c/0x250 00:18:27 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e, 0x0, 0x0, 0x294}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3416.171761][T21114] __should_failslab+0x81/0x90 [ 3416.176524][T21114] ? io_uring_add_tctx_node+0xdc/0x200 [ 3416.182035][T21114] should_failslab+0x5/0x20 [ 3416.184324][T21116] FAULT_INJECTION: forcing a failure. [ 3416.184324][T21116] name failslab, interval 1, probability 0, space 0, times 0 [ 3416.186546][T21114] kmem_cache_alloc_trace+0x49/0x310 [ 3416.204386][T21114] ? xa_load+0x249/0x260 [ 3416.208635][T21114] io_uring_add_tctx_node+0xdc/0x200 [ 3416.213939][T21114] io_uring_create+0x17a0/0x1940 [ 3416.218909][T21114] ? vfs_write+0x50c/0x770 [ 3416.223314][T21114] __x64_sys_io_uring_setup+0xe1/0x120 [ 3416.228944][T21114] do_syscall_64+0x3d/0x90 [ 3416.233363][T21114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3416.239243][T21114] RIP: 0033:0x4665f9 [ 3416.243118][T21114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3416.262753][T21114] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3416.271157][T21114] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3416.279116][T21114] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3416.287075][T21114] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3416.295136][T21114] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3416.303099][T21114] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3416.311063][T21116] CPU: 1 PID: 21116 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3416.319848][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3416.325082][T21126] FAULT_INJECTION: forcing a failure. [ 3416.325082][T21126] name failslab, interval 1, probability 0, space 0, times 0 [ 3416.329893][T21116] Call Trace: [ 3416.329901][T21116] dump_stack_lvl+0xb7/0x103 [ 3416.350355][T21116] dump_stack+0x11/0x1a [ 3416.354505][T21116] should_fail+0x23c/0x250 [ 3416.358908][T21116] __should_failslab+0x81/0x90 [ 3416.363665][T21116] ? io_uring_create+0x1466/0x1940 [ 3416.368770][T21116] should_failslab+0x5/0x20 [ 3416.373437][T21116] kmem_cache_alloc_trace+0x49/0x310 [ 3416.378719][T21116] ? alloc_pages+0x2e8/0x340 [ 3416.383381][T21116] io_uring_create+0x1466/0x1940 [ 3416.388433][T21116] ? vfs_write+0x50c/0x770 [ 3416.392895][T21116] __x64_sys_io_uring_setup+0xe1/0x120 [ 3416.398351][T21116] do_syscall_64+0x3d/0x90 [ 3416.402771][T21116] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3416.408658][T21116] RIP: 0033:0x4665f9 [ 3416.412535][T21116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3416.432235][T21116] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3416.440632][T21116] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3416.448584][T21116] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3416.456713][T21116] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3416.464681][T21116] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3416.472672][T21116] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3416.480675][T21126] CPU: 0 PID: 21126 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3416.489433][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3416.499537][T21126] Call Trace: [ 3416.502799][T21126] dump_stack_lvl+0xb7/0x103 [ 3416.507384][T21126] dump_stack+0x11/0x1a [ 3416.511533][T21126] should_fail+0x23c/0x250 [ 3416.515940][T21126] ? xas_create+0x96b/0xb30 [ 3416.520423][T21126] __should_failslab+0x81/0x90 [ 3416.525255][T21126] should_failslab+0x5/0x20 [ 3416.529736][T21126] kmem_cache_alloc+0x46/0x2e0 [ 3416.534483][T21126] ? xas_create+0x96b/0xb30 [ 3416.538972][T21126] xas_create+0x96b/0xb30 [ 3416.543280][T21126] xas_store+0x70/0xca0 [ 3416.547418][T21126] ? io_wq_create+0x217/0x6e0 [ 3416.552076][T21126] ? io_wq_create+0x4e9/0x6e0 [ 3416.556807][T21126] __xa_store+0xcb/0x320 [ 3416.561034][T21126] xa_store+0x30/0x70 [ 3416.564997][T21126] io_uring_add_tctx_node+0x111/0x200 [ 3416.570366][T21126] io_uring_create+0x17a0/0x1940 [ 3416.575352][T21126] ? vfs_write+0x50c/0x770 [ 3416.579765][T21126] __x64_sys_io_uring_setup+0xe1/0x120 [ 3416.585208][T21126] do_syscall_64+0x3d/0x90 [ 3416.589634][T21126] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3416.595511][T21126] RIP: 0033:0x4665f9 [ 3416.599384][T21126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:28 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3416.619116][T21126] RSP: 002b:00007f8e64b3f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3416.627508][T21126] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3416.635480][T21126] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3416.643443][T21126] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3416.651394][T21126] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3416.659348][T21126] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:28 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x7}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:28 executing program 4 (fault-call:2 fault-nth:27): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:28 executing program 1 (fault-call:2 fault-nth:8): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3416.677306][T21117] FAT-fs (loop5): Unrecognized mount option "gd50xfff" or missing value [ 3416.702952][T21117] FAT-fs (loop5): Unrecognized mount option "gd50xfff" or missing value 00:18:28 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:28 executing program 0 (fault-call:1 fault-nth:18): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3416.774242][T21146] FAULT_INJECTION: forcing a failure. [ 3416.774242][T21146] name failslab, interval 1, probability 0, space 0, times 0 [ 3416.786872][T21146] CPU: 0 PID: 21146 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3416.795662][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3416.797502][T21150] FAULT_INJECTION: forcing a failure. [ 3416.797502][T21150] name failslab, interval 1, probability 0, space 0, times 0 [ 3416.805723][T21146] Call Trace: [ 3416.805732][T21146] dump_stack_lvl+0xb7/0x103 [ 3416.805753][T21146] dump_stack+0x11/0x1a [ 3416.805766][T21146] should_fail+0x23c/0x250 [ 3416.834658][T21146] ? kzalloc+0x20/0x20 [ 3416.838711][T21146] __should_failslab+0x81/0x90 [ 3416.843455][T21146] ? percpu_ref_init+0x96/0x250 [ 3416.848296][T21146] should_failslab+0x5/0x20 [ 3416.852786][T21146] kmem_cache_alloc_trace+0x49/0x310 [ 3416.858070][T21146] ? kzalloc+0x20/0x20 [ 3416.862202][T21146] percpu_ref_init+0x96/0x250 [ 3416.866861][T21146] io_uring_create+0x1488/0x1940 [ 3416.871801][T21146] ? vfs_write+0x50c/0x770 [ 3416.876213][T21146] __x64_sys_io_uring_setup+0xe1/0x120 [ 3416.881662][T21146] do_syscall_64+0x3d/0x90 [ 3416.886063][T21146] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3416.891958][T21146] RIP: 0033:0x4665f9 [ 3416.895833][T21146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3416.915503][T21146] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:28 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3416.923904][T21146] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3416.931856][T21146] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3416.939918][T21146] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3416.947867][T21146] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3416.955876][T21146] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3416.963834][T21150] CPU: 1 PID: 21150 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 00:18:28 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250200000008000500ac1414bb050001007200000014000200fe8000000000000000000000000000bb1400060076657468315f746f5f626f6e640000000500010000000000050001000100000014000200fe8000000000000000000000000000aa14000200000000000000000000000000000000001400020000000000000000000000000000000001"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008100) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x10000, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) setxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'L+', 0x1}, 0x16, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x58, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040804}, 0xc79250ea4dfa7f3b) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r2 = getuid() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@broadcast, @private, 0x0}, &(0x7f0000000540)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000580)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)=@delpolicy={0x2fc, 0x14, 0x4, 0x70bd28, 0x25dfdbfe, {{@in6=@mcast1, @in6=@loopback, 0x4e23, 0xa000, 0x4e23, 0x7, 0x2, 0xa0, 0x20, 0x2b, r1, r2}, 0x6e6bb9, 0x1}, [@proto={0x5, 0x19, 0x6c}, @algo_comp={0xcb, 0x3, {{'deflate\x00'}, 0x418, "31c3e75ff29e7c4890564daa45c5067fd066fa0bc15ee120d5d273fffe80dece16ef128596879a1f6836844d9bbb33a9505b764076a860f9b8e8dd2a5fc63322c412074c59d52089739d4748782305492d128dac080b762deed633cad9e716a9510f708a8b387bab4da1d78dc624d0b9128734c10c74ace3ff7ff7c76fa2abae224555"}}, @algo_auth_trunc={0xf9, 0x14, {{'blake2b-256\x00'}, 0x568, 0x0, "2b7672250c9afbd9107f7998bf9cfe9de1f782976ef45d276542d84f7970b815d930c13b5a2e37c3f17526b9acc42d35f11fb0a3ff9fb563a9dc39db996345fec6019207f6ec11775eb577bc33c1140fc4af4251648d3d806b316b22b176052a23f352d568990c1d37bd8c2d2c65258b02f7513c4c7667e187bdc5d9d92e7941036935eadcc9c658b5d892dc8be686a288443eaedba91a83801d35119a9cd13026f5025c57b898a05154a4b264"}}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, @XFRMA_IF_ID={0x8}, @policy_type={0xa, 0x10, {0x1}}, @tfcpad={0x8, 0x16, 0x3}, @policy={0xac, 0x7, {{@in6=@remote, @in=@broadcast, 0x4e22, 0x1, 0x4e24, 0xfffe, 0x2, 0x20, 0x80, 0x1d, r3, r4}, {0x8, 0x2, 0x200, 0x8, 0x7fff, 0x6, 0x101, 0x8}, {0x1, 0x0, 0x1, 0x5704}, 0x9, 0x0, 0x2, 0x1, 0x1, 0x2}}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x44060000}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 00:18:28 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3416.972598][T21150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3416.982705][T21150] Call Trace: [ 3416.985969][T21150] dump_stack_lvl+0xb7/0x103 [ 3416.990586][T21150] dump_stack+0x11/0x1a [ 3416.994737][T21150] should_fail+0x23c/0x250 [ 3416.999174][T21150] ? xas_create+0x96b/0xb30 [ 3417.003667][T21150] __should_failslab+0x81/0x90 [ 3417.008474][T21150] should_failslab+0x5/0x20 [ 3417.012963][T21150] kmem_cache_alloc+0x46/0x2e0 [ 3417.017750][T21150] ? should_fail+0xd6/0x250 00:18:28 executing program 1 (fault-call:2 fault-nth:9): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3417.022249][T21150] xas_create+0x96b/0xb30 [ 3417.026593][T21150] xas_store+0x70/0xca0 [ 3417.030765][T21150] ? selinux_file_alloc_security+0x9c/0xb0 [ 3417.036564][T21150] ? security_file_alloc+0x12e/0x190 [ 3417.039597][T21155] FAULT_INJECTION: forcing a failure. [ 3417.039597][T21155] name failslab, interval 1, probability 0, space 0, times 0 [ 3417.041937][T21150] ? percpu_counter_add_batch+0x69/0xd0 [ 3417.041966][T21150] __xa_store+0xcb/0x320 [ 3417.041985][T21150] xa_store+0x30/0x70 [ 3417.068255][T21150] io_uring_add_tctx_node+0x111/0x200 [ 3417.073612][T21150] io_uring_create+0x17a0/0x1940 [ 3417.078544][T21150] ? vfs_write+0x50c/0x770 [ 3417.082950][T21150] __x64_sys_io_uring_setup+0xe1/0x120 [ 3417.088391][T21150] do_syscall_64+0x3d/0x90 [ 3417.092854][T21150] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3417.098732][T21150] RIP: 0033:0x4665f9 [ 3417.102616][T21150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3417.122202][T21150] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3417.130593][T21150] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3417.138738][T21150] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3417.146748][T21150] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3417.154697][T21150] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3417.162650][T21150] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3417.170608][T21155] CPU: 0 PID: 21155 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3417.179383][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3417.189513][T21155] Call Trace: [ 3417.192788][T21155] dump_stack_lvl+0xb7/0x103 [ 3417.197377][T21155] dump_stack+0x11/0x1a [ 3417.201535][T21155] should_fail+0x23c/0x250 [ 3417.205954][T21155] ? xas_create+0x96b/0xb30 [ 3417.210454][T21155] __should_failslab+0x81/0x90 [ 3417.215214][T21155] should_failslab+0x5/0x20 [ 3417.219805][T21155] kmem_cache_alloc+0x46/0x2e0 [ 3417.224572][T21155] ? xas_create+0x96b/0xb30 [ 3417.228496][T21164] FAULT_INJECTION: forcing a failure. [ 3417.228496][T21164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3417.229067][T21155] xas_create+0x96b/0xb30 [ 3417.246374][T21155] xas_store+0x70/0xca0 [ 3417.250521][T21155] ? io_wq_create+0x217/0x6e0 [ 3417.255187][T21155] ? io_wq_create+0x4e9/0x6e0 [ 3417.259883][T21155] __xa_store+0xcb/0x320 [ 3417.264168][T21155] xa_store+0x30/0x70 [ 3417.268136][T21155] io_uring_add_tctx_node+0x111/0x200 [ 3417.273548][T21155] io_uring_create+0x17a0/0x1940 [ 3417.278471][T21155] ? vfs_write+0x50c/0x770 [ 3417.282965][T21155] __x64_sys_io_uring_setup+0xe1/0x120 [ 3417.288406][T21155] do_syscall_64+0x3d/0x90 [ 3417.292809][T21155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3417.298705][T21155] RIP: 0033:0x4665f9 [ 3417.302591][T21155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:28 executing program 0 (fault-call:1 fault-nth:19): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:28 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3417.322192][T21155] RSP: 002b:00007f8e64b3f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3417.330660][T21155] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3417.338609][T21155] RDX: 0000000020ffd000 RSI: 0000000020000300 RDI: 00000000000005ca [ 3417.346559][T21155] RBP: 0000000020000300 R08: 00000000200003c0 R09: 00000000200003c0 [ 3417.354513][T21155] R10: 0000000020000380 R11: 0000000000000202 R12: 00000000200003c0 [ 3417.362487][T21155] R13: 0000000020ffd000 R14: 0000000020000380 R15: 0000000020c01000 00:18:29 executing program 4 (fault-call:2 fault-nth:28): r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3417.370445][T21164] CPU: 1 PID: 21164 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3417.379204][T21164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3417.389273][T21164] Call Trace: [ 3417.392594][T21164] dump_stack_lvl+0xb7/0x103 [ 3417.397252][T21164] dump_stack+0x11/0x1a [ 3417.401469][T21164] should_fail+0x23c/0x250 [ 3417.402656][T21169] FAULT_INJECTION: forcing a failure. [ 3417.402656][T21169] name failslab, interval 1, probability 0, space 0, times 0 [ 3417.405885][T21164] should_fail_usercopy+0x16/0x20 [ 3417.405913][T21164] _copy_to_user+0x1c/0x90 [ 3417.427911][T21164] io_uring_create+0x160d/0x1940 [ 3417.432863][T21164] ? vfs_write+0x50c/0x770 [ 3417.437262][T21164] __x64_sys_io_uring_setup+0xe1/0x120 [ 3417.442774][T21164] do_syscall_64+0x3d/0x90 [ 3417.447174][T21164] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3417.453053][T21164] RIP: 0033:0x4665f9 [ 3417.456927][T21164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3417.476515][T21164] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3417.484919][T21164] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3417.492877][T21164] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3417.500840][T21164] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3417.508795][T21164] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3417.516750][T21164] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3417.524703][T21169] CPU: 0 PID: 21169 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3417.533465][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3417.543513][T21169] Call Trace: [ 3417.546780][T21169] dump_stack_lvl+0xb7/0x103 [ 3417.551370][T21169] dump_stack+0x11/0x1a [ 3417.555689][T21169] should_fail+0x23c/0x250 [ 3417.560108][T21169] ? xas_create+0x96b/0xb30 [ 3417.564606][T21169] __should_failslab+0x81/0x90 [ 3417.569365][T21169] should_failslab+0x5/0x20 [ 3417.572316][T21172] FAULT_INJECTION: forcing a failure. [ 3417.572316][T21172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3417.573908][T21169] kmem_cache_alloc+0x46/0x2e0 [ 3417.591714][T21169] ? xas_create+0x96b/0xb30 [ 3417.596203][T21169] xas_create+0x96b/0xb30 [ 3417.600552][T21169] xas_store+0x70/0xca0 [ 3417.604689][T21169] ? selinux_file_alloc_security+0x9c/0xb0 [ 3417.610562][T21169] ? security_file_alloc+0x12e/0x190 [ 3417.615838][T21169] ? percpu_counter_add_batch+0x69/0xd0 [ 3417.621429][T21169] __xa_store+0xcb/0x320 [ 3417.625655][T21169] xa_store+0x30/0x70 [ 3417.629626][T21169] io_uring_add_tctx_node+0x111/0x200 [ 3417.635075][T21169] io_uring_create+0x17a0/0x1940 [ 3417.640071][T21169] ? vfs_write+0x50c/0x770 [ 3417.644595][T21169] __x64_sys_io_uring_setup+0xe1/0x120 [ 3417.650035][T21169] do_syscall_64+0x3d/0x90 [ 3417.654435][T21169] ? irqentry_exit+0xe/0x30 [ 3417.658925][T21169] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3417.664868][T21169] RIP: 0033:0x4665f9 [ 3417.668745][T21169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3417.688333][T21169] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3417.696724][T21169] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3417.704687][T21169] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3417.712650][T21169] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 00:18:29 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:29 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x10}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:29 executing program 1 (fault-call:2 fault-nth:10): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3417.720601][T21169] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3417.728571][T21169] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3417.736524][T21172] CPU: 1 PID: 21172 Comm: syz-executor.4 Not tainted 5.14.0-rc7-syzkaller #0 [ 3417.745282][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3417.755335][T21172] Call Trace: [ 3417.758605][T21172] dump_stack_lvl+0xb7/0x103 [ 3417.763248][T21172] dump_stack+0x11/0x1a [ 3417.767421][T21172] should_fail+0x23c/0x250 [ 3417.771837][T21172] should_fail_usercopy+0x16/0x20 00:18:29 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3417.776868][T21172] _copy_to_user+0x1c/0x90 [ 3417.781288][T21172] simple_read_from_buffer+0xab/0x120 [ 3417.786661][T21172] proc_fail_nth_read+0xf6/0x140 [ 3417.791599][T21172] ? rw_verify_area+0x136/0x250 [ 3417.796474][T21172] ? proc_fault_inject_write+0x200/0x200 [ 3417.802105][T21172] vfs_read+0x154/0x5d0 [ 3417.806261][T21172] ? __fget_light+0x21b/0x260 [ 3417.810963][T21172] ? __cond_resched+0x11/0x40 [ 3417.815632][T21172] ksys_read+0xce/0x180 [ 3417.819789][T21172] __x64_sys_read+0x3e/0x50 [ 3417.824353][T21172] do_syscall_64+0x3d/0x90 [ 3417.828763][T21172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3417.834656][T21172] RIP: 0033:0x41937c [ 3417.838542][T21172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3417.858144][T21172] RSP: 002b:00007f8e64b60170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3417.866542][T21172] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000041937c 00:18:29 executing program 0 (fault-call:1 fault-nth:20): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:29 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/141) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@dots}]}) [ 3417.874540][T21172] RDX: 000000000000000f RSI: 00007f8e64b601e0 RDI: 0000000000000004 [ 3417.882543][T21172] RBP: 00007f8e64b601d0 R08: 0000000000000000 R09: 0000000010000000 [ 3417.890545][T21172] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 3417.898512][T21172] R13: 00007ffd3669311f R14: 00007f8e64b60300 R15: 0000000000022000 00:18:29 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3417.935982][T21191] FAULT_INJECTION: forcing a failure. [ 3417.935982][T21191] name failslab, interval 1, probability 0, space 0, times 0 [ 3417.948608][T21191] CPU: 1 PID: 21191 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3417.957367][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3417.967412][T21191] Call Trace: [ 3417.970684][T21191] dump_stack_lvl+0xb7/0x103 [ 3417.975271][T21191] dump_stack+0x11/0x1a [ 3417.979460][T21191] should_fail+0x23c/0x250 00:18:29 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x21}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3417.983918][T21191] ? sock_alloc_inode+0x23/0x90 [ 3417.988835][T21191] __should_failslab+0x81/0x90 [ 3417.993610][T21191] ? sockfs_init_fs_context+0x70/0x70 [ 3417.999004][T21191] should_failslab+0x5/0x20 [ 3418.003526][T21191] kmem_cache_alloc+0x46/0x2e0 [ 3418.008358][T21191] ? selinux_socket_create+0x7c/0x170 [ 3418.013780][T21191] ? sockfs_init_fs_context+0x70/0x70 [ 3418.014044][T21212] FAT-fs (loop5): bogus number of reserved sectors [ 3418.019147][T21191] sock_alloc_inode+0x23/0x90 [ 3418.019175][T21191] ? sockfs_init_fs_context+0x70/0x70 00:18:29 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3418.025699][T21212] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3418.030325][T21191] new_inode_pseudo+0x38/0x1c0 [ 3418.047042][T21191] __sock_create+0x122/0x4e0 [ 3418.051657][T21191] ? should_fail+0xd6/0x250 [ 3418.056236][T21191] sock_create_kern+0x34/0x40 [ 3418.060914][T21191] io_uring_create+0x1653/0x1940 [ 3418.065845][T21191] ? vfs_write+0x50c/0x770 [ 3418.070251][T21191] __x64_sys_io_uring_setup+0xe1/0x120 [ 3418.075702][T21191] do_syscall_64+0x3d/0x90 [ 3418.075832][T21200] FAULT_INJECTION: forcing a failure. [ 3418.075832][T21200] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.080111][T21191] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3418.098554][T21191] RIP: 0033:0x4665f9 [ 3418.102432][T21191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.122110][T21191] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3418.130505][T21191] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3418.138460][T21191] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3418.146451][T21191] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3418.154418][T21191] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3418.162382][T21191] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3418.170341][T21200] CPU: 0 PID: 21200 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3418.170422][T21191] socket: no more sockets [ 3418.179224][T21200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.179236][T21200] Call Trace: [ 3418.179242][T21200] dump_stack_lvl+0xb7/0x103 [ 3418.201511][T21200] dump_stack+0x11/0x1a [ 3418.205672][T21200] should_fail+0x23c/0x250 [ 3418.210099][T21200] ? xas_create+0x96b/0xb30 [ 3418.214681][T21200] __should_failslab+0x81/0x90 [ 3418.219441][T21200] should_failslab+0x5/0x20 [ 3418.223934][T21200] kmem_cache_alloc+0x46/0x2e0 [ 3418.228694][T21200] ? xas_create+0x96b/0xb30 [ 3418.233187][T21200] xas_create+0x96b/0xb30 00:18:29 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:29 executing program 1 (fault-call:2 fault-nth:11): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:30 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3418.237515][T21200] xas_store+0x70/0xca0 [ 3418.241667][T21200] ? selinux_file_alloc_security+0x9c/0xb0 [ 3418.247464][T21200] ? security_file_alloc+0x12e/0x190 [ 3418.252746][T21200] ? percpu_counter_add_batch+0x69/0xd0 [ 3418.258293][T21200] __xa_store+0xcb/0x320 [ 3418.262535][T21200] xa_store+0x30/0x70 [ 3418.266653][T21200] io_uring_add_tctx_node+0x111/0x200 [ 3418.272017][T21200] io_uring_create+0x17a0/0x1940 [ 3418.276950][T21200] ? vfs_write+0x50c/0x770 [ 3418.281436][T21200] __x64_sys_io_uring_setup+0xe1/0x120 00:18:30 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:30 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3418.286895][T21200] do_syscall_64+0x3d/0x90 [ 3418.291306][T21200] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3418.297208][T21200] RIP: 0033:0x4665f9 [ 3418.301088][T21200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.320685][T21200] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3418.324062][T21232] FAULT_INJECTION: forcing a failure. [ 3418.324062][T21232] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.329087][T21200] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3418.329102][T21200] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3418.329114][T21200] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3418.365814][T21200] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3418.373768][T21200] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3418.381727][T21232] CPU: 1 PID: 21232 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3418.390536][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.400665][T21232] Call Trace: [ 3418.403957][T21232] dump_stack_lvl+0xb7/0x103 [ 3418.408551][T21232] dump_stack+0x11/0x1a [ 3418.412703][T21232] should_fail+0x23c/0x250 [ 3418.417122][T21232] ? security_inode_alloc+0x30/0x180 [ 3418.422404][T21232] __should_failslab+0x81/0x90 [ 3418.427174][T21232] should_failslab+0x5/0x20 [ 3418.431673][T21232] kmem_cache_alloc+0x46/0x2e0 [ 3418.436491][T21232] security_inode_alloc+0x30/0x180 [ 3418.441685][T21232] inode_init_always+0x20b/0x420 [ 3418.446703][T21232] ? sockfs_init_fs_context+0x70/0x70 [ 3418.452149][T21232] new_inode_pseudo+0x73/0x1c0 [ 3418.456932][T21232] __sock_create+0x122/0x4e0 [ 3418.461521][T21232] ? should_fail+0xd6/0x250 [ 3418.466028][T21232] sock_create_kern+0x34/0x40 [ 3418.470704][T21232] io_uring_create+0x1653/0x1940 [ 3418.475639][T21232] ? vfs_write+0x50c/0x770 [ 3418.480044][T21232] __x64_sys_io_uring_setup+0xe1/0x120 00:18:30 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x1001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:30 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x100000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:30 executing program 0 (fault-call:1 fault-nth:21): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3418.485507][T21232] do_syscall_64+0x3d/0x90 [ 3418.489916][T21232] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3418.495812][T21232] RIP: 0033:0x4665f9 [ 3418.499782][T21232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.519457][T21232] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3418.527856][T21232] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3418.535819][T21232] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3418.539584][T21254] FAULT_INJECTION: forcing a failure. [ 3418.539584][T21254] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.543789][T21232] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3418.543804][T21232] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3418.543815][T21232] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3418.543909][T21232] socket: no more sockets [ 3418.556404][T21254] CPU: 0 PID: 21254 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3418.593313][T21254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.603391][T21254] Call Trace: [ 3418.606663][T21254] dump_stack_lvl+0xb7/0x103 [ 3418.611255][T21254] dump_stack+0x11/0x1a [ 3418.615403][T21254] should_fail+0x23c/0x250 [ 3418.619800][T21254] ? xas_create+0x96b/0xb30 [ 3418.624283][T21254] __should_failslab+0x81/0x90 [ 3418.629021][T21254] should_failslab+0x5/0x20 [ 3418.633498][T21254] kmem_cache_alloc+0x46/0x2e0 [ 3418.638238][T21254] ? xas_create+0x96b/0xb30 [ 3418.642731][T21254] xas_create+0x96b/0xb30 [ 3418.647052][T21254] xas_store+0x70/0xca0 [ 3418.651212][T21254] ? selinux_file_alloc_security+0x9c/0xb0 [ 3418.656993][T21254] ? security_file_alloc+0x12e/0x190 [ 3418.662419][T21254] ? percpu_counter_add_batch+0x69/0xd0 [ 3418.667955][T21254] __xa_store+0xcb/0x320 [ 3418.672183][T21254] xa_store+0x30/0x70 [ 3418.676161][T21254] io_uring_add_tctx_node+0x111/0x200 [ 3418.681519][T21254] io_uring_create+0x17a0/0x1940 [ 3418.686638][T21254] ? vfs_write+0x50c/0x770 [ 3418.691032][T21254] __x64_sys_io_uring_setup+0xe1/0x120 [ 3418.696571][T21254] do_syscall_64+0x3d/0x90 [ 3418.700979][T21254] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3418.706897][T21254] RIP: 0033:0x4665f9 [ 3418.710778][T21254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3418.730362][T21254] RSP: 002b:00007f48c068f108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3418.738785][T21254] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3418.746733][T21254] RDX: 0000000020ffd000 RSI: 0000000020000280 RDI: 000000000000046e [ 3418.754698][T21254] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3418.762741][T21254] R10: 0000000020000000 R11: 0000000000000202 R12: 0000000000000000 [ 3418.770697][T21254] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3418.794391][T21203] FAT-fs (loop5): bogus number of reserved sectors [ 3418.800961][T21203] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:30 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:30 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="0000075df5803402e427b8e0a6863d7ef946fe4e8bc06475ae8a0b048994b68744f03190c563d6b77bc5b7abbe7a524d96b0d7d5ee3e29a23569d1772435fc625f582f4af6b5ced33d02d803ef9db097255ba7497a0e0c14c52a5907f488db059817b3829f7962bb69c094e98df4fc22eade4de27cd20002000000eac1430ebcb606d3ffa8189322efbb8cb6171af9f28a306fb48e4653efb98458c19e8e821b833fb6da14d13a753430cfcd5fb8b08ffa52b76eea0dcbe08c12126af0dd56e45af7b51f47c05354cd4a9b19f0ea0d6c07c12c4236ac296078edfabddab3e200ff3d99"]) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xc0000018}) 00:18:30 executing program 1 (fault-call:2 fault-nth:12): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:30 executing program 0 (fault-call:1 fault-nth:22): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:30 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x42}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3418.883962][T21295] FAULT_INJECTION: forcing a failure. [ 3418.883962][T21295] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.895351][T21299] FAULT_INJECTION: forcing a failure. [ 3418.895351][T21299] name failslab, interval 1, probability 0, space 0, times 0 [ 3418.896589][T21295] CPU: 1 PID: 21295 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3418.917861][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3418.927919][T21295] Call Trace: [ 3418.931177][T21295] dump_stack_lvl+0xb7/0x103 [ 3418.935754][T21295] dump_stack+0x11/0x1a [ 3418.939902][T21295] should_fail+0x23c/0x250 [ 3418.944306][T21295] ? sk_prot_alloc+0x41/0x190 [ 3418.949051][T21295] __should_failslab+0x81/0x90 [ 3418.953796][T21295] should_failslab+0x5/0x20 [ 3418.958369][T21295] kmem_cache_alloc+0x46/0x2e0 [ 3418.963164][T21295] sk_prot_alloc+0x41/0x190 [ 3418.967650][T21295] sk_alloc+0x2e/0x220 [ 3418.971699][T21295] unix_create1+0x74/0x3c0 [ 3418.976103][T21295] unix_create+0xdc/0x100 [ 3418.980422][T21295] __sock_create+0x2c7/0x4e0 [ 3418.984996][T21295] sock_create_kern+0x34/0x40 [ 3418.989689][T21295] io_uring_create+0x1653/0x1940 [ 3418.994621][T21295] ? vfs_write+0x50c/0x770 [ 3418.999017][T21295] __x64_sys_io_uring_setup+0xe1/0x120 [ 3419.004468][T21295] do_syscall_64+0x3d/0x90 [ 3419.008908][T21295] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3419.014821][T21295] RIP: 0033:0x4665f9 [ 3419.018728][T21295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3419.038422][T21295] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3419.046854][T21295] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3419.054897][T21295] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3419.062953][T21295] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3419.070915][T21295] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3419.078874][T21295] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3419.086937][T21299] CPU: 0 PID: 21299 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3419.095693][T21299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3419.105828][T21299] Call Trace: [ 3419.109179][T21299] dump_stack_lvl+0xb7/0x103 [ 3419.113904][T21299] dump_stack+0x11/0x1a [ 3419.118051][T21299] should_fail+0x23c/0x250 [ 3419.122473][T21299] ? vm_area_dup+0x44/0x120 [ 3419.126963][T21299] __should_failslab+0x81/0x90 [ 3419.131723][T21299] should_failslab+0x5/0x20 [ 3419.136221][T21299] kmem_cache_alloc+0x46/0x2e0 [ 3419.141058][T21299] vm_area_dup+0x44/0x120 [ 3419.145414][T21299] ? kmem_cache_alloc+0x1fb/0x2e0 [ 3419.150451][T21299] ? xas_create+0x96b/0xb30 [ 3419.155048][T21299] ? xas_create+0xae3/0xb30 [ 3419.159580][T21299] __split_vma+0x82/0x320 [ 3419.163896][T21299] ? vmacache_find+0x2df/0x320 [ 3419.168669][T21299] __do_munmap+0x27c/0x1330 [ 3419.173165][T21299] ? __xas_nomem+0xfc/0x270 [ 3419.177733][T21299] mmap_region+0x5aa/0x1400 00:18:30 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x60}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:30 executing program 1 (fault-call:2 fault-nth:13): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:30 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) 00:18:30 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3419.182231][T21299] do_mmap+0x73f/0xc40 [ 3419.186381][T21299] vm_mmap_pgoff+0xf9/0x1d0 [ 3419.190873][T21299] ksys_mmap_pgoff+0x2a8/0x380 [ 3419.195635][T21299] do_syscall_64+0x3d/0x90 [ 3419.200053][T21299] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3419.205949][T21299] RIP: 0033:0x466642 [ 3419.209831][T21299] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3419.221265][T21321] FAULT_INJECTION: forcing a failure. [ 3419.221265][T21321] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.229519][T21299] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3419.229540][T21299] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3419.229552][T21299] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 [ 3419.266439][T21299] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3419.274395][T21299] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3419.282348][T21299] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3419.290326][T21321] CPU: 1 PID: 21321 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3419.299084][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3419.309409][T21321] Call Trace: [ 3419.312698][T21321] dump_stack_lvl+0xb7/0x103 [ 3419.317290][T21321] dump_stack+0x11/0x1a [ 3419.321527][T21321] should_fail+0x23c/0x250 [ 3419.325944][T21321] __should_failslab+0x81/0x90 00:18:31 executing program 0 (fault-call:1 fault-nth:23): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:31 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) 00:18:31 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x82}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3419.330724][T21321] ? selinux_sk_alloc_security+0x61/0x120 [ 3419.336552][T21321] should_failslab+0x5/0x20 [ 3419.341065][T21321] kmem_cache_alloc_trace+0x49/0x310 [ 3419.346357][T21321] ? should_fail+0xd6/0x250 [ 3419.350870][T21321] selinux_sk_alloc_security+0x61/0x120 [ 3419.356417][T21321] security_sk_alloc+0x45/0x90 [ 3419.361175][T21321] sk_prot_alloc+0xd2/0x190 [ 3419.365711][T21321] sk_alloc+0x2e/0x220 [ 3419.369814][T21321] unix_create1+0x74/0x3c0 [ 3419.374233][T21321] unix_create+0xdc/0x100 [ 3419.378557][T21321] __sock_create+0x2c7/0x4e0 00:18:31 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3419.383158][T21321] sock_create_kern+0x34/0x40 [ 3419.387836][T21321] io_uring_create+0x1653/0x1940 [ 3419.392811][T21321] ? vfs_write+0x50c/0x770 [ 3419.397227][T21321] __x64_sys_io_uring_setup+0xe1/0x120 [ 3419.402681][T21321] do_syscall_64+0x3d/0x90 [ 3419.403402][T21330] FAULT_INJECTION: forcing a failure. [ 3419.403402][T21330] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.407147][T21321] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3419.407174][T21321] RIP: 0033:0x4665f9 [ 3419.407186][T21321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3419.449172][T21321] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3419.457565][T21321] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3419.465517][T21321] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3419.473482][T21321] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3419.481433][T21321] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3419.489384][T21321] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3419.497436][T21330] CPU: 0 PID: 21330 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3419.506194][T21330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3419.516298][T21330] Call Trace: [ 3419.519579][T21330] dump_stack_lvl+0xb7/0x103 [ 3419.524297][T21330] dump_stack+0x11/0x1a [ 3419.528441][T21330] should_fail+0x23c/0x250 [ 3419.532858][T21330] ? vm_area_dup+0x44/0x120 [ 3419.537347][T21330] __should_failslab+0x81/0x90 [ 3419.542102][T21330] should_failslab+0x5/0x20 [ 3419.546615][T21330] kmem_cache_alloc+0x46/0x2e0 [ 3419.551469][T21330] vm_area_dup+0x44/0x120 [ 3419.555795][T21330] __split_vma+0x82/0x320 [ 3419.560193][T21330] ? vmacache_find+0x2df/0x320 [ 3419.564989][T21330] __do_munmap+0x2ee/0x1330 [ 3419.569487][T21330] ? __xas_nomem+0xfc/0x270 [ 3419.573981][T21330] mmap_region+0x5aa/0x1400 [ 3419.578477][T21330] do_mmap+0x73f/0xc40 [ 3419.582550][T21330] vm_mmap_pgoff+0xf9/0x1d0 [ 3419.587106][T21330] ksys_mmap_pgoff+0x2a8/0x380 [ 3419.591876][T21330] do_syscall_64+0x3d/0x90 [ 3419.596294][T21330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3419.602223][T21330] RIP: 0033:0x466642 [ 3419.606105][T21330] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3419.626249][T21330] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:18:31 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r1 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x10, r0, 0x8000000) 00:18:31 executing program 1 (fault-call:2 fault-nth:14): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:31 