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", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2472.015612] FAT-fs (loop6): invalid media value (0x58) [ 2472.021090] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2472.050864] FAT-fs (loop7): bogus number of FAT structure [ 2472.056641] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2472.085750] FAT-fs (loop2): bogus logical sector size 1171 [ 2472.090746] FAT-fs (loop4): bogus number of reserved sectors [ 2472.091557] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2472.097437] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2472.111014] FAT-fs (loop5): bogus number of reserved sectors [ 2472.116938] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2472.137292] FAT-fs (loop5): bogus number of reserved sectors [ 2472.138841] FAT-fs (loop7): bogus number of FAT structure [ 2472.143218] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2472.148753] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2472.163124] FAT-fs (loop4): bogus number of reserved sectors [ 2472.163225] FAT-fs (loop2): bogus logical sector size 1171 [ 2472.168997] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2472.180582] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000005b) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:38 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x3, &(0x7f0000001340)=[{&(0x7f00000000c0)="cc0646e97db53c2a6a504d56769c4759d341b98d08c73f1e387dfa", 0x1b, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x3, &(0x7f0000001340)=[{&(0x7f00000000c0)="cc0646e97db53c2a6a504d56769c4759d341b98d08c73f1e387dfa", 0x1b, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:38 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x5c00, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xff3f}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174040404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xff0f0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x3, &(0x7f0000001340)=[{&(0x7f00000000c0)="cc0646e97db53c2a6a504d56769c4759d341b98d08c73f1e387dfa", 0x1b, 0x4}, {&(0x7f0000000200)="4cd2d1189aac301b9ba7fd130b04478def08d04114e8f3f164fe8db7f2eedb258c97105ba284e7a90417ff10b30e360dee914ee4b105b795e25ff769fe30e1a0a24d5ea4fecdd6e3a96a472cb5bf9acd8239797441471c4a7a00dfc2d9b415e68e49e73d26af4dd7d558be73b291d32db840baa64dc6027aea56521ccb183ec3730dad9a2e9acb11e8b089d7eebce0cb2d2039605c6372b1523e1e51f479fcf7466c7e5b35895798e7fe8c4b313ad1391d374b59184bc72b2d38565ad5024fff8e8466ed0af307695b6db10a8bf47afc29772e543b2381b179ebb0cc14306dcbd7f33a13973578930839ad03d458763e5d375e57f98b5529ffe5b2543965f35a512238c5df11e728e9f92a69441892ca2171c561408d87553925ab5615c47ff346ae5da2aa4c3c46df44165c2b299acc492bdcd777184fea212eb5dd0feedc791d51eea261695759f0ca093204ecc0fd88bedcd43512421967557283e8e7222f413c82e5fcb5e9f66f252546cb0f55f56c49ed7d31fa0a45046670841fdaed77359f315966cd9703a4b2a1f1eb5faeba110044c3b443def535c93a1f1b064aed1a2d1c43834412f16a93b3fd9c138ab81585dd3021eaab400f2705ec5ac5f9aed422b8d0c6d50a27ab0ec82e86c9dfd7c0e06a651533d7d4af2a7a1d7f665e785f3fcd495458179657cd0c028a49d2b10103e7fe74fe3c038e44cc0dc444a4a86c000fe99f90db311590dbe68a3cd51b5f17a1db7c4bb7b4c25bf25c602dbaf7185d596784f80c52a81fbbacd53d228e5ee4e2a4a21dd9a70ce77fa2f147f6a01333a89113a282a03777a5522569c21d33ab5ab5e17fa1d454b0469131898d0ccf5ad67781652edec064687d882f751238127e96ceefa74df4fddd1735a634e28c7da4900118a40e5d0476249256e8db088384e35e1d637a639b1ba022cdff510870a442918a27875f7df6efdfb6d4cd2794a25e8a9f8e8df24a568cb1b1f91801fdc203df6fc18099cd9ab87d2ef2b1ef8fc90696c84ff47dfe2a9347c48d52e46e7b9900e144c084390169d95f328c99989f2aadc7096ad4761f017c8741191d7f5e1c88cb9624021b8ffe48967ec1e0b85a283567bb08696beab0e8da3b639fc605acce84b5132174667d51db29e36e47b2958a06aa863e58eccfdc4308f98199f879d91ab1e2e1b9eb53fa678654d8718aa21d69cc8186eaccdfb818c414406c7039c7c9a88bce7f1a8ba9c354ae7e95bb170408bb67046cbb7e410823bbc195b428e20b3686920a590941cf737e0e69541ca85103c53d12e186126fd0062df725e54cb67753456dcd1f8ce2ca870fe545d955d4a38eddd201ded702e51509a97a9e147396feb21790219c07a76662ee7af3fdeab5c6e70951ba926ba5275120e82fd32eccf3a71fef16f2f67f9f52283230ddded77a89bf591d70234c4cb9b6db236fbfb974fe8773bc14063f579efab08007330ca64b0707eac3424452e4988821fd408f6717329a7179c8b1fc440a2b1adfa659643d9c92e5e4af5489223c9107eda29c01544a5b7719aff40afc68986d78161e4027adc7b0989f10f254e85b2a33f89ae21161d0561b8d34232be247ed847f7e6be7c0db7bb863ba6c0cd8fc4010115b6386bf1890bc649681a0a3395645bcb3426e12ad4b51387086b2b6fb68bf2af13a3de26506f0d58d03b188ad0765ed8acb048cfeffa91aef9ae1e65cc73f83b264f3454f890e4c141d278740488ebbc18bfb902fc5c8d0ea34e4077e7c0ca1f812ca5e2de4107a47aeabd503474c36a92f8fc2bf11e3f147880ff76bc3ba046536f780af38d444f074e05c1466c3fe4dabbe5514256d0e1f405460fd90f0c8b4a574e5bf8518b6f333e1ad9e1fe94c340c6642c5e136071a956bc0a42bfc2466de9e3f066b44163ced21c2673ecef60c7077734cd7fe5ac811895b8520380f3a205bb7ac0f461660f0aaaf109092ef01044efc12b93057f0d3e9318e16713992a0df4d3e2c56e24729b4be6e8646ba9799bb728ef5d4c45d171b991d1371f79f94fc5966a8b2d78c48f73d5918d18bac772509c11d1fb4e9cd6f22c175d00d79584a1e17a7c2fdc86d2f9cfd60cffaeab6d1aec491913208d6b3dcaf2354c5425495559970953c4ff89d392327cd0f663525abe44054e18074a6d1ba50fdc48aee9c5de24cf4ae79576e55d0c1975e924208f85f863aba59fa1d5bfa29da59fcffc34f77b02c1575812ece54fb7aa58e9caec6a052f0bedd4454cadd714eb63fdb2c5558b8d8b6a66dbe9df08109d39ef09df75d768f9163f6a3fde5d6fd886a0af8eb2f60de3db2670c3adc8c5444b5852762a16f518b69458833d10dd022561836e86d8c81e25335de154c6dbccb9ed03c713222dcaa6b6a6545c55c28e2bcebe417e9a8a5c8ce5a7fb30695298f37c641c30afe47c2c9e13052678c116c6ebdd9f55fddab53d715b0b70f46f44f7860192699cf0b7d6ad5462bdc0d712b5d7175ea3f80f527b3a879ec32f5e00707b06743a0eaa805c201af98a1e352bf4aa4188bb2d415e1e532fd54d81f3e888f8e7a9b5c8c66e3485a3dca1c10454ac3858858826ed34fd881815da389e59be4f88ff2153f8117495988ad4b619c72b859fadbabb1cc386d891a581229a8f7e6ce9eec673ca91f3eb5642a61ab856f0a95714d3031ba80054452b864a9d44a3329600c109d6efd7d06c70acacc5409e9296be7e8ba2545bf4bf22653bb59052fbc5bfccaa4939b77bff58241489123a93d0f43dd773918988d2dcc8394533553345f30efe8036dda58b505d33fa464af927eeed25015a8b2749140e3fa7b1371bcbaebae90349c27c1463ecd818086ef58ad5752f0b153a61e94b4b223c809c519e404e01345533fce419700a4ec7f9b030acdeb53c1354dba3e08b1736ffe376faddaa8d289ffaf5554bec9a92db7e1daac92431f892f5178f73b2bec0a2f0095344ce913a0db258b5e3181f84e27f07a4d2962aa7cd00fe692acd5197003a8dd05df1cff924dad135ad4a910ed32e6832c80385cea2277ac0a35ebf90a17b2138dd0d36aeb147b239f4de13e02d14af679d7bc3db2e37eacd51c054472e3a598f00c39d978038a1416d098a17199e15b12b3b4a25a3909365ce5034a1b301447356db96d089c0e3b8b13a2811dbe404b1f8e91cd25b5d4e692929128845aead7f51f5e24dc7fed3ba8624db41dd12ba7a52878307288d105d692ac8a4c1f562ccae0792e9a1cbd0c645a11db0584f4a930cead85db14adbf82482c29332346ddc615cb32168b167d0da694c2dfddbc11640db7542661145f0c6305bdf8a617fb0046614e9cf40598a4d4489d1767a1767f73cddf3b53849f78902661ff56d857bdee130baf3ed2be7e348f27d8bba7c068b7b332e0777faa6732f4e7987dc1611e880d9f3f327db57726453043cd9d3a6b0f3ea7bac396fd8043d6c6d9e7c9dae98e173d54fb3d0759217da2b72a3c9f749bbd0611e58ca46c28f94199576880477af05ec298ee6d60be9089ba25c58594659e73ee0ee060f3efbc77cc50e7a057302cffcaa3bc9cf15d5ee6316e8456beded983699bcae061fb1da6b94c8e87a470cc0bccea47c68818db3eadf55d666fa857b34632aaead8e8ef641059b953da20b6b0f2b66d63c45587d18de3b6c4cb9966e1dbc8ffa7bdf0a10fd5509a77fc139decf04d225b9ed9e48644e7ffc552533613a14313994d56f710a6dc81857b5f8612327a22c636783513e09b59e324a942d540fdf910c62fa7ff26102a549b118a3d318fccd46930dc219f7a586ef361a796cf91ab75f0a31250604462d1875523de83e04ff42e013b25eeca6117034b39930d64e2d0b32e3aeea55f08417e909a5053bef8e7791538e7747fdb940180d6da813a45f9a34bb79aa16c39535567d08a8869317fadd52dbe4817476177146ddee3494f91b9f6a1d0cad6067462f8b75287f4afe1b0fa9c8e409ba7a13b58122744d521a4ab8c63f66ec23c92d32815604f556e35fe7b690c2251a4d8e26beddb65c79d00f5567e0b2b78baace429bd4260c803a7090ba4bee101f8409f75431075c153f9ee4a6330a59b13c9a5cc82d1305f4f77f35e32fd959b86b25428e56227e03aa50e63a16937277820f9f0dc5860567b06b75af286dde2218f625366b09e45efd9376eeed4c8b67559b455b0448bd4294f4938412ab701bae24455355f32077fc78555623b7bc7221f061757e9d2e0226004435613a94d2071f932c27bc7d36860196dfdd16535e1f91c0e1f160dfeefbd20e87cfa683ea7a463940f8a4e1e66b2c3849b07a612f130ef8e51c2da2150a9b2369958fb07757b0f1ffec83714981c09a93b36e6a81bef1c2bb7d5c0334281623b151d1c3447d0f7729c046f30b56124baf3365c0af1fc080e6bb87e21648e5d543caf79afce798abdad27dd2aa865a326b25e0a70899db06c800ffbbd87dc11c989112602018372fd7fc804da4a275fe2c242574eef61d20ad9d8189443fefa95342f4cedeb44ba5fd1b72060fe39f7586ac8d777591ea3ff3f56fec0a18db21cf432bcc77cc8adeb6851879f6d76a54149e80739873642cb6767d955cdb63fba6943d6d5aa46c848ec98e6cbf0e990ab427c23d4a2bb83846ff40a94a7d191f68f9c4bbda3d45bc4a5efa7b873df613338dc3ecb102ffa8773926b9d1295b4feaa8ad10729f57c29215f26bcf103d8ed253fb80349f40baa6f528630fb11324291afb5c13c1c6ff305380f052ce5cd1ad6b68a55879d38c8fc246da0af633751793c4da46b691076ed4f01ceb31d85fe240685802430714110351b8d0c586040b5f2f9b211c4f6c393c5e41c61326874c0f8d36394d5ab885ecf1d720f48a3c9eee493fb27d2cdc0e63f9fb594395479a15fa8079acf6e78a1317f240807449b164bcad0b7f993e610b51751ba8fd8164d9aced09122942fbc98b1d71761d4d73fdf838eebdb5f272d8e4713fadb19e123a06a4ff5a337a4a04def61d2a7448332205f4463040ee9340d3af96ddf407fca5753c11758290b0930c3d107bd18a25df0def9ae55842fe6a699ea6497eb16392551f327300dd412f33f481df5472e00ce8cd8744326ce253725ef90157f2f13f6e597bb592a8f091337fec34cce49143ff531faeb3248534a42d45372e8d2581f4e3fd55af76238c870527766541e571f0dfbfb344f6f0a4749b4a915029b769c9a14a12eefad9853f8279ec46e7e92dc2c1b348c47478ccdffd3d4340296ff4bee85f830e1387865600444f18d91281a0f7681248d1b9f7f5c278aab2ef6fa21bc536d686513f60c729e2dcc596128739ccf53032014f7c173fbff7744971a962e73efbde638ff46238b12f5714d11708e5693b003095bc1aeed9ac900ae4b0997b96307044e3f32cedb8720fb34b2871fcf89c443925d91cf3147adfe628a6529662ff020ec97bffc66a0a351545a10fafc3aef78fa6cf9bf3031aea08aab23a32f94f7c796c330cbcdc1220b0fcb5fb4886b171ecf7eb1cbabde24800726530a0661f572a5dabee8546a0771925d2a277835518419c25e8562554f537a5d0f2357f007debfc1917844c6dc57944b2c5ed7311021f5e5a859250d6cdf45341c32b4b86c55446bfa6eaf370b857cd24df059ee09a6cf887a331422c9f0b297ae9a33a6f2659d51bb0c6880eaece4e9f3d3cd17632bf9d9db29d4d19641195afcd731a5ff8b7ee315348243a240337bae925546bd7ecc779ffcb7c4676e12adb97728260228a43adae6b7f5df", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2472.862549] FAT-fs (loop6): invalid media value (0x58) [ 2472.863108] FAT-fs (loop5): bogus number of reserved sectors [ 2472.867923] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2472.879860] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2472.887661] FAT-fs (loop2): bogus logical sector size 1028 [ 2472.893400] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2472.903430] FAT-fs (loop4): bogus number of reserved sectors 08:32:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000001340)=[{&(0x7f00000000c0)="cc0646e97db53c2a6a504d56769c4759d341b98d08c73f1e387dfa", 0x1b, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2472.909465] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2472.930183] FAT-fs (loop2): bogus logical sector size 1028 [ 2472.933684] FAT-fs (loop7): bogus number of FAT structure [ 2472.936079] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2472.941609] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:38 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:38 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174680404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2472.967559] FAT-fs (loop5): bogus number of reserved sectors [ 2472.973599] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2472.986678] FAT-fs (loop6): invalid media value (0x58) [ 2472.992148] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2473.013331] FAT-fs (loop4): bogus number of reserved sectors [ 2473.019254] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2473.030194] FAULT_INJECTION: forcing a failure. [ 2473.030194] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.041549] CPU: 1 PID: 28947 Comm: syz-executor0 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2473.050057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.057682] FAT-fs (loop7): bogus number of FAT structure [ 2473.059417] Call Trace: [ 2473.059441] dump_stack+0x1c9/0x2b4 [ 2473.059462] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2473.059489] ? perf_trace_lock+0xde/0x920 [ 2473.065026] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2473.067593] should_fail.cold.4+0xa/0x11 [ 2473.067615] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2473.078532] FAT-fs (loop5): bogus number of reserved