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x7}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:31 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x110}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:31 executing program 0 (fault-call:1 fault-nth:24): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3419.634642][T21330] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3419.642600][T21330] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 [ 3419.650547][T21330] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3419.658493][T21330] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3419.666438][T21330] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3419.733002][T21355] FAULT_INJECTION: forcing a failure. [ 3419.733002][T21355] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.743733][T21358] FAULT_INJECTION: forcing a failure. [ 3419.743733][T21358] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.745732][T21355] CPU: 0 PID: 21355 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3419.767487][T21355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3419.777522][T21355] Call Trace: [ 3419.780783][T21355] dump_stack_lvl+0xb7/0x103 [ 3419.785358][T21355] dump_stack+0x11/0x1a [ 3419.789493][T21355] should_fail+0x23c/0x250 [ 3419.793894][T21355] ? __d_alloc+0x36/0x370 [ 3419.798208][T21355] __should_failslab+0x81/0x90 [ 3419.802957][T21355] should_failslab+0x5/0x20 [ 3419.807443][T21355] kmem_cache_alloc+0x46/0x2e0 [ 3419.812191][T21355] __d_alloc+0x36/0x370 [ 3419.816396][T21355] d_alloc_pseudo+0x1a/0x50 [ 3419.820889][T21355] alloc_file_pseudo+0x63/0x130 [ 3419.825725][T21355] anon_inode_getfile+0x9f/0x120 [ 3419.830647][T21355] io_uring_create+0x16a8/0x1940 [ 3419.835569][T21355] ? vfs_write+0x50c/0x770 [ 3419.839978][T21355] __x64_sys_io_uring_setup+0xe1/0x120 [ 3419.845440][T21355] do_syscall_64+0x3d/0x90 [ 3419.849852][T21355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3419.855729][T21355] RIP: 0033:0x4665f9 [ 3419.859611][T21355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3419.879299][T21355] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3419.887689][T21355] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3419.895642][T21355] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3419.905944][T21355] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3419.913896][T21355] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3419.921877][T21355] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:31 executing program 2: syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x80000320) syz_io_uring_setup(0x6a24, &(0x7f0000000080)={0x0, 0x1bc7, 0x5, 0x0, 0x162}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000a, 0x110, r2, 0x8000000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r3, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@can, 0x0, 0x80000}, 0x21) [ 3419.929836][T21358] CPU: 1 PID: 21358 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3419.938648][T21358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3419.948700][T21358] Call Trace: [ 3419.951972][T21358] dump_stack_lvl+0xb7/0x103 [ 3419.956559][T21358] dump_stack+0x11/0x1a [ 3419.960710][T21358] should_fail+0x23c/0x250 [ 3419.965183][T21358] ? vm_area_dup+0x44/0x120 [ 3419.969709][T21358] __should_failslab+0x81/0x90 [ 3419.974473][T21358] should_failslab+0x5/0x20 [ 3419.978974][T21358] kmem_cache_alloc+0x46/0x2e0 00:18:31 executing program 1 (fault-call:2 fault-nth:15): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3419.983744][T21358] vm_area_dup+0x44/0x120 [ 3419.988064][T21358] __split_vma+0x82/0x320 [ 3419.992388][T21358] ? vmacache_find+0x2df/0x320 [ 3419.997146][T21358] __do_munmap+0x2ee/0x1330 [ 3420.001755][T21358] ? __xas_nomem+0xfc/0x270 [ 3420.006252][T21358] mmap_region+0x5aa/0x1400 [ 3420.010748][T21358] do_mmap+0x73f/0xc40 [ 3420.014814][T21358] vm_mmap_pgoff+0xf9/0x1d0 [ 3420.019391][T21358] ksys_mmap_pgoff+0x2a8/0x380 [ 3420.024147][T21358] do_syscall_64+0x3d/0x90 [ 3420.028572][T21358] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:18:31 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x160}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:31 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.034467][T21358] RIP: 0033:0x466642 [ 3420.038350][T21358] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3420.058042][T21358] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3420.066558][T21358] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3420.074695][T21358] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 00:18:31 executing program 2: syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) [ 3420.082658][T21358] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3420.090620][T21358] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3420.098584][T21358] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3420.112748][T21363] FAT-fs (loop5): bogus number of reserved sectors [ 3420.117881][T21373] FAULT_INJECTION: forcing a failure. [ 3420.117881][T21373] name failslab, interval 1, probability 0, space 0, times 0 00:18:31 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x204}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.119343][T21363] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3420.131908][T21373] CPU: 1 PID: 21373 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3420.131930][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.157254][T21373] Call Trace: [ 3420.160526][T21373] dump_stack_lvl+0xb7/0x103 [ 3420.165108][T21373] dump_stack+0x11/0x1a [ 3420.169265][T21373] should_fail+0x23c/0x250 [ 3420.173687][T21373] ? __alloc_file+0x2e/0x1a0 [ 3420.178276][T21373] __should_failslab+0x81/0x90 00:18:31 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x10}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:31 executing program 0 (fault-call:1 fault-nth:25): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3420.183038][T21373] should_failslab+0x5/0x20 [ 3420.187624][T21373] kmem_cache_alloc+0x46/0x2e0 [ 3420.192448][T21373] __alloc_file+0x2e/0x1a0 [ 3420.196859][T21373] alloc_empty_file+0xcd/0x1c0 [ 3420.201623][T21373] alloc_file+0x3a/0x280 [ 3420.205863][T21373] alloc_file_pseudo+0xe2/0x130 [ 3420.210713][T21373] anon_inode_getfile+0x9f/0x120 [ 3420.215676][T21373] io_uring_create+0x16a8/0x1940 [ 3420.220666][T21373] ? vfs_write+0x50c/0x770 [ 3420.225074][T21373] __x64_sys_io_uring_setup+0xe1/0x120 [ 3420.230548][T21373] do_syscall_64+0x3d/0x90 00:18:32 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x29e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.234967][T21373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3420.240859][T21373] RIP: 0033:0x4665f9 [ 3420.244741][T21373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3420.264365][T21373] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3420.272772][T21373] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:32 executing program 2: syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) r0 = io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) 00:18:32 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.280737][T21373] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3420.288802][T21373] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3420.296873][T21373] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3420.304838][T21373] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3420.318195][T21402] FAULT_INJECTION: forcing a failure. [ 3420.318195][T21402] name failslab, interval 1, probability 0, space 0, times 0 00:18:32 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.330804][T21402] CPU: 1 PID: 21402 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3420.339568][T21402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.349614][T21402] Call Trace: [ 3420.352886][T21402] dump_stack_lvl+0xb7/0x103 [ 3420.357476][T21402] dump_stack+0x11/0x1a [ 3420.361731][T21402] should_fail+0x23c/0x250 [ 3420.366149][T21402] ? anon_vma_clone+0x8d/0x380 [ 3420.370927][T21402] __should_failslab+0x81/0x90 [ 3420.375683][T21402] should_failslab+0x5/0x20 [ 3420.380183][T21402] kmem_cache_alloc+0x46/0x2e0 [ 3420.384996][T21402] anon_vma_clone+0x8d/0x380 [ 3420.389651][T21402] __split_vma+0x134/0x320 [ 3420.394119][T21402] ? vmacache_find+0x2df/0x320 [ 3420.398881][T21402] __do_munmap+0x2ee/0x1330 [ 3420.403375][T21402] ? __xas_nomem+0xfc/0x270 [ 3420.407912][T21402] mmap_region+0x5aa/0x1400 [ 3420.412426][T21402] do_mmap+0x73f/0xc40 [ 3420.416563][T21402] vm_mmap_pgoff+0xf9/0x1d0 [ 3420.421062][T21402] ksys_mmap_pgoff+0x2a8/0x380 [ 3420.425828][T21402] do_syscall_64+0x3d/0x90 [ 3420.430316][T21402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3420.436249][T21402] RIP: 0033:0x466642 [ 3420.440130][T21402] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3420.460355][T21402] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3420.468755][T21402] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3420.476795][T21402] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 [ 3420.484858][T21402] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3420.492808][T21402] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3420.500753][T21402] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3420.531161][T21363] FAT-fs (loop5): bogus number of reserved sectors [ 3420.537701][T21363] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0xa02048, &(0x7f0000000080)={[{@dots}]}) 00:18:32 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x21}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 1 (fault-call:2 fault-nth:16): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:32 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2ee}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 0 (fault-call:1 fault-nth:26): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:32 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3420.616783][T21434] FAULT_INJECTION: forcing a failure. [ 3420.616783][T21434] name failslab, interval 1, probability 0, space 0, times 0 [ 3420.629424][T21434] CPU: 1 PID: 21434 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3420.638187][T21434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.648317][T21434] Call Trace: [ 3420.651629][T21434] dump_stack_lvl+0xb7/0x103 [ 3420.656351][T21434] dump_stack+0x11/0x1a [ 3420.660561][T21434] should_fail+0x23c/0x250 [ 3420.665268][T21434] ? security_file_alloc+0x30/0x190 [ 3420.670465][T21434] __should_failslab+0x81/0x90 [ 3420.670853][T21440] FAULT_INJECTION: forcing a failure. [ 3420.670853][T21440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3420.675231][T21434] should_failslab+0x5/0x20 [ 3420.675252][T21434] kmem_cache_alloc+0x46/0x2e0 [ 3420.675275][T21434] security_file_alloc+0x30/0x190 [ 3420.675296][T21434] __alloc_file+0x83/0x1a0 [ 3420.707148][T21434] alloc_empty_file+0xcd/0x1c0 [ 3420.711928][T21434] alloc_file+0x3a/0x280 [ 3420.716155][T21434] alloc_file_pseudo+0xe2/0x130 [ 3420.720989][T21434] anon_inode_getfile+0x9f/0x120 [ 3420.725910][T21434] io_uring_create+0x16a8/0x1940 [ 3420.730830][T21434] ? vfs_write+0x50c/0x770 [ 3420.735235][T21434] __x64_sys_io_uring_setup+0xe1/0x120 [ 3420.740676][T21434] do_syscall_64+0x3d/0x90 [ 3420.745154][T21434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3420.751044][T21434] RIP: 0033:0x4665f9 [ 3420.754915][T21434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3420.774501][T21434] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3420.782895][T21434] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3420.790847][T21434] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3420.798801][T21434] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3420.806750][T21434] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3420.814763][T21434] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3420.822723][T21440] CPU: 0 PID: 21440 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3420.831492][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3420.841547][T21440] Call Trace: [ 3420.844834][T21440] dump_stack_lvl+0xb7/0x103 [ 3420.849508][T21440] dump_stack+0x11/0x1a [ 3420.853660][T21440] should_fail+0x23c/0x250 [ 3420.858075][T21440] __alloc_pages+0x102/0x320 [ 3420.862680][T21440] alloc_pages+0x2e8/0x340 [ 3420.867093][T21440] pte_alloc_one+0x29/0xb0 [ 3420.871504][T21440] __pte_alloc+0x2f/0x210 [ 3420.875834][T21440] remap_pfn_range_notrack+0x5b7/0x770 [ 3420.881287][T21440] remap_pfn_range+0x87/0xe0 [ 3420.885869][T21440] io_uring_mmap+0x232/0x260 [ 3420.890453][T21440] mmap_region+0xbcb/0x1400 [ 3420.894947][T21440] do_mmap+0x73f/0xc40 [ 3420.899013][T21440] vm_mmap_pgoff+0xf9/0x1d0 [ 3420.903513][T21440] ksys_mmap_pgoff+0x2a8/0x380 [ 3420.908344][T21440] do_syscall_64+0x3d/0x90 00:18:32 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x402}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 1 (fault-call:2 fault-nth:17): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:32 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x42}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) [ 3420.912759][T21440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3420.918656][T21440] RIP: 0033:0x466642 [ 3420.922607][T21440] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3420.942202][T21440] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3420.950625][T21440] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3420.958652][T21440] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 [ 3420.966261][T21462] FAULT_INJECTION: forcing a failure. [ 3420.966261][T21462] name failslab, interval 1, probability 0, space 0, times 0 [ 3420.966610][T21440] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3420.987113][T21440] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3420.995140][T21440] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3421.003109][T21462] CPU: 1 PID: 21462 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3421.011955][T21462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.022000][T21462] Call Trace: [ 3421.025271][T21462] dump_stack_lvl+0xb7/0x103 [ 3421.029855][T21462] dump_stack+0x11/0x1a [ 3421.034006][T21462] should_fail+0x23c/0x250 [ 3421.038427][T21462] __should_failslab+0x81/0x90 [ 3421.043182][T21462] ? io_uring_add_tctx_node+0xdc/0x200 [ 3421.048676][T21462] should_failslab+0x5/0x20 [ 3421.053296][T21462] kmem_cache_alloc_trace+0x49/0x310 [ 3421.058583][T21462] ? xa_load+0x249/0x260 [ 3421.062818][T21462] io_uring_add_tctx_node+0xdc/0x200 [ 3421.068226][T21462] io_uring_create+0x17a0/0x1940 [ 3421.073242][T21462] ? vfs_write+0x50c/0x770 [ 3421.077704][T21462] __x64_sys_io_uring_setup+0xe1/0x120 [ 3421.083226][T21462] do_syscall_64+0x3d/0x90 [ 3421.087634][T21462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3421.093533][T21462] RIP: 0033:0x4665f9 [ 3421.097423][T21462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3421.117107][T21462] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3421.125512][T21462] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3421.133615][T21462] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3421.141625][T21462] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3421.149676][T21462] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3421.157626][T21462] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r0, 0x0, &(0x7f00000007c0), 0x100800) 00:18:32 executing program 0 (fault-call:1 fault-nth:27): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:32 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:32 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x60}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x406}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:32 executing program 1 (fault-call:2 fault-nth:18): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3421.234314][T21493] FAULT_INJECTION: forcing a failure. [ 3421.234314][T21493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3421.236428][T21495] FAT-fs (loop5): bogus number of reserved sectors [ 3421.247559][T21493] CPU: 1 PID: 21493 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3421.254060][T21495] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3421.262799][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.262811][T21493] Call Trace: 00:18:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:33 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x604}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3421.262817][T21493] dump_stack_lvl+0xb7/0x103 [ 3421.287266][T21493] dump_stack+0x11/0x1a [ 3421.291474][T21493] should_fail+0x23c/0x250 [ 3421.296156][T21493] __alloc_pages+0x102/0x320 [ 3421.300751][T21493] alloc_pages+0x2e8/0x340 [ 3421.305160][T21493] pte_alloc_one+0x29/0xb0 [ 3421.309569][T21493] __pte_alloc+0x2f/0x210 [ 3421.313962][T21493] remap_pfn_range_notrack+0x5b7/0x770 [ 3421.319416][T21493] remap_pfn_range+0x87/0xe0 [ 3421.324008][T21493] io_uring_mmap+0x232/0x260 [ 3421.328597][T21493] mmap_region+0xbcb/0x1400 00:18:33 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x700}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3421.333130][T21493] do_mmap+0x73f/0xc40 [ 3421.337218][T21493] vm_mmap_pgoff+0xf9/0x1d0 [ 3421.341772][T21493] ksys_mmap_pgoff+0x2a8/0x380 [ 3421.346596][T21493] do_syscall_64+0x3d/0x90 [ 3421.351054][T21493] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3421.357007][T21493] RIP: 0033:0x466642 [ 3421.360887][T21493] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3421.363422][T21497] FAULT_INJECTION: forcing a failure. [ 3421.363422][T21497] name failslab, interval 1, probability 0, space 0, times 0 [ 3421.380483][T21493] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3421.380504][T21493] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3421.380516][T21493] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020c56000 [ 3421.417362][T21493] RBP: 0000000020c56000 R08: 0000000000000005 R09: 0000000000000000 [ 3421.425349][T21493] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3421.433303][T21493] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3421.441373][T21497] CPU: 0 PID: 21497 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3421.450129][T21497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.460216][T21497] Call Trace: [ 3421.463561][T21497] dump_stack_lvl+0xb7/0x103 [ 3421.468147][T21497] dump_stack+0x11/0x1a [ 3421.472350][T21497] should_fail+0x23c/0x250 [ 3421.476872][T21497] ? xas_create+0x96b/0xb30 [ 3421.481372][T21497] __should_failslab+0x81/0x90 [ 3421.486135][T21497] should_failslab+0x5/0x20 [ 3421.490630][T21497] kmem_cache_alloc+0x46/0x2e0 [ 3421.495454][T21497] ? should_fail+0xd6/0x250 [ 3421.499958][T21497] xas_create+0x96b/0xb30 [ 3421.504299][T21497] xas_store+0x70/0xca0 [ 3421.508449][T21497] ? selinux_file_alloc_security+0x9c/0xb0 [ 3421.514271][T21497] ? security_file_alloc+0x12e/0x190 [ 3421.519556][T21497] ? percpu_counter_add_batch+0x69/0xd0 [ 3421.525102][T21497] __xa_store+0xcb/0x320 [ 3421.529339][T21497] xa_store+0x30/0x70 00:18:33 executing program 0 (fault-call:1 fault-nth:28): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:33 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3421.533311][T21497] io_uring_add_tctx_node+0x111/0x200 [ 3421.538677][T21497] io_uring_create+0x17a0/0x1940 [ 3421.543607][T21497] ? vfs_write+0x50c/0x770 [ 3421.548019][T21497] __x64_sys_io_uring_setup+0xe1/0x120 [ 3421.553496][T21497] do_syscall_64+0x3d/0x90 [ 3421.557914][T21497] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3421.560862][T21522] FAULT_INJECTION: forcing a failure. [ 3421.560862][T21522] name failslab, interval 1, probability 0, space 0, times 0 [ 3421.563810][T21497] RIP: 0033:0x4665f9 [ 3421.563826][T21497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3421.563842][T21497] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3421.608301][T21497] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3421.616255][T21497] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3421.624207][T21497] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3421.632161][T21497] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3421.640115][T21497] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3421.648073][T21522] CPU: 1 PID: 21522 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3421.656830][T21522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.666883][T21522] Call Trace: [ 3421.667320][T21495] FAT-fs (loop5): bogus number of reserved sectors [ 3421.670156][T21522] dump_stack_lvl+0xb7/0x103 [ 3421.670179][T21522] dump_stack+0x11/0x1a [ 3421.676678][T21495] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3421.681215][T21522] should_fail+0x23c/0x250 [ 3421.696301][T21522] ? vm_area_alloc+0x28/0xa0 [ 3421.700894][T21522] __should_failslab+0x81/0x90 [ 3421.705677][T21522] should_failslab+0x5/0x20 [ 3421.710177][T21522] kmem_cache_alloc+0x46/0x2e0 [ 3421.714947][T21522] vm_area_alloc+0x28/0xa0 [ 3421.719356][T21522] mmap_region+0x741/0x1400 [ 3421.723858][T21522] do_mmap+0x73f/0xc40 [ 3421.727905][T21522] vm_mmap_pgoff+0xf9/0x1d0 [ 3421.732474][T21522] ksys_mmap_pgoff+0x2a8/0x380 [ 3421.737221][T21522] do_syscall_64+0x3d/0x90 [ 3421.741630][T21522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3421.747510][T21522] RIP: 0033:0x466642 [ 3421.751522][T21522] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3421.771183][T21522] RSP: 002b:00007f48c068f0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3421.779586][T21522] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3421.787536][T21522] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ffd000 [ 3421.795499][T21522] RBP: 0000000020ffd000 R08: 0000000000000005 R09: 0000000010000000 [ 3421.803446][T21522] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3421.811406][T21522] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:33 executing program 5: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000180)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, 'gid'}}]}) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x31, 0x3f, 0x9, 0x80, @time={0x0, 0x8}, {0x0, 0x2}, {0x5, 0x2}, @addr={0xf7, 0x1}}, {0x4c, 0x86, 0x7, 0x1, @tick=0x7, {0x40, 0x7f}, {0x7, 0x6}, @quote={{0x3, 0x3}}}], 0x38) 00:18:33 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x82}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:33 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:33 executing program 1 (fault-call:2 fault-nth:19): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:33 executing program 2: syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:33 executing program 0 (fault-call:1 fault-nth:29): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3421.895804][T21540] FAULT_INJECTION: forcing a failure. [ 3421.895804][T21540] name failslab, interval 1, probability 0, space 0, times 0 [ 3421.899298][T21543] FAULT_INJECTION: forcing a failure. [ 3421.899298][T21543] name failslab, interval 1, probability 0, space 0, times 0 [ 3421.908549][T21540] CPU: 0 PID: 21540 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3421.929797][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3421.939849][T21540] Call Trace: [ 3421.943151][T21540] dump_stack_lvl+0xb7/0x103 [ 3421.947761][T21540] dump_stack+0x11/0x1a [ 3421.951897][T21540] should_fail+0x23c/0x250 [ 3421.956319][T21540] ? xas_create+0x96b/0xb30 [ 3421.960814][T21540] __should_failslab+0x81/0x90 [ 3421.965663][T21540] should_failslab+0x5/0x20 [ 3421.970173][T21540] kmem_cache_alloc+0x46/0x2e0 [ 3421.974947][T21540] ? xas_create+0x96b/0xb30 [ 3421.979494][T21540] xas_create+0x96b/0xb30 [ 3421.983858][T21540] xas_store+0x70/0xca0 [ 3421.988010][T21540] ? selinux_file_alloc_security+0x9c/0xb0 [ 3421.993800][T21540] ? security_file_alloc+0x12e/0x190 [ 3421.999163][T21540] ? percpu_counter_add_batch+0x69/0xd0 [ 3422.004695][T21540] __xa_store+0xcb/0x320 [ 3422.008950][T21540] xa_store+0x30/0x70 [ 3422.012917][T21540] io_uring_add_tctx_node+0x111/0x200 [ 3422.018273][T21540] io_uring_create+0x17a0/0x1940 [ 3422.023195][T21540] ? vfs_write+0x50c/0x770 [ 3422.027620][T21540] __x64_sys_io_uring_setup+0xe1/0x120 [ 3422.033133][T21540] do_syscall_64+0x3d/0x90 [ 3422.037551][T21540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3422.043452][T21540] RIP: 0033:0x4665f9 [ 3422.047327][T21540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3422.066929][T21540] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3422.075396][T21540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3422.083428][T21540] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3422.091383][T21540] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3422.099441][T21540] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3422.107462][T21540] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3422.115421][T21543] CPU: 1 PID: 21543 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3422.124330][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.134479][T21543] Call Trace: [ 3422.137806][T21543] dump_stack_lvl+0xb7/0x103 [ 3422.142394][T21543] dump_stack+0x11/0x1a 00:18:33 executing program 2: syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:33 executing program 1 (fault-call:2 fault-nth:20): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3422.146632][T21543] should_fail+0x23c/0x250 [ 3422.151131][T21543] ? __sigqueue_alloc+0x13a/0x270 [ 3422.156161][T21543] __should_failslab+0x81/0x90 [ 3422.160967][T21543] should_failslab+0x5/0x20 [ 3422.165462][T21543] kmem_cache_alloc+0x46/0x2e0 [ 3422.170233][T21543] ? inc_rlimit_ucounts+0xcf/0xf0 [ 3422.175350][T21543] __sigqueue_alloc+0x13a/0x270 [ 3422.180272][T21543] __send_signal+0x178/0x760 [ 3422.184864][T21543] send_signal+0x281/0x390 [ 3422.189275][T21543] force_sig_info_to_task+0x2ad/0x2e0 [ 3422.194649][T21543] force_sig_fault+0x62/0x90 [ 3422.199234][T21543] __bad_area_nosemaphore+0x250/0x2f0 [ 3422.204597][T21543] exc_page_fault+0x91/0x220 [ 3422.209193][T21543] ? asm_exc_page_fault+0x8/0x30 [ 3422.214242][T21543] asm_exc_page_fault+0x1e/0x30 [ 3422.219200][T21543] RIP: 0033:0x403f1e [ 3422.223085][T21543] Code: c9 e8 26 27 06 00 8b 75 00 41 89 d8 4c 89 ef 49 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 e8 02 27 06 00 <49> 89 04 24 48 83 c4 38 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 [ 3422.223264][T21557] FAULT_INJECTION: forcing a failure. [ 3422.223264][T21557] name failslab, interval 1, probability 0, space 0, times 0 [ 3422.242765][T21543] RSP: 002b:00007f48c068f110 EFLAGS: 00010207 [ 3422.242783][T21543] RAX: 0000000020ffd000 RBX: 0000000000000005 RCX: 0000000000466642 [ 3422.269344][T21543] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ffd000 [ 3422.277374][T21543] RBP: 0000000020000280 R08: 0000000000000005 R09: 0000000010000000 [ 3422.285332][T21543] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3422.293359][T21543] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3422.301324][T21557] CPU: 0 PID: 21557 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3422.310083][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.320217][T21557] Call Trace: [ 3422.323526][T21557] dump_stack_lvl+0xb7/0x103 [ 3422.328303][T21557] dump_stack+0x11/0x1a [ 3422.332533][T21557] should_fail+0x23c/0x250 [ 3422.337015][T21557] ? xas_create+0x96b/0xb30 [ 3422.341566][T21557] __should_failslab+0x81/0x90 [ 3422.346468][T21557] should_failslab+0x5/0x20 [ 3422.350970][T21557] kmem_cache_alloc+0x46/0x2e0 [ 3422.355813][T21557] ? xas_create+0x96b/0xb30 [ 3422.360356][T21557] xas_create+0x96b/0xb30 [ 3422.364721][T21557] xas_store+0x70/0xca0 [ 3422.368880][T21557] ? selinux_file_alloc_security+0x9c/0xb0 [ 3422.374749][T21557] ? security_file_alloc+0x12e/0x190 [ 3422.377766][T21566] FAULT_INJECTION: forcing a failure. [ 3422.377766][T21566] name failslab, interval 1, probability 0, space 0, times 0 [ 3422.380064][T21557] ? percpu_counter_add_batch+0x69/0xd0 [ 3422.398490][T21557] __xa_store+0xcb/0x320 [ 3422.402853][T21557] xa_store+0x30/0x70 [ 3422.406843][T21557] io_uring_add_tctx_node+0x111/0x200 [ 3422.412239][T21557] io_uring_create+0x17a0/0x1940 [ 3422.417164][T21557] ? vfs_write+0x50c/0x770 [ 3422.421567][T21557] __x64_sys_io_uring_setup+0xe1/0x120 [ 3422.427112][T21557] do_syscall_64+0x3d/0x90 [ 3422.431522][T21557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3422.437405][T21557] RIP: 0033:0x4665f9 [ 3422.441283][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3422.460873][T21557] RSP: 002b:00007f7a6cacf108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3422.469269][T21557] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3422.477224][T21557] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3422.485174][T21557] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 00:18:34 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xa8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 2: syz_io_uring_setup(0xdec, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:34 executing program 0 (fault-call:1 fault-nth:30): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3422.493140][T21557] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3422.501092][T21557] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3422.509062][T21566] CPU: 1 PID: 21566 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3422.517817][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.527859][T21566] Call Trace: [ 3422.531220][T21566] dump_stack_lvl+0xb7/0x103 [ 3422.535806][T21566] dump_stack+0x11/0x1a [ 3422.539954][T21566] should_fail+0x23c/0x250 [ 3422.544369][T21566] ? __sigqueue_alloc+0x13a/0x270 [ 3422.549389][T21566] __should_failslab+0x81/0x90 [ 3422.554164][T21566] should_failslab+0x5/0x20 [ 3422.558668][T21566] kmem_cache_alloc+0x46/0x2e0 [ 3422.563472][T21566] ? inc_rlimit_ucounts+0xcf/0xf0 [ 3422.568496][T21566] __sigqueue_alloc+0x13a/0x270 [ 3422.573342][T21566] __send_signal+0x178/0x760 [ 3422.577940][T21566] send_signal+0x281/0x390 [ 3422.582357][T21566] force_sig_info_to_task+0x2ad/0x2e0 [ 3422.587708][T21566] force_sig_fault+0x62/0x90 [ 3422.592372][T21566] __bad_area_nosemaphore+0x250/0x2f0 [ 3422.597719][T21566] exc_page_fault+0x91/0x220 [ 3422.602288][T21566] ? asm_exc_page_fault+0x8/0x30 [ 3422.607202][T21566] asm_exc_page_fault+0x1e/0x30 [ 3422.612034][T21566] RIP: 0033:0x403f1e [ 3422.615918][T21566] Code: c9 e8 26 27 06 00 8b 75 00 41 89 d8 4c 89 ef 49 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 e8 02 27 06 00 <49> 89 04 24 48 83 c4 38 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 [ 3422.635509][T21566] RSP: 002b:00007f48c068f110 EFLAGS: 00010207 [ 3422.641628][T21566] RAX: 0000000020ffd000 RBX: 0000000000000005 RCX: 0000000000466642 [ 3422.649621][T21566] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ffd000 [ 3422.657567][T21566] RBP: 0000000020000280 R08: 0000000000000005 R09: 0000000010000000 [ 3422.665513][T21566] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3422.673602][T21566] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 00:18:34 executing program 5: epoll_create(0x1000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:34 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:18:34 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xaa}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 1 (fault-call:2 fault-nth:21): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:34 executing program 0 (fault-call:1 fault-nth:31): syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3422.767514][T21601] FAULT_INJECTION: forcing a failure. [ 3422.767514][T21601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3422.769804][T21605] FAT-fs (loop5): bogus number of reserved sectors [ 3422.780573][T21601] CPU: 0 PID: 21601 Comm: syz-executor.0 Not tainted 5.14.0-rc7-syzkaller #0 [ 3422.780594][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.787090][T21605] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3422.795806][T21601] Call Trace: [ 3422.795814][T21601] dump_stack_lvl+0xb7/0x103 [ 3422.795838][T21601] dump_stack+0x11/0x1a [ 3422.795854][T21601] should_fail+0x23c/0x250 [ 3422.813973][T21608] FAULT_INJECTION: forcing a failure. [ 3422.813973][T21608] name failslab, interval 1, probability 0, space 0, times 0 [ 3422.815720][T21601] should_fail_usercopy+0x16/0x20 [ 3422.846448][T21601] copy_fpstate_to_sigframe+0x372/0x570 [ 3422.851984][T21601] __setup_rt_frame+0x11a/0x3e0 [ 3422.856954][T21601] arch_do_signal_or_restart+0x198/0x220 [ 3422.862582][T21601] exit_to_user_mode_prepare+0x109/0x190 [ 3422.868201][T21601] ? asm_exc_page_fault+0x8/0x30 [ 3422.873124][T21601] irqentry_exit_to_user_mode+0x5/0x10 [ 3422.878569][T21601] irqentry_exit+0xe/0x30 [ 3422.882925][T21601] asm_exc_page_fault+0x1e/0x30 [ 3422.887771][T21601] RIP: 0033:0x403f1e [ 3422.891657][T21601] Code: c9 e8 26 27 06 00 8b 75 00 41 89 d8 4c 89 ef 49 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 e8 02 27 06 00 <49> 89 04 24 48 83 c4 38 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 [ 3422.911246][T21601] RSP: 002b:00007f48c068f110 EFLAGS: 00010207 [ 3422.917402][T21601] RAX: 0000000020ffd000 RBX: 0000000000000005 RCX: 0000000000466642 [ 3422.925369][T21601] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ffd000 [ 3422.933320][T21601] RBP: 0000000020000280 R08: 0000000000000005 R09: 0000000010000000 [ 3422.941273][T21601] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3422.949295][T21601] R13: 0000000020ffd000 R14: 0000000020000000 R15: 0000000020c56000 [ 3422.957253][T21608] CPU: 1 PID: 21608 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3422.966010][T21608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3422.976219][T21608] Call Trace: [ 3422.979481][T21608] dump_stack_lvl+0xb7/0x103 [ 3422.984056][T21608] dump_stack+0x11/0x1a [ 3422.988194][T21608] should_fail+0x23c/0x250 [ 3422.992596][T21608] __should_failslab+0x81/0x90 [ 3422.997369][T21608] ? io_uring_add_tctx_node+0xdc/0x200 [ 3423.002812][T21608] should_failslab+0x5/0x20 [ 3423.007297][T21608] kmem_cache_alloc_trace+0x49/0x310 [ 3423.012575][T21608] ? xa_load+0x249/0x260 [ 3423.017010][T21608] io_uring_add_tctx_node+0xdc/0x200 [ 3423.022279][T21608] io_uring_create+0x17a0/0x1940 [ 3423.027231][T21608] ? vfs_write+0x50c/0x770 [ 3423.031632][T21608] __x64_sys_io_uring_setup+0xe1/0x120 [ 3423.037354][T21608] do_syscall_64+0x3d/0x90 [ 3423.041755][T21608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3423.047713][T21608] RIP: 0033:0x4665f9 [ 3423.051585][T21608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3423.071252][T21608] RSP: 002b:00007f7a6caae108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3423.079645][T21608] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9 [ 3423.087596][T21608] RDX: 0000000020ff9000 RSI: 0000000020000280 RDI: 000000000000046c [ 3423.095548][T21608] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000000000000 [ 3423.103513][T21608] R10: 0000000020000180 R11: 0000000000000202 R12: 0000000000000000 [ 3423.111471][T21608] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:34 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:18:34 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2400}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x0, &(0x7f0000000240)) 00:18:34 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x204}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:34 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x354}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:35 executing program 1 (fault-call:2 fault-nth:22): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:35 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x356}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT, 0x7) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x80000000) [ 3423.283249][T21640] FAULT_INJECTION: forcing a failure. [ 3423.283249][T21640] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.295999][T21640] CPU: 0 PID: 21640 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3423.304796][T21640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3423.314926][T21640] Call Trace: [ 3423.318214][T21640] dump_stack_lvl+0xb7/0x103 [ 3423.322815][T21640] dump_stack+0x11/0x1a [ 3423.326963][T21640] should_fail+0x23c/0x250 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x6000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x6001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3423.331412][T21640] ? vm_area_dup+0x44/0x120 [ 3423.335908][T21640] __should_failslab+0x81/0x90 [ 3423.340690][T21640] should_failslab+0x5/0x20 [ 3423.345188][T21640] kmem_cache_alloc+0x46/0x2e0 [ 3423.349952][T21640] vm_area_dup+0x44/0x120 [ 3423.354309][T21640] ? kmem_cache_alloc+0x1fb/0x2e0 [ 3423.359358][T21640] ? xas_create+0x96b/0xb30 [ 3423.363945][T21640] ? xas_create+0xae3/0xb30 [ 3423.368449][T21640] __split_vma+0x82/0x320 [ 3423.372816][T21640] ? vmacache_find+0x2df/0x320 [ 3423.377577][T21640] __do_munmap+0x27c/0x1330 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3423.382079][T21640] ? __xas_nomem+0xfc/0x270 [ 3423.386601][T21640] mmap_region+0x5aa/0x1400 [ 3423.391182][T21640] do_mmap+0x73f/0xc40 [ 3423.395249][T21640] vm_mmap_pgoff+0xf9/0x1d0 [ 3423.399771][T21640] ksys_mmap_pgoff+0x2a8/0x380 [ 3423.404613][T21640] do_syscall_64+0x3d/0x90 [ 3423.409057][T21640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3423.414946][T21640] RIP: 0033:0x466642 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3423.418831][T21640] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3423.438424][T21640] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3423.446839][T21640] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3423.454879][T21640] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020fff000 [ 3423.462847][T21640] RBP: 0000000020fff000 R08: 