sectors [ 2473.080554] ? zap_class+0x740/0x740 [ 2473.080571] ? zap_class+0x740/0x740 [ 2473.080595] ? __local_bh_enable_ip+0x161/0x230 [ 2473.086505] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2473.090544] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2473.090568] ? lock_acquire+0x1e4/0x540 [ 2473.128883] ? fs_reclaim_acquire+0x20/0x20 [ 2473.133206] ? lock_downgrade+0x8f0/0x8f0 [ 2473.137357] ? release_sock+0x1ec/0x2c0 [ 2473.141340] ? check_same_owner+0x340/0x340 [ 2473.145658] ? lock_downgrade+0x8f0/0x8f0 [ 2473.149805] ? rcu_note_context_switch+0x730/0x730 [ 2473.154737] __should_failslab+0x124/0x180 [ 2473.158974] should_failslab+0x9/0x14 [ 2473.162775] kmem_cache_alloc_node+0x272/0x780 [ 2473.167358] ? __local_bh_enable_ip+0x161/0x230 [ 2473.172034] ? _raw_spin_unlock_bh+0x30/0x40 [ 2473.176440] __alloc_skb+0x119/0x790 [ 2473.180171] ? skb_scrub_packet+0x490/0x490 [ 2473.184665] ? netlink_insert+0x15d/0x3f0 [ 2473.188811] ? __netlink_insert+0x13d0/0x13d0 [ 2473.193311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2473.198848] ? netlink_autobind.isra.34+0x23b/0x320 [ 2473.203864] netlink_sendmsg+0xb29/0xfc0 [ 2473.207937] ? netlink_unicast+0x760/0x760 [ 2473.212175] ? move_addr_to_kernel.part.20+0x100/0x100 [ 2473.217456] ? security_socket_sendmsg+0x94/0xc0 [ 2473.222306] ? netlink_unicast+0x760/0x760 [ 2473.226547] sock_sendmsg+0xd5/0x120 [ 2473.230267] ___sys_sendmsg+0x7fd/0x930 [ 2473.234246] ? copy_msghdr_from_user+0x580/0x580 [ 2473.239011] ? __f_unlock_pos+0x19/0x20 [ 2473.242988] ? lock_downgrade+0x8f0/0x8f0 [ 2473.247140] ? proc_fail_nth_write+0x9e/0x210 [ 2473.251639] ? __fget_light+0x2f7/0x440 [ 2473.255611] ? fget_raw+0x20/0x20 [ 2473.259068] ? kasan_check_write+0x14/0x20 [ 2473.263304] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2473.268235] ? fsnotify+0xbac/0x14e0 [ 2473.271956] ? vfs_write+0x2f3/0x560 [ 2473.275671] ? wait_for_completion+0x8d0/0x8d0 [ 2473.280253] ? lock_release+0xa30/0xa30 [ 2473.284234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2473.289778] ? sockfd_lookup_light+0xc5/0x160 [ 2473.294295] __sys_sendmsg+0x11d/0x290 [ 2473.298187] ? __ia32_sys_shutdown+0x80/0x80 [ 2473.302596] ? __sb_end_write+0xac/0xe0 [ 2473.306573] ? fput+0x130/0x1a0 [ 2473.309852] ? ksys_write+0x1ae/0x260 [ 2473.313662] __x64_sys_sendmsg+0x78/0xb0 [ 2473.317727] do_syscall_64+0x1b9/0x820 [ 2473.321617] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2473.326549] ? syscall_return_slowpath+0x31d/0x5e0 [ 2473.331479] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2473.336496] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2473.341513] ? perf_trace_sys_enter+0xb10/0xb10 [ 2473.346182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2473.351027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2473.356215] RIP: 0033:0x455e29 [ 2473.359394] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2473.378673] RSP: 002b:00007f039b297c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2473.386397] RAX: ffffffffffffffda RBX: 00007f039b2986d4 RCX: 0000000000455e29 [ 2473.393675] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000014 [ 2473.400955] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 2473.408242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 08:32:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa904}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000ee) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2473.415514] R13: 00000000004c1482 R14: 00000000004d1948 R15: 0000000000000000 08:32:38 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000001340)=[{&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7309000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:38 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b2f732e666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2473.448280] FAT-fs (loop2): bogus logical sector size 1128 [ 2473.453988] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2473.468057] FAT-fs (loop5): bogus number of reserved sectors [ 2473.473958] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2473.503751] FAT-fs (loop2): bogus logical sector size 1128 [ 2473.509486] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2473.529318] FAT-fs (loop6): invalid media value (0x55) [ 2473.534783] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2473.546807] FAT-fs (loop4): bogus number of reserved sectors [ 2473.552737] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2473.613054] FAT-fs (loop4): bogus number of reserved sectors [ 2473.619644] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:39 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/147, &(0x7f0000000140)=0x93) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:39 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174730204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:39 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b2e732e666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000001340)=[{&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x600000000000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2473.902132] FAT-fs (loop2): bogus logical sector size 627 [ 2473.907863] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2473.908007] FAULT_INJECTION: forcing a failure. [ 2473.908007] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.925211] CPU: 0 PID: 28986 Comm: syz-executor0 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2473.933707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2473.943068] Call Trace: [ 2473.945668] dump_stack+0x1c9/0x2b4 [ 2473.949298] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2473.954497] should_fail.cold.4+0xa/0x11 [ 2473.958566] ? __kernel_text_address+0xd/0x40 [ 2473.963076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2473.968197] ? __save_stack_trace+0x8d/0xf0 [ 2473.970392] FAT-fs (loop6): bogus number of reserved sectors [ 2473.972542] ? save_stack+0xa9/0xd0 [ 2473.972561] ? save_stack+0x43/0xd0 [ 2473.972578] ? kasan_kmalloc+0xc4/0xe0 [ 2473.972590] ? kasan_slab_alloc+0x12/0x20 [ 2473.972611] ? kmem_cache_alloc_node+0x144/0x780 [ 2473.978429] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2473.982025] ? __alloc_skb+0x119/0x790 [ 2473.982042] ? netlink_sendmsg+0xb29/0xfc0 [ 2473.982063] ? sock_sendmsg+0xd5/0x120 [ 2474.016248] ? ___sys_sendmsg+0x7fd/0x930 [ 2474.020403] ? __sys_sendmsg+0x11d/0x290 [ 2474.024464] ? __x64_sys_sendmsg+0x78/0xb0 [ 2474.028704] ? do_syscall_64+0x1b9/0x820 [ 2474.032767] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2474.038134] ? lock_acquire+0x1e4/0x540 [ 2474.042365] ? fs_reclaim_acquire+0x20/0x20 [ 2474.046692] ? lock_downgrade+0x8f0/0x8f0 [ 2474.050844] ? check_same_owner+0x340/0x340 [ 2474.055152] ? lock_downgrade+0x8f0/0x8f0 [ 2474.059287] ? rcu_note_context_switch+0x730/0x730 [ 2474.064292] __should_failslab+0x124/0x180 [ 2474.068516] should_failslab+0x9/0x14 [ 2474.072318] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2474.077429] ? kasan_kmalloc+0xc4/0xe0 [ 2474.081310] __kmalloc_node_track_caller+0x33/0x70 [ 2474.086230] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 2474.090972] __alloc_skb+0x155/0x790 [ 2474.094676] ? skb_scrub_packet+0x490/0x490 [ 2474.098985] ? netlink_insert+0x15d/0x3f0 [ 2474.103119] ? __netlink_insert+0x13d0/0x13d0 [ 2474.107609] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2474.113131] ? netlink_autobind.isra.34+0x23b/0x320 [ 2474.118143] netlink_sendmsg+0xb29/0xfc0 [ 2474.122200] ? netlink_unicast+0x760/0x760 [ 2474.126422] ? move_addr_to_kernel.part.20+0x100/0x100 [ 2474.131700] ? security_socket_sendmsg+0x94/0xc0 [ 2474.136457] ? netlink_unicast+0x760/0x760 [ 2474.140678] sock_sendmsg+0xd5/0x120 [ 2474.144375] ___sys_sendmsg+0x7fd/0x930 [ 2474.148336] ? find_vpid+0xf0/0xf0 [ 2474.151865] ? copy_msghdr_from_user+0x580/0x580 [ 2474.156622] ? __f_unlock_pos+0x19/0x20 [ 2474.160587] ? lock_downgrade+0x8f0/0x8f0 [ 2474.164733] ? proc_fail_nth_write+0x9e/0x210 [ 2474.169215] ? __fget_light+0x2f7/0x440 [ 2474.173177] ? lock_acquire+0x1e4/0x540 [ 2474.177138] ? fget_raw+0x20/0x20 [ 2474.180581] ? kasan_check_write+0x14/0x20 [ 2474.184805] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2474.189718] ? fsnotify+0xbac/0x14e0 [ 2474.193430] ? vfs_write+0x2f3/0x560 [ 2474.197128] ? wait_for_completion+0x8d0/0x8d0 [ 2474.201707] ? lock_release+0xa30/0xa30 [ 2474.205674] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2474.211197] ? sockfd_lookup_light+0xc5/0x160 [ 2474.215678] __sys_sendmsg+0x11d/0x290 [ 2474.219563] ? __ia32_sys_shutdown+0x80/0x80 [ 2474.223961] ? __sb_end_write+0xac/0xe0 [ 2474.227923] ? fput+0x130/0x1a0 [ 2474.231204] ? ksys_write+0x1ae/0x260 [ 2474.235014] ? syscall_slow_exit_work+0x500/0x500 [ 2474.240023] __x64_sys_sendmsg+0x78/0xb0 [ 2474.244076] do_syscall_64+0x1b9/0x820 [ 2474.248124] ? finish_task_switch+0x1d3/0x870 [ 2474.252612] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2474.257532] ? syscall_return_slowpath+0x31d/0x5e0 [ 2474.262468] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2474.267650] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2474.272654] ? perf_trace_sys_enter+0xb10/0xb10 [ 2474.277309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2474.282143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2474.287317] RIP: 0033:0x455e29 [ 2474.290491] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2474.309707] RSP: 002b:00007f039b297c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2474.317421] RAX: ffffffffffffffda RBX: 00007f039b2986d4 RCX: 0000000000455e29 [ 2474.325654] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000014 [ 2474.333014] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 2474.340270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 08:32:39 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000001340)=[{&(0x7f0000000100)="b2f6ee15035784896b5f3748ce8058b0f21ef3002b0e68e7931c853d420ef315428e184e7bded3f642ba8574f4c55ff0a0729318475b5b91d87631d3aa0a680733a2e1fca3fd2a39ac01a1d6661e20", 0x4f, 0x7}, {&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2474.347527] R13: 00000000004c1482 R14: 00000000004d1948 R15: 0000000000000001 [ 2474.363674] FAT-fs (loop5): bogus number of reserved sectors [ 2474.369661] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2474.377503] FAT-fs (loop4): bogus number of reserved sectors [ 2474.383522] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2474.392422] FAT-fs (loop2): bogus logical sector size 627 [ 2474.398083] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:39 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174100004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:39 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:39 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732f666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2474.429267] FAT-fs (loop4): bogus number of reserved sectors [ 2474.435216] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2474.437703] FAT-fs (loop5): bogus number of reserved sectors [ 2474.447134] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2474.486809] FAT-fs (loop6): bogus number of reserved sectors [ 2474.492797] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2474.498255] FAULT_INJECTION: forcing a failure. [ 2474.498255] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.510005] CPU: 1 PID: 29008 Comm: syz-executor0 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2474.518408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2474.527764] Call Trace: [ 2474.530362] dump_stack+0x1c9/0x2b4 [ 2474.533997] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2474.539199] ? trace_hardirqs_on+0xd/0x10 [ 2474.543358] should_fail.cold.4+0xa/0x11 [ 2474.547431] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2474.552627] ? lock_repin_lock+0x430/0x430 [ 2474.556874] ? kasan_check_write+0x14/0x20 [ 2474.561124] ? __schedule+0x884/0x1ed0 [ 2474.565026] ? br_get_link_af_size_filtered+0x1e3/0xcf0 [ 2474.570405] ? __sched_text_start+0x8/0x8 [ 2474.574567] ? lock_acquire+0x1e4/0x540 [ 2474.578546] ? fs_reclaim_acquire+0x20/0x20 [ 2474.582873] ? lock_downgrade+0x8f0/0x8f0 [ 2474.587027] ? check_same_owner+0x340/0x340 [ 2474.591360] ? lock_acquire+0x1e4/0x540 [ 2474.595378] ? br_get_linkxstats_size+0x3a0/0x3a0 [ 2474.600241] __should_failslab+0x124/0x180 [ 2474.604494] should_failslab+0x9/0x14 [ 2474.608308] kmem_cache_alloc_node+0x272/0x780 [ 2474.612906] ? lock_release+0xa30/0xa30 [ 2474.616902] ? net_to_rxe+0xe1/0x110 [ 2474.620629] __alloc_skb+0x119/0x790 [ 2474.624349] ? skb_scrub_packet+0x490/0x490 [ 2474.628680] ? if_nlmsg_size+0x5d9/0xbc0 [ 2474.632750] ? rtnl_xdp_fill+0x8f0/0x8f0 [ 2474.636818] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2474.642373] ? notifier_call_chain+0x2da/0x390 [ 2474.646988] ? unregister_die_notifier+0x20/0x20 [ 2474.652105] rtmsg_ifinfo_build_skb+0x73/0x190 [ 2474.656701] rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 2474.661558] rtmsg_ifinfo+0x8c/0xa0 [ 2474.665193] netdev_state_change+0x152/0x1a0 [ 2474.669603] ? arch_local_irq_enable+0x50/0x50 [ 2474.674196] do_setlink+0x2653/0x3e10 [ 2474.678006] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2474.683023] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2474.687787] ? validate_linkmsg+0xa40/0xa40 [ 2474.692105] ? is_bpf_text_address+0xae/0x170 [ 2474.696603] ? lock_downgrade+0x8f0/0x8f0 [ 2474.700757] ? lock_release+0xa30/0xa30 [ 2474.704740] ? kasan_check_read+0x11/0x20 [ 2474.708898] ? rcu_is_watching+0x8c/0x150 [ 2474.713054] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2474.717733] ? trace_hardirqs_on+0x10/0x10 [ 2474.721990] ? trace_hardirqs_on+0x10/0x10 [ 2474.726239] ? __kernel_text_address+0xd/0x40 [ 2474.730762] ? unwind_get_return_address+0x61/0xa0 [ 2474.735694] ? __save_stack_trace+0x8d/0xf0 [ 2474.740021] ? trace_hardirqs_on+0x10/0x10 [ 2474.744266] ? perf_trace_lock+0xde/0x920 [ 2474.748418] ? trace_hardirqs_on+0x10/0x10 [ 2474.752655] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2474.757851] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2474.762870] ? validate_linkmsg+0x277/0xa40 [ 2474.767205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2474.772746] ? rtnl_stats_dump+0xaa0/0xaa0 [ 2474.776986] ? validate_nla+0x7b0/0x7b0 [ 2474.780968] rtnl_newlink+0x159a/0x1d60 [ 2474.784960] ? rtnl_link_unregister+0x390/0x390 [ 2474.789638] ? perf_trace_lock+0xde/0x920 [ 2474.793794] ? zap_class+0x740/0x740 [ 2474.797510] ? zap_class+0x740/0x740 [ 2474.801228] ? trace_hardirqs_on+0x10/0x10 [ 2474.805488] ? lock_acquire+0x1e4/0x540 [ 2474.809472] ? rtnetlink_rcv_msg+0x412/0xc30 [ 2474.813899] ? lock_release+0xa30/0xa30 [ 2474.817875] ? check_same_owner+0x340/0x340 [ 2474.822198] ? rcu_note_context_switch+0x730/0x730 [ 2474.827589] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2474.832355] ? kasan_check_write+0x14/0x20 [ 2474.836591] ? __mutex_lock+0x6c4/0x1680 [ 2474.840917] ? lock_downgrade+0x8f0/0x8f0 [ 2474.845068] ? rtnetlink_rcv_msg+0x412/0xc30 [ 2474.849479] ? perf_trace_lock+0xde/0x920 [ 2474.853629] ? mutex_trylock+0x2b0/0x2b0 [ 2474.857695] ? perf_trace_lock+0xde/0x920 [ 2474.861845] ? zap_class+0x740/0x740 [ 2474.865587] ? lock_downgrade+0x8f0/0x8f0 [ 2474.869758] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2474.875309] ? rtnl_get_link+0x170/0x370 [ 2474.879489] ? rtnl_dump_all+0x600/0x600 [ 2474.883577] ? ns_capable_common+0x13f/0x170 [ 2474.887996] ? rtnl_link_unregister+0x390/0x390 [ 2474.892665] rtnetlink_rcv_msg+0x46e/0xc30 [ 2474.896906] ? rtnetlink_put_metrics+0x690/0x690 [ 2474.901684] netlink_rcv_skb+0x172/0x440 [ 2474.905747] ? rtnetlink_put_metrics+0x690/0x690 [ 2474.910504] ? netlink_ack+0xbe0/0xbe0 [ 2474.914398] rtnetlink_rcv+0x1c/0x20 [ 2474.918112] netlink_unicast+0x5a0/0x760 [ 2474.922177] ? netlink_attachskb+0x9a0/0x9a0 [ 2474.926597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2474.932145] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2474.937163] netlink_sendmsg+0xa18/0xfc0 [ 2474.941238] ? netlink_unicast+0x760/0x760 [ 2474.945695] ? move_addr_to_kernel.part.20+0x100/0x100 [ 2474.950982] ? security_socket_sendmsg+0x94/0xc0 [ 2474.955762] ? netlink_unicast+0x760/0x760 [ 2474.959999] sock_sendmsg+0xd5/0x120 [ 2474.963713] ___sys_sendmsg+0x7fd/0x930 [ 2474.967713] ? copy_msghdr_from_user+0x580/0x580 [ 2474.972475] ? __f_unlock_pos+0x19/0x20 [ 2474.976454] ? lock_downgrade+0x8f0/0x8f0 [ 2474.980607] ? proc_fail_nth_write+0x9e/0x210 [ 2474.985103] ? __fget_light+0x2f7/0x440 [ 2474.989078] ? lock_acquire+0x1e4/0x540 [ 2474.993052] ? fget_raw+0x20/0x20 [ 2474.996510] ? kasan_check_write+0x14/0x20 [ 2475.000743] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2475.005683] ? fsnotify+0xbac/0x14e0 [ 2475.009399] ? vfs_write+0x2f3/0x560 [ 2475.013117] ? wait_for_completion+0x8d0/0x8d0 [ 2475.017703] ? lock_release+0xa30/0xa30 [ 2475.021689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2475.027246] ? sockfd_lookup_light+0xc5/0x160 [ 2475.031761] __sys_sendmsg+0x11d/0x290 [ 2475.035656] ? __ia32_sys_shutdown+0x80/0x80 [ 2475.040067] ? __sb_end_write+0xac/0xe0 [ 2475.044047] ? fput+0x130/0x1a0 [ 2475.047329] ? ksys_write+0x1ae/0x260 [ 2475.051142] ? syscall_slow_exit_work+0x500/0x500 [ 2475.056094] __x64_sys_sendmsg+0x78/0xb0 [ 2475.060165] do_syscall_64+0x1b9/0x820 [ 2475.064057] ? finish_task_switch+0x1d3/0x870 [ 2475.068562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2475.073495] ? syscall_return_slowpath+0x31d/0x5e0 [ 2475.078431] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2475.083465] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2475.088500] ? perf_trace_sys_enter+0xb10/0xb10 [ 2475.093174] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2475.098028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2475.103226] RIP: 0033:0x455e29 [ 2475.106409] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2475.125753] RSP: 002b:00007f039b297c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 08:32:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7400000000000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:40 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000082) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x900000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2475.133486] RAX: ffffffffffffffda RBX: 00007f039b2986d4 RCX: 0000000000455e29 [ 2475.140760] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000014 [ 2475.148042] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.155316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2475.163196] R13: 00000000004c1482 R14: 00000000004d1948 R15: 0000000000000002 08:32:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2475.204879] FAT-fs (loop2): bogus logical sector size 16 [ 2475.210535] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2475.236620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:40 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b667325666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2475.251335] FAT-fs (loop6): bogus number of reserved sectors [ 2475.253774] FAT-fs (loop2): bogus logical sector size 16 [ 2475.257251] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2475.268676] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2475.279540] FAT-fs (loop4): bogus number of reserved sectors [ 2475.285659] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2475.305893] FAT-fs (loop5): bogus number of reserved sectors [ 2475.311855] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:40 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000140)) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000002c0)={'security\x00', 0x37, "a482c964e6bc95c8c384ddd2a2e3554140440839b61abae1fcb9fafbec816d325758721249bc076db05ae48e91b40510c5f7937693d7bb"}, &(0x7f0000000240)=0x5b) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:40 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:40 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740e0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:40 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000001200), 0x0, 0x3}, {&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2475.354754] FAT-fs (loop4): bogus number of reserved sectors [ 2475.360704] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2475.370867] FAT-fs (loop5): bogus number of reserved sectors [ 2475.373124] FAT-fs (loop2): bogus logical sector size 1038 [ 2475.376771] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2475.382416] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2475.409818] FAT-fs (loop2): bogus logical sector size 1038 [ 2475.411556] FAULT_INJECTION: forcing a failure. [ 2475.411556] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.415576] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2475.426802] CPU: 0 PID: 29040 Comm: syz-executor0 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2475.426814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2475.426818] Call Trace: [ 2475.426849] dump_stack+0x1c9/0x2b4 [ 2475.456675] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2475.461901] should_fail.cold.4+0xa/0x11 [ 2475.465977] ? __kernel_text_address+0xd/0x40 [ 2475.470501] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2475.475617] ? __save_stack_trace+0x8d/0xf0 [ 2475.479948] ? save_stack+0xa9/0xd0 [ 2475.483576] ? save_stack+0x43/0xd0 [ 2475.487201] ? kasan_kmalloc+0xc4/0xe0 [ 2475.491087] ? kasan_slab_alloc+0x12/0x20 [ 2475.495235] ? kmem_cache_alloc_node+0x144/0x780 [ 2475.499991] ? __alloc_skb+0x119/0x790 [ 2475.503877] ? rtmsg_ifinfo_build_skb+0x73/0x190 [ 2475.508637] ? rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 2475.513658] ? rtmsg_ifinfo+0x8c/0xa0 [ 2475.517460] ? netdev_state_change+0x152/0x1a0 [ 2475.522043] ? do_setlink+0x2653/0x3e10 [ 2475.526022] ? rtnl_newlink+0x159a/0x1d60 [ 2475.530177] ? rtnetlink_rcv_msg+0x46e/0xc30 [ 2475.534599] ? netlink_rcv_skb+0x172/0x440 [ 2475.538850] ? rtnetlink_rcv+0x1c/0x20 [ 2475.542757] ? lock_acquire+0x1e4/0x540 [ 2475.546738] ? fs_reclaim_acquire+0x20/0x20 [ 2475.551060] ? lock_downgrade+0x8f0/0x8f0 [ 2475.555210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 08:32:40 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e2e6174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4c000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2475.560757] ? check_same_owner+0x340/0x340 [ 2475.565089] ? lock_downgrade+0x8f0/0x8f0 [ 2475.569242] ? rcu_note_context_switch+0x730/0x730 [ 2475.574174] __should_failslab+0x124/0x180 [ 2475.578411] should_failslab+0x9/0x14 [ 2475.582216] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2475.587322] ? kasan_kmalloc+0xc4/0xe0 [ 2475.591228] __kmalloc_node_track_caller+0x33/0x70 [ 2475.596167] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 2475.600922] __alloc_skb+0x155/0x790 [ 2475.604635] ? skb_scrub_packet+0x490/0x490 [ 2475.608966] ? if_nlmsg_size+0x5d9/0xbc0 [ 2475.613027] ? rtnl_xdp_fill+0x8f0/0x8f0 [ 2475.617092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2475.622640] ? notifier_call_chain+0x2da/0x390 [ 2475.627252] ? unregister_die_notifier+0x20/0x20 [ 2475.632015] rtmsg_ifinfo_build_skb+0x73/0x190 [ 2475.636610] rtmsg_ifinfo_event.part.30+0x45/0xe0 [ 2475.641456] rtmsg_ifinfo+0x8c/0xa0 [ 2475.645083] netdev_state_change+0x152/0x1a0 [ 2475.649490] ? arch_local_irq_enable+0x50/0x50 [ 2475.654091] ? trace_hardirqs_on+0x10/0x10 [ 2475.658339] do_setlink+0x2653/0x3e10 [ 2475.662148] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2475.667164] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2475.672107] ? validate_linkmsg+0xa40/0xa40 [ 2475.676429] ? is_bpf_text_address+0xae/0x170 [ 2475.680927] ? lock_downgrade+0x8f0/0x8f0 [ 2475.685073] ? lock_release+0xa30/0xa30 [ 2475.689050] ? kasan_check_read+0x11/0x20 [ 2475.693226] ? rcu_is_watching+0x8c/0x150 [ 2475.697379] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2475.702053] ? trace_hardirqs_on+0x10/0x10 [ 2475.706308] ? rb_erase_cached+0xc82/0x32c0 [ 2475.710633] ? __kernel_text_address+0xd/0x40 [ 2475.715137] ? rb_next+0x140/0x140 [ 2475.718684] ? __save_stack_trace+0x8d/0xf0 [ 2475.723022] ? trace_hardirqs_on+0x10/0x10 [ 2475.727254] ? trace_hardirqs_on+0x10/0x10 [ 2475.731482] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2475.736693] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2475.741705] ? validate_linkmsg+0x277/0xa40 [ 2475.746024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2475.751552] ? rtnl_stats_dump+0xaa0/0xaa0 [ 2475.755797] ? validate_nla+0x7b0/0x7b0 [ 2475.759769] rtnl_newlink+0x159a/0x1d60 [ 2475.763756] ? rtnl_link_unregister+0x390/0x390 [ 2475.768423] ? lock_release+0xa30/0xa30 [ 2475.772391] ? lock_acquire+0x1e4/0x540 [ 2475.776354] ? __unlock_page_memcg+0x53/0x100 [ 2475.780843] ? trace_hardirqs_on+0x10/0x10 [ 2475.785073] ? trace_hardirqs_on+0x10/0x10 [ 2475.789298] ? kasan_check_read+0x11/0x20 [ 2475.793445] ? lock_page_memcg+0xf2/0x300 [ 2475.797586] ? lock_acquire+0x1e4/0x540 [ 2475.801551] ? rtnetlink_rcv_msg+0x412/0xc30 [ 2475.805952] ? lock_release+0xa30/0xa30 [ 2475.809915] ? check_same_owner+0x340/0x340 [ 2475.814226] ? rcu_note_context_switch+0x730/0x730 [ 