0000000000000005 R09: 0000000000000000 [ 3423.470810][T21640] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 00:18:35 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x402}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3423.478860][T21640] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3423.487683][T21647] FAT-fs (loop5): bogus number of reserved sectors [ 3423.494250][T21647] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:35 executing program 1 (fault-call:2 fault-nth:23): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:35 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), 0x0) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x9e02}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3423.553285][T21647] FAT-fs (loop5): bogus number of reserved sectors [ 3423.559857][T21647] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3423.584854][T21689] FAULT_INJECTION: forcing a failure. [ 3423.584854][T21689] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.597517][T21689] CPU: 0 PID: 21689 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3423.606358][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3423.616407][T21689] Call Trace: [ 3423.619679][T21689] dump_stack_lvl+0xb7/0x103 [ 3423.624274][T21689] dump_stack+0x11/0x1a [ 3423.628449][T21689] should_fail+0x23c/0x250 [ 3423.632866][T21689] ? vm_area_dup+0x44/0x120 [ 3423.637362][T21689] __should_failslab+0x81/0x90 [ 3423.642119][T21689] should_failslab+0x5/0x20 [ 3423.646688][T21689] kmem_cache_alloc+0x46/0x2e0 [ 3423.651531][T21689] vm_area_dup+0x44/0x120 [ 3423.655867][T21689] __split_vma+0x82/0x320 [ 3423.660200][T21689] ? vmacache_find+0x313/0x320 [ 3423.664961][T21689] __do_munmap+0x2ee/0x1330 [ 3423.669540][T21689] ? __xas_nomem+0xfc/0x270 [ 3423.674041][T21689] mmap_region+0x5aa/0x1400 [ 3423.678537][T21689] do_mmap+0x73f/0xc40 [ 3423.682613][T21689] vm_mmap_pgoff+0xf9/0x1d0 [ 3423.687222][T21689] ksys_mmap_pgoff+0x2a8/0x380 [ 3423.691961][T21689] do_syscall_64+0x3d/0x90 [ 3423.696356][T21689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3423.702225][T21689] RIP: 0033:0x466642 [ 3423.706179][T21689] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3423.725820][T21689] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3423.734211][T21689] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3423.742421][T21689] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020fff000 00:18:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='Did\t', @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xee02}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x406}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 2: getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000180)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, 'gid'}}]}) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x31, 0x3f, 0x9, 0x80, @time={0x0, 0x8}, {0x0, 0x2}, {0x5, 0x2}, @addr={0xf7, 0x1}}, {0x4c, 0x86, 0x7, 0x1, @tick=0x7, {0x40, 0x7f}, {0x7, 0x6}, @quote={{0x3, 0x3}}}], 0x38) 00:18:35 executing program 1 (fault-call:2 fault-nth:24): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3423.750374][T21689] RBP: 0000000020fff000 R08: 0000000000000005 R09: 0000000000000000 [ 3423.758326][T21689] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3423.766569][T21689] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:35 executing program 2: r0 = syz_io_uring_setup(0x4dea, &(0x7f00000000c0), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)) io_uring_setup(0x1172, &(0x7f0000000380)={0x0, 0x9e3e}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3423.829794][T21715] FAT-fs (loop5): Unrecognized mount option "Did 0xff" or missing value [ 3423.844161][T21718] FAULT_INJECTION: forcing a failure. [ 3423.844161][T21718] name failslab, interval 1, probability 0, space 0, times 0 [ 3423.856872][T21718] CPU: 0 PID: 21718 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3423.865624][T21718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3423.875689][T21718] Call Trace: 00:18:35 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x604}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1003f}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3423.878964][T21718] dump_stack_lvl+0xb7/0x103 [ 3423.883721][T21718] dump_stack+0x11/0x1a [ 3423.887875][T21718] should_fail+0x23c/0x250 [ 3423.892425][T21718] ? vm_area_alloc+0x28/0xa0 [ 3423.897086][T21718] __should_failslab+0x81/0x90 [ 3423.901841][T21718] should_failslab+0x5/0x20 [ 3423.906369][T21718] kmem_cache_alloc+0x46/0x2e0 [ 3423.911132][T21718] vm_area_alloc+0x28/0xa0 [ 3423.915575][T21718] mmap_region+0x741/0x1400 [ 3423.920071][T21718] do_mmap+0x73f/0xc40 [ 3423.924154][T21718] vm_mmap_pgoff+0xf9/0x1d0 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x40000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3423.928740][T21718] ksys_mmap_pgoff+0x2a8/0x380 [ 3423.933594][T21718] do_syscall_64+0x3d/0x90 [ 3423.938038][T21718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3423.943939][T21718] RIP: 0033:0x466642 [ 3423.947834][T21718] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3423.967432][T21718] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3423.975829][T21718] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3423.983787][T21718] RDX: 0000000000000003 RSI: 0000000000012140 RDI: 0000000020fff000 [ 3423.991911][T21718] RBP: 0000000020fff000 R08: 0000000000000005 R09: 0000000000000000 [ 3423.999877][T21718] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3424.007962][T21718] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 00:18:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="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"]) r0 = syz_io_uring_complete(0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0xc29b, 0x400, 0x0, 'queue0\x00', 0x9}) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x80000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x700}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:35 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:35 executing program 1 (fault-call:2 fault-nth:25): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:35 executing program 2: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3424.053197][T21715] FAT-fs (loop5): Unrecognized mount option "Did 0xff" or missing value [ 3424.083290][T21757] FAULT_INJECTION: forcing a failure. [ 3424.083290][T21757] name failslab, interval 1, probability 0, space 0, times 0 00:18:35 executing program 2 (fault-call:0 fault-nth:0): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:35 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x83000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3424.095916][T21757] CPU: 1 PID: 21757 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3424.104758][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.114822][T21757] Call Trace: [ 3424.118091][T21757] dump_stack_lvl+0xb7/0x103 [ 3424.122697][T21757] dump_stack+0x11/0x1a [ 3424.126867][T21757] should_fail+0x23c/0x250 [ 3424.131289][T21757] ? vm_area_dup+0x44/0x120 [ 3424.133210][T21766] FAULT_INJECTION: forcing a failure. [ 3424.133210][T21766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3424.135784][T21757] __should_failslab+0x81/0x90 [ 3424.135806][T21757] should_failslab+0x5/0x20 [ 3424.158267][T21757] kmem_cache_alloc+0x46/0x2e0 [ 3424.163069][T21757] ? pagerange_is_ram_callback+0xb6/0xd0 [ 3424.168695][T21757] vm_area_dup+0x44/0x120 [ 3424.173009][T21757] ? pgprot_writethrough+0x20/0x20 [ 3424.178106][T21757] ? perf_event_mmap+0x14c/0xce0 [ 3424.183040][T21757] ? pfn_modify_allowed+0xa2/0x1c0 [ 3424.188135][T21757] ? remap_pfn_range_notrack+0x71c/0x770 [ 3424.193752][T21757] ? vma_interval_tree_augment_rotate+0xe9/0x100 [ 3424.200079][T21757] __split_vma+0x82/0x320 [ 3424.204400][T21757] ? vmacache_find+0x2df/0x320 [ 3424.210018][T21757] __do_munmap+0x27c/0x1330 [ 3424.214507][T21757] ? up_write+0x25/0xc0 [ 3424.218642][T21757] ? vma_link+0x188/0x1a0 [ 3424.222957][T21757] mmap_region+0x5aa/0x1400 [ 3424.227445][T21757] do_mmap+0x73f/0xc40 [ 3424.231501][T21757] vm_mmap_pgoff+0xf9/0x1d0 [ 3424.235992][T21757] ksys_mmap_pgoff+0x2a8/0x380 [ 3424.240742][T21757] do_syscall_64+0x3d/0x90 [ 3424.245162][T21757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3424.251048][T21757] RIP: 0033:0x466642 [ 3424.254923][T21757] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3424.274527][T21757] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3424.282927][T21757] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3424.290880][T21757] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ff9000 [ 3424.298844][T21757] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000010000000 [ 3424.306800][T21757] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3424.314823][T21757] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3424.323043][T21766] CPU: 0 PID: 21766 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3424.331875][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.341934][T21766] Call Trace: [ 3424.345213][T21766] dump_stack_lvl+0xb7/0x103 [ 3424.349897][T21766] dump_stack+0x11/0x1a 00:18:36 executing program 1 (fault-call:2 fault-nth:26): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:36 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:36 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20c020}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:36 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3424.354095][T21766] should_fail+0x23c/0x250 [ 3424.358519][T21766] should_fail_usercopy+0x16/0x20 [ 3424.363569][T21766] _copy_from_user+0x1c/0xd0 [ 3424.368150][T21766] __x64_sys_io_uring_setup+0x4b/0x120 [ 3424.373606][T21766] ? fput+0x2d/0x130 [ 3424.377558][T21766] ? ksys_write+0x157/0x180 [ 3424.382093][T21766] ? fpregs_assert_state_consistent+0x7d/0x90 [ 3424.388151][T21766] ? exit_to_user_mode_prepare+0x65/0x190 [ 3424.393916][T21766] do_syscall_64+0x3d/0x90 [ 3424.398366][T21766] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3424.404333][T21766] RIP: 0033:0x4665f9 [ 3424.408222][T21766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3424.427825][T21766] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3424.435712][T21776] FAULT_INJECTION: forcing a failure. [ 3424.435712][T21776] name failslab, interval 1, probability 0, space 0, times 0 [ 3424.436274][T21766] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3424.436288][T21766] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3424.436300][T21766] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3424.472990][T21766] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3424.480962][T21766] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3424.488917][T21776] CPU: 1 PID: 21776 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3424.497676][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.507734][T21776] Call Trace: [ 3424.511001][T21776] dump_stack_lvl+0xb7/0x103 [ 3424.515582][T21776] dump_stack+0x11/0x1a [ 3424.519780][T21776] should_fail+0x23c/0x250 [ 3424.524210][T21776] ? anon_vma_clone+0x8d/0x380 [ 3424.528972][T21776] __should_failslab+0x81/0x90 [ 3424.533734][T21776] should_failslab+0x5/0x20 [ 3424.538235][T21776] kmem_cache_alloc+0x46/0x2e0 [ 3424.543033][T21776] anon_vma_clone+0x8d/0x380 [ 3424.547803][T21776] __split_vma+0x134/0x320 [ 3424.552212][T21776] ? vmacache_find+0x2df/0x320 [ 3424.556982][T21776] __do_munmap+0x27c/0x1330 [ 3424.561481][T21776] ? up_write+0x25/0xc0 [ 3424.565625][T21776] ? vma_link+0x188/0x1a0 [ 3424.569957][T21776] mmap_region+0x5aa/0x1400 [ 3424.574453][T21776] do_mmap+0x73f/0xc40 [ 3424.578518][T21776] vm_mmap_pgoff+0xf9/0x1d0 [ 3424.583098][T21776] ksys_mmap_pgoff+0x2a8/0x380 [ 3424.587910][T21776] do_syscall_64+0x3d/0x90 [ 3424.592428][T21776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3424.598322][T21776] RIP: 0033:0x466642 [ 3424.602248][T21776] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3424.621852][T21776] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3424.630292][T21776] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3424.638256][T21776] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ff9000 [ 3424.646224][T21776] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000010000000 00:18:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6769643d535c8c5bdc99e37ac4d4728cb9c9981a7124cbcfa0e1eaa244a128e0e9a7e59085e92fba74020577b405a07b1e4ce72f44aab8a4beb0c036d0e6c6499dba8c64122e422af074eeca7847ecb3417dca174f220143a1033d4697956af0be612b52ff0c5c73eaef6ae509ac000000000000", @ANYRESHEX, @ANYBLOB=',\x00']) r1 = socket$inet(0x2, 0x1, 0x7fff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0xf59, 0x6, &(0x7f0000000900)=[{&(0x7f0000000400)="c0311f87a59be03ed2fcc0160cd4f063b0f364c703af1f80a4d0dd50ee85a3c7bb2c52df5e2c7996bc33db18db4c8271edd323bee847696949065bf20c779a51a90f5dc7b66682ab9961a909d6b70ec933255ac2bc66a419ca", 0x59}, {&(0x7f0000000480)="9431ce5ddccc4b839140501b7e67c17f8d1fc5ff359e4232a8192c3ecbe60057badd1b0d88adceda1956c6924d22d9ced2ff85ee5792f06c0bcc3373c822f868076297b4b8fef956e732ea25c1f8fa5705a21778b7b066bc40ea98d6856f1abc456c", 0x62, 0x5}, {&(0x7f0000000500), 0x0, 0x1}, {&(0x7f00000005c0)="10fe11ca0f40587916622ecead0ac0c87f282cd144656a6e06b1ff25ff56a051adebe086c06b6184e106bfe604cac398572725a691120b27583c36fab2158fdab21525f962", 0x45, 0x4}, {&(0x7f0000000640)="13d654aec2cce3c1f0bc1a8103ee18614fd3df80157a63283a770a4cbf131feb73e872084eff40af25f446a0c31c755be08539f7b22382dfcf0455f957802383be4c5554a3", 0x45, 0x1}, {&(0x7f0000000880)="bc209522934248c4adab6afbbe9be7787a9d4190b169022595aa1f2be595f6e53d4a48036e3b6837e202159587d30f36cdfc4ef2a78559872cbce8ff16c7779b662edf3183b2b90e3219c9009e844bd3ad0ad74239df395553a81ba542b4557e484ba5281b2c43a33ab710", 0x6b}], 0x400, &(0x7f00000009c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6e6f646f74732c6572726f72733d72656d6f756e742d726f2c6d61736b3d4d41595f524541442c7065726d69745f646972836374696f2c00"]) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r2) getsockname(r1, &(0x7f0000000080)=@un=@abs, &(0x7f0000000000)=0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000a40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20000004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x200, 0x1f, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000890) 00:18:36 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:36 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:36 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x300800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:36 executing program 2 (fault-call:0 fault-nth:1): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:36 executing program 1 (fault-call:2 fault-nth:27): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3424.647375][T21796] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffH" or missing value [ 3424.654278][T21776] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3424.654292][T21776] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3424.694967][T21796] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffH" or missing value [ 3424.722481][T21810] FAULT_INJECTION: forcing a failure. [ 3424.722481][T21810] name failslab, interval 1, probability 0, space 0, times 0 [ 3424.735082][T21810] CPU: 1 PID: 21810 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3424.740269][T21816] FAULT_INJECTION: forcing a failure. [ 3424.740269][T21816] name failslab, interval 1, probability 0, space 0, times 0 [ 3424.743879][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.743891][T21810] Call Trace: [ 3424.743898][T21810] dump_stack_lvl+0xb7/0x103 [ 3424.774322][T21810] dump_stack+0x11/0x1a [ 3424.778466][T21810] should_fail+0x23c/0x250 [ 3424.782919][T21810] ? vm_area_dup+0x44/0x120 [ 3424.787404][T21810] __should_failslab+0x81/0x90 [ 3424.792147][T21810] should_failslab+0x5/0x20 [ 3424.796631][T21810] kmem_cache_alloc+0x46/0x2e0 [ 3424.801381][T21810] vm_area_dup+0x44/0x120 [ 3424.805695][T21810] __split_vma+0x82/0x320 [ 3424.810011][T21810] ? vmacache_find+0x313/0x320 [ 3424.814761][T21810] __do_munmap+0x2ee/0x1330 [ 3424.819258][T21810] ? up_write+0x25/0xc0 [ 3424.823397][T21810] ? vma_link+0x188/0x1a0 [ 3424.827779][T21810] mmap_region+0x5aa/0x1400 [ 3424.832261][T21810] do_mmap+0x73f/0xc40 [ 3424.836312][T21810] vm_mmap_pgoff+0xf9/0x1d0 [ 3424.840833][T21810] ksys_mmap_pgoff+0x2a8/0x380 [ 3424.845629][T21810] do_syscall_64+0x3d/0x90 [ 3424.850030][T21810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3424.855966][T21810] RIP: 0033:0x466642 [ 3424.859843][T21810] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3424.879539][T21810] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3424.888011][T21810] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3424.895983][T21810] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ff9000 [ 3424.903946][T21810] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000010000000 [ 3424.911909][T21810] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3424.919862][T21810] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3424.927829][T21816] CPU: 0 PID: 21816 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3424.936687][T21816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3424.946884][T21816] Call Trace: [ 3424.950153][T21816] dump_stack_lvl+0xb7/0x103 [ 3424.954777][T21816] dump_stack+0x11/0x1a [ 3424.958940][T21816] should_fail+0x23c/0x250 [ 3424.963354][T21816] __should_failslab+0x81/0x90 [ 3424.968145][T21816] ? io_uring_create+0x121/0x1940 00:18:36 executing program 1 (fault-call:2 fault-nth:28): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:36 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x42}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:36 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x400000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3424.973264][T21816] should_failslab+0x5/0x20 [ 3424.977764][T21816] kmem_cache_alloc_trace+0x49/0x310 [ 3424.983077][T21816] io_uring_create+0x121/0x1940 [ 3424.988016][T21816] ? vfs_write+0x50c/0x770 [ 3424.992429][T21816] ? should_fail+0xd6/0x250 [ 3424.996967][T21816] __x64_sys_io_uring_setup+0xe1/0x120 [ 3425.002473][T21816] do_syscall_64+0x3d/0x90 [ 3425.006883][T21816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3425.012776][T21816] RIP: 0033:0x4665f9 00:18:36 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2400}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3425.016653][T21816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3425.036243][T21816] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3425.044643][T21816] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3425.052608][T21816] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3425.060574][T21816] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 00:18:36 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x600000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3425.068537][T21816] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3425.076499][T21816] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3425.080198][T21834] FAT-fs (loop5): Unrecognized mount option "gid=S\Œ[Ü™ãzÄÔrŒ¹É˜q$ËÏ áê¢D¡(àé§å…é/ºtw´ {Lç/Dª¸¤¾°À6ÐæÆIºŒd.B*ðtîÊxGì³A}ÊO"C¡=F—•jð¾a+Rÿ \sêïjå ¬" or missing value [ 3425.117074][T21843] FAULT_INJECTION: forcing a failure. [ 3425.117074][T21843] name failslab, interval 1, probability 0, space 0, times 0 [ 3425.129741][T21843] CPU: 0 PID: 21843 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3425.138508][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.148590][T21843] Call Trace: [ 3425.151861][T21843] dump_stack_lvl+0xb7/0x103 [ 3425.156531][T21843] dump_stack+0x11/0x1a [ 3425.160688][T21843] should_fail+0x23c/0x250 [ 3425.165102][T21843] ? vm_area_alloc+0x28/0xa0 [ 3425.169688][T21843] __should_failslab+0x81/0x90 00:18:36 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x60}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3425.174440][T21843] should_failslab+0x5/0x20 [ 3425.178936][T21843] kmem_cache_alloc+0x46/0x2e0 [ 3425.183700][T21843] vm_area_alloc+0x28/0xa0 [ 3425.188104][T21843] mmap_region+0x741/0x1400 [ 3425.192607][T21843] do_mmap+0x73f/0xc40 [ 3425.196671][T21843] vm_mmap_pgoff+0xf9/0x1d0 [ 3425.201175][T21843] ksys_mmap_pgoff+0x2a8/0x380 [ 3425.205938][T21843] do_syscall_64+0x3d/0x90 [ 3425.210357][T21843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3425.216319][T21843] RIP: 0033:0x466642 [ 3425.220204][T21843] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3425.239863][T21843] RSP: 002b:00007f7a6cacf0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3425.248727][T21843] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3425.256764][T21843] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ff9000 [ 3425.264727][T21843] RBP: 0000000020ff9000 R08: 0000000000000005 R09: 0000000010000000 [ 3425.273038][T21843] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3425.280998][T21843] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3425.322219][T21826] loop5: detected capacity change from 0 to 7 [ 3425.328573][T21826] FAT-fs (loop5): Unrecognized mount option "mask=MAY_READ" or missing value 00:18:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="773eb2736ef85f02ba55a2f4396d2a4c65b6ab137987b8e2a8568a0077618221b784cc7b9e25064123fd69b99cddb57e17518e2fbbf1a2f482833514071d1b330fa1d104b783c2a527916d9d8fd43ab9269654fc2101b4a4710eb6ca82113165531be400d48e052eb2ced08a34dbbc1a46be7259ebba9ec04a4b11b925c043869841cd68139cc791957951c19c94f66c4518a571656f00dced0eae1fb64da7191a53967819bf9ad24e401d98407ac4b98974", @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 2 (fault-call:0 fault-nth:2): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:37 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x112}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x80ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 1 (fault-call:2 fault-nth:29): r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3425.363565][T21834] FAT-fs (loop5): Unrecognized mount option "gid=S\Œ[Ü™ãzÄÔrŒ¹É˜q$ËÏ áê¢D¡(àé§å…é/ºtw´ {Lç/Dª¸¤¾°À6ÐæÆIºŒd.B*ðtîÊxGì³A}ÊO"C¡=F—•jð¾a+Rÿ \sêïjå ¬" or missing value [ 3425.429923][T21888] FAT-fs (loop5): Unrecognized mount option "w>²snø_ºU¢ô9m*Le¶«y‡¸â¨VŠ" or missing value [ 3425.451376][T21896] FAULT_INJECTION: forcing a failure. [ 3425.451376][T21896] name failslab, interval 1, probability 0, space 0, times 0 [ 3425.464037][T21896] CPU: 0 PID: 21896 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x160}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3425.472797][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.483095][T21896] Call Trace: [ 3425.486373][T21896] dump_stack_lvl+0xb7/0x103 [ 3425.490965][T21896] dump_stack+0x11/0x1a [ 3425.495218][T21896] should_fail+0x23c/0x250 [ 3425.499646][T21896] ? io_uring_create+0x18e/0x1940 [ 3425.504682][T21896] __should_failslab+0x81/0x90 [ 3425.509515][T21896] should_failslab+0x5/0x20 [ 3425.514054][T21897] FAULT_INJECTION: forcing a failure. [ 3425.514054][T21897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3425.514054][T21896] __kmalloc+0x66/0x340 [ 3425.514085][T21896] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3425.514107][T21896] ? io_uring_create+0x121/0x1940 [ 3425.541785][T21896] io_uring_create+0x18e/0x1940 [ 3425.546638][T21896] ? vfs_write+0x50c/0x770 [ 3425.551050][T21896] __x64_sys_io_uring_setup+0xe1/0x120 [ 3425.556508][T21896] do_syscall_64+0x3d/0x90 [ 3425.560921][T21896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3425.566799][T21896] RIP: 0033:0x4665f9 [ 3425.570676][T21896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3425.590403][T21896] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3425.598890][T21896] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3425.606966][T21896] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3425.614919][T21896] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3425.622946][T21896] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3425.630930][T21896] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3425.638888][T21897] CPU: 1 PID: 21897 Comm: syz-executor.1 Not tainted 5.14.0-rc7-syzkaller #0 [ 3425.647654][T21897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.657696][T21897] Call Trace: [ 3425.660968][T21897] dump_stack_lvl+0xb7/0x103 [ 3425.665546][T21897] dump_stack+0x11/0x1a [ 3425.669747][T21897] should_fail+0x23c/0x250 [ 3425.674165][T21897] should_fail_usercopy+0x16/0x20 [ 3425.679212][T21897] copy_fpstate_to_sigframe+0x372/0x570 [ 3425.684750][T21897] __setup_rt_frame+0x11a/0x3e0 [ 3425.689712][T21897] arch_do_signal_or_restart+0x198/0x220 [ 3425.695549][T21897] exit_to_user_mode_prepare+0x109/0x190 [ 3425.701204][T21897] ? asm_exc_page_fault+0x8/0x30 [ 3425.706229][T21897] irqentry_exit_to_user_mode+0x5/0x10 [ 3425.711680][T21897] irqentry_exit+0xe/0x30 [ 3425.716068][T21897] asm_exc_page_fault+0x1e/0x30 [ 3425.720966][T21897] RIP: 0033:0x403f1e [ 3425.724844][T21897] Code: c9 e8 26 27 06 00 8b 75 00 41 89 d8 4c 89 ef 49 89 06 41 b9 00 00 00 10 b9 11 80 00 00 ba 03 00 00 00 c1 e6 06 e8 02 27 06 00 <49> 89 04 24 48 83 c4 38 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 [ 3425.744922][T21897] RSP: 002b:00007f7a6cacf110 EFLAGS: 00010207 [ 3425.750979][T21897] RAX: 0000000020ff9000 RBX: 0000000000000005 RCX: 0000000000466642 [ 3425.758942][T21897] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 0000000020ff9000 [ 3425.766909][T21897] RBP: 0000000020000280 R08: 0000000000000005 R09: 0000000010000000 00:18:37 executing program 2 (fault-call:0 fault-nth:3): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x5403}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x204}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xc0ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3425.774965][T21897] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000000000000 [ 3425.782922][T21897] R13: 0000000020ff9000 R14: 0000000020000180 R15: 0000000020fff000 [ 3425.804194][T21888] FAT-fs (loop5): Unrecognized mount option "w>²snø_ºU¢ô9m*Le¶«y‡¸â¨VŠ" or missing value [ 3425.822531][T21926] FAULT_INJECTION: forcing a failure. [ 3425.822531][T21926] name failslab, interval 1, probability 0, space 0, times 0 [ 3425.835176][T21926] CPU: 1 PID: 21926 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3425.843967][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3425.854011][T21926] Call Trace: [ 3425.857283][T21926] dump_stack_lvl+0xb7/0x103 [ 3425.861874][T21926] dump_stack+0x11/0x1a [ 3425.866042][T21926] should_fail+0x23c/0x250 [ 3425.870460][T21926] __should_failslab+0x81/0x90 [ 3425.875221][T21926] ? io_uring_create+0x1df/0x1940 [ 3425.880241][T21926] should_failslab+0x5/0x20 [ 3425.884802][T21926] kmem_cache_alloc_trace+0x49/0x310 [ 3425.890086][T21926] ? io_uring_create+0x18e/0x1940 [ 3425.895110][T21926] io_uring_create+0x1df/0x1940 [ 3425.899956][T21926] ? vfs_write+0x50c/0x770 [ 3425.904385][T21926] __x64_sys_io_uring_setup+0xe1/0x120 [ 3425.909929][T21926] do_syscall_64+0x3d/0x90 [ 3425.914357][T21926] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3425.920229][T21926] RIP: 0033:0x4665f9 [ 3425.924100][T21926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3425.943684][T21926] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3425.952094][T21926] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3425.960066][T21926] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3425.968035][T21926] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 00:18:37 executing program 5: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000140)={{0x0, 0x81}, 'port0\x00', 0x40, 0x400, 0x400, 0x1, 0x200, 0x7f, 0xffffffff, 0x0, 0x7, 0x7}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xe0ff20}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:37 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x29e}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x5603}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 2 (fault-call:0 fault-nth:4): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3425.975989][T21926] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3425.983940][T21926] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xf0351e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.045561][T21949] FAT-fs (loop5): bogus number of reserved sectors [ 3426.052109][T21949] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3426.059611][T21954] FAULT_INJECTION: forcing a failure. [ 3426.059611][T21954] name failslab, interval 1, probability 0, space 0, times 0 [ 3426.072357][T21954] CPU: 1 PID: 21954 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3426.081108][T21954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3426.091533][T21954] Call Trace: 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x6000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.094804][T21954] dump_stack_lvl+0xb7/0x103 [ 3426.099387][T21954] dump_stack+0x11/0x1a [ 3426.103589][T21954] should_fail+0x23c/0x250 [ 3426.108075][T21954] ? io_uring_create+0x1940/0x1940 [ 3426.113257][T21954] __should_failslab+0x81/0x90 [ 3426.118025][T21954] ? percpu_ref_init+0x96/0x250 [ 3426.122934][T21954] should_failslab+0x5/0x20 [ 3426.127438][T21954] kmem_cache_alloc_trace+0x49/0x310 [ 3426.132766][T21954] ? io_uring_create+0x1940/0x1940 [ 3426.137883][T21954] percpu_ref_init+0x96/0x250 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:37 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.142558][T21954] io_uring_create+0x226/0x1940 [ 3426.147406][T21954] ? vfs_write+0x50c/0x770 [ 3426.151831][T21954] __x64_sys_io_uring_setup+0xe1/0x120 [ 3426.157289][T21954] do_syscall_64+0x3d/0x90 [ 3426.161701][T21954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3426.167608][T21954] RIP: 0033:0x4665f9 [ 3426.171501][T21954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:37 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xa800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.191316][T21954] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3426.199738][T21954] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3426.207764][T21954] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3426.215738][T21954] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3426.223723][T21954] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3426.231856][T21954] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x810010, &(0x7f0000000000)=ANY=[@ANYBLOB='time_offset=0x00000000\x00']) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2ec}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:38 executing program 2 (fault-call:0 fault-nth:5): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xaa00}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.334191][T22000] FAULT_INJECTION: forcing a failure. [ 3426.334191][T22000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3426.347435][T22000] CPU: 0 PID: 22000 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3426.356290][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3426.366445][T22000] Call Trace: [ 3426.369895][T22000] dump_stack_lvl+0xb7/0x103 [ 3426.374545][T22000] dump_stack+0x11/0x1a [ 3426.378694][T22000] should_fail+0x23c/0x250 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x402}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x406}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3426.383113][T22000] __alloc_pages+0x102/0x320 [ 3426.387706][T22000] alloc_pages+0x2e8/0x340 [ 3426.392160][T22000] __get_free_pages+0x8/0x30 [ 3426.396793][T22000] io_uring_create+0x904/0x1940 [ 3426.401640][T22000] ? vfs_write+0x50c/0x770 [ 3426.406055][T22000] __x64_sys_io_uring_setup+0xe1/0x120 [ 3426.411645][T22000] do_syscall_64+0x3d/0x90 [ 3426.416058][T22000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3426.421994][T22000] RIP: 0033:0x4665f9 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x604}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.425961][T22000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3426.445577][T22000] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3426.453992][T22000] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3426.462066][T22000] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3426.470028][T22000] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.478039][T22000] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3426.486105][T22000] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3426.499354][T22003] FAT-fs (loop5): bogus number of reserved sectors [ 3426.505938][T22003] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x700}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1003f}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:38 executing program 2 (fault-call:0 fault-nth:6): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3426.562816][T22003] FAT-fs (loop5): bogus number of reserved sectors [ 3426.569341][T22003] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x6040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3426.638137][T22054] FAULT_INJECTION: forcing a failure. [ 3426.638137][T22054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3426.651376][T22054] CPU: 1 PID: 22054 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3426.660135][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3426.670306][T22054] Call Trace: [ 3426.673581][T22054] dump_stack_lvl+0xb7/0x103 [ 3426.678203][T22054] dump_stack+0x11/0x1a [ 3426.682355][T22054] should_fail+0x23c/0x250 [ 3426.686855][T22054] __alloc_pages+0x102/0x320 [ 3426.691496][T22054] alloc_pages+0x2e8/0x340 [ 3426.695913][T22054] __get_free_pages+0x8/0x30 [ 3426.700504][T22054] io_uring_create+0x9f7/0x1940 [ 3426.705350][T22054] ? vfs_write+0x50c/0x770 [ 3426.709761][T22054] __x64_sys_io_uring_setup+0xe1/0x120 [ 3426.715220][T22054] do_syscall_64+0x3d/0x90 [ 3426.719649][T22054] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3426.725546][T22054] RIP: 0033:0x4665f9 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x1200}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:38 executing program 5: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="0d56343bddd67a0b82720e7e656fadd5cbbb1d49192f389a5982881934d90005252675f689c070a97ee4bf7df81b3fc37550cf54e2ba88e8e65cfb29456b55d8241b417c1e7c9cac14766ad5af16ff14889942128b73afaa35db99437e97ae715197415b8622dd47a8536113449e58eb0866f48dc3a35ceb4eaa1b85a0e4b3bbf5266f69f2841e0536981e0e27d9ff74ef6423db0bbcf776c444faf3011f679ecfc6af328b622870ea879dac13e4f3c65a3bea3965efabf8a756e96ec24cd832683099326d5c457fb92be3abddeeaf2ff836c75b8df8ae01e1c9ad42f604b431bb8eb124903cc25e4407535543049d049e3d586014498f12e8a410f6a2a85bdacd1885eff9d4289337371b252b8388cdd1189255915c11a1ca7008632f5900cf25663562483c2a873f9cf77f279792c405cac4799640d3e0e17eacc0b1d12b1a5165132037f0fe64d0b74a9908a6f4a67658db97e26b87cf558f4ed64a5f995267d2cefa47eb0243acdf452843eba359ddf07c"]) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1d}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfc2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbfe}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x51}, 0x8004) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x1201}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3426.729425][T22054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3426.749030][T22054] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3426.757439][T22054] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3426.765399][T22054] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3426.773436][T22054] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x7000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3426.781409][T22054] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3426.789718][T22054] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3426.814929][T22074] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffV4;ÝÖz ‚r~eo­ÕË»I/8šY‚ˆ4Ù" or missing value 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x40000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3426.882660][T22074] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffV4;ÝÖz ‚r~eo­ÕË»I/8šY‚ˆ4Ù" or missing value 00:18:38 executing program 2 (fault-call:0 fault-nth:7): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2100}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x12}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:38 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000140)=""/180, 0xb4}], 0x2, &(0x7f0000000240)=""/193, 0xc1}, 0x80000000}, {{&(0x7f0000000340)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000400)=""/199, 0xc7}], 0x2}, 0x3}, {{&(0x7f0000000540)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/17, 0x11}], 0x1, &(0x7f0000000640)=""/118, 0x76}, 0xc88}, {{&(0x7f00000006c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/152, 0x98}, {&(0x7f0000000880)=""/157, 0x9d}, {&(0x7f0000000940)=""/212, 0xd4}], 0x4, &(0x7f0000000a80)=""/6, 0x6}, 0x7f}, {{&(0x7f0000000ac0)=@nfc_llcp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/142, 0x8e}], 0x1, &(0x7f0000000c40)=""/145, 0x91}, 0xfff}, {{&(0x7f0000000d00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/128, 0x80}], 0x1, &(0x7f0000000e40)=""/84, 0x54}, 0x7f}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000ec0)=""/151, 0x97}, {&(0x7f0000000f80)=""/160, 0xa0}], 0x2, &(0x7f0000001080)=""/141, 0x8d}, 0x6}, {{&(0x7f0000001140)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000001500)=[{&(0x7f00000011c0)=""/221, 0xdd}, {&(0x7f00000012c0)=""/170, 0xaa}, {&(0x7f0000001380)=""/254, 0xfe}, {&(0x7f0000001480)=""/2, 0x2}], 0x4, &(0x7f0000001540)=""/234, 0xea}}, {{&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000001740)=[{&(0x7f00000016c0)=""/72, 0x48}], 0x1, &(0x7f0000001780)=""/24, 