2475.819156] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2475.823921] ? kasan_check_write+0x14/0x20 [ 2475.828143] ? __mutex_lock+0x6c4/0x1680 [ 2475.832194] ? lock_downgrade+0x8f0/0x8f0 [ 2475.836333] ? rtnetlink_rcv_msg+0x412/0xc30 [ 2475.840734] ? lock_release+0xa30/0xa30 [ 2475.844723] ? mutex_trylock+0x2b0/0x2b0 [ 2475.848774] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2475.853433] ? is_bpf_text_address+0xd7/0x170 [ 2475.857919] ? kernel_text_address+0x79/0xf0 [ 2475.862342] ? lock_downgrade+0x8f0/0x8f0 [ 2475.866478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2475.872004] ? rtnl_get_link+0x170/0x370 [ 2475.876058] ? rtnl_dump_all+0x600/0x600 [ 2475.880110] ? ns_capable_common+0x13f/0x170 [ 2475.884516] ? rtnl_link_unregister+0x390/0x390 [ 2475.889176] rtnetlink_rcv_msg+0x46e/0xc30 [ 2475.893413] ? rtnetlink_put_metrics+0x690/0x690 [ 2475.898192] netlink_rcv_skb+0x172/0x440 [ 2475.902260] ? rtnetlink_put_metrics+0x690/0x690 [ 2475.907006] ? netlink_ack+0xbe0/0xbe0 [ 2475.910906] rtnetlink_rcv+0x1c/0x20 [ 2475.914608] netlink_unicast+0x5a0/0x760 [ 2475.918664] ? netlink_attachskb+0x9a0/0x9a0 [ 2475.923075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2475.928613] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2475.933625] netlink_sendmsg+0xa18/0xfc0 [ 2475.937681] ? netlink_unicast+0x760/0x760 [ 2475.941924] ? move_addr_to_kernel.part.20+0x100/0x100 [ 2475.947204] ? security_socket_sendmsg+0x94/0xc0 [ 2475.951959] ? netlink_unicast+0x760/0x760 [ 2475.956184] sock_sendmsg+0xd5/0x120 [ 2475.959886] ___sys_sendmsg+0x7fd/0x930 [ 2475.963848] ? find_vpid+0xf0/0xf0 [ 2475.967377] ? copy_msghdr_from_user+0x580/0x580 [ 2475.972135] ? __f_unlock_pos+0x19/0x20 [ 2475.976096] ? lock_downgrade+0x8f0/0x8f0 [ 2475.980234] ? proc_fail_nth_write+0x9e/0x210 [ 2475.984720] ? __fget_light+0x2f7/0x440 [ 2475.988693] ? fget_raw+0x20/0x20 [ 2475.992138] ? kasan_check_write+0x14/0x20 [ 2475.996372] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2476.001301] ? fsnotify+0xbac/0x14e0 [ 2476.005016] ? vfs_write+0x2f3/0x560 [ 2476.008723] ? wait_for_completion+0x8d0/0x8d0 [ 2476.013291] ? lock_release+0xa30/0xa30 [ 2476.017260] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2476.022788] ? sockfd_lookup_light+0xc5/0x160 [ 2476.027273] __sys_sendmsg+0x11d/0x290 [ 2476.031149] ? __ia32_sys_shutdown+0x80/0x80 [ 2476.035560] ? __sb_end_write+0xac/0xe0 [ 2476.039535] ? fput+0x130/0x1a0 [ 2476.042803] ? ksys_write+0x1ae/0x260 [ 2476.046600] __x64_sys_sendmsg+0x78/0xb0 [ 2476.050656] do_syscall_64+0x1b9/0x820 [ 2476.054531] ? syscall_slow_exit_work+0x500/0x500 [ 2476.059366] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2476.064300] ? syscall_return_slowpath+0x31d/0x5e0 [ 2476.069223] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2476.074241] ? perf_trace_sys_enter+0xb10/0xb10 [ 2476.078911] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2476.083752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2476.088954] RIP: 0033:0x455e29 [ 2476.092139] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2476.111432] RSP: 002b:00007f039b297c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2476.119145] RAX: ffffffffffffffda RBX: 00007f039b2986d4 RCX: 0000000000455e29 [ 2476.126411] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000014 [ 2476.133680] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.140934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2476.148203] R13: 00000000004c1482 R14: 00000000004d1948 R15: 0000000000000003 08:32:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000904010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x70a0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2476.206945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2476.229173] FAT-fs (loop6): bogus number of reserved sectors [ 2476.235219] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2476.245648] FAT-fs (loop2): bogus logical sector size 2304 [ 2476.251453] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e2f6174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:41 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001340)=[{&(0x7f0000001240)="ddf7054cb85be525584c74a84ceb551eabb7ae1d4ea84225970d01a7a2579d7e5348eae7979a17d503f6e7800959450b6b8a30c31a315ba02a081da71c72dbb5f4842a4e2da0eab4a88fadcfc1221fdede9b218cc5b4e66cdf97f8ccaa7a76e847d2a5aa9567f6626fe59a6fb67e82866280830874fc0610c44cd103c7994014d3f686170bbeed46174be3e908b64639407f6a338a8627f5f631d8a340a852f8972dbc2ff84cb41ec8239702706323d65f38b66947b8180ae42176f6b255c4c15fbc6b50acb3", 0xc6, 0x7}], 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2476.273385] FAT-fs (loop5): bogus number of reserved sectors [ 2476.279429] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2476.293334] FAT-fs (loop4): bogus number of reserved sectors [ 2476.299282] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2476.310692] FAT-fs (loop2): bogus logical sector size 2304 [ 2476.316531] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:41 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000009b) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2476.342047] FAT-fs (loop5): bogus number of reserved sectors [ 2476.347980] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661744c0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:41 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x20a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2476.388110] FAT-fs (loop4): bogus number of reserved sectors [ 2476.394035] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2476.411116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2476.455642] FAT-fs (loop2): bogus logical sector size 768 [ 2476.461276] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2476.465820] FAT-fs (loop7): bogus logical sector size 1100 [ 2476.473204] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2476.488516] FAT-fs (loop5): bogus number of reserved sectors [ 2476.494422] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2476.510631] FAT-fs (loop2): bogus logical sector size 768 [ 2476.516285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2476.522428] FAT-fs (loop4): bogus number of reserved sectors [ 2476.528355] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2476.538446] FAT-fs (loop6): bogus number of reserved sectors [ 2476.542376] FAT-fs (loop7): bogus logical sector size 1100 [ 2476.544557] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2476.550039] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2476.564806] FAT-fs (loop5): bogus number of reserved sectors [ 2476.570727] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2476.581758] FAT-fs (loop4): bogus number of reserved sectors [ 2476.587693] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:42 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) 08:32:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x63}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174006304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:42 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174680404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x400000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfffffff4}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2477.228708] FAT-fs (loop7): bogus logical sector size 1128 [ 2477.234476] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2477.253393] FAT-fs (loop5): bogus number of reserved sectors [ 2477.259328] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2477.270750] FAT-fs (loop2): bogus logical sector size 25344 [ 2477.272133] FAT-fs (loop7): bogus logical sector size 1128 [ 2477.276771] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2477.282412] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2477.297062] FAT-fs (loop4): bogus number of reserved sectors [ 2477.299610] FAT-fs (loop6): bogus number of reserved sectors [ 2477.302984] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2477.308888] FAT-fs (loop6): Can't find a valid FAT filesystem 08:32:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x20000010}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:42 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174740404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:42 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000aa) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2477.339346] FAT-fs (loop5): bogus number of reserved sectors [ 2477.345270] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2477.378349] FAT-fs (loop2): bogus logical sector size 25344 08:32:42 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x1000000, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2477.384186] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x80a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2477.411868] FAT-fs (loop7): bogus logical sector size 1140 [ 2477.416830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2477.417595] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2477.441786] FAT-fs (loop4): bogus number of reserved sectors [ 2477.447710] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:42 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000a04010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2477.475431] FAT-fs (loop6): bogus number of reserved sectors [ 2477.481495] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2477.491087] FAT-fs (loop5): bogus number of reserved sectors [ 2477.497448] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2477.509920] FAT-fs (loop7): bogus logical sector size 1140 [ 2477.515674] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4c00000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0xf}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2477.526979] FAT-fs (loop2): bogus logical sector size 2560 [ 2477.532729] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2477.566868] FAT-fs (loop5): bogus number of reserved sectors 08:32:43 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000904010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2477.571686] FAT-fs (loop4): bogus number of reserved sectors [ 2477.572886] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2477.578717] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2477.592761] FAT-fs (loop2): bogus logical sector size 2560 [ 2477.598512] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2477.626206] FAT-fs (loop4): bogus number of reserved sectors [ 2477.632145] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2477.646364] FAT-fs (loop7): bogus logical sector size 2304 [ 2477.652381] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2477.682926] FAT-fs (loop7): bogus logical sector size 2304 [ 2477.688680] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:43 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0xc) r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='id_legacy\x00', r3}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r5, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x3fe, @link_local={0x1, 0x80, 0xc2}}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xf442}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r6, 0x3, 0x7fff}, &(0x7f0000000300)=0xc) 08:32:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x24}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xa9040000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x7fffffffffffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:43 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174400304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000043) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x4f73}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2478.324874] FAT-fs (loop4): bogus number of reserved sectors [ 2478.324933] FAT-fs (loop7): bogus logical sector size 832 [ 2478.330854] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2478.335599] FAT-fs (loop6): bogus number of reserved sectors [ 2478.336538] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2478.342441] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2478.344759] FAT-fs (loop5): bogus number of reserved sectors [ 2478.366097] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:43 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@rodir='rodir', 0x2c}, {@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:43 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e66617400f004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2478.403668] FAT-fs (loop4): bogus number of reserved sectors [ 2478.409627] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2478.438059] FAT-fs (loop5): bogus number of reserved sectors [ 2478.443961] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xfffffff6}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc427000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2478.478429] FAT-fs (loop6): bogus number of reserved sectors [ 2478.484501] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2478.492862] FAT-fs (loop7): bogus logical sector size 832 [ 2478.498536] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2478.528357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2478.528836] FAT-fs (loop2): bogus logical sector size 61440 [ 2478.540848] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2478.564983] FAT-fs (loop5): bogus number of reserved sectors [ 2478.570913] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:44 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661746c0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2478.582265] FAT-fs (loop4): bogus number of reserved sectors [ 2478.588168] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2478.600947] FAT-fs (loop6): bogus number of reserved sectors [ 2478.604190] FAT-fs (loop4): bogus number of reserved sectors [ 2478.606926] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2478.618750] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2478.627811] FAT-fs (loop5): bogus number of reserved sectors [ 2478.629997] FAT-fs (loop7): bogus logical sector size 1132 [ 2478.633760] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2478.639367] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2478.661680] FAT-fs (loop2): bogus logical sector size 61440 [ 2478.667617] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2478.679691] FAT-fs (loop7): bogus logical sector size 1132 [ 2478.685430] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2478.708136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:44 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000140)={0x10001}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7226}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:44 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf0ffffff00000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:44 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000f04010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:44 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174400204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfeffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000034) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2479.392902] FAT-fs (loop7): bogus logical sector size 576 [ 2479.398576] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2479.406126] FAT-fs (loop2): bogus logical sector size 3840 [ 2479.406503] FAT-fs (loop6): bogus number of reserved sectors [ 2479.411869] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2479.417810] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2479.432880] FAT-fs (loop5): bogus number of reserved sectors [ 2479.438773] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2479.447202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2479.489252] FAT-fs (loop7): bogus logical sector size 576 [ 2479.495048] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2479.502417] FAT-fs (loop5): bogus number of reserved sectors [ 2479.508313] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2479.523903] FAT-fs (loop4): bogus number of reserved sectors [ 2479.529839] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf6ffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:45 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174020404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:45 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @empty, 0x4}, {0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, r2, 0xff}}, 0x48) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 2479.567706] FAT-fs (loop2): bogus logical sector size 3840 [ 2479.573469] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2479.580757] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2479.597256] FAT-fs (loop4): bogus number of reserved sectors [ 2479.603152] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2479.635260] FAT-fs (loop7): bogus logical sector size 1026 [ 2479.641043] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2479.649819] FAT-fs (loop6): bogus number of reserved sectors [ 2479.655830] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2479.669821] FAT-fs (loop5): bogus number of reserved sectors [ 2479.675748] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc327000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2479.697926] FAT-fs (loop7): bogus logical sector size 1026 [ 2479.703670] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:45 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740c0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2479.740194] FAT-fs (loop5): bogus number of reserved sectors [ 2479.746116] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa0d}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2479.790993] FAT-fs (loop4): bogus number of reserved sectors [ 2479.796924] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2479.822292] FAT-fs (loop2): bogus logical sector size 5120 [ 2479.828050] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2479.841868] FAT-fs (loop7): bogus logical sector size 1036 [ 2479.847636] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2479.873487] FAT-fs (loop4): bogus number of reserved sectors [ 2479.875095] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2479.879411] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2479.882623] FAT-fs (loop2): bogus logical sector size 5120 [ 2479.889836] FAT-fs (loop6): bogus number of reserved sectors [ 2479.892410] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2479.898049] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2479.914542] FAT-fs (loop5): bogus number of reserved sectors [ 2479.921641] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2479.927846] FAT-fs (loop7): bogus logical sector size 1036 [ 2479.933631] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x9000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:45 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174070404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2479.958460] FAT-fs (loop5): bogus number of reserved sectors [ 2479.964363] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2480.005152] FAT-fs (loop6): bogus number of reserved sectors [ 2480.011076] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2480.038144] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2480.060534] FAT-fs (loop7): bogus logical sector size 1031 [ 2480.066331] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2480.084175] FAT-fs (loop4): bogus number of reserved sectors [ 2480.090108] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2480.108159] FAT-fs (loop7): bogus logical sector size 1031 [ 2480.113895] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2480.127042] FAT-fs (loop4): bogus number of reserved sectors [ 2480.132938] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000077) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000414010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:45 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa07}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2480.425102] FAT-fs (loop2): bogus sectors per cluster 20 [ 2480.426596] FAT-fs (loop5): bogus number of reserved sectors [ 2480.430653] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2480.437252] FAT-fs (loop6): bogus number of reserved sectors [ 2480.442684] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2480.454467] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2480.471290] FAT-fs (loop5): bogus number of reserved sectors [ 2480.472930] FAT-fs (loop2): bogus sectors per cluster 20 [ 2480.477307] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2480.482662] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:46 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xff, 0x4, 0x100000001, 0x3, 0x9}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0xffffffffffff84fc, 0x7, 0x0, 0xfffffffffffffffd, 0x3, 0x200, 0x236, 0x5, r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x80, 0x1, 0x7, 0x7, 0x5, 0xc79, 0x0, {0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x8, 0x9, 0x81, 0xdd, 0x8000}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={r5, 0x1, 0x30, 0x2, 0x1}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r5, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x9, 0x80000000}, &(0x7f0000000240)=0x90) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r0, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x6}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}]}) 08:32:46 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174230404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x2000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e66617400040a010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x40a0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2480.747364] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2480.747872] FAT-fs (loop7): bogus logical sector size 1059 [ 2480.764265] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2480.770558] FAT-fs (loop2): bogus sectors per cluster 10 [ 2480.776422] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2480.785480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:46 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) process_vm_writev(r1, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/12, 0xc}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000500)=""/198, 0xc6}], 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 2480.815729] FAT-fs (loop6): bogus number of reserved sectors [ 2480.821676] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2480.832481] FAT-fs (loop2): bogus sectors per cluster 10 [ 2480.836178] FAT-fs (loop7): bogus logical sector size 1059 [ 2480.838112] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2480.843669] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2480.859757] FAT-fs (loop4): bogus number of reserved sectors 08:32:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}]}) [ 2480.865770] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2480.875437] FAT-fs (loop5): bogus number of reserved sectors [ 2480.881353] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:46 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174060404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004f0010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2480.932169] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2480.944696] FAT-fs (loop6): bogus number of reserved sectors [ 2480.950697] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2480.965950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2480.972502] FAT-fs (loop5): bogus number of reserved sectors [ 2480.972514] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2480.975195] FAT-fs (loop4): bogus number of reserved sectors [ 2480.990798] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2481.001597] FAT-fs (loop7): bogus logical sector size 1030 [ 2481.003666] FAT-fs (loop2): bogus sectors per cluster 240 [ 2481.007339] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2481.012887] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2481.047324] FAT-fs (loop2): bogus sectors per cluster 240 [ 2481.053165] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2481.060041] FAT-fs (loop7): bogus logical sector size 1030 [ 2481.065829] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000117) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:46 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}]}) 08:32:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc0ed0000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa00000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfffffffe}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:46 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174930404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000403010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2481.398428] FAT-fs (loop7): bogus logical sector size 1171 [ 2481.404166] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2481.412834] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2481.416123] FAT-fs (loop5): bogus number of reserved sectors [ 2481.430124] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2481.436829] FAT-fs (loop4): bogus number of reserved sectors [ 2481.437575] FAT-fs (loop6): bogus number of reserved sectors [ 2481.442726] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2481.443512] FAT-fs (loop2): bogus sectors per cluster 3 [ 2481.448795] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2481.466031] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2481.478818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2481.488477] FAT-fs (loop7): bogus logical sector size 1171 08:32:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:47 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174100004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2481.494261] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2481.516344] FAT-fs (loop4): bogus number of reserved sectors [ 2481.522285] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2481.523544] FAT-fs (loop5): bogus number of reserved sectors [ 2481.534076] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4527000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2481.558249] FAT-fs (loop2): bogus sectors per cluster 3 [ 2481.563753] FAT-fs (loop2): Can't find a valid FAT filesystem 08:32:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x23}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2481.613795] FAT-fs (loop7): bogus logical sector size 16 [ 2481.619412] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2481.628180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2481.658757] FAT-fs (loop5): bogus number of reserved sectors [ 2481.664825] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2481.671508] FAT-fs (loop4): bogus number of reserved sectors [ 2481.677522] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2481.687559] FAT-fs (loop7): bogus logical sector size 16 [ 2481.693170] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2481.702224] FAT-fs (loop5): bogus number of reserved sectors [ 2481.708236] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2481.718505] FAT-fs (loop4): bogus number of reserved sectors [ 2481.724441] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:47 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000003c0)) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x10d800) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) connect(r0, &(0x7f0000000500)=@ethernet={0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="8f00000021bbd0f8e50dd2251438b198a71966049194afa41d570876584085ae3d746364b36520fdd8cfcec16dcd3948beda79a5673b3b02f72967566380675b3263e1762ec6ac7d4ad5e30569bb9628134dcae47836d62c74a3187e65e65bce050b08bb7c9518ca4601c88dfd256ec93d27b13075e7963bb612058747a7ed9498d33300cfbcb1b6d40c3af59e1b2babe2776d"], &(0x7f0000000380)=0x97) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x80000001, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:47 executing program 6: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000077) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e66617400040f010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf4ffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x400000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2481.839148] FAT-fs (loop2): bogus sectors per cluster 15 [ 2481.844737] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2481.848929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2481.891919] FAT-fs (loop5): bogus number of reserved sectors [ 2481.897831] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2481.912608] FAT-fs (loop2): bogus sectors per cluster 15 [ 2481.918267] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2481.948861] FAT-fs (loop5): bogus number of reserved sectors [ 2481.954774] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000a1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:47 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000a04010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4aa}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:47 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:47 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000402010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xc0a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2482.483778] FAT-fs (loop5): bogus number of reserved sectors [ 2482.489718] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2482.501550] FAT-fs (loop7): bogus logical sector size 2560 [ 2482.501598] FAT-fs (loop4): bogus number of reserved sectors [ 2482.507305] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2482.513144] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000410010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x6800}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2482.536834] FAT-fs (loop5): bogus number of reserved sectors [ 2482.542756] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2482.548127] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2482.568920] FAT-fs (loop7): bogus logical sector size 2560 [ 2482.574670] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:48 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174040404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:48 executing program 6: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e2e6174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2482.628149] FAT-fs (loop4): bogus number of reserved sectors [ 2482.631874] FAT-fs (loop5): bogus number of reserved sectors [ 2482.634216] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2482.639931] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xa904000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000463010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2482.686311] FAT-fs (loop7): bogus logical sector size 1028 [ 2482.692059] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2482.717381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:48 executing program 6 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2482.742183] FAT-fs (loop5): bogus number of reserved sectors [ 2482.747110] FAT-fs (loop7): bogus logical sector size 1028 [ 2482.748321] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2482.753787] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2482.769675] FAT-fs (loop2): bogus sectors per cluster 99 [ 2482.775298] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2482.785883] FAT-fs (loop4): bogus number of reserved sectors 08:32:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x40000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2482.791795] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2482.830286] FAT-fs (loop2): bogus sectors per cluster 99 [ 2482.835870] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2482.836744] FAULT_INJECTION: forcing a failure. [ 2482.836744] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.848468] FAT-fs (loop4): bogus number of reserved sectors [ 2482.853123] CPU: 1 PID: 29504 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2482.858914] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2482.867284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2482.867289] Call Trace: [ 2482.867318] dump_stack+0x1c9/0x2b4 [ 2482.867339] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2482.893956] ? get_pid_task+0xd8/0x1a0 [ 2482.896681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2482.897850] ? perf_trace_lock+0xde/0x920 [ 2482.897871] should_fail.cold.4+0xa/0x11 [ 2482.897888] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2482.917694] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 2482.922630] ? lock_downgrade+0x8f0/0x8f0 [ 2482.926803] ? proc_fail_nth_write+0x9e/0x210 [ 2482.931320] ? lock_acquire+0x1e4/0x540 [ 2482.935304] ? fs_reclaim_acquire+0x20/0x20 [ 2482.939640] ? lock_downgrade+0x8f0/0x8f0 [ 2482.943800] ? check_same_owner+0x340/0x340 [ 2482.948128] ? rcu_note_context_switch+0x730/0x730 [ 2482.953065] __should_failslab+0x124/0x180 [ 2482.957303] should_failslab+0x9/0x14 [ 2482.961104] __kmalloc+0x2c8/0x760 [ 2482.964650] ? strncpy_from_user+0x510/0x510 [ 2482.969062] ? fput+0x130/0x1a0 [ 2482.972344] ? __x64_sys_memfd_create+0x142/0x4f0 [ 2482.977190] __x64_sys_memfd_create+0x142/0x4f0 [ 2482.981867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2482.987408] ? memfd_fcntl+0x1e80/0x1e80 [ 2482.991478] do_syscall_64+0x1b9/0x820 [ 2482.995366] ? finish_task_switch+0x1d3/0x870 [ 2482.999865] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2483.004796] ? syscall_return_slowpath+0x31d/0x5e0 [ 2483.009726] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2483.014745] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2483.019767] ? perf_trace_sys_enter+0xb10/0xb10 [ 2483.024467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2483.029321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2483.034516] RIP: 0033:0x455e29 [ 2483.037701] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2483.057013] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2483.064728] RAX: ffffffffffffffda RBX: 0000000020001340 RCX: 0000000000455e29 [ 2483.072000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004baa70 [ 2483.079269] RBP: 000000000072bea0 R08: 0000000000000000 R09: 00000000fbad8001 [ 2483.086534] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000014 [ 2483.093802] R13: 00000000004c26f8 R14: 00000000004d3fd0 R15: 0000000000000000 08:32:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000e6) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x8002}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:48 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740a0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7726000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000409010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:48 executing program 6 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:48 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) ioctl$TIOCCBRK(r0, 0x5428) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) fanotify_mark(r0, 0x40, 0x40000000, r2, &(0x7f0000000140)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 2483.530706] FAULT_INJECTION: forcing a failure. [ 2483.530706] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.532580] FAT-fs (loop2): bogus sectors per cluster 9 [ 2483.542053] CPU: 1 PID: 29523 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2483.542070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2483.547451] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2483.555815] Call Trace: [ 2483.555845] dump_stack+0x1c9/0x2b4 [ 2483.555862] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2483.555885] ? perf_trace_lock+0xde/0x920 [ 2483.586639] should_fail.cold.4+0xa/0x11 [ 2483.590709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2483.595826] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2483.597878] FAT-fs (loop4): bogus number of reserved sectors [ 2483.600849] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2483.600875] ? lock_downgrade+0x8f0/0x8f0 [ 2483.600891] ? zap_class+0x740/0x740 [ 2483.600910] ? lock_acquire+0x1e4/0x540 [ 2483.606721] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2483.611434] ? fs_reclaim_acquire+0x20/0x20 [ 2483.611448] ? lock_downgrade+0x8f0/0x8f0 [ 2483.611473] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2483.642559] ? check_same_owner+0x340/0x340 [ 2483.646883] ? rcu_note_context_switch+0x730/0x730 [ 2483.651814] ? iterate_fd+0x4b0/0x4b0 [ 2483.655618] __should_failslab+0x124/0x180 [ 2483.659858] should_failslab+0x9/0x14 [ 2483.663660] kmem_cache_alloc+0x2af/0x760 [ 2483.667813] ? lock_downgrade+0x8f0/0x8f0 [ 2483.671968] ? shmem_destroy_callback+0xc0/0xc0 [ 2483.676638] shmem_alloc_inode+0x1b/0x40 [ 2483.680700] alloc_inode+0x63/0x190 [ 2483.684330] new_inode_pseudo+0x71/0x1a0 [ 2483.688390] ? prune_icache_sb+0x1b0/0x1b0 [ 2483.692628] ? _raw_spin_unlock+0x22/0x30 [ 2483.696778] new_inode+0x1c/0x40 [ 2483.700149] shmem_get_inode+0xf1/0x910 [ 2483.704125] ? shmem_encode_fh+0x340/0x340 [ 2483.708384] ? lock_downgrade+0x8f0/0x8f0 [ 2483.712536] ? lock_release+0xa30/0xa30 [ 2483.716509] ? check_same_owner+0x340/0x340 [ 2483.720831] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2483.725851] ? __check_object_size+0x9d/0x5f2 [ 2483.730356] __shmem_file_setup.part.48+0x83/0x2a0 [ 2483.735289] shmem_file_setup+0x65/0x90 [ 2483.739272] __x64_sys_memfd_create+0x2af/0x4f0 [ 2483.743946] ? memfd_fcntl+0x1e80/0x1e80 [ 2483.748015] do_syscall_64+0x1b9/0x820 [ 2483.751902] ? finish_task_switch+0x1d3/0x870 [ 2483.756400] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2483.761333] ? syscall_return_slowpath+0x31d/0x5e0 [ 