0x18}, 0x3}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001840)=""/97, 0x61}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/182, 0xb6}, {&(0x7f0000002980)=""/125, 0x7d}, {&(0x7f0000002a00)=""/150, 0x96}], 0x5}, 0x800}], 0xa, 0x40000020, &(0x7f0000002dc0)={0x0, 0x989680}) 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x80000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x83000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x10000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3426.981982][T22111] FAULT_INJECTION: forcing a failure. [ 3426.981982][T22111] name failslab, interval 1, probability 0, space 0, times 0 [ 3426.994609][T22111] CPU: 1 PID: 22111 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3427.003369][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3427.013425][T22111] Call Trace: [ 3427.016769][T22111] dump_stack_lvl+0xb7/0x103 [ 3427.021363][T22111] dump_stack+0x11/0x1a [ 3427.025632][T22111] should_fail+0x23c/0x250 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x10010000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3427.030053][T22111] __should_failslab+0x81/0x90 [ 3427.034880][T22111] ? io_uring_create+0x1466/0x1940 [ 3427.039987][T22111] should_failslab+0x5/0x20 [ 3427.044488][T22111] kmem_cache_alloc_trace+0x49/0x310 [ 3427.049780][T22111] ? alloc_pages+0x2e8/0x340 [ 3427.054369][T22111] io_uring_create+0x1466/0x1940 [ 3427.059310][T22111] ? vfs_write+0x50c/0x770 [ 3427.063749][T22111] __x64_sys_io_uring_setup+0xe1/0x120 [ 3427.069220][T22111] do_syscall_64+0x3d/0x90 [ 3427.073655][T22111] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:18:38 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20c020}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3427.079555][T22111] RIP: 0033:0x4665f9 [ 3427.083438][T22111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.103063][T22111] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3427.111902][T22111] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3427.119985][T22111] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec 00:18:38 executing program 2 (fault-call:0 fault-nth:8): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:38 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4200}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:38 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1e35f000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:38 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x42}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3427.128012][T22111] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3427.135989][T22111] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3427.143955][T22111] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3427.174159][T22141] FAULT_INJECTION: forcing a failure. [ 3427.174159][T22141] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.186857][T22141] CPU: 1 PID: 22141 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3427.195608][T22141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3427.205654][T22141] Call Trace: [ 3427.208927][T22141] dump_stack_lvl+0xb7/0x103 [ 3427.213516][T22141] dump_stack+0x11/0x1a [ 3427.217704][T22141] should_fail+0x23c/0x250 [ 3427.222126][T22141] ? kzalloc+0x20/0x20 [ 3427.226210][T22141] __should_failslab+0x81/0x90 [ 3427.230972][T22141] ? percpu_ref_init+0x96/0x250 [ 3427.235821][T22141] should_failslab+0x5/0x20 [ 3427.240324][T22141] kmem_cache_alloc_trace+0x49/0x310 [ 3427.245678][T22141] ? kzalloc+0x20/0x20 [ 3427.249747][T22141] percpu_ref_init+0x96/0x250 [ 3427.254442][T22141] io_uring_create+0x1488/0x1940 [ 3427.259374][T22141] ? vfs_write+0x50c/0x770 [ 3427.263814][T22141] __x64_sys_io_uring_setup+0xe1/0x120 [ 3427.269269][T22141] do_syscall_64+0x3d/0x90 [ 3427.273725][T22141] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3427.279800][T22141] RIP: 0033:0x4665f9 [ 3427.283679][T22141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.303316][T22141] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3427.311706][T22141] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3427.319657][T22141] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3427.327616][T22141] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3427.335566][T22141] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3427.343524][T22141] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3427.369223][T22160] FAT-fs (loop5): bogus number of reserved sectors [ 3427.375814][T22160] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x60}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x300800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x5400}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:39 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 2 (fault-call:0 fault-nth:9): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3427.424465][T22160] FAT-fs (loop5): bogus number of reserved sectors [ 3427.431085][T22160] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3427.457483][T22172] FAULT_INJECTION: forcing a failure. [ 3427.457483][T22172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3427.470558][T22172] CPU: 1 PID: 22172 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3427.479314][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3427.489358][T22172] Call Trace: [ 3427.492634][T22172] dump_stack_lvl+0xb7/0x103 [ 3427.497223][T22172] dump_stack+0x11/0x1a [ 3427.501454][T22172] should_fail+0x23c/0x250 [ 3427.505895][T22172] should_fail_usercopy+0x16/0x20 [ 3427.510945][T22172] _copy_to_user+0x1c/0x90 [ 3427.515387][T22172] io_uring_create+0x160d/0x1940 [ 3427.520328][T22172] ? vfs_write+0x50c/0x770 [ 3427.524745][T22172] __x64_sys_io_uring_setup+0xe1/0x120 [ 3427.530201][T22172] do_syscall_64+0x3d/0x90 [ 3427.534652][T22172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3427.540588][T22172] RIP: 0033:0x4665f9 [ 3427.544465][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.564149][T22172] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x204}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x400000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x6000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:39 executing program 2 (fault-call:0 fault-nth:10): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3427.572553][T22172] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3427.580520][T22172] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3427.588485][T22172] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3427.596462][T22172] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3427.604443][T22172] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:39 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20c02000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x600000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x6001}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3427.677162][T22203] FAULT_INJECTION: forcing a failure. [ 3427.677162][T22203] name failslab, interval 1, probability 0, space 0, times 0 [ 3427.689802][T22203] CPU: 1 PID: 22203 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3427.698555][T22203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3427.708603][T22203] Call Trace: [ 3427.711919][T22203] dump_stack_lvl+0xb7/0x103 [ 3427.716528][T22203] dump_stack+0x11/0x1a [ 3427.720688][T22203] should_fail+0x23c/0x250 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x36e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3427.725127][T22203] ? sock_alloc_inode+0x23/0x90 [ 3427.729981][T22203] __should_failslab+0x81/0x90 [ 3427.734738][T22203] ? sockfs_init_fs_context+0x70/0x70 [ 3427.740163][T22203] should_failslab+0x5/0x20 [ 3427.744722][T22203] kmem_cache_alloc+0x46/0x2e0 [ 3427.749507][T22203] ? selinux_socket_create+0x7c/0x170 [ 3427.754878][T22203] ? sockfs_init_fs_context+0x70/0x70 [ 3427.760312][T22203] sock_alloc_inode+0x23/0x90 [ 3427.765013][T22203] ? sockfs_init_fs_context+0x70/0x70 [ 3427.770381][T22203] new_inode_pseudo+0x38/0x1c0 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x70671e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3427.775146][T22203] __sock_create+0x122/0x4e0 [ 3427.779832][T22203] ? should_fail+0xd6/0x250 [ 3427.784360][T22203] sock_create_kern+0x34/0x40 [ 3427.789040][T22203] io_uring_create+0x1653/0x1940 [ 3427.793976][T22203] ? vfs_write+0x50c/0x770 [ 3427.798544][T22203] __x64_sys_io_uring_setup+0xe1/0x120 [ 3427.803999][T22203] do_syscall_64+0x3d/0x90 [ 3427.808416][T22203] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3427.814315][T22203] RIP: 0033:0x4665f9 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x402}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x80ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3427.818198][T22203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3427.837800][T22203] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3427.846207][T22203] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3427.854174][T22203] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3427.862133][T22203] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x406}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xc0ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3427.870109][T22203] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3427.878286][T22203] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3427.886348][T22203] socket: no more sockets 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x604}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 2 (fault-call:0 fault-nth:11): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:39 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x60ff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:39 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20ffe000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:39 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xe0ff20}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x21000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:39 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x7f00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3428.050495][T22264] FAULT_INJECTION: forcing a failure. [ 3428.050495][T22264] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.063130][T22264] CPU: 1 PID: 22264 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3428.071929][T22264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3428.081974][T22264] Call Trace: [ 3428.085251][T22264] dump_stack_lvl+0xb7/0x103 [ 3428.089895][T22264] dump_stack+0x11/0x1a [ 3428.094082][T22264] should_fail+0x23c/0x250 [ 3428.098507][T22264] ? security_inode_alloc+0x30/0x180 [ 3428.103795][T22264] __should_failslab+0x81/0x90 [ 3428.108554][T22264] should_failslab+0x5/0x20 [ 3428.113056][T22264] kmem_cache_alloc+0x46/0x2e0 [ 3428.117823][T22264] security_inode_alloc+0x30/0x180 [ 3428.122932][T22264] inode_init_always+0x20b/0x420 [ 3428.127867][T22264] ? sockfs_init_fs_context+0x70/0x70 [ 3428.133274][T22264] new_inode_pseudo+0x73/0x1c0 [ 3428.138104][T22264] __sock_create+0x122/0x4e0 [ 3428.142695][T22264] ? should_fail+0xd6/0x250 00:18:39 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3428.147226][T22264] sock_create_kern+0x34/0x40 [ 3428.151925][T22264] io_uring_create+0x1653/0x1940 [ 3428.156861][T22264] ? vfs_write+0x50c/0x770 [ 3428.161278][T22264] __x64_sys_io_uring_setup+0xe1/0x120 [ 3428.166741][T22264] do_syscall_64+0x3d/0x90 [ 3428.171193][T22264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3428.177126][T22264] RIP: 0033:0x4665f9 [ 3428.181019][T22264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.200623][T22264] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3428.209033][T22264] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3428.217001][T22264] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3428.224963][T22264] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3428.232952][T22264] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3428.240921][T22264] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x3f000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x1200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3428.248912][T22264] socket: no more sockets 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x9700}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 2 (fault-call:0 fault-nth:12): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x2000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x40000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x9e02}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3428.412232][T22303] FAULT_INJECTION: forcing a failure. [ 3428.412232][T22303] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.424910][T22303] CPU: 1 PID: 22303 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3428.433667][T22303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3428.443714][T22303] Call Trace: [ 3428.446988][T22303] dump_stack_lvl+0xb7/0x103 [ 3428.451591][T22303] dump_stack+0x11/0x1a [ 3428.455814][T22303] should_fail+0x23c/0x250 [ 3428.460234][T22303] ? sk_prot_alloc+0x41/0x190 [ 3428.464993][T22303] __should_failslab+0x81/0x90 [ 3428.469753][T22303] should_failslab+0x5/0x20 [ 3428.474343][T22303] kmem_cache_alloc+0x46/0x2e0 [ 3428.479191][T22303] sk_prot_alloc+0x41/0x190 [ 3428.483695][T22303] sk_alloc+0x2e/0x220 [ 3428.487775][T22303] unix_create1+0x74/0x3c0 [ 3428.492194][T22303] unix_create+0xdc/0x100 [ 3428.496558][T22303] __sock_create+0x2c7/0x4e0 [ 3428.501198][T22303] sock_create_kern+0x34/0x40 [ 3428.505876][T22303] io_uring_create+0x1653/0x1940 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x42000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3428.510833][T22303] ? vfs_write+0x50c/0x770 [ 3428.515249][T22303] __x64_sys_io_uring_setup+0xe1/0x120 [ 3428.520774][T22303] do_syscall_64+0x3d/0x90 [ 3428.525226][T22303] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3428.531300][T22303] RIP: 0033:0x4665f9 [ 3428.535187][T22303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xec02}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3428.554794][T22303] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3428.563235][T22303] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3428.571206][T22303] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3428.579173][T22303] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3428.587138][T22303] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3428.595102][T22303] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x13000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x4000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 2 (fault-call:0 fault-nth:13): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x60010000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x5400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x20000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x6040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x40000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x7000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3428.802407][T22360] FAULT_INJECTION: forcing a failure. [ 3428.802407][T22360] name failslab, interval 1, probability 0, space 0, times 0 [ 3428.815091][T22360] CPU: 1 PID: 22360 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3428.823850][T22360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3428.833900][T22360] Call Trace: [ 3428.837173][T22360] dump_stack_lvl+0xb7/0x103 [ 3428.841819][T22360] dump_stack+0x11/0x1a [ 3428.845977][T22360] should_fail+0x23c/0x250 [ 3428.850727][T22360] __should_failslab+0x81/0x90 [ 3428.855488][T22360] ? selinux_sk_alloc_security+0x61/0x120 [ 3428.861372][T22360] should_failslab+0x5/0x20 [ 3428.865895][T22360] kmem_cache_alloc_trace+0x49/0x310 [ 3428.871252][T22360] ? should_fail+0xd6/0x250 [ 3428.875766][T22360] selinux_sk_alloc_security+0x61/0x120 [ 3428.881429][T22360] security_sk_alloc+0x45/0x90 [ 3428.886215][T22360] sk_prot_alloc+0xd2/0x190 [ 3428.890741][T22360] sk_alloc+0x2e/0x220 [ 3428.894811][T22360] unix_create1+0x74/0x3c0 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3428.899228][T22360] unix_create+0xdc/0x100 [ 3428.903565][T22360] __sock_create+0x2c7/0x4e0 [ 3428.908173][T22360] sock_create_kern+0x34/0x40 [ 3428.912899][T22360] io_uring_create+0x1653/0x1940 [ 3428.917834][T22360] ? vfs_write+0x50c/0x770 [ 3428.922250][T22360] __x64_sys_io_uring_setup+0xe1/0x120 [ 3428.927706][T22360] do_syscall_64+0x3d/0x90 [ 3428.932125][T22360] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3428.938030][T22360] RIP: 0033:0x4665f9 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x60ff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3428.941959][T22360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3428.961589][T22360] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3428.969999][T22360] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3428.978228][T22360] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3428.986300][T22360] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3428.994292][T22360] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3429.002252][T22360] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x82000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6c03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:40 executing program 2 (fault-call:0 fault-nth:14): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:40 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x80000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:40 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6e03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:40 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x10000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x9e020000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3429.145872][T22396] FAULT_INJECTION: forcing a failure. [ 3429.145872][T22396] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.158522][T22396] CPU: 1 PID: 22396 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3429.167274][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3429.177365][T22396] Call Trace: [ 3429.180636][T22396] dump_stack_lvl+0xb7/0x103 [ 3429.185775][T22396] dump_stack+0x11/0x1a [ 3429.189926][T22396] should_fail+0x23c/0x250 00:18:40 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xee020000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3429.194351][T22396] ? __d_alloc+0x36/0x370 [ 3429.198684][T22396] __should_failslab+0x81/0x90 [ 3429.203452][T22396] should_failslab+0x5/0x20 [ 3429.207953][T22396] kmem_cache_alloc+0x46/0x2e0 [ 3429.212985][T22396] __d_alloc+0x36/0x370 [ 3429.217162][T22396] d_alloc_pseudo+0x1a/0x50 [ 3429.221838][T22396] alloc_file_pseudo+0x63/0x130 [ 3429.226695][T22396] anon_inode_getfile+0x9f/0x120 [ 3429.231667][T22396] io_uring_create+0x16a8/0x1940 [ 3429.236603][T22396] ? vfs_write+0x50c/0x770 [ 3429.241012][T22396] __x64_sys_io_uring_setup+0xe1/0x120 [ 3429.246510][T22396] do_syscall_64+0x3d/0x90 [ 3429.250924][T22396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3429.257005][T22396] RIP: 0033:0x4665f9 [ 3429.260892][T22396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3429.280615][T22396] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x7f00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x104000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x1e677000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3429.289023][T22396] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3429.296988][T22396] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3429.305207][T22396] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3429.313187][T22396] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3429.321305][T22396] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xfeffffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x9700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 2 (fault-call:0 fault-nth:15): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x300100}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x1003f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20c02000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xffff8000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3429.533211][T22459] FAULT_INJECTION: forcing a failure. [ 3429.533211][T22459] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.545851][T22459] CPU: 0 PID: 22459 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3429.554607][T22459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3429.564676][T22459] Call Trace: [ 3429.568055][T22459] dump_stack_lvl+0xb7/0x103 [ 3429.572648][T22459] dump_stack+0x11/0x1a [ 3429.576823][T22459] should_fail+0x23c/0x250 [ 3429.581278][T22459] ? __alloc_file+0x2e/0x1a0 [ 3429.585871][T22459] __should_failslab+0x81/0x90 [ 3429.590762][T22459] should_failslab+0x5/0x20 [ 3429.595300][T22459] kmem_cache_alloc+0x46/0x2e0 [ 3429.600120][T22459] __alloc_file+0x2e/0x1a0 [ 3429.604540][T22459] alloc_empty_file+0xcd/0x1c0 [ 3429.609380][T22459] alloc_file+0x3a/0x280 [ 3429.613621][T22459] alloc_file_pseudo+0xe2/0x130 [ 3429.618508][T22459] anon_inode_getfile+0x9f/0x120 [ 3429.623525][T22459] io_uring_create+0x16a8/0x1940 [ 3429.628473][T22459] ? vfs_write+0x50c/0x770 [ 3429.632887][T22459] __x64_sys_io_uring_setup+0xe1/0x120 [ 3429.638348][T22459] do_syscall_64+0x3d/0x90 [ 3429.642879][T22459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3429.648778][T22459] RIP: 0033:0x4665f9 [ 3429.652665][T22459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3429.672270][T22459] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x20ffe000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x400000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xffffc000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x13000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x401000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3429.680681][T22459] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3429.688655][T22459] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3429.696624][T22459] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3429.704586][T22459] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3429.712592][T22459] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x20000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xfffffffe}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 2 (fault-call:0 fault-nth:16): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x21000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4af000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x40000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3429.851233][T22500] FAULT_INJECTION: forcing a failure. [ 3429.851233][T22500] name failslab, interval 1, probability 0, space 0, times 0 [ 3429.863941][T22500] CPU: 0 PID: 22500 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3429.872701][T22500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3429.882754][T22500] Call Trace: [ 3429.886022][T22500] dump_stack_lvl+0xb7/0x103 [ 3429.890688][T22500] dump_stack+0x11/0x1a [ 3429.894833][T22500] should_fail+0x23c/0x250 [ 3429.899244][T22500] ? security_file_alloc+0x30/0x190 [ 3429.904441][T22500] __should_failslab+0x81/0x90 [ 3429.909268][T22500] should_failslab+0x5/0x20 [ 3429.913765][T22500] kmem_cache_alloc+0x46/0x2e0 [ 3429.918541][T22500] security_file_alloc+0x30/0x190 [ 3429.923570][T22500] __alloc_file+0x83/0x1a0 [ 3429.927987][T22500] alloc_empty_file+0xcd/0x1c0 [ 3429.932814][T22500] alloc_file+0x3a/0x280 [ 3429.937098][T22500] alloc_file_pseudo+0xe2/0x130 [ 3429.941982][T22500] anon_inode_getfile+0x9f/0x120 [ 3429.947009][T22500] io_uring_create+0x16a8/0x1940 [ 3429.951952][T22500] ? vfs_write+0x50c/0x770 [ 3429.956360][T22500] __x64_sys_io_uring_setup+0xe1/0x120 [ 3429.961809][T22500] do_syscall_64+0x3d/0x90 [ 3429.966216][T22500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3429.972130][T22500] RIP: 0033:0x4665f9 [ 3429.976013][T22500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x24000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4fc000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x3f000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x540000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3429.995727][T22500] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3430.004280][T22500] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3430.012248][T22500] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3430.020219][T22500] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3430.028187][T22500] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3430.036154][T22500] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x40000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x600000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:41 executing program 2 (fault-call:0 fault-nth:17): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:41 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x104000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:41 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x42000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:41 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x80ffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3430.252139][T22555] FAULT_INJECTION: forcing a failure. [ 3430.252139][T22555] name failslab, interval 1, probability 0, space 0, times 0 [ 3430.264792][T22555] CPU: 0 PID: 22555 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3430.273554][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3430.283779][T22555] Call Trace: [ 3430.287048][T22555] dump_stack_lvl+0xb7/0x103 [ 3430.291632][T22555] dump_stack+0x11/0x1a [ 3430.295781][T22555] should_fail+0x23c/0x250 [ 3430.300261][T22555] __should_failslab+0x81/0x90 [ 3430.305048][T22555] ? io_uring_alloc_task_context+0x49/0x2c0 [ 3430.310951][T22555] should_failslab+0x5/0x20 [ 3430.315455][T22555] kmem_cache_alloc_trace+0x49/0x310 [ 3430.320760][T22555] ? alloc_empty_file+0x107/0x1c0 [ 3430.325787][T22555] ? errseq_sample+0x2b/0x40 [ 3430.330474][T22555] io_uring_alloc_task_context+0x49/0x2c0 [ 3430.336196][T22555] ? alloc_fd+0x388/0x3e0 [ 3430.340634][T22555] io_uring_add_tctx_node+0x66/0x200 [ 3430.345920][T22555] io_uring_create+0x17a0/0x1940 [ 3430.350857][T22555] ? vfs_write+0x50c/0x770 [ 3430.355277][T22555] __x64_sys_io_uring_setup+0xe1/0x120 [ 3430.360736][T22555] do_syscall_64+0x3d/0x90 [ 3430.365234][T22555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3430.371204][T22555] RIP: 0033:0x4665f9 [ 3430.375089][T22555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x970000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x7}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xb0a41e}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:42 executing program 2 (fault-call:0 fault-nth:18): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3430.394772][T22555] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3430.403180][T22555] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3430.411157][T22555] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3430.419119][T22555] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3430.427087][T22555] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3430.435053][T22555] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x200000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x54030000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x56030000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3430.506868][T22587] FAULT_INJECTION: forcing a failure. [ 3430.506868][T22587] name failslab, interval 1, probability 0, space 0, times 0 [ 3430.519505][T22587] CPU: 1 PID: 22587 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3430.528268][T22587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3430.538351][T22587] Call Trace: [ 3430.541618][T22587] dump_stack_lvl+0xb7/0x103 [ 3430.546267][T22587] dump_stack+0x11/0x1a [ 3430.550416][T22587] should_fail+0x23c/0x250 [ 3430.554832][T22587] __should_failslab+0x81/0x90 [ 3430.559589][T22587] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 3430.565509][T22587] should_failslab+0x5/0x20 [ 3430.570004][T22587] kmem_cache_alloc_trace+0x49/0x310 [ 3430.575334][T22587] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 3430.581235][T22587] io_uring_alloc_task_context+0xd9/0x2c0 [ 3430.586954][T22587] ? alloc_fd+0x388/0x3e0 [ 3430.591391][T22587] io_uring_add_tctx_node+0x66/0x200 [ 3430.596714][T22587] io_uring_create+0x17a0/0x1940 [ 3430.601680][T22587] ? vfs_write+0x50c/0x770 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x82000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3430.606352][T22587] __x64_sys_io_uring_setup+0xe1/0x120 [ 3430.611834][T22587] do_syscall_64+0x3d/0x90 [ 3430.616264][T22587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3430.622158][T22587] RIP: 0033:0x4665f9 [ 3430.626038][T22587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3430.645678][T22587] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xc04a01}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x10}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x300100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3430.654110][T22587] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3430.662179][T22587] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3430.670146][T22587] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3430.678203][T22587] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3430.686180][T22587] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x21}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 2 (fault-call:0 fault-nth:19): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xa8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xc04f00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3430.775167][T22624] FAULT_INJECTION: forcing a failure. [ 3430.775167][T22624] name failslab, interval 1, probability 0, space 0, times 0 [ 3430.788386][T22624] CPU: 1 PID: 22624 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3430.797143][T22624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3430.807190][T22624] Call Trace: [ 3430.810478][T22624] dump_stack_lvl+0xb7/0x103 [ 3430.815064][T22624] dump_stack+0x11/0x1a [ 3430.819210][T22624] should_fail+0x23c/0x250 [ 3430.823627][T22624] ? io_wq_create+0x7b/0x6e0 [ 3430.828239][T22624] __should_failslab+0x81/0x90 [ 3430.833066][T22624] should_failslab+0x5/0x20 [ 3430.837567][T22624] __kmalloc+0x66/0x340 [ 3430.841778][T22624] ? should_fail+0xd6/0x250 [ 3430.846278][T22624] io_wq_create+0x7b/0x6e0 [ 3430.850713][T22624] ? kmem_cache_alloc_trace+0x20f/0x310 [ 3430.856257][T22624] ? io_uring_alloc_task_context+0xd9/0x2c0 [ 3430.862145][T22624] io_uring_alloc_task_context+0x181/0x2c0 [ 3430.867980][T22624] ? io_free_work+0x30/0x30 [ 3430.872478][T22624] ? tctx_task_work+0x460/0x460 [ 3430.877329][T22624] io_uring_add_tctx_node+0x66/0x200 [ 3430.882612][T22624] io_uring_create+0x17a0/0x1940 [ 3430.887545][T22624] ? vfs_write+0x50c/0x770 [ 3430.891948][T22624] __x64_sys_io_uring_setup+0xe1/0x120 [ 3430.897440][T22624] do_syscall_64+0x3d/0x90 [ 3430.901903][T22624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3430.907812][T22624] RIP: 0033:0x4665f9 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xaa000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3430.911692][T22624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3430.931380][T22624] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3430.939794][T22624] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3430.947825][T22624] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3430.955790][T22624] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3430.963752][T22624] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3430.971717][T22624] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:42 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x400000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xc0ffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:42 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xfeffffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:42 executing program 2 (fault-call:0 fault-nth:20): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xd0ff20}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3431.071163][T22656] FAULT_INJECTION: forcing a failure. [ 3431.071163][T22656] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.083788][T22656] CPU: 1 PID: 22656 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3431.092546][T22656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3431.102645][T22656] Call Trace: [ 3431.105915][T22656] dump_stack_lvl+0xb7/0x103 [ 3431.110501][T22656] dump_stack+0x11/0x1a [ 3431.114669][T22656] should_fail+0x23c/0x250 00:18:42 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xe0ff20}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x42}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3431.119141][T22656] __should_failslab+0x81/0x90 [ 3431.123906][T22656] should_failslab+0x5/0x20 [ 3431.128439][T22656] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 3431.134218][T22656] ? __cpuhp_state_add_instance_cpuslocked+0x1dc/0x330 [ 3431.141136][T22656] ? io_wq_create+0x217/0x6e0 [ 3431.145865][T22656] io_wq_create+0x217/0x6e0 [ 3431.150389][T22656] io_uring_alloc_task_context+0x181/0x2c0 [ 3431.156657][T22656] ? io_free_work+0x30/0x30 [ 3431.161164][T22656] ? tctx_task_work+0x460/0x460 [ 3431.166013][T22656] io_uring_add_tctx_node+0x66/0x200 00:18:42 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x60}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3431.171402][T22656] io_uring_create+0x17a0/0x1940 [ 3431.176349][T22656] ? vfs_write+0x50c/0x770 [ 3431.180764][T22656] __x64_sys_io_uring_setup+0xe1/0x120 [ 3431.186231][T22656] do_syscall_64+0x3d/0x90 [ 3431.190819][T22656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3431.196769][T22656] RIP: 0033:0x4665f9 [ 3431.200654][T22656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x82}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3431.220365][T22656] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3431.228948][T22656] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3431.236910][T22656] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3431.244941][T22656] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3431.252997][T22656] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3431.261062][T22656] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xffff8000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xf04a00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x401000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:43 executing program 2 (fault-call:0 fault-nth:21): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3431.374269][T22696] FAULT_INJECTION: forcing a failure. [ 3431.374269][T22696] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.386962][T22696] CPU: 0 PID: 22696 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3431.395713][T22696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3431.405795][T22696] Call Trace: [ 3431.409068][T22696] dump_stack_lvl+0xb7/0x103 [ 3431.413663][T22696] dump_stack+0x11/0x1a [ 3431.417815][T22696] should_fail+0x23c/0x250 [ 3431.422239][T22696] __should_failslab+0x81/0x90 [ 3431.427079][T22696] ? io_uring_add_tctx_node+0xdc/0x200 [ 3431.432600][T22696] should_failslab+0x5/0x20 [ 3431.437170][T22696] kmem_cache_alloc_trace+0x49/0x310 [ 3431.442460][T22696] ? xa_load+0x249/0x260 [ 3431.446793][T22696] io_uring_add_tctx_node+0xdc/0x200 [ 3431.452154][T22696] io_uring_create+0x17a0/0x1940 [ 3431.457110][T22696] ? vfs_write+0x50c/0x770 [ 3431.461527][T22696] __x64_sys_io_uring_setup+0xe1/0x120 [ 3431.466982][T22696] do_syscall_64+0x3d/0x90 [ 3431.471441][T22696] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3431.477337][T22696] RIP: 0033:0x4665f9 [ 3431.481658][T22696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3431.501271][T22696] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3431.509734][T22696] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x1000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x110}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xffffc000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x40821e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3431.517704][T22696] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3431.525673][T22696] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3431.533639][T22696] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3431.541603][T22696] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x14ac000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0xfffffffe}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4af000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x160}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 2 (fault-call:0 fault-nth:22): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x204}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3431.718378][T22731] FAULT_INJECTION: forcing a failure. [ 3431.718378][T22731] name failslab, interval 1, probability 0, space 0, times 0 [ 3431.731115][T22731] CPU: 1 PID: 22731 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3431.739869][T22731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3431.750351][T22731] Call Trace: [ 3431.753696][T22731] dump_stack_lvl+0xb7/0x103 [ 3431.758286][T22731] dump_stack+0x11/0x1a [ 3431.762437][T22731] should_fail+0x23c/0x250 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3431.766851][T22731] ? xas_create+0x96b/0xb30 [ 3431.771350][T22731] __should_failslab+0x81/0x90 [ 3431.776109][T22731] should_failslab+0x5/0x20 [ 3431.780609][T22731] kmem_cache_alloc+0x46/0x2e0 [ 3431.785372][T22731] xas_create+0x96b/0xb30 [ 3431.789702][T22731] xas_store+0x70/0xca0 [ 3431.793888][T22731] ? io_wq_create+0x217/0x6e0 [ 3431.798564][T22731] ? io_wq_create+0x4e9/0x6e0 [ 3431.803235][T22731] __xa_store+0xcb/0x320 [ 3431.807507][T22731] xa_store+0x30/0x70 [ 3431.811490][T22731] io_uring_add_tctx_node+0x111/0x200 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4fc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x2040000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3431.816989][T22731] io_uring_create+0x17a0/0x1940 [ 3431.821998][T22731] ? vfs_write+0x50c/0x770 [ 3431.826407][T22731] __x64_sys_io_uring_setup+0xe1/0x120 [ 3431.831861][T22731] do_syscall_64+0x3d/0x90 [ 3431.836271][T22731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3431.842162][T22731] RIP: 0033:0x4665f9 [ 3431.846045][T22731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3431.865644][T22731] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3431.874051][T22731] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3431.882015][T22731] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3431.889987][T22731] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3431.897953][T22731] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3431.905922][T22731] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x4000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 2 (fault-call:0 fault-nth:23): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x540000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x29e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3432.036687][T22765] FAULT_INJECTION: forcing a failure. [ 3432.036687][T22765] name failslab, interval 1, probability 0, space 0, times 0 [ 3432.049334][T22765] CPU: 0 PID: 22765 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3432.058150][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3432.068229][T22765] Call Trace: [ 3432.071528][T22765] dump_stack_lvl+0xb7/0x103 [ 3432.076122][T22765] dump_stack+0x11/0x1a [ 3432.080272][T22765] should_fail+0x23c/0x250 [ 3432.084696][T22765] ? xas_create+0x96b/0xb30 [ 3432.089283][T22765] __should_failslab+0x81/0x90 [ 3432.094053][T22765] should_failslab+0x5/0x20 [ 3432.098551][T22765] kmem_cache_alloc+0x46/0x2e0 [ 3432.103437][T22765] ? xas_create+0x96b/0xb30 [ 3432.107972][T22765] xas_create+0x96b/0xb30 [ 3432.112376][T22765] xas_store+0x70/0xca0 [ 3432.116526][T22765] ? io_wq_create+0x217/0x6e0 [ 3432.121208][T22765] ? io_wq_create+0x4e9/0x6e0 [ 3432.125881][T22765] __xa_store+0xcb/0x320 [ 3432.130125][T22765] xa_store+0x30/0x70 [ 3432.134104][T22765] io_uring_add_tctx_node+0x111/0x200 [ 3432.139473][T22765] io_uring_create+0x17a0/0x1940 [ 3432.144473][T22765] ? vfs_write+0x50c/0x770 [ 3432.148882][T22765] __x64_sys_io_uring_setup+0xe1/0x120 [ 3432.154344][T22765] do_syscall_64+0x3d/0x90 [ 3432.158878][T22765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3432.164773][T22765] RIP: 0033:0x4665f9 00:18:43 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x6040000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:43 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:43 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:43 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2ee}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3432.168733][T22765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3432.188385][T22765] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3432.196813][T22765] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3432.204779][T22765] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3432.212747][T22765] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3432.220778][T22765] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3432.228743][T22765] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x7000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x402}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x7}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x80ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x8000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 2 (fault-call:0 fault-nth:24): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x406}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x90ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x10000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x10}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3432.491376][T22820] FAULT_INJECTION: forcing a failure. [ 3432.491376][T22820] name failslab, interval 1, probability 0, space 0, times 0 [ 3432.504002][T22820] CPU: 1 PID: 22820 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3432.512827][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3432.522879][T22820] Call Trace: [ 3432.526153][T22820] dump_stack_lvl+0xb7/0x103 [ 3432.530773][T22820] dump_stack+0x11/0x1a [ 3432.534928][T22820] should_fail+0x23c/0x250 [ 3432.539392][T22820] ? xas_create+0x96b/0xb30 [ 3432.543895][T22820] __should_failslab+0x81/0x90 [ 3432.548652][T22820] should_failslab+0x5/0x20 [ 3432.553166][T22820] kmem_cache_alloc+0x46/0x2e0 [ 3432.558001][T22820] ? xas_create+0x96b/0xb30 [ 3432.562518][T22820] xas_create+0x96b/0xb30 [ 3432.566850][T22820] xas_store+0x70/0xca0 [ 3432.571003][T22820] ? io_wq_create+0x217/0x6e0 [ 3432.575685][T22820] ? io_wq_create+0x4e9/0x6e0 [ 3432.580413][T22820] __xa_store+0xcb/0x320 [ 3432.584651][T22820] xa_store+0x30/0x70 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x21}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3432.588633][T22820] io_uring_add_tctx_node+0x111/0x200 [ 3432.594029][T22820] io_uring_create+0x17a0/0x1940 [ 3432.598987][T22820] ? vfs_write+0x50c/0x770 [ 3432.603439][T22820] __x64_sys_io_uring_setup+0xe1/0x120 [ 3432.608895][T22820] do_syscall_64+0x3d/0x90 [ 3432.613381][T22820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3432.619276][T22820] RIP: 0033:0x4665f9 [ 3432.623160][T22820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3432.642836][T22820] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3432.651379][T22820] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3432.659345][T22820] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3432.667306][T22820] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3432.675266][T22820] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3432.683231][T22820] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x970000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x24}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x12000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x604}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 2 (fault-call:0 fault-nth:25): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x12010000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x42}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xc04a01}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3432.801502][T22851] FAULT_INJECTION: forcing a failure. [ 3432.801502][T22851] name failslab, interval 1, probability 0, space 0, times 0 [ 3432.814167][T22851] CPU: 1 PID: 22851 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3432.822987][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3432.833030][T22851] Call Trace: [ 3432.836299][T22851] dump_stack_lvl+0xb7/0x103 [ 3432.840890][T22851] dump_stack+0x11/0x1a [ 3432.845089][T22851] should_fail+0x23c/0x250 [ 3432.849502][T22851] ? xas_create+0x96b/0xb30 [ 3432.854023][T22851] __should_failslab+0x81/0x90 [ 3432.858783][T22851] should_failslab+0x5/0x20 [ 3432.863309][T22851] kmem_cache_alloc+0x46/0x2e0 [ 3432.868081][T22851] ? xas_create+0x96b/0xb30 [ 3432.872665][T22851] xas_create+0x96b/0xb30 [ 3432.877019][T22851] xas_store+0x70/0xca0 [ 3432.881786][T22851] ? io_wq_create+0x217/0x6e0 [ 3432.886587][T22851] ? io_wq_create+0x4e9/0x6e0 [ 3432.891259][T22851] __xa_store+0xcb/0x320 [ 3432.895522][T22851] xa_store+0x30/0x70 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xc04f00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3432.899550][T22851] io_uring_add_tctx_node+0x111/0x200 [ 3432.904940][T22851] io_uring_create+0x17a0/0x1940 [ 3432.909940][T22851] ? vfs_write+0x50c/0x770 [ 3432.914352][T22851] __x64_sys_io_uring_setup+0xe1/0x120 [ 3432.919808][T22851] do_syscall_64+0x3d/0x90 [ 3432.924301][T22851] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3432.930193][T22851] RIP: 0033:0x4665f9 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xc0ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3432.934078][T22851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3432.953711][T22851] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3432.962135][T22851] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3432.970139][T22851] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3432.978107][T22851] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3432.986072][T22851] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3432.994031][T22851] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x1ea4b000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x700}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xd0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x60}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x20000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 2 (fault-call:0 fault-nth:26): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:44 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x82}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:44 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xf04a00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:44 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x20ffd000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:44 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3433.263653][T22916] FAULT_INJECTION: forcing a failure. [ 3433.263653][T22916] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.276294][T22916] CPU: 0 PID: 22916 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3433.285115][T22916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3433.295160][T22916] Call Trace: [ 3433.298438][T22916] dump_stack_lvl+0xb7/0x103 [ 3433.303125][T22916] dump_stack+0x11/0x1a [ 3433.307374][T22916] should_fail+0x23c/0x250 [ 3433.311796][T22916] ? xas_create+0x96b/0xb30 [ 3433.316298][T22916] __should_failslab+0x81/0x90 [ 3433.321110][T22916] should_failslab+0x5/0x20 [ 3433.325610][T22916] kmem_cache_alloc+0x46/0x2e0 [ 3433.330377][T22916] ? xas_create+0x96b/0xb30 [ 3433.334878][T22916] xas_create+0x96b/0xb30 [ 3433.339208][T22916] xas_store+0x70/0xca0 [ 3433.343363][T22916] ? io_wq_create+0x217/0x6e0 [ 3433.348123][T22916] ? io_wq_create+0x4e9/0x6e0 [ 3433.352800][T22916] __xa_store+0xcb/0x320 [ 3433.357093][T22916] xa_store+0x30/0x70 [ 3433.361104][T22916] io_uring_add_tctx_node+0x111/0x200 [ 3433.366586][T22916] io_uring_create+0x17a0/0x1940 [ 3433.371526][T22916] ? vfs_write+0x50c/0x770 [ 3433.375974][T22916] __x64_sys_io_uring_setup+0xe1/0x120 [ 3433.381437][T22916] do_syscall_64+0x3d/0x90 [ 3433.385853][T22916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3433.391744][T22916] RIP: 0033:0x4665f9 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xa8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x20ffe000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3433.395710][T22916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3433.415314][T22916] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3433.423721][T22916] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3433.431757][T22916] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3433.439725][T22916] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3433.447689][T22916] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3433.455652][T22916] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:45 executing program 2 (fault-call:0 fault-nth:27): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xaa}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3433.557870][T22939] FAULT_INJECTION: forcing a failure. [ 3433.557870][T22939] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.570513][T22939] CPU: 0 PID: 22939 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3433.579268][T22939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3433.589329][T22939] Call Trace: [ 3433.592600][T22939] dump_stack_lvl+0xb7/0x103 [ 3433.597187][T22939] dump_stack+0x11/0x1a [ 3433.601340][T22939] should_fail+0x23c/0x250 [ 3433.605767][T22939] ? xas_create+0x96b/0xb30 [ 3433.610266][T22939] __should_failslab+0x81/0x90 [ 3433.615020][T22939] should_failslab+0x5/0x20 [ 3433.619524][T22939] kmem_cache_alloc+0x46/0x2e0 [ 3433.624290][T22939] ? xas_create+0x96b/0xb30 [ 3433.628784][T22939] xas_create+0x96b/0xb30 [ 3433.633105][T22939] xas_store+0x70/0xca0 [ 3433.637360][T22939] ? io_wq_create+0x217/0x6e0 [ 3433.642036][T22939] ? io_wq_create+0x4e9/0x6e0 [ 3433.646739][T22939] __xa_store+0xcb/0x320 [ 3433.651060][T22939] xa_store+0x30/0x70 [ 3433.655095][T22939] io_uring_add_tctx_node+0x111/0x200 [ 3433.660468][T22939] io_uring_create+0x17a0/0x1940 [ 3433.665432][T22939] ? vfs_write+0x50c/0x770 [ 3433.669847][T22939] __x64_sys_io_uring_setup+0xe1/0x120 [ 3433.675304][T22939] do_syscall_64+0x3d/0x90 [ 3433.679714][T22939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3433.685603][T22939] RIP: 0033:0x4665f9 00:18:45 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2400}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x204}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x354}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB='\x00\x00']) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000006e380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006e580)={0x61, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xde, "e120b393a1254d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006f580)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "e7b24e6d1163d8"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000070580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000071580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000071780)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000071980)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "bbaeb8d2d4a3fa"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000072980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000072b80)={{0x0, 0x0, 0x0, 0x5, 0xe3, 0x460000000, 0x1, 0x101, 0x3, 0x8, 0x4, 0xaf5, 0x1ff, 0x100000000, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000073b80)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "bf87c1ae752e58"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000074b80)={0x0, 0x0, "96d4767cb2fbfae786a7ec92779f0aaad81c1df63b7c3a187b979995b95dcac4c0c1d980d42e5e4cab0fc32568523cfa97f326cf843f96cf764d6f66df9c641dacd62b0cb29a1b9ce0161eface51525cab0607fc6bdf034a1df735dc49f55f98f74842d6cb707a689fb64d30af4fec90617a6cc80251bb870a55711cafcc5e9fd466991a23007706e24926719ac626e5fb42e00fc0b3a7f4751169498a7598ce948a364241f456ea143958e2476294fc530c00732e460b709b53c80090b0ff1431679cac7410eef17dcdadb5c58fe7abcfa89eb6f808349d38c97f71f789e526ab7801fc277a7a9f260aa90c483ccc93f2fe576910cdbc7b9209c5b8358a28df", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000075b80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000075d80)={0x50, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "94d170cbe32e61"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000076d80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000076f80)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "d2654ee3cb2cf0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000077f80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000078180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000078380)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {0x0, r2}, {}, {}, {}, {r3, r4}, {0x0, r5}, {}, {r6}, {r7, r8}, {r9}, {0x0, r10}, {r11}, {r12}, {r13, r14}, {r15}, {r16}, {}, {0x0, r17}], 0x7, "00d44956910928"}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) 00:18:45 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x21000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x1000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x356}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3433.689491][T22939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3433.709180][T22939] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3433.717585][T22939] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3433.725544][T22939] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3433.733503][T22939] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3433.741472][T22939] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3433.749433][T22939] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:45 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x40000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x14ac000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3433.791675][T22968] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffff" or missing value 00:18:45 executing program 2 (fault-call:0 fault-nth:28): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x402}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x42000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x2000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@errors_continue}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@fat=@uid}, {@dots}, {@nodots}], [{@seclabel}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'user_u'}}, {@context={'context', 0x3d, 'user_u'}}]}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:45 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3433.872271][T22968] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffff" or missing value [ 3433.969858][T23010] FAT-fs (loop5): bogus number of reserved sectors [ 3433.976400][T23010] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3433.986521][T23014] FAULT_INJECTION: forcing a failure. [ 3433.986521][T23014] name failslab, interval 1, probability 0, space 0, times 0 [ 3433.999135][T23014] CPU: 0 PID: 23014 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3434.007888][T23014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.017932][T23014] Call Trace: [ 3434.021197][T23014] dump_stack_lvl+0xb7/0x103 [ 3434.025793][T23014] dump_stack+0x11/0x1a [ 3434.029982][T23014] should_fail+0x23c/0x250 [ 3434.034417][T23014] ? xas_create+0x96b/0xb30 [ 3434.038911][T23014] __should_failslab+0x81/0x90 [ 3434.043668][T23014] should_failslab+0x5/0x20 [ 3434.048171][T23014] kmem_cache_alloc+0x46/0x2e0 [ 3434.053005][T23014] ? xas_create+0x96b/0xb30 [ 3434.057535][T23014] xas_create+0x96b/0xb30 [ 3434.061858][T23014] xas_store+0x70/0xca0 [ 3434.066090][T23014] ? io_wq_create+0x217/0x6e0 [ 3434.070761][T23014] ? io_wq_create+0x4e9/0x6e0 [ 3434.075474][T23014] __xa_store+0xcb/0x320 [ 3434.079746][T23014] xa_store+0x30/0x70 [ 3434.083723][T23014] io_uring_add_tctx_node+0x111/0x200 [ 3434.089126][T23014] io_uring_create+0x17a0/0x1940 [ 3434.094075][T23014] ? vfs_write+0x50c/0x770 [ 3434.098568][T23014] __x64_sys_io_uring_setup+0xe1/0x120 [ 3434.104129][T23014] do_syscall_64+0x3d/0x90 [ 3434.108623][T23014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3434.114519][T23014] RIP: 0033:0x4665f9 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x406}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x60010000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x2040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x604}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:45 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x4000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:45 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x700}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3434.118435][T23014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3434.138034][T23014] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3434.146527][T23014] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3434.154660][T23014] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3434.162625][T23014] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3434.170766][T23014] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3434.178731][T23014] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:46 executing program 2 (fault-call:0 fault-nth:29): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x6000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 5: r0 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x3, 0x5}, {{0x77359400}, 0x3, 0x5}, {{r1, r2/1000+60000}, 0x1, 0x8000, 0x7f}], 0x48) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='+ ']) r4 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680), &(0x7f0000000780)=ANY=[@ANYBLOB="00fba9041f3e384b0f0680816a79f03fcaf29701a4b38381c4d9cc9bf3f1070807db65259c7af578ce9fed0c56aec51b6bec15c7d1835c47ed58c94c43d96facd63c75fd2d95d44077c0bcdd7bb1e0c235e8e54d075c3d2cac91cb31da833b97705057687cb10aa4002be07fa35a3142b72611e3d9c598af321642b2f5b380238533bc11e365e2f686f699f929658629912383496d643b40b0fc985d798dc9a3da13b3aa6fdc2a70d5b8e733b36281"], 0xa9, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000840), &(0x7f0000000880)={0x0, 0xfb, 0xee, 0x4, 0x1, "b93b69992ace1644e3e104bf7ac87d2a", "dcb40bd2ab95425695ae8b0ef8f59931cb353fbc0dbeebd5342e89b859dce7abc7aa44132c901e908ca471344e5c3539714f82fe9e9a626a5c5a55f137ea042f1fc30f66d9d5098d08bbb460ef8d8ded5af8626a1f4cd64ee0b382dcc47f8a1f1be7965095c6a246bbbc865794ff225c5edfc59ca557d3582db49e7c5f6bb453ddd0b7e909e7aa80036c891edbccc1b30ca6bffdd639186e149ac39927f4ac2d3842ff1ba5d9c3e7a110b8b02e660829a2381361a897538346b262e1d11ebbbc282cbed14aecf97fe5c9546bf3848d0061e7d0a81bdcb19c9a"}, 0xee, 0x1) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0x5, &(0x7f0000000180)={[0x6]}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/mnt\x00') socketpair(0x18, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=@flushsa={0x24c, 0x1c, 0x4, 0x70bd26, 0x25dfdbfc, {0xff}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@remote, @in6=@loopback, @in=@multicast1, 0x33, 0x1, 0x0, 0x0, 0x2, 0x2}]}, @tfcpad={0x8, 0x16, 0x1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d3, 0x32}, 0xa, @in6=@private1, 0x3502, 0x0, 0x2, 0xff, 0x7, 0x1, 0xff}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400004d2, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2, 0x1f, 0x9, 0x7fe}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x9}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d5, 0x33}, 0xa, @in=@private=0xa010102, 0x3504, 0x4, 0x3, 0x2, 0x6, 0xea9c, 0x3}]}, @algo_auth={0xb7, 0x1, {{'cmac(tea-generic)\x00'}, 0x378, "abddb2cceb32ae5ed4545af53903558d94353cd0f0486aefa18d09feb19001269a273bdff46f4b9a181c1fa7be239ec116297068433d3b03568d9e842703890e9a064842bf8bd558cea6fe047624bb2a4f7788a441c94e8435170c930a5690d45775a1b5d5c7edf84f60ac6c985cd0"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4, 0x4e24, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) getsockname(r4, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80) inotify_add_watch(r0, &(0x7f00000006c0)='./file0/file0\x00', 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000280)={0x60000008}) epoll_create1(0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_wait(r6, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x7) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x7f000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3434.267665][T23060] FAULT_INJECTION: forcing a failure. [ 3434.267665][T23060] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.280310][T23060] CPU: 0 PID: 23060 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3434.289059][T23060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.299193][T23060] Call Trace: [ 3434.302464][T23060] dump_stack_lvl+0xb7/0x103 [ 3434.307054][T23060] dump_stack+0x11/0x1a [ 3434.311205][T23060] should_fail+0x23c/0x250 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x7000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3434.315667][T23060] ? xas_create+0x96b/0xb30 [ 3434.320170][T23060] __should_failslab+0x81/0x90 [ 3434.324926][T23060] should_failslab+0x5/0x20 [ 3434.329427][T23060] kmem_cache_alloc+0x46/0x2e0 [ 3434.334198][T23060] ? xas_create+0x96b/0xb30 [ 3434.338734][T23060] xas_create+0x96b/0xb30 [ 3434.343069][T23060] xas_store+0x70/0xca0 [ 3434.347229][T23060] ? io_wq_create+0x217/0x6e0 [ 3434.351926][T23060] ? io_wq_create+0x4e9/0x6e0 [ 3434.356619][T23060] __xa_store+0xcb/0x320 [ 3434.360858][T23060] xa_store+0x30/0x70 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x6001}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x9e020000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3434.364831][T23060] io_uring_add_tctx_node+0x111/0x200 [ 3434.370279][T23060] io_uring_create+0x17a0/0x1940 [ 3434.375217][T23060] ? vfs_write+0x50c/0x770 [ 3434.379721][T23060] __x64_sys_io_uring_setup+0xe1/0x120 [ 3434.385173][T23060] do_syscall_64+0x3d/0x90 [ 3434.389581][T23060] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3434.395472][T23060] RIP: 0033:0x4665f9 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xec020000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3434.399359][T23060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3434.419003][T23060] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3434.427414][T23060] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3434.435377][T23060] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3434.443451][T23060] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3434.451415][T23060] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3434.459376][T23060] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3434.470666][T23061] FAT-fs (loop5): bogus number of reserved sectors [ 3434.477186][T23061] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:46 executing program 2 (fault-call:0 fault-nth:30): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2400}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xfeffffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3434.532583][T23061] FAT-fs (loop5): bogus number of reserved sectors [ 3434.539113][T23061] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3434.581737][T23119] FAULT_INJECTION: forcing a failure. [ 3434.581737][T23119] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.594366][T23119] CPU: 1 PID: 23119 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3434.603119][T23119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.613166][T23119] Call Trace: [ 3434.616432][T23119] dump_stack_lvl+0xb7/0x103 [ 3434.621013][T23119] dump_stack+0x11/0x1a [ 3434.625188][T23119] should_fail+0x23c/0x250 [ 3434.629612][T23119] ? xas_create+0x96b/0xb30 [ 3434.634142][T23119] __should_failslab+0x81/0x90 [ 3434.638902][T23119] should_failslab+0x5/0x20 [ 3434.643404][T23119] kmem_cache_alloc+0x46/0x2e0 [ 3434.648162][T23119] ? xas_create+0x96b/0xb30 [ 3434.652662][T23119] xas_create+0x96b/0xb30 [ 3434.657060][T23119] xas_store+0x70/0xca0 [ 3434.661209][T23119] ? io_wq_create+0x217/0x6e0 [ 3434.665931][T23119] ? io_wq_create+0x4e9/0x6e0 [ 3434.670622][T23119] __xa_store+0xcb/0x320 [ 3434.674901][T23119] xa_store+0x30/0x70 [ 3434.678860][T23119] io_uring_add_tctx_node+0x111/0x200 [ 3434.684371][T23119] io_uring_create+0x17a0/0x1940 [ 3434.689336][T23119] ? vfs_write+0x50c/0x770 [ 3434.693797][T23119] __x64_sys_io_uring_setup+0xe1/0x120 [ 3434.699243][T23119] do_syscall_64+0x3d/0x90 [ 3434.703674][T23119] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3434.709545][T23119] RIP: 0033:0x4665f9 00:18:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6769ca3d540e8651f3a59eea0106ca2620d5d196f202bfef69244281c251369ac2886bb6533a5509dda604f5224298f63281bb2abdb545fa107380ba49ef730723ab447eca5977a4053b8cbab058a9c6577236353f4a2f0469c33b8c4ac29e46f1a1cfe68b06fd4cf684209798024e92f416d0986452b79730132545ce124176954e62d785fdb7d1d792a900", @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x9e02}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xff600000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x10000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 2 (fault-call:0 fault-nth:31): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3434.713415][T23119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3434.733067][T23119] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3434.741461][T23119] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3434.749432][T23119] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3434.757466][T23119] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3434.765450][T23119] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3434.773407][T23119] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3434.844228][T23139] FAULT_INJECTION: forcing a failure. [ 3434.844228][T23139] name failslab, interval 1, probability 0, space 0, times 0 [ 3434.856861][T23139] CPU: 1 PID: 23139 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3434.865618][T23139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3434.875695][T23139] Call Trace: [ 3434.878974][T23139] dump_stack_lvl+0xb7/0x103 [ 3434.883564][T23139] dump_stack+0x11/0x1a [ 3434.887802][T23139] should_fail+0x23c/0x250 [ 3434.892213][T23139] ? xas_create+0x96b/0xb30 [ 3434.896713][T23139] __should_failslab+0x81/0x90 [ 3434.901510][T23139] should_failslab+0x5/0x20 [ 3434.906023][T23139] kmem_cache_alloc+0x46/0x2e0 [ 3434.910828][T23139] ? xas_create+0x96b/0xb30 [ 3434.915410][T23139] xas_create+0x96b/0xb30 [ 3434.917640][T23141] FAT-fs (loop5): Unrecognized mount option "giÊ=T†Qó¥žêÊ& ÕÑ–ò¿ïi$BÂQ6šÂˆk¶S:U ݦõ"B˜ö2»*½µEús€ºIïs#«D~ÊYw¤;Œº°X©ÆWr65?J/iÃ;ŒJžFñ¡Ïæ‹ýLö„ —˜N’ôИdR·—0%EÎAv•Nb×…ý·Ñ×’©" or missing value [ 3434.919738][T23139] xas_store+0x70/0xca0 [ 3434.943551][T23139] ? io_wq_create+0x217/0x6e0 [ 3434.948229][T23139] ? io_wq_create+0x4e9/0x6e0 [ 3434.952914][T23139] __xa_store+0xcb/0x320 [ 3434.957150][T23139] xa_store+0x30/0x70 [ 3434.961200][T23139] io_uring_add_tctx_node+0x111/0x200 [ 3434.966626][T23139] io_uring_create+0x17a0/0x1940 [ 3434.971641][T23139] ? vfs_write+0x50c/0x770 [ 3434.976056][T23139] __x64_sys_io_uring_setup+0xe1/0x120 [ 3434.981539][T23139] do_syscall_64+0x3d/0x90 [ 3434.985954][T23139] entry_SYSCALL_64_after_hwframe+0x44/0xae 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x12000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xffff8000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xee02}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xffffc000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x1e824000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3434.991925][T23139] RIP: 0033:0x4665f9 [ 3434.995802][T23139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3435.015403][T23139] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3435.023801][T23139] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3435.031762][T23139] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3435.039727][T23139] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3435.047682][T23139] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3435.055649][T23139] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3435.104122][T23141] FAT-fs (loop5): Unrecognized mount option "giÊ=T†Qó¥žêÊ& ÕÑ–ò¿ïi$BÂQ6šÂˆk¶S:U ݦõ"B˜ö2»*½µEús€ºIïs#«D~ÊYw¤;Œº°X©ÆWr65?J/iÃ;ŒJžFñ¡Ïæ‹ýLö„ —˜N’ôИdR·—0%EÎAv•Nb×…ý·Ñ×’©" or missing value 00:18:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x7, 0xaaaaaaaaaaaac3b, &(0x7f0000000000), 0x90000, &(0x7f0000000000)={[{@dots}], [{@dont_hash}]}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x1) 00:18:46 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xfffffffe}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:46 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x20000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:46 executing program 2 (fault-call:0 fault-nth:32): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:46 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x5403}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:46 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1003f}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3435.208460][T23196] FAULT_INJECTION: forcing a failure. [ 3435.208460][T23196] name failslab, interval 1, probability 0, space 0, times 0 [ 3435.221325][T23196] CPU: 0 PID: 23196 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3435.230149][T23196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3435.240198][T23196] Call Trace: [ 3435.243468][T23196] dump_stack_lvl+0xb7/0x103 [ 3435.248116][T23196] dump_stack+0x11/0x1a [ 3435.252261][T23196] should_fail+0x23c/0x250 [ 3435.256749][T23196] ? xas_create+0x96b/0xb30 [ 3435.261256][T23196] __should_failslab+0x81/0x90 [ 3435.266019][T23196] should_failslab+0x5/0x20 [ 3435.270578][T23196] kmem_cache_alloc+0x46/0x2e0 [ 3435.275335][T23196] ? xas_create+0x96b/0xb30 [ 3435.279842][T23196] xas_create+0x96b/0xb30 [ 3435.284263][T23196] xas_store+0x70/0xca0 [ 3435.288459][T23196] ? io_wq_create+0x217/0x6e0 [ 3435.293228][T23196] ? io_wq_create+0x4e9/0x6e0 [ 3435.297909][T23196] __xa_store+0xcb/0x320 [ 3435.302164][T23196] xa_store+0x30/0x70 [ 3435.306134][T23196] io_uring_add_tctx_node+0x111/0x200 [ 3435.311530][T23196] io_uring_create+0x17a0/0x1940 [ 3435.316532][T23196] ? vfs_write+0x50c/0x770 [ 3435.321056][T23196] __x64_sys_io_uring_setup+0xe1/0x120 [ 3435.326503][T23196] do_syscall_64+0x3d/0x90 [ 3435.331004][T23196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3435.336922][T23196] RIP: 0033:0x4665f9 00:18:47 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0xffffffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:47 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x20ff9000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:47 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x5603}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3435.340807][T23196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3435.361061][T23196] RSP: 002b:00007fc86f372108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 3435.369471][T23196] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3435.377438][T23196] RDX: 0000000020c00000 RSI: 0000000020000480 RDI: 0000000000000dec [ 3435.385404][T23196] RBP: 0000000020000480 R08: 0000000020000240 R09: 0000000020000240 [ 3435.393404][T23196] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000240 [ 3435.401377][T23196] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:47 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:47 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:47 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x20ffd000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:47 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname(r0, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:47 executing program 2 (fault-call:0 fault-nth:33): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:47 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x6000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:47 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:47 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x40000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:47 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x21000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:47 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x80000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.175493][T23245] FAT-fs (loop5): bogus number of reserved sectors [ 3436.182052][T23245] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3436.186993][T23250] FAULT_INJECTION: forcing a failure. [ 3436.186993][T23250] name failslab, interval 1, probability 0, space 0, times 0 [ 3436.201402][T23250] CPU: 1 PID: 23250 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3436.210217][T23250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3436.220332][T23250] Call Trace: 00:18:47 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8200}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x2000, 0xa, &(0x7f0000001740)=[{&(0x7f0000000140)="326b04e9d00ab1d15d62fb5e9f9b61514456f21d241f5a1cf37348d3636560c4bcebe055edd8cfc4c982b7b6ea912f0fc374d35fd9df0df653e7cdfb0495adc94d1f942096e968805c0901a6db317c07d2a42c46bbd1422f751ecb0ef702808261b172d91f8b9c80d08ef9d1ee608c6a8b366e021a52ec78c630c32a282760eddc3ff847622323b31d56e8540c603a30eb534dbcab", 0x95, 0x4}, {&(0x7f0000000080)="3a2fd2cf1965f97416bc65256a00c2f86e800393dd89f67c0161bcd2f80c8d91ac1c55efddee82056745d9938b8aaeec27cb9d70ee2907b2e5bf9e4f95611c249cb6486c5408a65c473b0b32e02cfc694fec87", 0x53, 0x7}, {&(0x7f0000000200)="54430c6d7952fa998d4c870c1650be3b4febd47b6325f2d3b2ab0888f988cace6491b850cd71fff08b8e8c4b20b401c7cfe40e7ad02d02ac3a66918b1eb5d77804ff1f5c08aa863f9f5e402ef9da9db560b71a724adae5d81c74bc9f91f6976cb9b744d6a2583b9f111e916c5c2e6bd211af4b313cde13db7273cef5ccad487b987125f294687b0f88f4393e4fb8ba030e9072fabdcbaa963e1ea3fa5f68718ff1450333d4ade6c1f90ef8b73a9767387de2d86e5443c22da0eb5ed2ec9e0657cdd037d006c0a480cd14bd79776cf0564a74ba0aa2472fcf136ea2dbf3ac39bc034f577837e90172bba54de6ba204d4d09c684", 0xf3, 0x6}, {&(0x7f0000000300)="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", 0x1000, 0x7}, {&(0x7f0000001300)="a0e5033aaa40dedea0f739c3d225c5a2b16de61e9a847df26e042d464bd8e1d5aa50a314a25b8d282cf056e30a8862b30037211b35d13d2abf22ebe49f12db25655daa4a33a43931e2a3f774b51be8512322bc294a6eaba11d484bf5ca122c71b31594f206d0c7af75d70240b0c133ecdc2b02c13cca31b7c5e9600a9e6229b7e66161227687e420913eb04475451f89d5e542034b04e4326107397217d4aa592ceae695ce1e2765cdef1d32342724bd8f70d88d614e687cb206bf33886f78d89b2af0cbe925a3c30f587755", 