2483.766265] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2483.771282] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2483.776307] ? perf_trace_sys_enter+0xb10/0xb10 [ 2483.781002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2483.785855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2483.791044] RIP: 0033:0x455e29 [ 2483.794236] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2483.813995] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2483.821894] RAX: ffffffffffffffda RBX: 0000000020001340 RCX: 0000000000455e29 [ 2483.829179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004baa70 [ 2483.836454] RBP: 000000000072bea0 R08: 0000000000000000 R09: 00000000fbad8001 [ 2483.843723] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000014 [ 2483.850992] R13: 00000000004c26f8 R14: 00000000004d3fd0 R15: 0000000000000001 [ 2483.863254] FAT-fs (loop7): bogus logical sector size 1034 [ 2483.868997] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:49 executing program 6 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2483.876904] FAT-fs (loop5): bogus number of reserved sectors [ 2483.882874] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2483.896868] FAT-fs (loop4): bogus number of reserved sectors [ 2483.897876] FAT-fs (loop2): bogus sectors per cluster 9 [ 2483.902840] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2483.908281] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2483.909829] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2483.923785] FAT-fs (loop7): bogus logical sector size 1034 [ 2483.932903] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2483.954313] FAT-fs (loop5): bogus number of reserved sectors [ 2483.956829] FAULT_INJECTION: forcing a failure. [ 2483.956829] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.960284] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2483.971486] CPU: 1 PID: 29541 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2483.985764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2483.995136] Call Trace: [ 2483.997744] dump_stack+0x1c9/0x2b4 [ 2484.001386] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2484.006583] ? perf_trace_lock+0xde/0x920 [ 2484.010743] should_fail.cold.4+0xa/0x11 [ 2484.014827] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2484.019948] ? trace_hardirqs_on+0x10/0x10 [ 2484.024213] ? __kernel_text_address+0xd/0x40 [ 2484.028717] ? unwind_get_return_address+0x61/0xa0 [ 2484.033662] ? __save_stack_trace+0x8d/0xf0 [ 2484.038000] ? zap_class+0x740/0x740 [ 2484.041718] ? perf_trace_lock+0xde/0x920 [ 2484.045870] ? perf_trace_lock+0xde/0x920 [ 2484.050020] ? save_stack+0x43/0xd0 [ 2484.053652] ? __lockdep_init_map+0x105/0x590 [ 2484.058157] ? lock_acquire+0x1e4/0x540 [ 2484.062132] ? fs_reclaim_acquire+0x20/0x20 [ 2484.066455] ? lock_downgrade+0x8f0/0x8f0 [ 2484.070602] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 2484.075626] ? check_same_owner+0x340/0x340 [ 2484.079948] ? rcu_note_context_switch+0x730/0x730 [ 2484.084881] __should_failslab+0x124/0x180 [ 2484.089125] should_failslab+0x9/0x14 [ 2484.092929] kmem_cache_alloc+0x2af/0x760 [ 2484.097083] ? lockdep_init_map+0x9/0x10 [ 2484.101144] ? __rwlock_init+0x2d/0x140 [ 2484.105119] __d_alloc+0xc8/0xd50 [ 2484.108577] ? mpol_set_shared_policy+0x9d0/0x9d0 [ 2484.113434] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 2484.118464] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 2484.123657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2484.129197] ? timespec64_trunc+0xea/0x180 [ 2484.133435] ? inode_init_owner+0x340/0x340 [ 2484.137763] ? _raw_spin_unlock+0x22/0x30 [ 2484.141918] ? current_time+0x131/0x1b0 [ 2484.145894] ? timespec64_trunc+0x180/0x180 [ 2484.150216] ? __lockdep_init_map+0x105/0x590 [ 2484.155449] d_alloc_pseudo+0x1d/0x30 [ 2484.159252] alloc_file_pseudo+0x158/0x3f0 [ 2484.163859] ? alloc_file+0x3e0/0x3e0 [ 2484.167661] ? check_same_owner+0x340/0x340 [ 2484.171986] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2484.177002] ? __check_object_size+0x9d/0x5f2 [ 2484.181501] ? kasan_check_write+0x14/0x20 [ 2484.185743] __shmem_file_setup.part.48+0x110/0x2a0 [ 2484.190762] shmem_file_setup+0x65/0x90 [ 2484.194742] __x64_sys_memfd_create+0x2af/0x4f0 [ 2484.199416] ? memfd_fcntl+0x1e80/0x1e80 [ 2484.203485] do_syscall_64+0x1b9/0x820 [ 2484.207376] ? syscall_slow_exit_work+0x500/0x500 [ 2484.212227] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2484.217160] ? syscall_return_slowpath+0x31d/0x5e0 [ 2484.222094] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2484.227115] ? perf_trace_sys_enter+0xb10/0xb10 [ 2484.231789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2484.236648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2484.242013] RIP: 0033:0x455e29 [ 2484.245365] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2484.264903] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2484.272614] RAX: ffffffffffffffda RBX: 0000000020001340 RCX: 0000000000455e29 08:32:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404080a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2484.279983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004baa70 [ 2484.287249] RBP: 000000000072bea0 R08: 0000000000000000 R09: 00000000fbad8001 [ 2484.294519] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000014 [ 2484.301790] R13: 00000000004c26f8 R14: 00000000004d3fd0 R15: 0000000000000002 08:32:49 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661747a0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xffffff8c}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x6800}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:49 executing program 6 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:49 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404000a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2484.392610] FAULT_INJECTION: forcing a failure. [ 2484.392610] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.403970] CPU: 1 PID: 29553 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2484.412402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2484.418282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2484.421797] Call Trace: [ 2484.421827] dump_stack+0x1c9/0x2b4 [ 2484.421848] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2484.421868] ? perf_trace_lock+0xde/0x920 [ 2484.421891] should_fail.cold.4+0xa/0x11 [ 2484.448001] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2484.453125] ? zap_class+0x740/0x740 [ 2484.456858] ? trace_hardirqs_on+0x10/0x10 [ 2484.461155] ? lock_acquire+0x1e4/0x540 [ 2484.465148] ? percpu_ref_put_many+0x119/0x240 [ 2484.469744] ? lock_downgrade+0x8f0/0x8f0 [ 2484.473905] ? lock_release+0xa30/0xa30 [ 2484.477892] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 2484.482601] ? mem_cgroup_handle_over_high+0x130/0x130 [ 2484.487898] ? fs_reclaim_acquire+0x20/0x20 [ 2484.492245] ? lock_downgrade+0x8f0/0x8f0 [ 2484.496423] ? lock_acquire+0x1e4/0x540 [ 2484.500422] ? fs_reclaim_acquire+0x20/0x20 [ 2484.504755] ? lock_downgrade+0x8f0/0x8f0 [ 2484.508917] ? check_same_owner+0x340/0x340 [ 2484.513246] ? rcu_note_context_switch+0x730/0x730 [ 2484.518187] ? kasan_check_read+0x11/0x20 [ 2484.522342] __should_failslab+0x124/0x180 [ 2484.526581] should_failslab+0x9/0x14 [ 2484.530391] kmem_cache_alloc+0x2af/0x760 [ 2484.534548] __get_empty_filp+0x11b/0x620 [ 2484.538706] ? d_instantiate+0x79/0xa0 08:32:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000d2) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:50 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000000)=0x588) [ 2484.542600] ? proc_nr_files+0x60/0x60 [ 2484.546503] ? kasan_check_read+0x11/0x20 [ 2484.550654] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2484.555070] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2484.559672] ? kasan_check_write+0x14/0x20 [ 2484.563924] ? do_raw_spin_lock+0xc1/0x200 [ 2484.568199] alloc_file+0x29/0x3e0 [ 2484.571750] alloc_file_pseudo+0x267/0x3f0 [ 2484.576009] ? alloc_file+0x3e0/0x3e0 [ 2484.579830] ? check_same_owner+0x340/0x340 [ 2484.584162] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2484.589192] ? __check_object_size+0x9d/0x5f2 [ 2484.593707] ? kasan_check_write+0x14/0x20 [ 2484.597960] __shmem_file_setup.part.48+0x110/0x2a0 [ 2484.603000] shmem_file_setup+0x65/0x90 [ 2484.607031] __x64_sys_memfd_create+0x2af/0x4f0 [ 2484.611711] ? memfd_fcntl+0x1e80/0x1e80 [ 2484.615791] do_syscall_64+0x1b9/0x820 [ 2484.619684] ? finish_task_switch+0x1d3/0x870 [ 2484.622945] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2484.624225] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2484.624242] ? syscall_return_slowpath+0x31d/0x5e0 [ 2484.624258] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2484.624272] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2484.624289] ? perf_trace_sys_enter+0xb10/0xb10 [ 2484.655311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2484.660171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2484.665375] RIP: 0033:0x455e29 [ 2484.668559] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2484.687857] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2484.695579] RAX: ffffffffffffffda RBX: 0000000020001340 RCX: 0000000000455e29 [ 2484.702876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004baa70 [ 2484.710153] RBP: 000000000072bea0 R08: 0000000000000000 R09: 00000000fbad8001 [ 2484.717426] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000014 [ 2484.724730] R13: 00000000004c26f8 R14: 00000000004d3fd0 R15: 0000000000000003 08:32:50 executing program 6 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2484.744265] FAT-fs (loop4): bogus number of reserved sectors [ 2484.750228] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2484.756698] FAT-fs (loop5): bogus number of reserved sectors [ 2484.762612] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2484.769526] FAT-fs (loop7): bogus logical sector size 1146 [ 2484.775271] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2484.778210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2484.813413] FAT-fs (loop4): bogus number of reserved sectors [ 2484.819341] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2484.825754] FAT-fs (loop7): bogus logical sector size 1146 [ 2484.831462] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2484.842488] FAULT_INJECTION: forcing a failure. [ 2484.842488] name failslab, interval 1, probability 0, space 0, times 0 [ 2484.847532] FAT-fs (loop5): bogus number of reserved sectors [ 2484.853842] CPU: 0 PID: 29585 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2484.859670] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2484.868017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2484.868025] Call Trace: [ 2484.868056] dump_stack+0x1c9/0x2b4 [ 2484.868079] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2484.868103] ? perf_trace_lock+0x49d/0x920 [ 2484.868129] should_fail.cold.4+0xa/0x11 [ 2484.868148] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2484.868165] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2484.868181] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 2484.868201] ? perf_tp_event+0xc40/0xc40 [ 2484.868224] ? lock_release+0xa30/0xa30 [ 2484.868239] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 2484.868272] ? lock_acquire+0x1e4/0x540 [ 2484.935159] ? fs_reclaim_acquire+0x20/0x20 [ 2484.939500] ? lock_downgrade+0x8f0/0x8f0 [ 2484.943675] ? check_same_owner+0x340/0x340 [ 2484.948013] ? rcu_note_context_switch+0x730/0x730 [ 2484.952957] ? kasan_check_read+0x11/0x20 [ 2484.957120] __should_failslab+0x124/0x180 08:32:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404060a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2484.961374] should_failslab+0x9/0x14 [ 2484.965183] kmem_cache_alloc+0x2af/0x760 [ 2484.969357] __get_empty_filp+0x11b/0x620 [ 2484.973518] ? d_instantiate+0x79/0xa0 [ 2484.977416] ? proc_nr_files+0x60/0x60 [ 2484.981332] ? kasan_check_read+0x11/0x20 [ 2484.985511] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2484.989930] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2484.994526] ? kasan_check_write+0x14/0x20 [ 2484.998769] ? do_raw_spin_lock+0xc1/0x200 [ 2485.003023] alloc_file+0x29/0x3e0 [ 2485.006591] alloc_file_pseudo+0x267/0x3f0 [ 2485.010870] ? alloc_file+0x3e0/0x3e0 [ 2485.014779] ? check_same_owner+0x340/0x340 [ 2485.019114] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2485.024143] ? __check_object_size+0x9d/0x5f2 [ 2485.028659] ? kasan_check_write+0x14/0x20 [ 2485.032915] __shmem_file_setup.part.48+0x110/0x2a0 [ 2485.037951] shmem_file_setup+0x65/0x90 [ 