0xcc, 0x8}, {&(0x7f0000001400)="cb0a66966914616c4dcd75e6f39a4ba0fe7a00ee85f42e352e026d21336d0429675c8584f574835753267408b447ac1835b923b176b7b6715783aaf4162e715958e8ba0983b585dcfd79c2a3137da4a09dfa6471a5fcca7318a4ad59891f82fc8c513d048a88225205b04a57390e45e2e4a97784e61033f2e767f7c1ee3e7eaef81b0f68b8ddab20f635438e6e8bdec1", 0x90, 0x100000000005}, {&(0x7f0000001840)="15fe285c9607b8634e2ff229b228cd154c2de1f1b6990bdd438dfcf9f39b09e4e1bf2c09fb187b943c437c187e47c39eeb4983b5c00e64e496d483cf9a4c1e4900b496d3c18f536680dd23c4232d347a14291cbf62582f916ea79f18e3c320f92b780203689265dc31537aa8", 0x6c, 0x2}, {&(0x7f0000000000)="f7", 0x1, 0x6}, {&(0x7f0000001580)="79b75c93efeb1fbf8b95eecf4756fca8eaf1b0fc7eb7147f39bd9e19c6479135747ad3121b39822a9c55a10f99a9d285e68c4854242204908704791dd7c2cfa425bddac6f9e9ebfb1200125b4b8966478a5c2ab1e4f82206cd39c531410137e7688b0996aa78dc62ab399ea04fd2b3eb39df62993345127f57a7ced6752fa847c462d442b86839f9ed08b0176ff31cfbe640db71fc5c91f3db2ebd07ac60d60a3141575b77f18b8052de1824f956b544a4b7d12cf9795f3a24b2bdf4c981d1082f617526df6fbcb7", 0xc8, 0x7}, {&(0x7f0000001680)="bdd4f3bc0948936e6038f00ada4831930a947738c12680e5f1cb35395a70422fda8bf40ec6e235f6aabac952f26f7b937c318fa13c3b3561082289695ca7eaa5d6524e9c9f963aef04f2ed9c28415e2ba70117dc96924cd63ce507adbc4bfb6eb5f204eaab9f7d88eaa74e5c604221184b5e82b738200e48a754965cf172a7b7040577d86a92034f816527617ea919fe4c3a25a7cbb05ef8108cc167fb5f436e591ad59033fd06fd61571fbdf6f37646bba0", 0xb2}], 0x1e64c0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) [ 3436.223604][T23250] dump_stack_lvl+0xb7/0x103 [ 3436.228195][T23250] dump_stack+0x11/0x1a [ 3436.232368][T23250] should_fail+0x23c/0x250 [ 3436.236865][T23250] ? vm_area_dup+0x44/0x120 [ 3436.241446][T23250] __should_failslab+0x81/0x90 [ 3436.246212][T23250] should_failslab+0x5/0x20 [ 3436.250738][T23250] kmem_cache_alloc+0x46/0x2e0 [ 3436.255545][T23250] vm_area_dup+0x44/0x120 [ 3436.259882][T23250] ? kmem_cache_alloc+0x1fb/0x2e0 [ 3436.264914][T23250] ? xas_create+0x96b/0xb30 [ 3436.269489][T23250] ? xas_create+0xae3/0xb30 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x83000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c00aa9719994b85875233e67396d25154df2fea45c3ad33b19c858f94ad23dd55ba7c25a60dd2edf27c6e74709f6de69f4bd1c2c6814003a91f81efca2e4b56abbb69969e3d363e2af39a8699b625e4d6187f8b5339b43892959bc18a389b7612430f3fd200f9d151296f31bb620ac855b1c3db1654f7a8d5a5c2e93eeb212582c5de2ece2adb2e42f178e3d3ede8ac6c80319ab7f000"/164, @ANYRES64=0x0, @ANYRESHEX=r0]) [ 3436.273987][T23250] __split_vma+0x82/0x320 [ 3436.278318][T23250] ? vmacache_find+0x313/0x320 [ 3436.283718][T23250] __do_munmap+0x27c/0x1330 [ 3436.288478][T23250] ? __xas_nomem+0xfc/0x270 [ 3436.292980][T23250] mmap_region+0x5aa/0x1400 [ 3436.297488][T23250] do_mmap+0x73f/0xc40 [ 3436.301627][T23250] vm_mmap_pgoff+0xf9/0x1d0 [ 3436.306146][T23250] ksys_mmap_pgoff+0x2a8/0x380 [ 3436.310904][T23250] do_syscall_64+0x3d/0x90 [ 3436.315446][T23250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3436.321520][T23250] RIP: 0033:0x466642 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20c020}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x300800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.325425][T23250] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3436.345020][T23250] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3436.353437][T23250] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3436.361412][T23250] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffc000 [ 3436.369384][T23250] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3436.377356][T23250] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3436.385976][T23250] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:48 executing program 2 (fault-call:0 fault-nth:34): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x3f000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x400000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xa800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.487257][T23306] FAULT_INJECTION: forcing a failure. [ 3436.487257][T23306] name failslab, interval 1, probability 0, space 0, times 0 [ 3436.499972][T23306] CPU: 0 PID: 23306 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3436.508790][T23306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3436.518846][T23306] Call Trace: [ 3436.522114][T23306] dump_stack_lvl+0xb7/0x103 [ 3436.526696][T23306] dump_stack+0x11/0x1a [ 3436.530846][T23306] should_fail+0x23c/0x250 [ 3436.535262][T23306] ? anon_vma_clone+0x8d/0x380 [ 3436.540106][T23306] __should_failslab+0x81/0x90 [ 3436.544862][T23306] should_failslab+0x5/0x20 [ 3436.549372][T23306] kmem_cache_alloc+0x46/0x2e0 [ 3436.554142][T23306] anon_vma_clone+0x8d/0x380 [ 3436.558843][T23306] __split_vma+0x134/0x320 [ 3436.563358][T23306] ? vmacache_find+0x313/0x320 [ 3436.568128][T23306] __do_munmap+0x27c/0x1330 [ 3436.572643][T23306] ? __xas_nomem+0xfc/0x270 [ 3436.577139][T23306] mmap_region+0x5aa/0x1400 [ 3436.581652][T23306] do_mmap+0x73f/0xc40 [ 3436.585717][T23306] vm_mmap_pgoff+0xf9/0x1d0 [ 3436.590234][T23306] ksys_mmap_pgoff+0x2a8/0x380 [ 3436.594994][T23306] do_syscall_64+0x3d/0x90 [ 3436.599405][T23306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3436.605300][T23306] RIP: 0033:0x466642 [ 3436.609178][T23306] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3436.628816][T23306] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x7}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x40000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'U+', 0x9}, 0x16, 0x2) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x30, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800000) 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x600000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x80ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.637219][T23306] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3436.645178][T23306] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffc000 [ 3436.653221][T23306] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3436.661178][T23306] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3436.669195][T23306] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3436.680367][T23322] FAT-fs (loop5): bogus number of reserved sectors 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xc0ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xaa00}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 2 (fault-call:0 fault-nth:35): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x8}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3436.687450][T23322] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1003f}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.752494][T23322] FAT-fs (loop5): bogus number of reserved sectors [ 3436.759016][T23322] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3436.775570][T23351] FAULT_INJECTION: forcing a failure. [ 3436.775570][T23351] name failslab, interval 1, probability 0, space 0, times 0 [ 3436.788197][T23351] CPU: 0 PID: 23351 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x42000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3436.796943][T23351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3436.806990][T23351] Call Trace: [ 3436.810336][T23351] dump_stack_lvl+0xb7/0x103 [ 3436.814919][T23351] dump_stack+0x11/0x1a [ 3436.819140][T23351] should_fail+0x23c/0x250 [ 3436.823697][T23351] ? vm_area_alloc+0x28/0xa0 [ 3436.828282][T23351] __should_failslab+0x81/0x90 [ 3436.833046][T23351] should_failslab+0x5/0x20 [ 3436.837543][T23351] kmem_cache_alloc+0x46/0x2e0 [ 3436.842396][T23351] vm_area_alloc+0x28/0xa0 [ 3436.846803][T23351] mmap_region+0x741/0x1400 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xe0ff20}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.851301][T23351] do_mmap+0x73f/0xc40 [ 3436.855382][T23351] vm_mmap_pgoff+0xf9/0x1d0 [ 3436.859954][T23351] ksys_mmap_pgoff+0x2a8/0x380 [ 3436.864757][T23351] do_syscall_64+0x3d/0x90 [ 3436.869170][T23351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3436.875056][T23351] RIP: 0033:0x466642 [ 3436.879018][T23351] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:18:48 executing program 5: io_uring_setup(0x8a0, &(0x7f0000000140)={0x0, 0xba7b, 0x0, 0x2, 0x143}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6769643d285a78217372c87c4c39098f8ea87a298a5b36e82c779e80a47a7c8682c65d60f77df8e8b56251f0c99c634fe2872f1bc7d14d", @ANYRESHEX, @ANYBLOB=',\x00']) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{r1, r2+60000000}, {0x77359400}}, &(0x7f0000000240)) 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6c030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x12}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xf0351e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3436.898766][T23351] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3436.907197][T23351] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3436.915254][T23351] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffc000 [ 3436.923287][T23351] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3436.931248][T23351] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3436.939209][T23351] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:48 executing program 2 (fault-call:0 fault-nth:36): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x40000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3437.021884][T23391] FAT-fs (loop5): Unrecognized mount option "gid=(Zx!srÈ|L9 Ž¨z)Š[6è" or missing value [ 3437.032268][T23389] FAULT_INJECTION: forcing a failure. [ 3437.032268][T23389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3437.045515][T23389] CPU: 1 PID: 23389 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3437.054265][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3437.064317][T23389] Call Trace: [ 3437.067597][T23389] dump_stack_lvl+0xb7/0x103 [ 3437.072187][T23389] dump_stack+0x11/0x1a [ 3437.076335][T23389] should_fail+0x23c/0x250 [ 3437.080759][T23389] __alloc_pages+0x102/0x320 [ 3437.085344][T23389] alloc_pages+0x2e8/0x340 [ 3437.089756][T23389] pte_alloc_one+0x29/0xb0 [ 3437.094169][T23389] __pte_alloc+0x2f/0x210 [ 3437.098551][T23389] remap_pfn_range_notrack+0x5b7/0x770 [ 3437.104046][T23389] remap_pfn_range+0x87/0xe0 [ 3437.108632][T23389] io_uring_mmap+0x232/0x260 [ 3437.113218][T23389] mmap_region+0xbcb/0x1400 [ 3437.117791][T23389] do_mmap+0x73f/0xc40 00:18:48 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x80000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x6e030000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x21}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3437.121854][T23389] vm_mmap_pgoff+0xf9/0x1d0 [ 3437.126349][T23389] ksys_mmap_pgoff+0x2a8/0x380 [ 3437.131126][T23389] do_syscall_64+0x3d/0x90 [ 3437.135533][T23389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3437.141481][T23389] RIP: 0033:0x466642 [ 3437.145357][T23389] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:18:48 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x42}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3437.164954][T23389] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3437.173618][T23389] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3437.181577][T23389] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffc000 [ 3437.189536][T23389] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3437.197494][T23389] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3437.205476][T23389] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:48 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x7f000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3437.229002][T23391] FAT-fs (loop5): Unrecognized mount option "gid=(Zx!srÈ|L9 Ž¨z)Š[6è" or missing value 00:18:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="653dbe754d8d11a9604450c333effafb372d00550b9f4c797a357114", @ANYRESHEX, @ANYBLOB=',\x00']) getgroups(0x1, &(0x7f0000000340)=[0xee00]) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2fa, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="43cf98e48a4e9ec7b8a54c9f82d38642b4b773481dc432758fa53c86f9", 0x1d, 0x7}, {&(0x7f0000000180)="e103f17a55b6cdf7e69b6a8b384ec18f89f91834c3e932849586843816f0562c7153ad828b4cc19e1eab06640f9f0cf54e30a434392e05b56832fd5a48ae35c8469970a9873d3099db77c15d867cd7237224553fe45dfa8d5c8bb766b4beab660dde90d15d781f9893a3c6b99f3dcfcad0eff9a7542d254b974dbd", 0x7b, 0x6}, {&(0x7f0000000200)="d151e016577f89c54137bf3aebb7b75b3b443ade38107e5c39ad4afcef0ff81c2d52b59d0f1829835d519b2f58ff7ab020641c9de52cfec39bc6cdd0e2d000119716b44ce0819e159853a1f4285815c06c5cfe4dfec0ec7e8633e3fe09206da5e804119d1c6055aaecb6b7cb8f22d2717b61f67682975f0abc27e5f07fca0d1f459be7584cd9205d76c75a12bba699bbe3e2bf072d449089d319ffc30b5c5a35da68befc85cff677fc47f55f885f5aebf5d090c415dfd1fb1c9455f1d8f1", 0xbe, 0x5}], 0x4000, &(0x7f0000000440)={[{@dots}, {@fat=@nocase}, {@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@fat=@gid={'gid', 0x3d, r0}}, {@dots}], [{@obj_role={'obj_role', 0x3d, ':['}}, {@euid_lt={'euid<', r1}}, {@subj_type={'subj_type', 0x3d, 'msdos\x00'}}, {@obj_role}, {@obj_user={'obj_user', 0x3d, 'msdos\x00'}}, {@permit_directio}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise}]}) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x83000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x60}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 2 (fault-call:0 fault-nth:37): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xfeffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3437.323474][T23448] FAULT_INJECTION: forcing a failure. [ 3437.323474][T23448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3437.336750][T23448] CPU: 0 PID: 23448 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3437.345506][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3437.355556][T23448] Call Trace: [ 3437.358852][T23448] dump_stack_lvl+0xb7/0x103 [ 3437.363432][T23448] dump_stack+0x11/0x1a [ 3437.367588][T23448] should_fail+0x23c/0x250 [ 3437.372049][T23448] __alloc_pages+0x102/0x320 [ 3437.376637][T23448] alloc_pages+0x2e8/0x340 [ 3437.381426][T23448] pte_alloc_one+0x29/0xb0 [ 3437.385849][T23448] __pte_alloc+0x2f/0x210 [ 3437.390255][T23448] remap_pfn_range_notrack+0x5b7/0x770 [ 3437.395729][T23448] remap_pfn_range+0x87/0xe0 [ 3437.400317][T23448] io_uring_mmap+0x232/0x260 [ 3437.404931][T23448] mmap_region+0xbcb/0x1400 [ 3437.409432][T23448] do_mmap+0x73f/0xc40 [ 3437.413500][T23448] vm_mmap_pgoff+0xf9/0x1d0 [ 3437.418003][T23448] ksys_mmap_pgoff+0x2a8/0x380 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x112}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20c020}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xff600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3437.422765][T23448] do_syscall_64+0x3d/0x90 [ 3437.427176][T23448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3437.433110][T23448] RIP: 0033:0x466642 [ 3437.436993][T23448] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3437.456685][T23448] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3437.465080][T23448] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x300800}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x160}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3437.473040][T23448] RDX: 0000000000000003 RSI: 0000000000024140 RDI: 0000000020ffc000 [ 3437.481030][T23448] RBP: 0000000020ffc000 R08: 0000000000000004 R09: 0000000000000000 [ 3437.488999][T23448] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3437.497007][T23448] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3437.554787][T23482] FAT-fs (loop5): Unrecognized mount option "e=¾uM©`DPÃ3ïúû7-" or missing value [ 3437.611258][T23482] loop5: detected capacity change from 0 to 1 [ 3437.617651][T23482] FAT-fs (loop5): Unrecognized mount option "obj_role=:[" or missing value 00:18:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x810, 0xffffffffffffffff, 0x8000000) 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xffff8000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x204}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x400000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 2 (fault-call:0 fault-nth:38): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3437.691275][T23482] FAT-fs (loop5): Unrecognized mount option "e=¾uM©`DPÃ3ïúû7-" or missing value [ 3437.723943][T23499] FAULT_INJECTION: forcing a failure. [ 3437.723943][T23499] name failslab, interval 1, probability 0, space 0, times 0 [ 3437.736627][T23499] CPU: 1 PID: 23499 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3437.745380][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3437.755427][T23499] Call Trace: [ 3437.758712][T23499] dump_stack_lvl+0xb7/0x103 [ 3437.763314][T23499] dump_stack+0x11/0x1a [ 3437.767517][T23499] should_fail+0x23c/0x250 [ 3437.772030][T23499] ? vm_area_dup+0x44/0x120 [ 3437.776545][T23499] __should_failslab+0x81/0x90 [ 3437.781295][T23499] should_failslab+0x5/0x20 [ 3437.785796][T23499] kmem_cache_alloc+0x46/0x2e0 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x29e}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x600000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3437.790558][T23499] vm_area_dup+0x44/0x120 [ 3437.794880][T23499] ? __pte_alloc+0x1bb/0x210 [ 3437.799472][T23499] ? perf_event_mmap+0x14c/0xce0 [ 3437.804402][T23499] ? pfn_modify_allowed+0xa2/0x1c0 [ 3437.809584][T23499] ? remap_pfn_range_notrack+0x71c/0x770 [ 3437.815259][T23499] __split_vma+0x82/0x320 [ 3437.819584][T23499] ? vmacache_find+0x2df/0x320 [ 3437.824426][T23499] __do_munmap+0x27c/0x1330 [ 3437.828931][T23499] ? up_write+0x25/0xc0 [ 3437.833140][T23499] ? vma_link+0x188/0x1a0 [ 3437.837467][T23499] mmap_region+0x5aa/0x1400 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x6040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x70671e}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3437.841964][T23499] do_mmap+0x73f/0xc40 [ 3437.846030][T23499] vm_mmap_pgoff+0xf9/0x1d0 [ 3437.850645][T23499] ksys_mmap_pgoff+0x2a8/0x380 [ 3437.855428][T23499] do_syscall_64+0x3d/0x90 [ 3437.859849][T23499] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3437.865739][T23499] RIP: 0033:0x466642 [ 3437.869645][T23499] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xffffc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3437.889318][T23499] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3437.897719][T23499] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3437.905682][T23499] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3437.913652][T23499] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 [ 3437.921612][T23499] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3437.929572][T23499] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xfff, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646f7473b354089639e386db2c00"]) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'L+', 0x7}, 0x16, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2ec}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 2 (fault-call:0 fault-nth:39): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x80ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x7000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xfffffffe}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3437.996250][T23537] FAT-fs (loop5): bogus number of reserved sectors [ 3438.002900][T23537] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3438.054570][T23556] FAULT_INJECTION: forcing a failure. [ 3438.054570][T23556] name failslab, interval 1, probability 0, space 0, times 0 [ 3438.067260][T23556] CPU: 0 PID: 23556 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3438.076056][T23556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.086184][T23556] Call Trace: [ 3438.089460][T23556] dump_stack_lvl+0xb7/0x103 [ 3438.093452][T23559] loop5: detected capacity change from 0 to 7 [ 3438.094066][T23556] dump_stack+0x11/0x1a [ 3438.104343][T23556] should_fail+0x23c/0x250 [ 3438.108100][T23559] FAT-fs (loop5): Unrecognized mount option "dots³T–9ã†Û" or missing value [ 3438.108821][T23556] ? anon_vma_clone+0x8d/0x380 [ 3438.122230][T23556] __should_failslab+0x81/0x90 [ 3438.127012][T23556] should_failslab+0x5/0x20 [ 3438.131515][T23556] kmem_cache_alloc+0x46/0x2e0 [ 3438.136281][T23556] anon_vma_clone+0x8d/0x380 [ 3438.140973][T23556] __split_vma+0x134/0x320 [ 3438.145442][T23556] ? vmacache_find+0x2df/0x320 [ 3438.150203][T23556] __do_munmap+0x27c/0x1330 [ 3438.154703][T23556] ? up_write+0x25/0xc0 [ 3438.158845][T23556] ? vma_link+0x188/0x1a0 [ 3438.163168][T23556] mmap_region+0x5aa/0x1400 [ 3438.167673][T23556] do_mmap+0x73f/0xc40 [ 3438.171741][T23556] vm_mmap_pgoff+0xf9/0x1d0 [ 3438.176240][T23556] ksys_mmap_pgoff+0x2a8/0x380 [ 3438.180993][T23556] do_syscall_64+0x3d/0x90 [ 3438.185495][T23556] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3438.191404][T23556] RIP: 0033:0x466642 00:18:49 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x402}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:49 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0xffffffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:49 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xc0ffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:49 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40004) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) accept4(r1, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0x800) 00:18:49 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x10000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3438.195292][T23556] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3438.215079][T23556] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3438.223484][T23556] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3438.231452][T23556] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3438.239443][T23556] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 [ 3438.247414][T23556] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x10010000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3438.255396][T23556] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:50 executing program 2 (fault-call:0 fault-nth:40): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:50 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xe0ff20}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1e35f000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x406}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3438.307648][T23589] FAT-fs (loop5): bogus number of reserved sectors [ 3438.314224][T23589] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3438.390790][T23606] FAT-fs (loop5): bogus number of reserved sectors [ 3438.397326][T23606] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3438.409346][T23607] FAULT_INJECTION: forcing a failure. [ 3438.409346][T23607] name failslab, interval 1, probability 0, space 0, times 0 [ 3438.421980][T23607] CPU: 1 PID: 23607 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3438.430731][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.440772][T23607] Call Trace: [ 3438.444041][T23607] dump_stack_lvl+0xb7/0x103 [ 3438.448687][T23607] dump_stack+0x11/0x1a [ 3438.452830][T23607] should_fail+0x23c/0x250 [ 3438.457244][T23607] ? vm_area_dup+0x44/0x120 [ 3438.461739][T23607] __should_failslab+0x81/0x90 [ 3438.466495][T23607] should_failslab+0x5/0x20 [ 3438.471001][T23607] kmem_cache_alloc+0x46/0x2e0 [ 3438.475771][T23607] vm_area_dup+0x44/0x120 [ 3438.480118][T23607] __split_vma+0x82/0x320 [ 3438.484443][T23607] ? vmacache_find+0x2df/0x320 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x604}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x700}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3438.489202][T23607] __do_munmap+0x2ee/0x1330 [ 3438.493720][T23607] ? up_write+0x25/0xc0 [ 3438.497869][T23607] ? vma_link+0x188/0x1a0 [ 3438.502202][T23607] mmap_region+0x5aa/0x1400 [ 3438.506715][T23607] do_mmap+0x73f/0xc40 [ 3438.510780][T23607] vm_mmap_pgoff+0xf9/0x1d0 [ 3438.515291][T23607] ksys_mmap_pgoff+0x2a8/0x380 [ 3438.520052][T23607] do_syscall_64+0x3d/0x90 [ 3438.524509][T23607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3438.530401][T23607] RIP: 0033:0x466642 [ 3438.534333][T23607] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3438.553939][T23607] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3438.562349][T23607] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3438.570350][T23607] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3438.578345][T23607] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 00:18:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="0e6790aa074acdf8a197342c00"]) 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:50 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20c02000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x1200}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 2 (fault-call:0 fault-nth:41): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3438.586311][T23607] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3438.594290][T23607] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3438.675610][T23649] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffgªJÍø¡—4" or missing value [ 3438.694415][T23659] FAULT_INJECTION: forcing a failure. [ 3438.694415][T23659] name failslab, interval 1, probability 0, space 0, times 0 [ 3438.707069][T23659] CPU: 0 PID: 23659 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3438.715839][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3438.725881][T23659] Call Trace: [ 3438.729149][T23659] dump_stack_lvl+0xb7/0x103 [ 3438.733728][T23659] dump_stack+0x11/0x1a [ 3438.737874][T23659] should_fail+0x23c/0x250 [ 3438.742289][T23659] ? anon_vma_clone+0x8d/0x380 [ 3438.747048][T23659] __should_failslab+0x81/0x90 [ 3438.751807][T23659] should_failslab+0x5/0x20 [ 3438.756389][T23659] kmem_cache_alloc+0x46/0x2e0 [ 3438.761196][T23659] anon_vma_clone+0x8d/0x380 [ 3438.765881][T23659] __split_vma+0x134/0x320 [ 3438.770292][T23659] ? vmacache_find+0x2df/0x320 [ 3438.775054][T23659] __do_munmap+0x2ee/0x1330 [ 3438.779549][T23659] ? up_write+0x25/0xc0 [ 3438.783700][T23659] ? vma_link+0x188/0x1a0 [ 3438.788108][T23659] mmap_region+0x5aa/0x1400 [ 3438.792652][T23659] do_mmap+0x73f/0xc40 [ 3438.796710][T23659] vm_mmap_pgoff+0xf9/0x1d0 [ 3438.801247][T23659] ksys_mmap_pgoff+0x2a8/0x380 [ 3438.806074][T23659] do_syscall_64+0x3d/0x90 [ 3438.810497][T23659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3438.816394][T23659] RIP: 0033:0x466642 00:18:50 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x2040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x1201}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20ffe000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x7}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x21000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3438.820275][T23659] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3438.839872][T23659] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3438.848283][T23659] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 [ 3438.856256][T23659] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3438.864216][T23659] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 [ 3438.872176][T23659] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3438.880197][T23659] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3438.896767][T23649] FAT-fs (loop5): Unrecognized mount option "gid=0xffffffffffffffffgªJÍø¡—4" or missing value 00:18:50 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x121c, 0x15, 0x200, 0x70bd27, 0x25dfdbfc, {0x27, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "584f7e962ce25de34f21133caa5e1c3b52628c98920fb4b2f02454f2f32bc6b96542a61fbdec41ab0f1cfb4833c4649c5f4799b78ee60478c6b3e73b1c43bc8d03fd0dc3248badd85b79c13b792cd993"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "2c9624c417ef890b465dfb72625e0f05e7ef7ddbe0d1a2319c42f9ddc1786be4937f97e0455734289b7afcb428f11b1de187f8264f45aa55ea548cbad582cfa1d26f10dbbc984dfb46046f7344cec99812e426a2297dd5674bf19f4984b7771db60dd79af3c0bd8c57571565987295b8e050d5df966c9120ae100c2fd9c9382685ceb353d43859cc2d1c32d7b81ddb9e51b6720847a5f8b8ed73ee8bb9"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "ab21a8bd79b85da0264502ef9f0d6a349a36b9abbf66fdb94f04a841854471bc401d7588ec5ea2d38aa8a820f7e047254ee7e4e64e96fe82ae13094a406598ffacc4eff2e136f0f29e61d9ee338360f39bfe87eb50692bea6d4905b9f6880311c4847602ab92347a866d3385"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "49b7119eb6296df790e2acf8c8ae563fe701dd5d2f48ab2d087d0f8c9aa5969f6ee5e2f1882e863e3ef5b91444c0ba252a70af616c272512c367be658931498f91261a46a0ee7453567da432a9dee5bcb61718f471e5ca9754adaa5a1ef6af918e9ccc95a865db621d5e4821362198b53750461ac9f238e660cdfcab370d71d53f28f3e8989906cd445ff08cb833cb91e793"}]}, 0x121c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x24000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 2 (fault-call:0 fault-nth:42): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:50 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x4000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2100}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x3f000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3439.037426][T23713] FAULT_INJECTION: forcing a failure. [ 3439.037426][T23713] name failslab, interval 1, probability 0, space 0, times 0 [ 3439.045842][T23712] loop5: detected capacity change from 0 to 264192 [ 3439.050065][T23713] CPU: 1 PID: 23713 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3439.065270][T23713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3439.075311][T23713] Call Trace: [ 3439.078582][T23713] dump_stack_lvl+0xb7/0x103 [ 3439.083494][T23713] dump_stack+0x11/0x1a 00:18:50 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4200}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3439.087711][T23713] should_fail+0x23c/0x250 [ 3439.092144][T23713] ? vm_area_alloc+0x28/0xa0 [ 3439.096782][T23713] __should_failslab+0x81/0x90 [ 3439.101538][T23713] should_failslab+0x5/0x20 [ 3439.106114][T23713] kmem_cache_alloc+0x46/0x2e0 [ 3439.110896][T23713] vm_area_alloc+0x28/0xa0 [ 3439.115305][T23713] mmap_region+0x741/0x1400 [ 3439.119806][T23713] do_mmap+0x73f/0xc40 [ 3439.124028][T23713] vm_mmap_pgoff+0xf9/0x1d0 [ 3439.128526][T23713] ksys_mmap_pgoff+0x2a8/0x380 [ 3439.133283][T23713] do_syscall_64+0x3d/0x90 [ 3439.137782][T23713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3439.143707][T23713] RIP: 0033:0x466642 [ 3439.147623][T23713] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3439.167224][T23713] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3439.175624][T23713] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:18:50 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x12}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3439.179435][T23712] FAT-fs (loop5): bogus number of reserved sectors [ 3439.183605][T23713] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3439.183620][T23713] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 [ 3439.183630][T23713] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3439.183643][T23713] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 [ 3439.190118][T23712] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x40000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x5400}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x6040000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 2 (fault-call:0 fault-nth:43): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x21}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3439.324611][T23752] loop5: detected capacity change from 0 to 264192 [ 3439.331580][T23752] FAT-fs (loop5): bogus number of reserved sectors [ 3439.338102][T23752] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x42000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x6000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3439.412607][T23767] FAULT_INJECTION: forcing a failure. [ 3439.412607][T23767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3439.425887][T23767] CPU: 0 PID: 23767 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3439.434658][T23767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3439.444707][T23767] Call Trace: [ 3439.447979][T23767] dump_stack_lvl+0xb7/0x103 [ 3439.452579][T23767] dump_stack+0x11/0x1a [ 3439.456729][T23767] should_fail+0x23c/0x250 [ 3439.461346][T23767] __alloc_pages+0x102/0x320 [ 3439.465935][T23767] alloc_pages+0x2e8/0x340 [ 3439.470368][T23767] pte_alloc_one+0x29/0xb0 [ 3439.474869][T23767] __pte_alloc+0x2f/0x210 [ 3439.479279][T23767] remap_pfn_range_notrack+0x5b7/0x770 [ 3439.484734][T23767] remap_pfn_range+0x87/0xe0 [ 3439.489358][T23767] io_uring_mmap+0x232/0x260 [ 3439.493940][T23767] mmap_region+0xbcb/0x1400 [ 3439.498501][T23767] do_mmap+0x73f/0xc40 [ 3439.502582][T23767] vm_mmap_pgoff+0xf9/0x1d0 [ 3439.507080][T23767] ksys_mmap_pgoff+0x2a8/0x380 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x6001}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3439.511840][T23767] do_syscall_64+0x3d/0x90 [ 3439.516259][T23767] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3439.522169][T23767] RIP: 0033:0x466642 [ 3439.526108][T23767] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 3439.545714][T23767] RSP: 002b:00007fc86f3720f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 3439.554121][T23767] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 0000000000466642 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x60ff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x7000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3439.562086][T23767] RDX: 0000000000000003 RSI: 0000000000040000 RDI: 0000000020c00000 [ 3439.570050][T23767] RBP: 0000000020c00000 R08: 0000000000000004 R09: 0000000010000000 [ 3439.578048][T23767] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 [ 3439.586016][T23767] R13: 0000000020c00000 R14: 0000000020000040 R15: 0000000020ffc000 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x42}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:51 executing program 2 (fault-call:0 fault-nth:44): syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x60010000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x7f00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x60}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3439.719587][T23799] FAULT_INJECTION: forcing a failure. [ 3439.719587][T23799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3439.732664][T23799] CPU: 1 PID: 23799 Comm: syz-executor.2 Not tainted 5.14.0-rc7-syzkaller #0 [ 3439.741505][T23799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3439.751554][T23799] Call Trace: [ 3439.754826][T23799] dump_stack_lvl+0xb7/0x103 [ 3439.759413][T23799] dump_stack+0x11/0x1a [ 3439.763627][T23799] should_fail+0x23c/0x250 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x204}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x9700}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3439.768047][T23799] should_fail_usercopy+0x16/0x20 [ 3439.773077][T23799] _copy_to_user+0x1c/0x90 [ 3439.777485][T23799] simple_read_from_buffer+0xab/0x120 [ 3439.782936][T23799] proc_fail_nth_read+0xf6/0x140 [ 3439.787909][T23799] ? rw_verify_area+0x136/0x250 [ 3439.792773][T23799] ? proc_fault_inject_write+0x200/0x200 [ 3439.798468][T23799] vfs_read+0x154/0x5d0 [ 3439.802618][T23799] ? __fget_light+0x21b/0x260 [ 3439.807292][T23799] ? __cond_resched+0x11/0x40 [ 3439.812031][T23799] ksys_read+0xce/0x180 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x82000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3439.816204][T23799] __x64_sys_read+0x3e/0x50 [ 3439.820716][T23799] do_syscall_64+0x3d/0x90 [ 3439.825189][T23799] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3439.831084][T23799] RIP: 0033:0x41937c [ 3439.834968][T23799] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3439.854661][T23799] RSP: 002b:00007fc86f372170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x10000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3439.863068][T23799] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000041937c [ 3439.871036][T23799] RDX: 000000000000000f RSI: 00007fc86f3721e0 RDI: 0000000000000003 [ 3439.878999][T23799] RBP: 00007fc86f3721d0 R08: 0000000000000000 R09: 0000000010000000 [ 3439.886964][T23799] R10: 0000000000008011 R11: 0000000000000246 R12: 0000000000000002 [ 3439.894936][T23799] R13: 00007ffc4b370dff R14: 00007fc86f372300 R15: 0000000000022000 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x9e020000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x9e02}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x36c}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@tz_utc}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="40114f1bdeb96d973547a3ba1baaec549a06b84f93490461eda0cd5a11ea111d03ba76fa004b8c293ce0ffb3a519539504ddd641fb1916c2fdab28a6c7b2ed6e21d00083bba0e33edd737bf4bd8c846be7ac29ecbd996f7ca8884874c6f77f1dfbb9449cac2a42b31347a692c111438e987351975735330f8a850c38d93a3e5d6c401cb8f92b840530622a80850366f25f78bfe3b770ba27ed00235166a685b4", 0xa0, 0x8}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="1cded5fb8077a35e4702cd68d31a279136c3c49900c1cd24f955687af7107f2c742ef0194757a2dbec10954ae3fa7577f62ad98c79777549822d6b2b398b006724799ece344e8955315d67e525e91e0cac1fbeb6f3cfd3027ddecd79a5982807b2235640ba7bc61ec0f67d89154dcd946ea83ca92440ea55e694f52e3ccf9036c580b0e3676f748a92946158b4df19df1f5db4ea1d6a12d12119f07d95783aeff793644c7899d5578940180434ef51b744a7da009b99dd019c80dea9f22428cb77b196700627c8a1775ec4050417def3400925aa435626b84ee82a8a712b76f12fe6a7477e1f1059226e", 0xea}], 0x1, &(0x7f00000006c0)={[{}, {'#'}, {':\xe1'}, {}], [{@smackfshat={'smackfshat', 0x3d, '!}-]-'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r1}}, {@obj_type={'obj_type', 0x3d, 'tz=UTC'}}, {@uid_eq={'uid', 0x3d, r3}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'tz=UTC'}}, {@seclabel}]}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@initdev, @multicast2, 0x0}, &(0x7f0000000840)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b40)={@dev, @remote, 0x0}, &(0x7f0000000b80)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000c00)={@empty, @multicast1, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'vxcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f00)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000001000)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001040)={@multicast2, @remote, 0x0}, &(0x7f0000001080)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000780), 0xc, &(0x7f0000001440)={&(0x7f0000001500)={0xde4, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1c0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x94f2, 0x1, 0x8, 0x5}, {0x9, 0x9, 0x0, 0xffff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xc0, 0x6, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x2, 0x5, 0x7}, {0x3, 0x18}, {0x7ff, 0x3, 0x9, 0x3f}]}}}]}}, {{0x8, 0x1, r0}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6cd}}}]}}, {{0x8, 0x1, r5}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe161}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0xffffffffffffffe5, 0x4, 0x54d5}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e2e}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r0}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r14}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r2}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x400, 0x7, 0x79, 0x5}, {0x7f, 0x0, 0x3, 0x6}, {0x0, 0x2, 0x4, 0x5}, {0x200, 0x3, 0x4, 0xf50}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x20, 0x8, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f4c00}}, {0x8, 0x6, r2}}}]}}]}, 0xde4}, 0x1, 0x0, 0x0, 0x8000}, 0x84000) 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1e677000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xec02}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xee020000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x36e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3440.053298][T23850] FAT-fs (loop5): bogus number of reserved sectors [ 3440.059884][T23850] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x13000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:51 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:51 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xfeffffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:51 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x402}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3440.144497][T23850] nfs: Unknown parameter '#' 00:18:51 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x20000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3440.195390][T23850] FAT-fs (loop5): bogus number of reserved sectors [ 3440.202192][T23850] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3440.240576][T23850] nfs: Unknown parameter '#' 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20c02000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xffff8000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x406}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x40000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x80000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x20ffe000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x604}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xffffc000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x20, &(0x7f0000000000)={[{@nodots}]}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = getegid() getgroups(0x2, &(0x7f0000000340)=[0x0, r2]) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xb4dc00000, 0x5, &(0x7f00000024c0)=[{&(0x7f00000002c0)="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", 0x1000, 0x4}, {&(0x7f00000001c0)="a061d021fa4db41a2b2b5e4b9bd9c80a10b818c2b5ffd0850ded58f4cf7ab805541bcc4372054ba0e1362ab0e8f4df0210fc04b66967ed73bcac2a7e09d17856ef8d99d61128ff5b5a4e239458d93722f55a52ff33c48255b9744a809cab17794eafab1dcf355f0830dbd35b4b11b1716154cb0c98e2", 0x76}, {&(0x7f00000012c0)="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", 0x1000, 0x9}, {&(0x7f00000022c0)="0136c4c74687b5d3b147978653a142e2b2baaa4bb41e79e61a96416213de65a6361b117515ac6197b9cc415241cffb8128321954cbb436a286e80c8148a795941762c739ac2783fa65ff232a19e2931027e1bcfacff70fc7f4a6dec86ed1b64ef5a4b03af0a809373491ad6b7f9ef0a44b0dae70e3e939ce245139570ddb2b8c01dec3e6597c344d025f8f1eb1ea1927b31d84e829015fad39ee387737f910f4cd1c03e61e529ae07ebbe8fc7d34fc457c64adf912e9f96eee69635fdf19ad37777d57513a8008eda579357090482f766e4782d16941bded533262e506", 0xdd, 0xfffffffffffff001}, {&(0x7f00000023c0)="f4cfbfd18d77b4fd23a15d12cc576b7cd8a49a0e1991bcabee516ef00291a16bb33f02c26d84a32ce19d3286be3292cbc61df5d4a4de79eb7af8aa3a88dc69cf6eb5c6f4a5db475e3a1ab68681c20facfc3091e84c1649c34b3db676f978ddcea135d00cc6617917561ab43248e3b9d5ffc0b8976f802a59fd7198af6cdfaf489026b275ca84e129093705e8a8204b68303602c9d551c08d79c00d277bb57c1704979294ee2725c877e61434ba0cab30a8b82ac7c98e8d5fa2934ddb3ec5e4d226ef33ae90154b330756afbc6969de3a0b13cf338538d91dac31eea5cf580bacecad9b021820c5b9741f213be0", 0xed, 0x8001}], 0x10000, &(0x7f0000002540)={[{@fat=@errors_remount}, {@fat=@usefree}, {@nodots}, {@fat=@debug}, {@dots}, {}, {@fat=@gid={'gid', 0x3d, r2}}, {@dots}], [{@fowner_lt}, {@fowner_lt={'fowner<', 0xee00}}, {@seclabel}, {@euid_gt={'euid>', 0xee01}}]}) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000002600)=""/115) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r1, &(0x7f0000000080), 0x0, 0x0, 0x80000, 0x1}, 0x2) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x104000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x21000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xfffffffe}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x300100}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x1200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3440.503190][T23948] loop5: detected capacity change from 0 to 264192 [ 3440.512260][T23948] FAT-fs (loop5): Unrecognized mount option "fowner<00000000000000000000" or missing value 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x10}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdef, &(0x7f0000000080)={0x0, 0x40000, 0x10, 0xfffffffe}, &(0x7f0000fb8000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = timerfd_create(0x4, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x8020}}, 0x400) syz_io_uring_setup(0x2a79, &(0x7f0000000100)={0x0, 0x48fd, 0x8, 0x0, 0x267, 0x0, r0}, &(0x7f0000d18000/0x2000)=nil, &(0x7f0000c14000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x118, &(0x7f0000000200)=0x1, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x3fa6, &(0x7f0000000240)={0x0, 0x45c99, 0x4, 0x400000, 0x223}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x24000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x400000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3440.606082][T23948] loop5: detected capacity change from 0 to 264192 [ 3440.615788][T23948] FAT-fs (loop5): Unrecognized mount option "fowner<00000000000000000000" or missing value 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x2000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x8005728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x42}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x401000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x3f000100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r0}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008001}, 0x90) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000140)=""/206) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001240)='ns/uts\x00') ioctl$NS_GET_PARENT(r1, 0x2, 0x540000) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c10"]) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x29}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x60}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x40000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4af000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3440.757567][T24014] FAT-fs (loop5): bogus number of reserved sectors [ 3440.764120][T24014] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) syz_io_uring_setup(0x301e, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4200}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x104}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x42000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4fc000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x5400}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3440.879120][T24014] FAT-fs (loop5): bogus number of reserved sectors [ 3440.885764][T24014] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:52 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x80, 0x1000}, {0x2, 0x4, 0x1000}, {0x0, 0x9, 0x1000}, {0x3, 0x5, 0x800}, {0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x1}], 0x8, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000001400), 0x1860, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT]) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x10a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x540000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x6000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x54030000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x151400) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7, 0x5}, 0x0, 0x6a70, 0x5, {0x8, 0xf9}, 0x5}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x600000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x60ff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x204}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x56030000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c6da0fc97e329516951bb364bf700e012588fc7030d95258806565848c9b2722b0fb0a10a5d59215faf1", @ANYRESHEX, @ANYBLOB='\x00\x00']) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0xff, 0x4}, 0x1, 0x2, 0x5, {0x80, 0x4}, 0x8, 0x1}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x6c03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:52 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2f4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:52 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x80ffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:52 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x82000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:52 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000e7a000/0x1000)=nil, 0x1000, 0xb, 0x1010, r2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xa0, 0x29, 0x1, {0xcc36, [{{0x20, 0x1, 0x7}, 0x10000, 0x2, 0x7, './file0'}, {{0x0, 0x1}, 0x4, 0x9f, 0x1, '.'}, {{0x1, 0x4, 0x3}, 0x0, 0x9, 0x7, './file0'}, {{0x10, 0x0, 0x6}, 0xd5, 0x6, 0x7, './file0'}, {{0xa9, 0x0, 0x2}, 0x2, 0x61, 0x7, './file0'}]}}, 0xa0) [ 3441.123509][T24096] FAT-fs (loop5): Unrecognized mount option "ÆÚÉ~2••³d¿p%ˆüp0ÙRX€ee„Œ›'"°û [ 3441.123509][T24096] ¥Õ’úñ0xffffffffffffffff" or missing value 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x6e03}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2fa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x970000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xa8000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3441.211170][T24096] FAT-fs (loop5): Unrecognized mount option "ÆÚÉ~2••³d¿p%ˆüp0ÙRX€ee„Œ›'"°û [ 3441.211170][T24096] ¥Õ’úñ0xffffffffffffffff" or missing value 00:18:53 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r1 = syz_io_uring_setup(0x203c, &(0x7f0000000480)={0x0, 0xe816, 0x4, 0xffffffff, 0x26a, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r1, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="000078703066a323c1c0c50ef14cd8b9b93bbe2dcd1b3d62ed4adb12d0966730d854ebfb375100017475944f081d686939f144e3b5a1466774b50c09430393247c4ed91b94774e1fe1eb948e7bb57e7afe7a57aca0a1d2ba03027735c45360e80330af9d5460389b22c97965205b11d42cd9e3"]) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2fe}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x7f00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xb0a41e}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xaa000000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 3: syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) syz_io_uring_setup(0x5cc, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x9700}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x300}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xc04a01}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000080)={0x0, 0xd87c, 0x8, 0x2}, &(0x7f0000d7d000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000100)) r2 = syz_io_uring_complete(r1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000180)={{0x1, 0xff}, {0x1, 0x1}, 0xff, 0x2, 0x8}) 00:18:53 executing program 5: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@loopback, @broadcast}, &(0x7f0000000080)=0xc) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xfeffffff}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x1003f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xc04f00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xffff8000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xc0ffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3441.496378][T24184] FAT-fs (loop5): bogus number of reserved sectors [ 3441.502926][T24184] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x406}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = syz_io_uring_setup(0x501a, &(0x7f0000000080)={0x0, 0xc084, 0x4, 0x2, 0x1b4}, &(0x7f0000ddb000/0x2000)=nil, &(0x7f0000fd2000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000c65000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r1, 0x8000000) r2 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r2, 0x0, 0x12, &(0x7f0000000000)=""/174) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f0000000140)=""/244) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x13000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x50, &(0x7f00000014c0)={[{@nodots}]}) truncate(&(0x7f0000000000)='./file0\x00', 0x8000) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xffffc000}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xd0ff20}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x604}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0xfffffffe}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3441.637712][T24212] FAT-fs (loop5): bogus number of reserved sectors [ 3441.644251][T24212] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x40000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xe0ff20}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x700}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x5c}}, 0x20000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3441.723142][T24212] FAT-fs (loop5): bogus number of reserved sectors [ 3441.729696][T24212] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/93) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x4, 0x9, 0x8, 0x3f, 0x401, 0x3f}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xf04a00}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x80000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xa01}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x104000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3441.838251][T24262] FAT-fs (loop5): bogus number of reserved sectors [ 3441.844890][T24262] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000500)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "a44caf972f191b"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001500)={0x0, r2, "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", "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"}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f3f000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x11c, &(0x7f0000000000)=0x100, 0x0, 0x4) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x14ac000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x49, 0x29, 0x1, {0xfffff7d6, [{{0x8, 0x2, 0x5}, 0x6, 0x5, 0x7, './file0'}, {{}, 0x0, 0x3f, 0x7, './file0'}]}}, 0x49) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3441.900553][T24262] FAT-fs (loop5): bogus number of reserved sectors [ 3441.907084][T24262] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x200000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) getpid() syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x3f00}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 4: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x300100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x2040000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_setup(0x15dc, &(0x7f0000000080)={0x0, 0xc946, 0x16, 0x1, 0x69}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000100)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x301000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c2c000/0x3000)=nil, 0x3000, 0x1000004, 0x91950, r1, 0x8000000) 00:18:53 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x4000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:53 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x4000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:53 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x400000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:53 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0x8, 0x0, 'client0\x00', 0x1, "822df40f0e09046c", "de6d595adb9ade0d519dcf3f542fdb21f8f7e6e1c320299bb5fad1f8b435312f", 0x0, 0x8ca}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000f74000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:53 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) memfd_create(&(0x7f0000000000)='\x00', 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x6) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x6eaf, &(0x7f0000000300)={0x0, 0x1094d4, 0x8, 0x1}, &(0x7f0000c36000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000e08000/0x1000)=nil, 0x1000, 0x8, 0x13, 0xffffffffffffffff, 0x8000000) [ 3442.133311][T24324] FAT-fs (loop5): bogus number of reserved sectors [ 3442.139842][T24324] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3442.200474][T24324] ================================================================== [ 3442.208586][T24324] BUG: KCSAN: data-race in blkdev_get_whole / blkdev_put [ 3442.215620][T24324] [ 3442.217938][T24324] write to 0xffff8881017ca6e0 of 4 bytes by task 24133 on cpu 1: [ 3442.225644][T24324] blkdev_get_whole+0x308/0x350 [ 3442.230499][T24324] blkdev_get_by_dev+0x2ad/0x8d0 [ 3442.235435][T24324] blkdev_open+0xb3/0x130 [ 3442.239770][T24324] do_dentry_open+0x529/0x850 [ 3442.244648][T24324] vfs_open+0x43/0x50 [ 3442.248632][T24324] path_openat+0x1787/0x1f20 [ 3442.253230][T24324] do_filp_open+0xe9/0x200 [ 3442.257640][T24324] do_sys_openat2+0xa3/0x250 [ 3442.262228][T24324] __x64_sys_open+0xe2/0x110 [ 3442.266814][T24324] do_syscall_64+0x3d/0x90 [ 3442.271224][T24324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3442.277122][T24324] [ 3442.279432][T24324] read to 0xffff8881017ca6e0 of 4 bytes by task 24324 on cpu 0: [ 3442.287148][T24324] blkdev_put+0x3b/0x4e0 [ 3442.291378][T24324] blkdev_close+0x47/0x50 [ 3442.295720][T24324] __fput+0x25b/0x4e0 [ 3442.299684][T24324] ____fput+0x11/0x20 [ 3442.303643][T24324] task_work_run+0xae/0x130 [ 3442.308123][T24324] exit_to_user_mode_prepare+0x156/0x190 [ 3442.313755][T24324] syscall_exit_to_user_mode+0x20/0x40 [ 3442.319194][T24324] do_syscall_64+0x49/0x90 [ 3442.323587][T24324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3442.329460][T24324] [ 3442.331760][T24324] value changed: 0x00000001 -> 0x00000002 [ 3442.337448][T24324] [ 3442.339745][T24324] Reported by Kernel Concurrency Sanitizer on: 00:18:54 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/116) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x4200}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x6040000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x401000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) 00:18:54 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) r1 = syz_io_uring_setup(0xdf0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r1, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3442.345880][T24324] CPU: 0 PID: 24324 Comm: syz-executor.5 Not tainted 5.14.0-rc7-syzkaller #0 [ 3442.354629][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3442.364672][T24324] ================================================================== [ 3442.377495][T24324] FAT-fs (loop5): bogus number of reserved sectors [ 3442.384085][T24324] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x6000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x7000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x40821e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xf402}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000f88000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000000)) [ 3442.474447][T24361] FAT-fs (loop5): bogus number of reserved sectors [ 3442.481029][T24361] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x810, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3442.557174][T24384] FAT-fs (loop5): bogus number of reserved sectors [ 3442.563727][T24384] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 5: ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000000)=""/3) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/93) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/10) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/42) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x8000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4af000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x100010, r1, 0x10000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x4}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xfa02}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000c18000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x405ca, &(0x7f0000000300)={0x0, 0x92f8, 0x8, 0x100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x10000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x200) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000001c0)={0x10000, 0xfe, 0x0, 0xffff8000, 0x0, 0x3}) r1 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x240102, 0x0) syz_io_uring_setup(0xae2, &(0x7f0000000080)={0x0, 0x2054, 0x0, 0x2, 0x205, 0x0, r2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000e0e000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r1, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xfe02}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4fc000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x12000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 5: r0 = socket$inet(0x2, 0xa, 0x4) sendmmsg$sock(r0, &(0x7f0000002080)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x325, 0x51, 0x7f, 0x95, 0x6, @random="d7dae9bf3b15"}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)="c99e24d72ad5b5237af3902c760bdac89c254ec5149fab8f27accb07d311732c066b6a897cb030c4d32801f36546104696f2872dd14e064014d12cfca0", 0x3d}, {&(0x7f0000000180)="be88d0d9cb5834c443fcd64fd849761601c0b9079f0001f333343e986ebf0a62af1d06b192ac049909d838fcfc98b3ad3de0645ebeb31ece5c65f0dac5d7e25b4691734e8845000ae93e4ceaf2688a86e190a8673e2bb644e57efe24f9a3c88029611e4417591e", 0x67}, {&(0x7f0000000200)}, {&(0x7f0000000240)="e601c37734519874d7df5566ac119ce86c6a99c2015918c486df6ea9368f46dba1336eaf1a28da23f7b2c1545edf06f144d1606d6370ea16d16b83b4ec9ecd0bf71a3bee50cb648cf9268207489c137ee9121a7b4ffb3ff128451a0fff3befecb36372fbec5074056b8ebc11c0bb57f4c94d37621d4aeecd034e582bc5e2537280f501a50d40fccd4739bd9a07064ad3e8d7b4d30f78935a878186485b9337e289498e57c562995065989c36c36637bc038d1522f11a63faed42d9884beaa9075add502f32f2bebb0de51b4749e6fcfc2855c2592d443b83604dd51ab6a7286994112d5f6d20", 0xe6}, {&(0x7f0000000340)="5b9f58183d56d63d42c4f0fa893735ef6c5c49c9127f680fc0f4133c0b0faf9a3ed20e5ef969c2ed7c4bd58ddf03a61074b3991741f0206028", 0x39}, {&(0x7f0000000380)="542e68cbb630a0e16f6285e47009f1160f53a1b83d9c6f43128c868b5c47bb389e7a9b208a3ef8532fa873ab598773ce8dac6a2a0bb46b757948ff6ecc4092619d462587c0242ec4385a3513df1790d59910c33b8b7eb924d81ae82f1d65f6c6135a7a6e2e8ba45a16e87ed81e868c2087a8b580f393a6fabb4be1dd43d903cff0526a347040c25dfa777ce7c7122d7b9c8c6f0589138fc6f0dc4396cb2a3b70b72f03a57c6a865353bdba7a87e4bc9abc6e6eebd1b844483d4c430d6eecb4e15b158a8aa161a747b24721b3fcd0b53046ec0c92fe", 0xd5}, {&(0x7f0000000480)="6716a04c544484a902283736e39f908761803e7271701119ee9ebbb33347ab465bf501769ab92b3aec9eb6c4ded1", 0x2e}, {&(0x7f00000004c0)="07c803bc6ece1d24dc7368d6a06feccb61ca106a529a9a7e4e7e58fc221a6d670c2f4f0b85a9d97db6d4bad95a45a785158e746ed0bbc56702844a8072607c1261b469088e41ec7a62cd04f56a5abe0a13fb68828e31b9b0bc0876fcdfdd982aca5eb9908bc966b0292ce6f1e278422721df99130dd6578514a2db02fadc430e3935f3f7bf28ff0ee17baf4e8040fd4ce72adf5ac2fe7eefa2f8fdc29ad34b1de4a691ce2e48855e843251fda82f68a6c63eb07b2df1fc9689b6a8a96bbf4a9310341bc142fb2c74b59d0b11e9bd3a7e94d16a42539518c99651a42e3562026524192d6276369f0dfc167a0f6bea7a3069", 0xf1}, {&(0x7f00000005c0)="a1a204d8a9aba0cf7b919243581e5738f3e7707670fe039af888c0b15a9cd9301cdceed18216cf082eb8ad43a29f0dd45a4d23d1b33deab445ec2decd01bf0431fc1b5e92c50138ce8b93f1048020abf445e9bc80d12f9fd1989a26c33c2dda6b164951be22e8335964cca2090f86c7274a5410c517445126b23f025b156ba014bc368e14b4ab624e936a7eb9bcd392087db6303f03fad8f6e70558b0da802338a20c64534683cd47d44785782fb0af6eb97988eb3dd837c7cbfac660614c3f6c4f45b", 0xc3}], 0x9, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6a02}}, @mark={{0x14, 0x1, 0x24, 0x10000}}], 0xc0}}, {{&(0x7f0000000840)=@hci={0x1f, 0x2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)="38ebe463007f3c5e7346957d5913c4cede86658d43edd4428500fb9f6541403a08d30e98a9e64c23dade14156ea45c20c4e3eff3515904504c08e9218945", 0x3e}, {&(0x7f0000000900)="2b428d605538b053a4e0845a382e143412be9dc4eb7e4b397ed1f0ca15a37ba935377f4c74ce89728f4b0424a582182ceaa062be0c0e238f8baa71672dd98bfd55006140aa25401eb60524106a90bcbd790f3c0adc4c4266883abf20f0ea82b64076b09075769a2912395ea72f3b4f8c53ea7e9828a547549729d9635a15e977c4c0a54ebf2aa4850cbee44355e42a6731beb2690c5fd38d47270da4189374b4cb67e5371dc420cdfa8e388e8c", 0xad}, {&(0x7f00000009c0)}], 0x3, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="1a38853a88139f224472", 0xa}, {&(0x7f0000000ac0)="3b14fe6505769b5f90f27cd3e82aef3ee9185d57de12a227cf3f1949f8230c0c88227cbfcfd93e51ec3ffe16ba2c82434ad1a7c244de11516a88f8124d6283f98d74c0feb78947062e03591059ff45afffebca726c5369f790ac5cf4bb38826be952d555d5450e679b2863a00b885e5433dd53c6bacbf775bd0c30dfd7cd765eb6545ac65b18454381025f0e6d6ec9920cc9a9a104c084cf806878144f7982", 0x9f}, {&(0x7f0000000b80)="9257b6791d1c62f50a917d57966ef4f3f95ce084bf5df23e6ab299c9dc3c45864a3a9acd7fc2f112270cefcfc2e3ce7afdcfc5346adf39457063c3cdf4b77b146d1e815ccd9b7058e30a55353663b6d30528159be6d1c2f2147d72b220b2db343870214d48304d07fb021d65623f413e5a4f8aa4d3d267de6c211ff2d32b8f4f93f4cbcc8a96ece12a9927e23159e0cfda2eba4c71bcc2bb72a34f56073a024724866cffc369ee5075c7", 0xaa}, {&(0x7f0000000c40)="688f4cb3f9ea9bec48866b61cd57ef7d9ec2c3b9a8f9d2e0ade465eee1f5b7d7e8ad2a8ddd28e4deb84ee84b3d7e1f9dccf990fd17aaa9bf49cec15c7ce8c0ef00a483a208f19ea6a698bab2b3b34df323cb3adedeb3c35d49bbfeb4b293216a4d4d7c253b8cedf86991317f7c20c95cbb14770b254681e77e6a0061fa3d433a44691f1147909b2fbf6c175245c2f5f3d34e5f37ba48d47174bc8688d6ebfd8c15a76697245ff70c5e10e6f20c1d8e94dd92f223927c00197ffa683a69159c8b840cf01eaf35e1f297f078ab800edc4aa6952569c18148563ddec6b1f9684600784422c447c033b2c2b3b102f793b61bbfe5b1627a", 0xf5}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="474186b57dc60c615c0ba688d7081195e8c8858e317c8db1b86f85fb7c3b023e4af7472d66b7201a98bb9bf9afecfeaee70402c4600b29e95db76736cbf84dfe056a0162e89da05242f5bbfa29d1c7d3a9de6bb97c756482599139a4d4a9f2cb0cb3f9fcf20e96ad4b311dbbedf517f370ea158d53a023d2fb819b", 0x7b}, {&(0x7f0000000e00)="f4d18a057f1e8f98673dc5f13ef6a48b9ae039c7b4a2f198c3e56d60d6deb0c1cc26c0b48b88009df7003c7acda4f1dd349ad8506e3566c039bd4d9e7c146f541b787064b3fd89d08c4e03173c5d0bbd641ad333f2d9d00a572bb97cb4a3e3a917849b50d1bf182092f52ef6eb2790824f2a74c75dfd7b8cb14145a38ece221a97bb572dca19d192ebd97815f166e6bf4d2e", 0x92}, {&(0x7f0000000ec0)="3890b2fe7d82a954d7d5de0413b24d2ac5d070d6dd3b5c4357635ba7245d3dcb73bcb64a14e6654632e6901697d6c9365ba42fe657a3aa2923f8876bf14e5c713b642fc226be42b925e979478ef699d4d349c8285d6cf57e822a400abf22fb3098bf", 0x62}], 0x3, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{&(0x7f0000001080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)="e2e5754a3b96e6a5a0d3989939c06f1100dcb29585ffbac70c1f5e57176d3642ef1c9fbb54ac7410fbfc5d469044a50d78584c3d036760e3160b2515725473a4e124d6a03db0ecdf090ca4d8e6c2a7acc4b67e56782f71614ef9b6448a84e64580d0adb2649cecc74d8a84228e97d15af6d9985e84b381362a0ca18da33d43b7df7a92", 0x83}, {&(0x7f00000011c0)="08e597930e2b8de4f5415592616238cdf65ca902b232d4", 0x17}], 0x2, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @mark={{0x14, 0x1, 0x24, 0x7f}}], 0xc0}}, {{&(0x7f0000001300)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001380)="e9b872d874a369d9598d3a91f633b33329abf7945e11afdb256a358032d30a9abde9e7c708d1bbc50b76e401d243870d5ba6b5e1f7e5902a7899725e9e18575007793ea1a3d47ca34562ec58260bb95fcf06d5890091335c35dd21bd12d2184442057994c70ba8593d18b1e37684a8ba33de9f72741c512041fb827d098ce44b783813b99592d63a2ec5", 0x8a}, {&(0x7f0000001440)="366355f19dab8a2a67088096dfd225d5f44eb0f1edeb088e4aac440485548168eaa0b9d06920c03663e83a227d53ea3cf5a7b6882d2f0a76549fb4b5a9d8f0ac950da1a100ef12c8863ca06f320ec17d8242f87626b4b53e114954566451db9281dde54d9af4b7c54073fe52cd36d99433478f52f0bc0b35e0850eb3b8e3ca3f0d8d71b9abde311b2ec95253a11c312bca07fcfb52096389dc93da1b3029587b636bc95086298ee51a9c5b19ef6fcd289442c38b89a6afc1573a34a756cbc20840646f709df82610535c420a2d79b452ddc000d50ad2ac95060eabc7a95dfbcaba816c7fbedb2d939f22", 0xea}, {&(0x7f0000001540)="ffdfdd303f2b9d1953e9ad0b03f7c015941bb6c9fbf64c54eaa83f944d9e464e24c0e5586da6450d3c67dfd6db187b923d19b51a995c28493a290cf6ab905b0fab6af4bc5e459bf53fc0fde750c7432f222bd1ff9d537a3eab8582a6c50103af601c7a307b532272aea177657203eef9b7315015539cee50bf1339f292807e6306de7fd0c594c5c82dc9d0dd495996e6dc6166792988e5e4511e4403d6e2b8b56a169e50fd8fe34aca1197e5bff74d62d173ad53d157d37434d7557ad751079a85e0c2a4fabba821e623cffddc52f9", 0xcf}, {&(0x7f0000001640)="b914b74b27f3145e12d88387262239681315cb4e27e3766cca7a2db6cf44bf6fe80610eaaccc9f31bd45e23315fd2990ced5543f566786e4ff4f642e7d2dd0d123653d9ad152fb4acf3e367b91327332340e1a036f8bf68e7cbb38930032a64acc9eb73cac1a973cf9123311", 0x6c}], 0x4, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{&(0x7f0000001780)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001800)="f8411858e0f4c66b7d4a52de866cf0cdfcd9097fe508e2c01e8c259fc54589da584e5ee6369606d2e46ec9208996fde588632cb8176bd7e9d118570e2fb1b514eec872e4b78c8b90a517abacf29e90d25d9398d3852e295b244ef6ef4b477e882a72e89fce2eb659751862a08a48569dd8ac6442fc2f1f30f54fa000a4093ce3fe493f98e7363f09ed7976a086", 0x8d}], 0x1, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1ffe0000}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x3c623e98}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f00000019c0)=@nfc={0x27, 0x1, 0x0, 0x3}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001a40)="c72c4307befbbb53971a096d3bde9b3ed071a056bb99b7a8ecd0512dc814ab762415bfe146c7a657e163f5b3ac976a773637d665f62742eb2c62a2bf84cc7a2c34dbb0e498609b20d9d4a6bffcee8fc4036444097691a5b13dd82b2765258b3da6854b7d805b9bf915a217f561a9f0609a706e38e5ba3becac1f4726ff1410", 0x7f}, {&(0x7f0000001ac0)="f80bd77428e08c7463498c3a973d9b63657b204d91bc37f5e827344f108366a98aad9c9315fb915cc8c9888aed8d02424d167a9fecaa1f8bc9732f6acfc417ac775b8b1ae3295f223d0b47d680708c86a3e5a22698e91f1949edf547c6aca2c569daeea399d959b40e1db150bd38d71495269199000bc507903ee7a56e18d47d810f8ecc8681eacfff38774b59e7b08572253ad3f8e4e366ef5eac91462122d0c0058439c6887a0f368fc89967a6c1f453f65cd7fa1a8916720fb61c236005b2f30ef8f75ae935f9005afc31e712692deee3f58e", 0xd4}, {&(0x7f0000001bc0)="c5a3059b5e916dc5381994f11f9e98d32b75a2b98960f2f284d5520e43214724cd58620bee37e8a2b2c94f2cac26b837fffdce93efe20c177d54de14ba34476cb214298f1614f08bf9499b11261f752b001572bd323599e79361a119737de614e96af77a3e9fdb55752604a3063091", 0x6f}, {&(0x7f0000001c40)="bc11bf3d2c58b080fd89b475077755128953c65eaae37526721358800e0281b9d3364ce59e59070866090ed38f28f9b5b227ed33bb8117ad", 0x38}, {&(0x7f0000001c80)="a3ed843ba817c3e1ab83aa70114e90e6b8fc6b25bf0143b3018a10bed691239e124e89d7a08e0372103b8d206c6b83a225c281e1755f59eb12696364fec7d32e35ef95fcaff09a5883d667e78bf051b97141e25d86a0e744b0ae3fac35acdeb0e295067932dee4369c61df658ed42da9c88a6924583db764ff8508b2651b1ab59a03ab1a8105fa75656d207818bf766f97531adabf829b0d1c17e8c761ec3fafda0e1b137110171eda1755d003c02cb7d75d4e56287b984970dc1f3211e1fdb56c92882cdecca16b9e394cc3ad0cbfde", 0xd0}, {&(0x7f0000001d80)="09f137d021fdb10151bb5771b294027cdb9f9fc3eb03f90e48f046bfa514b703eba9ee2246d04c47e3b5a4f91e0965ebf1c23d3c147a36fece2d271c497bc3794eaed78293a6c32f21cb9c68740f171fa93107d8c3248d10b3a379b8bc883167d3c496d6c91eb301f6fb5a0f1d7c7e768fff26af1623e97ef88b8f60d33afaf7263b979508705853e8f71abdd83a5c11e195fdeb402b6134b1d26f7fd695c5fbf6d8df6f2a58bf31a06b130df432429aa0", 0xb1}, {&(0x7f0000001e40)="1e0ac1795ca8c2f315cf24191d2938211ed66a20138711b6d158cd4c1b34bcb3821f8645d6ab577b3c9b4ad4bf190d6ea98c9f4f6e64f4dfcb50aa88c3f9e104f83b6260f48520251efd9160e18fe9bad95340ec1513d9b8e6972adcafd88427b32e152e552fcf11a6f901b490042eb5d7db8ff358e4026cdf1b3fb8195e672058dfb8dfa985cf1776041e4f55e93d7bdbf0d0ab25d3d02d4cdb3d8db10bc096bfc0ff73b01f5550de7c876d313384cd366e08033625b7d138ca8ab320a6fae2bb6878ba095c0568e2aca4782b422614e3d2a5002b75", 0xd6}, {&(0x7f0000001f40)="c1bf369f", 0x4}], 0x8, &(0x7f0000002000)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x80000}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x101}}], 0x60}}], 0x8, 0x4004815) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x8, 0x0, 0x26}, @nfc={0x27, 0x1, 0x1, 0x1}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0xb, 0x0, 0x0, 0x0, 0xffc3, &(0x7f0000000000)='bridge_slave_0\x00', 0xa, 0x0, 0x5}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1000) 00:18:54 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x400, &(0x7f0000000000)={[0x3d]}, 0x8) r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x40002009}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x540000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x40000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 5: r0 = syz_io_uring_complete(0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/155) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@nodots}]}) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x12010000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x600000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x80000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 3: r0 = syz_io_uring_setup(0x5cee, &(0x7f0000000480)={0x0, 0x424a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3442.903621][T24464] FAT-fs (loop5): bogus number of reserved sectors [ 3442.910314][T24464] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x80ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x1ea4b000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x20000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_setup(0x82f, &(0x7f0000000080)={0x0, 0x3edb, 0x0, 0x0, 0x263, 0x0, r0}, &(0x7f0000fab000/0x3000)=nil, &(0x7f0000cac000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x7, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x2008}, r4, 0x3, 0x0, 0x1}, 0x1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x600000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:54 executing program 3: r0 = syz_io_uring_setup(0xde8, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000dae000/0x4000)=nil, &(0x7f0000e9e000/0x4000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)={0xe4, 0x29, 0x1, {0x1000, [{{0x8, 0x4, 0x6}, 0xffffffffffffbaa0, 0x8, 0x7, './file0'}, {{0x8, 0x0, 0x1}, 0x7fffffff, 0x6, 0x7, './file0'}, {{0x80, 0x3, 0x1}, 0x6, 0xfa, 0x7, './file0'}, {{0x1, 0x0, 0x40000000000001}, 0x0, 0x2, 0x7, './file0'}, {{0x8c, 0x4, 0x7}, 0x8, 0x1, 0x7, './file0'}, {{0x10, 0x0, 0x2}, 0x400, 0x7, 0x7, './file0'}, {{0x4, 0x9, 0xfff}, 0xb5, 0x5, 0x7, './file0'}]}}, 0xe4) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x90ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x80ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3443.072553][T24494] FAT-fs (loop5): bogus number of reserved sectors [ 3443.079090][T24494] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x20ffd000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:54 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x970000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:54 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x20ffe000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3443.151577][T24494] FAT-fs (loop5): bogus number of reserved sectors [ 3443.158117][T24494] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:54 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, 0xffffffffffffffff, 0x8000000) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@expire={0x388, 0x18, 0x4, 0x70bd2c, 0x25dfdbfc, {{{@in6=@mcast2, @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x1a0, 0x80, 0x32, r1, 0xffffffffffffffff}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, @in=@remote, {0xb35, 0x1000, 0x7d1, 0x6, 0x4, 0x3, 0x4, 0xff}, {0x7, 0x0, 0x40, 0xffffffffffffff55}, {0x7568, 0xffffc797, 0xfffffffe}, 0x70bd2d, 0x3503, 0xa, 0x0, 0xf2, 0xa4}, 0x1}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @extra_flags={0x8, 0x18, 0x90000}, @srcaddr={0x14, 0xd, @in6=@remote}, @algo_crypt={0xd4, 0x2, {{'ctr-aes-neonbs\x00'}, 0x460, "7b43cc9bc4e3f3b9e761be436248e856d97fda2b527c927a5a3472fb2271c9b8e4b89c97b74b4a1f905b2b47e06b09d44651c1c9c4d2b3c75f76cfd5712f31944a862b8cc3860ad18086766b304436582720b2a24f0118c9f5833d37a9b1d3b2d6529675070e28fdb9036eecb16c0e32363a597e2e8e3168688b63ca0728f98e5dc40c750782157f9f501e51"}}, @algo_auth_trunc={0x149, 0x14, {{'sha512-arm64\x00'}, 0x7e8, 0x40, "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"}}, @coaddr={0x14, 0xe, @in6=@private0}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1c}}]}, 0x388}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = io_uring_setup(0x40c6, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x2, 0x21}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000002, 0x110, r2, 0x8000000) epoll_create1(0x80000) 00:18:54 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x8, 0x1, &(0x7f0000000500)="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", 0x2, 0x0, 0x1, {0x1}}, 0x1000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) getsockname(r2, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:54 executing program 5: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)=0x90) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:54 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x90671d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0xc04a01}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc0ff20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x21000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000d9b000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r1 = syz_io_uring_setup(0x1ed0, &(0x7f0000000080)={0x0, 0xb5a3, 0x0, 0x0, 0x61}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x6c83, &(0x7f0000000140)={0x0, 0xf515, 0x4, 0x2, 0x2a3, 0x0, r1}, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) syz_io_uring_setup(0x7615, &(0x7f0000000080)={0x0, 0x476e, 0x2, 0x2, 0x33, 0x0, r1}, &(0x7f0000d80000/0x3000)=nil, &(0x7f0000eee000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) [ 3443.280072][T24540] FAT-fs (loop5): bogus number of reserved sectors [ 3443.286757][T24540] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xc0ffff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0xc04f00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x2000, 0x144}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000080)) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) io_uring_setup(0x52c9, &(0x7f00000000c0)={0x0, 0xcb00, 0x1, 0x0, 0x250}) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x40000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c00f3fb62427c48f2d945b25eed26d59b036c316a99ec84bf330618239ee35b2d65de3eeddda861b03770bd9301054ddc5ea43712e3200841166382b244027b480000000000000000368c126b264a822bb0cfc0497fb1912a90b0659667342f23b360c34e7c7e99ab16668d0239e0cf9992a9515fbc3c5bc0c67392faf8a28550943e8af8a1aac6d6ecf6fc74ff6d05f94c00b3750dae10e09692e66706b9d5930060327c975900c3300f0da9236127836fff68fbf99d9053dc529daf591bf483230933155636085f53675719a77d1afedc9085547ede6a3e8b52b02792bf4716d5d006c57021897c1b56e81b8d707ae2cbcc4c06f13cb14712239211"]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="5b70ad5623724897963a697f3a8e19d1742e529133dcc73a0ee477bf921f05bc3c94029ffd108df350b2d9bb9dd67adaefc484fbb296c38cf261325ba5703367dbdbf81a0b32b22d432335ae2330d20567b107834f2c23fc8b5c60a3cd00fe482749c6c1b10684251cc0d0a75b2cc6651005ea02609e23cd999be60e279ccb3c0b71f25086d0eaef5a8302d7ce50c6f7a0bd8903b4a5e33ac5d51a08a83689678740168b5ba11c85ce3858e5f5b2ca0f", 0xb0, 0x7}, {&(0x7f00000000c0)="89d52d3310c5d9303e9fc4ebf8dc0aefc42d8fc198efecf495f36f11b0a08115696fda18dc64fc5b0252a732ea79474b063c1f04108f", 0x36, 0xa0d}, {&(0x7f0000000200)="9589673b86ce4b6023d535f5eac37826a8e6d3c42f21216be75ae03fc5cc289198ed7f78e55b2b5fc5f648ff80de0e1955eb19a40d7f531e786c5be9537d7998fa258336a7f10bde7d11147c55337c2177ad995c15170de8ee7038e061fdb8d72a5986494991f6d6d331dc9a688810eb599cc95bd8e4591bc6ad5ed2c73785ac05f6ff9981942667e67053fcf89486bdc0691e77378e8d81abda175fa9843d840efe59910fc056bfec70c3397b2cb90a0403d399aaad9c75dc138b19e1b46edc47588a5458492611fd8a6f12f11b7cbdfa90732a781cd045361de2578a9f31c4bfa52e3f079c", 0xe6, 0x7e000000000000}, {&(0x7f0000000300)="4a566477fbac70140727317b39b2fa4fa26e9296545a27883059ed7d05ed16fabb2b838816bd7cc01aed46af2fffe2bc887aca75c1562056d8e562c449d5b6dcc6100a20007068f31e28dbafa1089c60d4d5f587a2ef156ea773ecf1385e71fa07f67aa67822882f718ef9d93c234a97d4bc629ec81ebe435f1e8f04d446506d64c20684d8abc74a02846ecd444f4bf93e1389eef8ea16575baffdcfd8c579fdb8d0bb36570e0156aaf44eae8f5813b0229b7a1ca7c2f55d86d2316bdc366ac832", 0xc1}, {&(0x7f0000000400)="9e784789a74fb59661637667abace49c25da4dcae73893f8082831b0840f8c21027471738f3f", 0x26, 0x2}], 0x389000a, &(0x7f0000000500)={[{'msdos\x00'}, {'$'}, {}, {'(*{@$&\xef'}, {'msdos\x00'}, {'gid'}, {'+\'+'}, {'msdos\x00'}, {}, {'\''}], [{@appraise_type}, {@seclabel}, {@dont_appraise}, {@uid_lt={'uid<', r0}}, {@smackfsroot}]}) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, "f9dc7543705cf8a1", "b96f03c7eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r0, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x5, 0x8, 0x0, 'queue0\x00', 0xfffffffd}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, "f9dc7543705cf8a1", "b96f03c7eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000400)={{0x4}, {0xdb, 0xec}, 0x635e, 0x7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000001c0)) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0xc0ffff}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x42000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x1000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f00000001c0)) r1 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000c0f000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000000), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r1, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001500)={{r2, 0x100000000, 0x2, 0x9, 0x200, 0x3b122844, 0x5b2, 0x401, 0x77, 0x9, 0x8, 0x404, 0x9, 0xb0, 0xffffffffffffdffe}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xda8, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fc4000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1000008, 0x80012, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5c, &(0x7f0000000000)=0x3, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x60010000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0xd0ff20}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000e94000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x10, 0x100}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fe9000/0x2000)=nil, 0x2000, 0x0, 0x810, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000000)=0x2, 0x0, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000240)={0x20, 0x0, 'client1\x00', 0x0, "f9dc7543705cf8a1", "b96f03c7eb8846a24b420bcfe89e1c407f094a910c035a9f760a8df13cbc3073"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000080)={0x964b, 0xbe10, 0x1, 'queue1\x00', 0xacaa}) [ 3443.522595][T24584] loop5: detected capacity change from 0 to 264192 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x1010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/250) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0xf04a00}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x7f000000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2a1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ea8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0x2000002, 0x4010, r1, 0x10000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x9e020000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x1000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x47d6, &(0x7f0000000300)={0x0, 0x5728, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000c53000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x2040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) [ 3443.699332][T24632] FAT-fs (loop5): bogus number of reserved sectors [ 3443.705901][T24632] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:55 executing program 3: r0 = syz_io_uring_setup(0x400dec, &(0x7f0000000480)={0x0, 0x2bc5, 0x0, 0x1}, &(0x7f0000ef7000/0x10000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = io_uring_setup(0x3183, &(0x7f0000000140)={0x0, 0xbbd4, 0x8, 0x3, 0x8c, 0x0, r0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) syz_io_uring_setup(0xa7d, &(0x7f00000001c0)={0x0, 0x800d, 0x8, 0x1, 0x3db, 0x0, r2}, &(0x7f0000df9000/0x1000)=nil, &(0x7f0000e4d000/0x4000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r4 = syz_io_uring_setup(0x1020292b, &(0x7f0000000080)={0x0, 0xc84b, 0x20, 0x0, 0xf, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000f72000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x4, 0x40010, r4, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000f86000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x10000000) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000c79000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r1, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000cc9000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x10000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}]}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000640)) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r8, 0x1ff, 0x0, 0x7ff, 0x1, 0x1}, 0xef) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002cbd7000fddbdf2501000000080009000100000008000810030000000800020000000000080002e31c24673e403a633d65d90000000000080009001c483eac9501000000060006000400000008000900cf00000006000600000000000c0003000300000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) syz_io_uring_complete(r3) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xec020000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x5) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x1000100}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x3000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_complete(r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3443.803157][T24632] FAT-fs (loop5): bogus number of reserved sectors [ 3443.809691][T24632] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xfeffffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x4000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x14ac000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x1018, 0x14, 0x2, 0x70bd27, 0x25dfdbfc, {0x6, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "35f3e57d2c65a4f56fca406f12efedf9c83f9441b85e5100c5a249769054be7f9c66cda2796e7093a73ed9af5c9102eaf284f68b0bb78a6fda197636fb9b4b683a07c74cfe9913c5245cef5933c6737b57ae694491e8a5cfbed57cfef590a1567933cf95bb7f09b1691a20b389b2d163e68a0a84793bd799bede977b712366a812de138b63718e4438a85a4c42cf634e04d485dad7fbb99f7698af5009f9ad1ecb8dd501635307c779b456c045a39e7e25330e301b0616de0749b164625d5541e94be69bb39000f311f4c1700d8840feaa1a80fcde8eb5d3d1ae94fb388bac4940b744d7be0f30602d1c6c68eb82d88ab415a2e0d7f7996a62760066a9285db61e5a58b39a1bb77b305221c944157467b54b430cb481f89ae0d1a09aea9504817fe99273b7e9523209b7caea1be3f39b7b5103da308eb0ffaa3a426a28d1d526ea7f3df385c026b4664eb9116698c06921508fbcdc8326da028ac995210118c1a0da973e946ffc972438f71792c9edc7965c2dacb290b6b7262495b648fdfb8a3b44185f09868834f54caa20b69e71cb50fc00f6a888d8cc85730b97b11b040c22a823a22216a84fc30eb1da39fec4b2db8fca247256598b38a26d5d938e4512da4d1d55b2daad2a99c85f7ed4d5ece04100dc906d7441bd91d937be0bbe317710bbf25963c339908f187f917fae1afe070fe03faa15603ffc445c1d89a2b79c9ba2afc6eb306403a4b6d9434477d94b49dc8c3ac6fa06e351091992feb33f8f43cbfbd1dbaa1ef0d35eb6f0246c950b7a7a55752071009a1c795e33ab0847d1b4445fd9c89d27dff158f09e46c9f48de5576c7fb924283b1236bb35bff16bf55c07cebb21807996a443f9dc840efae001351b4f9de570c13a6eae876b51488a2e64fea71a22245ef600d3f1484be8ee0f31d0241793f6634e6c82a6bb0207acd31849fe90bc4dfc2975cc3e5d25975bbb8cedb58ac8e56724400da66adb543de6aa2586a47c07c3a55856f71065f22c9de5d1969189746b083144d0a23a7dfebf548b4002fbb97a66eb267a8e6f0c354b9695ca551c63af283e69888b2ccce68bdd114392b2dcd9f35205a1c02720dccfa9d3cacd020e6c4c561b3ca199b8c3972f783fcbc7ee18d81379261b3fb1eaaac4c8d95f907df09e6859ef7cd1b6d6c2be52138450d22db789e24ab58492fce6572537d061078a55f2bf9ac7a47f13e73e0a079b70a0588e3400ff4b33592141a013823c191b596845dde472899079ca94a8d339ef1879790559ca6a5fedc4db313e2e36ca22cf98396afcc21d71d26d4c2456e43d485cb1077ee93f7b6b28fc62d42582b7965087f30aed3f76e6383652cb8124875f0a9f1b57a07058a2eb991456d8165b342ee73a0f9ff50cef2d71b544da1d1abe6ab7b351fb6f1406cefbbf4b34c8dac83eed7183d896927c2fde6f38b7e1fe6c27bed918a3874fdfa87656028499ec3d147c61b0982f063afa29ecff85a57b2ca835acd4ef118d7af9c374c0e5b30d8480f10fd185e44cb6c2a59d1e2b9d99200c091df9d99d96cfbee6a3fdfc29e490ce7213a76bec6d202d9f961e10673564ab412f350311a0f0c8f07379d102a254f262a7c7ffb38ac39ced3c72ee2c5b0aeeb81e35025008940af41f09c945398a34f3d73804d2b230a1093b0b06cb5eaa142889d8b1c5b7aa5629dacbdd7b0c785a926d3d3ddbaa70c830ca1ef6a5fb4d3b9381d08ffc3a56e76e52a2696695489a784ea3c3f1b9e2d14f98bb71fa3bb92a2fbb2c57eaddfafe5e41d95c6d137d0cd63a590cfd76c0dae644bedbf115d7f1b4b9b0e1fd2dee37bbcb24c37fc6659167cb80827edb8dc5529bdda700a1afe36dd259c0fd2233d8dffb83910f19e735da7a7c772a8f8c3a4d4fb4c3e16c87eb6c188a5ff5f18202583a6773480049494a73a68406697c5b9bf8e690af06be832177b468930d49efd77360eb1376a1b1015c6bd69dc96387f868b34598f0ba2c05dccee23e65756e60b516d27eaa4ca856110db1d306df57c846338d1a176741bed522ee8965af17f92e73dc68d3e80006e7239f5644cb919534e1674e1b65078e936c887134cbb169434d5b0fc155b580716542188cb4217b1625dc587e0ec29fd1180e23de7dbe028ec7f23b1c0a52649ab7ef745bb0684b8397be9ab56f2f1454239888699fbd3dbb6a409387665fe4bea7f057e466248a874c494adfd105adbf6bf0da21c727d9a973f30234d0971e7c724ecced50a48d24d5a1abce839ee82b75ec8b305d87f998837c9daaab745deff020f17221607191f24972b427072363162dd4e611f2b29d7c807dec1b3ae5d110e46ecd0873dcd6f905673f1fd75dd64b7d6418c226fcb94e67521d70ab3bd762b32ef5271a0b7ee1b36b9fb655c650ebaa48a3c4c5fac6435c72aae5da5565400f5baa924ead173fdb11cc7e29303ceb3440470cbb050e06e309a20ec8ae5592201335d1b9eedb3279b619b00dd4b674b64bad97a84085e06a16e3b3019ad8d6ebc0548087fa0e959250e63132db3c4c7ca71fb2d942176112cb1310029c5192fe43f931cf875bb1103ce0c3f9e1b44da42baecbd4762df0b2de937a4a5350835da9bdf217bf951b6e2fbc5fff534ad35c2bc6ebaee6678143b429da5ad9423873634b0b44ccb8747592759b5f2e0dd0ee4edfa9dc2b95547210d7458fd3a3e5950961ab648e8f447d212ccf880d3e910d06a2a5e86e5f67081f4e75f951da4e750cf0521076b07c30d4d908dcc4c63657a4b1f7805573f229b4b4e801c96dd5f114c5fe5fbde056f263312e065109ced41ca59a69c20e035251b37e80859c1389fda4cf0423b9539ed4c3ce14a57c38d08588a3316e04aeb02402c2071fe16848bc2a045fef7313fa827e2571d6bcc660506f6b7ab56deafd6638e6371afedca2c172b1480e247eaf2e311a9f9509da04330fab9b13d4b6c0d19196436b47f76631dfcf47eb9b0a4931ed551a1c6c5ea63c277bf5a58688578b390ec4990b3a48b8db2f37327e261bf82458eeaefddbc1dd020948ff37f907fcf8d4801ed5fe28d2b404346477df9e52e1dcf24e3f94c0b7d188850e028347b2f1c4ed05808c5dfa5646330c440012d7a2ed5d25c7c6d9a66a784ca9fa2d1ada804e65cbb5e728cac511681147bc64dedbbc0b64df9ba9d826b8b0fd3a60d4de7e6b13d861ed3da124197640bb146a92718adb56d01977a1c0cbcbbe7220a6bc446f0aeb072f67c6ada3afb04fb81950da5889570a8bb0eb80effe2632d085a468587ad717cb220ae3be1992f448fccae461167306321deacd2eb657140887513df9c8f52829ed3a04c89976454e6cda819f6bfae0fd4213c8880fcccb06202ce4eeeff2f2571ffabdae75043b19d83dbc6ce900e588e1676bb5724e9391f12e0927f53f41fc1eba0fd290a3b04735e8c0f2b5346c7a29d69e887a62542abd32cc2b3043d29d3e7daae8481b2a71b20311f11838d9ddb824e6052d9b8e87b53bb1fcc69f5e3a2a25b1ae45041d6fbf8f75e07c739ca3350873a23cfe65bacc3c246a90af4a75a40b848b463f42b78201ae077952696ff4df470c87d6a7c433b9076adcb6a5462568f3d0417c3aa2f47fc42133d0225fd418bd2df823a2796cce38dc21f72dfca075e9e0adde7d2533b6d26fa984a6ece8c8a44c802895469aaf4865e7b2868f30c1b9d2526faab3dd4b1f519f452df9ae76dd36379e25f6726f9d89be4c6228b96c17287783dfc5889e5256c5abb952a78f663764e3ee387f1123f386e7dd88495418b4c496cd43c02248a8bcfe1a452f2e65aae565597119c77f045efc2cd2ab09a5e673166c9d5baa87e6479ca278d966f8a08ecea381fceb11d58a2372219694541e37abc1a980da94a0abc37b1f172c2efaad7cfd256bb764f6fe5272c575ea0ca806b4de040cae1917b9cf430a2d7694099949c28a6974c59b0cfadec76a4b267b19cbd6ba9bd6a66590a37d7eec8fe0407a3ba9547c74ce2aede8b74a299a29263f40e00758488a44410192d6d4c62d9adee73f5104b222e6470b71e38d0de11a8c3b3c00d90b3a24bcb7cbfd31f08d8590c48f506f21ba2a3da67594bf5c198de687573e464dc826e0c9d813133a5c164eaa53656af1f7cc2edd77db5d8a4e7fca592ceb03647239668c1afb721682cf0bd89f5594fd1c109ee528077f34f7ff212bb4c64c9b66eafe3efa6ee67492b5b33f1d8cca409976d93af3c17397156ea4c9e87bbfb857fbd670ab53890149c66ccb3cb2d7890189e0edc099d926ffbf9d5ec4330e2caa1a2b6acd9c9b1473870a5bdf9c36d9da495a8b6c8288d75edc25c4ba748d7b65ded4e5d796ec51515316a7528cf54cd36c05eedea7a49e3e254498aa68e3f2554a9d8a8bed539d3c6625a5faad447cb21af38b7737e2585174d9219fc252b2ba9c38b07a66c2d51968f0340070b9e07616db61fef16624c1ce01cb6784d03442edfa5f0649ad7d8912b18901c30d7f2aea1e0dc57889fd1b0af4ccd0871c3d60a050d4c960a301d7cea85fa0c69a4bc95aeced1b4abc2ce9d43eb68c7ca0b44ebb56ccded77e5d6a2e9d46212736e92425376166b4dbfe9c09389305a62b1d965f22928d9b51d9cf79529302678de2acdee2b4f8f5a7a1b50d5d3a0efdd41f32be88fa32efc83fd1e524f7d0ddfb8d300817573d78a541fae79d76f93a47bebf21e5fd0446e88078edabc845b6609f50f00146076d2a406f88ffd750d3668aed7e30800ef6d4d298eba142bd162048e9539d104f01d85f46431a03a9065b5d936cea3796a4ad7662ebbe9cab0836184ec6961678e5b2e9503334c7ee9b475f4506ba58dfeb8146643c09ab1fe4f99e5e30d6b2aa30e4d6a3c9529191590b98c46becb0e49a3fb697faf2341dd43a3f23a7acc2b7576d841c640ae46079d2d5708512b7eb4c3b49b27a99ce07fc9e5adf8c62cb619d3398eb50b5f4856874ff1005ee0f747aef3814ebb48cf86f9722e9c43d9a6eea259f5999d27e7e05cc001c136afdaf6b0c2970c1e6fd8fa3faf130d0a3b001b224bf3ef210d9be1c7862782e4611c624ec37f7ad26ba03c47ae034995cd8be77defeef1db79344046fb89a2760ad99906f7407dc543c8a285c6713cd6bf019e81dd392364a6576cb42cb6214be6aacea164be6509ff9a0e0df35a6eef857ba1e7c0c5387af781139839cf622ac6dad6436033c66db8754e4e81acc4af499008389bf6ca9d4b41403d64ee9fcba62a0fdcd203dc96e4c3ed5d5beb3b7f663e7c6f3902b711b91f67087f4db5b582729792d87ed0d990a551a5948eb4be610a95171fd18b3450053d730e148d9eb68150e1abdaa9cdab7b892e79ee92e13b388fd780b4209b7851415adf7c33a9807fb11ecfd6e01f972451951955a080086486c97f5feaf7773792f5849ac879c818780108eeddc383100f5069d87af8fadc5a22289412f402b602ee11140572be9730f50ad7741b1bafbd1e71c967ddb58a241322582641663395f488f259bc79ee0e227eeb8b72e1a43725972d3796bfce3522c103283c79934e79e9f578bebfc9ea39ff5fafe50f52f71d9d48cf768b4dbd8a5a58c3c3e2c5abb6ed599fdca038fd45622ab0eec92cb354bc0a2870c0963785d136458cd18539a32692a9def8d08943d567ce90dc79a2d88d5bb7272d00cdb627dbb22d587a69d7a9f4ea6a4c6fb2a98d63a225f64e44d768f111e8c9698f9e5be86fd2d6b10c42aab0ad5def84ec7b41005343ed5594f54d19f6ffd505e6896086278e6"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x80}, 0x4040) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3443.906982][T24684] FAT-fs (loop5): bogus number of reserved sectors [ 3443.913714][T24684] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:55 executing program 4: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0xa, &(0x7f0000000980)=[{&(0x7f00000000c0)="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", 0xfa, 0x6}, {&(0x7f00000001c0)="3026d74ace8053bacdce0fbdab190bc23f28b01ac9851f6732050629975ba1907c15c0e969a81999f6e595efea0e2e209e6736fcf174e7934987890e9fbdb9aae3a40b0ae0cc73781634007b189fba09becfad997b94a8dd7f0583f38b824b9afb5a18485be61d66258ac8df6e934a6bc1438f58375b273d6d252a", 0x7b, 0x4a}, {&(0x7f0000000500)="3acf192e30a55914f0aa129bbcb59d0c613f1e2e9624020645640b53b524c93b551ff82cd522440d5e7f196b5ee1cf01818df5c988c3c9977df1a1b93017dd20f0ed38e2ac269b09a0300ca7dec42c8c01b957cdb826806d50084a7d68517724c0b8ea4da4b39e488d9036742b638761fcb37cc9384935163c8da809aeb5eb7a268ffe47f0f1c8e890f023510f878b74d863671d5b996a19a3acddf3f8e3558b7466e52a11ab30ca6049afc6e91a230c5dc735fdc36a80bd26379a46b2a45c68d8917907eb60cc5e965a07c00539371b19bbcdd3cad7d7a77f1354500b561ed293ce3efb475ca6", 0xe7, 0x5}, {&(0x7f0000000600)="3bba788a5179494fc195c65ec1269b84eb006a32a07a527a98f816c9097cc5f1f54c6bc99489139928a20819fd421b7b6bb29cb4575e4e68c2ae1ee301e5ac948061fd58f532c22b8a522f1d810b989ba93058e6561996c62bde1af89c5f33499927937b9a0b536088f67e5675841ef61fd248f6453d0a8ec8cb6bca694f24466ee2065fb7e7019403894a7ac35bd5b75ecfec933f472c6cad7f1daa004cfec2aa1cc30c8e7fdcd6dd375ac43a1dc801809b1683531b88961a3abd6e63", 0xbd, 0x9}, {&(0x7f00000006c0)="539bc96f6e34a6e2cbd5aad06500efd0a2f2c4330ce6c55c62a4330d964d7317c4d68d5548c100f0d638e6dd84069b6d759ba1d99482c08bd69478bc70e757b23571004d863d216d4e7acdb4a6a5639123475fde3eaba4f57e608ed280dd7551c6ea01dc8837b5cf74ec21d1fbd519df42aabe14144042c222bc12c915e6474492d663d15b4e316a7dfd40c5dddc481abe1abd8b0bf8e57a89424e27f4e18b7f24c33fc04ecfca65012bf02130d3f7ada9cab1ad7578a190f1323abc0281126725dc610c950e30771d1f73ee81c401fe8c8d0945a1610864e5213ca4b8df5ce15cc80af6032a70be633164dbe39b", 0xee, 0x2}, {&(0x7f00000007c0)="7d67676b19e2f48e81546e500b4109036b4208ebcb63bd04bb0fca3bf74f67b7fcc4dc57f638313262b46c99db3cfa4a49746e66105a1e87bddd715fb5c8553dd8b12341e6bf72515d69028ad1340cf3382f9e7ece77ce48e54e3ddd471c3117e687d1343895f1c0036c988fe7b1e09c64e23f3b3004ea3a596eee58b14bce3a1f92bd907a2659ec1591e6b20c8295bb945497132e12309ca8b58540d9330997280c2e2271ba7c8055669993086a7e20d156a7a024c73a285e132cf9773ed8b86499d3e1c71ce56e9c9d8b36bd64d9507d919fd30daea56f9f3669c5734524", 0xdf, 0xd3f4}, {&(0x7f0000000280)="f6304fb99397d07f8a6f7ebce6d510c6b3fbf28e36d51e230d1d967a", 0x1c, 0x9}, {&(0x7f0000000400)="9b2e6e5ed3ddec890f02c6d7789aac5b9a0ad46f35ac570f11d19f0b1bc7b13c8b53f1027687382dad96011ff5f3b3c647e97968f374ba64d2053b4ac96cf13b8ba5", 0x42, 0x5f}, {&(0x7f00000002c0)="68e0bd1d13674f46b0a692b0c4", 0xd, 0x704}, {&(0x7f00000008c0)="65bec952a6de09faf2b0d40f8b541bbec761c145e46f3e9a38ad7133c5e506948f3b1068f67657aa5f8782068153e517187c202a2b8bea8218f45beaf74127b947b9955aa9f0256121e3e78ae1f3e7a92ac5c7d4072ef748179eafda17fb53c7106e340ec0029817bb877bdf36f4d1781a9240b45be5d6c38cb6e3c93f2945a072ec1d6f2f9d8f90d097", 0x8a, 0x9}], 0x280000, &(0x7f0000000a80)={[{'^'}], [{@smackfsdef={'smackfsdef', 0x3d, '$\''}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_hash}, {@dont_hash}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@audit}, {@subj_user={'subj_user', 0x3d, '('}}]}) r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xff600000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0x2afc, &(0x7f0000000080)={0x0, 0xefc6, 0x4, 0x2, 0x264}, &(0x7f0000800000/0x800000)=nil, &(0x7f0000c4f000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) r1 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r1, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x2000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3444.001358][T24684] FAT-fs (loop5): bogus number of reserved sectors [ 3444.004264][T24709] loop4: detected capacity change from 0 to 211 [ 3444.007897][T24684] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='B', @ANYRESHEX, @ANYBLOB=',\x00']) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xffff8000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x4010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x2040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:55 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = getpid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000000)={r2, r0, 0x4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0x8, 0x8, 0x401, 0x8, 0x4, 0x6}) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) [ 3444.075833][T24709] loop4: detected capacity change from 0 to 211 00:18:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000080)) r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000e81000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r0, 0x0) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x6040000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:55 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xffffc000}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, &(0x7f0000001ac0), 0x0, &(0x7f0000001b80)={[{@fat=@dos1xfloppy}]}) r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:55 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x4000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3444.175703][T24740] FAT-fs (loop5): Unrecognized mount option "B0xfffff" or missing value 00:18:56 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xffffffff, 0x10, 0x0, 0xb9}, &(0x7f0000fe2000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x480001) syz_io_uring_complete(r1) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r3 = syz_io_uring_complete(r1) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000000c0)=[0x10000, 0x6784]) syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffff8000, 0x80c00) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='l\x00']) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', 0x11, 0x0) r0 = getegid() getgroups(0x2, &(0x7f0000000340)=[0x0, r0]) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=virtio,', {[{@loose}, {@loose}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, 'dfltgid'}}, {@msize={'msize', 0x3d, 0x9}}, {@cache_loose}], [{@dont_measure}]}}) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x1008a0, &(0x7f0000000200)={'trans=virtio,', {[{@uname={'uname', 0x3d, 'trusted.overlay.redirect\x00'}}, {@cache_mmap}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@cache_none}, {@noextend}, {@cache_none}], [{@appraise_type}, {@appraise_type}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}}) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x7000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x6040000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0xffffffff}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) [ 3444.253533][T24740] FAT-fs (loop5): Unrecognized mount option "B0xfffff" or missing value [ 3444.269560][T24761] FAT-fs (loop3): bogus number of reserved sectors [ 3444.276174][T24761] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 3444.285347][T24761] FAT-fs (loop3): Can't find a valid FAT filesystem 00:18:56 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x7b1130d5d2b0599a, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x60000) r3 = socket$inet(0x2, 0xe, 0xb4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000ffdbdf2514000000080001000300000008000300", @ANYRES32=r2, @ANYBLOB="0c000600000000000000000008001d00", @ANYRES32, @ANYBLOB="1ed38b51849bd5f4692f9e9caf8aec2bab5776e841b502497fcf191318e6f699c6f8f2c18f3a0acd8060930a189d530e3b9a452a4e6c78f511a9bd346032a695519037bec781271e22f4d7f600376781e8505da20ec81ed3377c9649d9401e49e05393270dc282e1c28a4ca0a92b48d9f19fbdb0984c9db8620d8127f30a6c14a163447540a66649d1c8a7dec1dc7c100ebde1e4a890913b5d61c182e48949032fbdac32c64381e9d78ebf9b85dac932895d9228e5fc66022e3f123c6ae00a8571680a3fdc8da9dc0c075629e095d42ee0a02bae2082bca7870b0727d257ea7f6bb17c7d61aa0e0dc8"], 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYBLOB="080027bd7000fedb00020000000000000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8c0002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x100) r4 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r4, 0x8000000) r5 = syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000dab000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x10000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/user\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c99bf09", @ANYRES16=0x0, @ANYBLOB="10002abd0900000001000000498f01000000ad637fb2fb22fccfd85162e1c3b5340334cd267e82056711a0795d6c40e939ae94846c8ff1a16290184de98cc25182c8a383d4e7a56af320add27ff390479baf93d0", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x48845}, 0x40045) [ 3444.334803][T24761] FAT-fs (loop3): bogus number of reserved sectors [ 3444.341347][T24761] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 3444.350463][T24761] FAT-fs (loop3): Can't find a valid FAT filesystem [ 3444.373879][T24781] FAT-fs (loop5): bogus number of reserved sectors 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x8000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280), &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x7000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3444.380439][T24781] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x8000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3444.444012][T24781] FAT-fs (loop5): bogus number of reserved sectors [ 3444.450585][T24781] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0xa010000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001400), 0x10, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x0) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x10000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000df6000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$usbmon(&(0x7f0000d4e000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x810, r0, 0x8000000) timerfd_create(0x4, 0x80800) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x8000000) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x10000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f00000001c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)={0x198, 0x0, 0x412, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x17c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7fff, 0x7, 0x0, 0x6}, {0x8000, 0x20, 0x81, 0x36}, {0x0, 0x3, 0x4, 0x3}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfa, 0x4, 0xa2, 0x4}, {0x8, 0x4, 0x80, 0x3}, {0xe3, 0x2, 0x20, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x1d679000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@phonet, &(0x7f0000000000)=0x80, 0x80800) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x75}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 00:18:56 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x4, 0x41}, 'port0\x00', 0x16, 0x10020, 0x2, 0x7, 0x5e, 0xfff, 0x0, 0x0, 0x1, 0x7f}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="cb850c537d0b01c9007ddf16397532dd3c72a02b88c56d8a360970bd05a84e5c019946796a04ebb6de389158ddc43835b7aa3706a99e32051038982e95be3943be9f685e06ca337481eb9ea81fb9da2df35dcd8646933e88deaca92b84174dc83a93f4e8", 0x64, 0x9}, {&(0x7f0000000140)="0aecea7cd4b019ccfa15bf79fe207913dcd96f71654a3fccdec627972ef5d7289f59edb247dc7cf16aa4a924eb4395540632db1607f8ab4207b1019ed47aa93a6c", 0x41}, {&(0x7f00000001c0)="393e076688c707625bafa7f8b2a77d6e3ea7c836c837f562bbd0efebd0fcc5af77f8e3ad61b262df248ebf74c6ae8f880cc50882d3009274851d54921d5101ba38fb739dbd9e5e3fa59c3f7be7b22ec799b5b41ac7085591d48c473818e90a0468954b7f53e93b0a598f52d4e5a409c4915068e79b2db3ec69d8026b03437fcb375b95cc147f239b04604b8b6d14d798b498c31a7859c8cb9c91dcbfff2851c16cb248e6b0907bd30ecddbbe6477cbc70b50ef7eba9a5a5ea083ae5763e44234ecdabd13e0e1a31a3ca224a55b717e5a1fa72a", 0xd3, 0x4}, {&(0x7f00000002c0)="99e30f93c0e92645a6f480b4c60dabd83975598d02b5c2631b8c0fa5b23be63a050d05a78993954b37f65a3c3ceafcd111d399cd731c19d0959b9aeaa4dd23dc79efc01dde64944ee4d017896afdfd2a368ed1582fe6f407d53a96a72cc9e85a904683c80030907c325613cd396c74c9a266d2c135b226451989275133ffbd26d3e545c9f4d6aa14e581517906", 0x8d, 0x8000}], 0x0, &(0x7f00000014c0)={[{@nodots}]}) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x20000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x12000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:56 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/83) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) r1 = syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x572b, 0x10}, &(0x7f0000e89000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000200)=""/7) mmap$IORING_OFF_CQ_RING(&(0x7f0000d45000/0x2000)=nil, 0x2000, 0x3, 0x20010, r2, 0x8000000) syz_io_uring_setup(0x4adf, &(0x7f0000000080)={0x0, 0xd798, 0x2, 0x1, 0x93, 0x0, r1}, &(0x7f0000ca5000/0x1000)=nil, &(0x7f0000c70000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000500)=""/4096) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x1e824000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) [ 3444.746062][T24864] loop5: detected capacity change from 0 to 128 [ 3444.779318][T24864] FAT-fs (loop5): invalid media value (0xa7) [ 3444.785439][T24864] FAT-fs (loop5): Can't find a valid FAT filesystem 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x20ffc000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x142b, &(0x7f00000001c0)={0x0, 0x6146, 0x4, 0x1, 0x2a2}, &(0x7f0000ea9000/0x1000)=nil, &(0x7f0000d47000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000400)) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000100)) syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000dd6000/0x1000)=nil, &(0x7f00000003c0), &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x80000000}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000004700)="d8794535c6272a3cbafac86747c32a3661ffd54d10fd972378ec9e6e376c19bfa68f63735d2f25993d47d51e14b84977d436bd74bbf041865fcbef1b9d8e705065e06e2eda5d317c2afe4e7eb75697980e4ff005c2b85623", 0x58}, {&(0x7f0000004780)="27c5707175650d2ca2e74b0c9e1a18be4f522cdeb5899deb5f554d93901637632923e54b41", 0x25}, {&(0x7f00000047c0)="47232a8c3ed2efb821b5ca7d44d9788a7cccf262143c93e2fc7c93537e5340284bd959c7b14adac2b7bf014251e55e7714f1050a01e7112c2ff4e7db9c5ba3b790be29e4f3ad3432db56da5040a31468a68690e026867c4da161c7e09873d3f5", 0x60}, {&(0x7f0000004840)="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", 0xf24}], 0x4}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/93) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000140)=""/64) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RREADDIR(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="49000000290100ec4b0000020300000003000000000000000080fffffffff7ff3f07002e2f66696c61304000080000060000000000000003000000000000000107002e2f66696c65308d29d06ed61cd9e5d9e4647fd415d3f00180f6d801e59bc81caa0d856b719f8f8fd0257d4f459515a1"], 0x49) 00:18:56 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)=""/167, 0xa7}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/187, 0xbb}], 0x4, &(0x7f0000000340)=""/243, 0xf3}, 0x3}, {{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/231, 0xe7}], 0x3, &(0x7f0000000740)=""/185, 0xb9}, 0x6}, {{&(0x7f0000000800)=@ipx, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/124, 0x7c}, {&(0x7f0000001900)=""/225, 0xe1}, {&(0x7f0000001a00)=""/48, 0x30}, {&(0x7f0000001a40)}], 0x5, &(0x7f0000001b00)=""/27, 0x1b}, 0x1}, {{&(0x7f0000001b40)=@ax25={{0x3, @null}, [@remote, @default, @default, @remote, @netrom, @default, @bcast, @bcast]}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)=""/4, 0x4}, {&(0x7f0000001c00)=""/199, 0xc7}, {&(0x7f0000001d00)=""/177, 0xb1}], 0x3, &(0x7f0000001e00)=""/241, 0xf1}, 0xb9}, {{&(0x7f0000001f00)=@qipcrtr, 0x80, &(0x7f0000002400)=[{&(0x7f0000001f80)=""/12, 0xc}, {&(0x7f0000001fc0)=""/103, 0x67}, {&(0x7f0000002040)=""/49, 0x31}, {&(0x7f0000002080)=""/14, 0xe}, {&(0x7f00000020c0)=""/178, 0xb2}, {&(0x7f0000002180)=""/192, 0xc0}, {&(0x7f0000002240)=""/242, 0xf2}, {&(0x7f0000002340)=""/144, 0x90}], 0x8, &(0x7f0000002480)=""/58, 0x3a}, 0x400}, {{&(0x7f00000024c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/215, 0xd7}, {&(0x7f0000003640)=""/216, 0xd8}], 0x3, &(0x7f0000003780)=""/221, 0xdd}, 0x8}, {{0x0, 0x0, &(0x7f0000005bc0)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/135, 0x87}, {&(0x7f0000004940)=""/69, 0x45}, {&(0x7f00000049c0)=""/241, 0xf1}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/44, 0x2c}, {&(0x7f0000005b00)=""/134, 0x86}], 0x7, &(0x7f0000005c40)=""/50, 0x32}, 0x5}, {{&(0x7f0000005c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d00)=""/136, 0x88}, {&(0x7f0000005dc0)}, {&(0x7f0000005e00)=""/87, 0x57}], 0x3, &(0x7f0000005ec0)=""/195, 0xc3}, 0x8}], 0x8, 0x40013040, &(0x7f00000061c0)) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 3: r0 = syz_io_uring_setup(0x3f58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x400000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040400) r1 = syz_io_uring_setup(0x5ca, &(0x7f0000000300)={0x0, 0x5728, 0x8}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000f7f000/0x2000)=nil, 0x2000, 0x4, 0x30, r1, 0x0) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x3f000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20000000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:56 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008004) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) accept4(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000000)=0x80, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000001400), 0x0, &(0x7f00000014c0)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:18:56 executing program 0: syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), 0x0) syz_io_uring_setup(0x46e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x12}, &(0x7f0000c56000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), 0x0) 00:18:56 executing program 2: syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x40000000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)) 00:18:56 executing program 4: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x1e677000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_setup(0x5ce, &(0x7f0000000300)={0x0, 0x5728, 0x8, 0x0, 0x1}, &(0x7f0000c01000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000100), 0x0, 0x4) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x31713, 0x0, 0x0, 0x1}, 0x6) 00:18:56 executing program 1: r0 = syz_io_uring_setup(0xdea, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x46c, &(0x7f0000000280)={0x0, 0x0, 0x20ff9000}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), 0x0) 00:18:56 executing program 3: r0 = syz_io_uring_setup(0xdec, &(0x7f0000000480), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000