2485.041945] __x64_sys_memfd_create+0x2af/0x4f0 [ 2485.046630] ? memfd_fcntl+0x1e80/0x1e80 [ 2485.050722] do_syscall_64+0x1b9/0x820 [ 2485.054618] ? finish_task_switch+0x1d3/0x870 [ 2485.059132] ? syscall_return_slowpath+0x5e0/0x5e0 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x734f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2485.064253] ? syscall_return_slowpath+0x31d/0x5e0 [ 2485.069209] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2485.074251] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2485.079291] ? perf_trace_sys_enter+0xb10/0xb10 [ 2485.083983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2485.090425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2485.095628] RIP: 0033:0x455e29 08:32:50 executing program 6 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2485.098817] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2485.118410] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2485.126135] RAX: ffffffffffffffda RBX: 0000000020001340 RCX: 0000000000455e29 [ 2485.133412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004baa70 [ 2485.140700] RBP: 000000000072bea0 R08: 0000000000000000 R09: 00000000fbad8001 [ 2485.147989] R10: 0000000020001340 R11: 0000000000000246 R12: 0000000000000014 [ 2485.155271] R13: 00000000004c26f8 R14: 00000000004d3fd0 R15: 0000000000000004 08:32:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x3f000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3f000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:50 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174c00104010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2485.244601] FAULT_INJECTION: forcing a failure. [ 2485.244601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2485.255184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2485.256856] CPU: 0 PID: 29593 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2485.256869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2485.256876] Call Trace: [ 2485.256901] dump_stack+0x1c9/0x2b4 [ 2485.256929] ? dump_stack_print_info.cold.2+0x52/0x52 08:32:50 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404140a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2485.275591] FAT-fs (loop7): bogus logical sector size 448 [ 2485.281262] should_fail.cold.4+0xa/0x11 [ 2485.281292] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2485.281318] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2485.281341] ? perf_trace_lock+0x49d/0x920 [ 2485.281361] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2485.281380] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 2485.281400] ? perf_tp_event+0xc40/0xc40 [ 2485.281423] ? memset+0x31/0x40 [ 2485.281442] ? perf_trace_lock+0x49d/0x920 [ 2485.281462] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2485.281481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2485.281500] ? should_fail+0x246/0xd86 [ 2485.284135] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2485.287772] ? zap_class+0x740/0x740 [ 2485.287806] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2485.368227] ? perf_tp_event+0xc40/0xc40 [ 2485.372326] __alloc_pages_nodemask+0x36e/0xdb0 [ 2485.377031] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2485.381449] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2485.382063] ? perf_trace_lock+0x49d/0x920 [ 2485.382087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2485.382120] ? lock_acquire+0x1e4/0x540 [ 2485.382138] ? fs_reclaim_acquire+0x20/0x20 [ 2485.382156] ? lock_downgrade+0x8f0/0x8f0 [ 2485.382177] ? lock_release+0xa30/0xa30 [ 2485.382197] ? check_same_owner+0x340/0x340 [ 2485.382220] cache_grow_begin+0x91/0x710 [ 2485.382246] kmem_cache_alloc+0x689/0x760 [ 2485.382268] ? do_sys_ftruncate+0x42d/0x560 [ 2485.431776] ? lock_downgrade+0x8f0/0x8f0 [ 2485.436046] getname_flags+0xd0/0x5a0 [ 2485.437739] FAT-fs (loop5): bogus number of reserved sectors 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffffc0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2485.439870] getname+0x19/0x20 [ 2485.439889] do_sys_open+0x3a2/0x720 [ 2485.439911] ? filp_open+0x80/0x80 [ 2485.439943] ? do_sys_ftruncate+0x44e/0x560 [ 2485.445767] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2485.448918] __x64_sys_open+0x7e/0xc0 [ 2485.448940] do_syscall_64+0x1b9/0x820 [ 2485.448959] ? syscall_slow_exit_work+0x500/0x500 [ 2485.478942] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2485.483905] ? syscall_return_slowpath+0x31d/0x5e0 [ 2485.488866] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2485.493903] ? perf_trace_sys_enter+0xb10/0xb10 [ 2485.498593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2485.503473] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2485.508666] FAT-fs (loop4): bogus number of reserved sectors [ 2485.508705] RIP: 0033:0x410081 [ 2485.514826] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2485.517685] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2485.543063] RSP: 002b:00007fd0b961ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2485.550856] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000410081 [ 2485.558685] RDX: 00007fd0b961eafa RSI: 0000000000000002 RDI: 00007fd0b961eaf0 [ 2485.565971] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2485.574127] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000015 [ 2485.581429] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000005 [ 2485.594720] FAT-fs (loop6): bogus number of reserved sectors [ 2485.600660] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2485.612614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2485.635307] FAT-fs (loop7): bogus logical sector size 448 [ 2485.639775] FAT-fs (loop5): bogus number of reserved sectors 08:32:51 executing program 6 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000000a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2485.641033] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2485.646776] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2485.671870] FAT-fs (loop4): bogus number of reserved sectors [ 2485.677991] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2485.702177] FAULT_INJECTION: forcing a failure. [ 2485.702177] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.713631] CPU: 1 PID: 29623 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2485.722045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2485.731409] Call Trace: [ 2485.734012] dump_stack+0x1c9/0x2b4 [ 2485.737653] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2485.742883] ? perf_trace_lock+0xde/0x920 [ 2485.747049] should_fail.cold.4+0xa/0x11 [ 2485.751138] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2485.756267] ? perf_trace_lock+0xde/0x920 [ 2485.760443] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2485.765475] ? trace_hardirqs_on+0x10/0x10 [ 2485.769758] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2485.774782] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2485.779551] ? lock_acquire+0x1e4/0x540 [ 2485.783526] ? fs_reclaim_acquire+0x20/0x20 [ 2485.787852] ? lock_downgrade+0x8f0/0x8f0 [ 2485.792006] ? check_same_owner+0x340/0x340 [ 2485.796329] ? zap_class+0x740/0x740 [ 2485.800058] ? rcu_note_context_switch+0x730/0x730 [ 2485.804990] __should_failslab+0x124/0x180 [ 2485.809229] should_failslab+0x9/0x14 [ 2485.813030] kmem_cache_alloc+0x2af/0x760 [ 2485.817189] __get_empty_filp+0x11b/0x620 [ 2485.821338] ? proc_nr_files+0x60/0x60 [ 2485.825316] ? lock_acquire+0x1e4/0x540 [ 2485.829290] ? is_bpf_text_address+0xae/0x170 [ 2485.833788] ? lock_downgrade+0x8f0/0x8f0 [ 2485.837940] ? perf_trace_lock+0xde/0x920 [ 2485.842089] path_openat+0x110/0x5430 [ 2485.845889] ? zap_class+0x740/0x740 [ 2485.849605] ? is_bpf_text_address+0xd7/0x170 [ 2485.854106] ? kernel_text_address+0x79/0xf0 [ 2485.858518] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 2485.863276] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2485.868293] ? expand_files.part.8+0x571/0x9c0 [ 2485.872876] ? iterate_fd+0x4b0/0x4b0 [ 2485.876690] ? lock_acquire+0x1e4/0x540 [ 2485.880671] ? __alloc_fd+0x34e/0x710 [ 2485.884469] ? lock_downgrade+0x8f0/0x8f0 [ 2485.888613] ? do_sys_open+0x3a2/0x720 [ 2485.892507] ? kasan_check_read+0x11/0x20 [ 2485.896655] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2485.901060] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2485.905641] ? kasan_check_write+0x14/0x20 [ 2485.909872] ? do_raw_spin_lock+0xc1/0x200 [ 2485.914110] ? _raw_spin_unlock+0x22/0x30 [ 2485.918258] ? __alloc_fd+0x34e/0x710 [ 2485.922056] ? usercopy_warn+0x120/0x120 [ 2485.926126] do_filp_open+0x255/0x380 [ 2485.929929] ? may_open_dev+0x100/0x100 [ 2485.933906] ? get_unused_fd_flags+0x122/0x1a0 [ 2485.938486] ? __alloc_fd+0x710/0x710 [ 2485.942292] do_sys_open+0x584/0x720 [ 2485.946019] ? filp_open+0x80/0x80 [ 2485.949563] ? do_sys_ftruncate+0x44e/0x560 [ 2485.953887] __x64_sys_open+0x7e/0xc0 [ 2485.957773] do_syscall_64+0x1b9/0x820 [ 2485.961659] ? finish_task_switch+0x1d3/0x870 [ 2485.966156] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2485.971084] ? syscall_return_slowpath+0x31d/0x5e0 [ 2485.976011] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2485.981024] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2485.986040] ? perf_trace_sys_enter+0xb10/0xb10 [ 2485.990707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2485.995556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2486.000752] RIP: 0033:0x410081 [ 2486.003931] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2486.023283] RSP: 002b:00007fd0b961ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2486.030992] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000410081 [ 2486.038263] RDX: 00007fd0b961eafa RSI: 0000000000000002 RDI: 00007fd0b961eaf0 [ 2486.045533] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 08:32:51 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) getpgid(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x80, &(0x7f00000012c0)={0x1a, 0x304, 0x4, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfeffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404230a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa6040000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:51 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174800104010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2486.052805] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000015 [ 2486.060071] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000006 08:32:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x68000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:51 executing program 6 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2486.131858] FAT-fs (loop5): bogus number of reserved sectors [ 2486.137800] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2486.141139] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2486.177311] FAT-fs (loop7): bogus logical sector size 384 [ 2486.183000] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2486.197519] FAULT_INJECTION: forcing a failure. [ 2486.197519] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.209243] CPU: 0 PID: 29646 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2486.217678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.227045] Call Trace: [ 2486.229651] dump_stack+0x1c9/0x2b4 [ 2486.233306] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2486.238518] ? perf_trace_lock+0x49d/0x920 [ 2486.242789] should_fail.cold.4+0xa/0x11 [ 2486.246877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2486.252002] ? memset+0x31/0x40 [ 2486.255344] ? zap_class+0x740/0x740 [ 2486.259072] ? rcu_note_context_switch+0x730/0x730 [ 2486.264029] ? lock_acquire+0x1e4/0x540 [ 2486.268040] ? fs_reclaim_acquire+0x20/0x20 [ 2486.272398] ? lock_downgrade+0x8f0/0x8f0 [ 2486.276774] ? check_same_owner+0x340/0x340 [ 2486.281165] ? mutex_trylock+0x2b0/0x2b0 [ 2486.285249] ? memset+0x31/0x40 [ 2486.288555] ? rcu_note_context_switch+0x730/0x730 [ 2486.293517] __should_failslab+0x124/0x180 [ 2486.297781] should_failslab+0x9/0x14 [ 2486.301613] kmem_cache_alloc_trace+0x2cb/0x780 [ 2486.306293] ? init_wait_entry+0x1c0/0x1c0 [ 2486.310550] ? lock_release+0xa30/0xa30 [ 2486.314556] ? loop_get_status64+0x140/0x140 [ 2486.318974] __kthread_create_on_node+0x127/0x4c0 08:32:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040a0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x1f00}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2486.324804] ? __kthread_parkme+0x1b0/0x1b0 [ 2486.329149] ? __fget+0x4d5/0x740 [ 2486.332654] ? __lockdep_init_map+0x105/0x590 [ 2486.337184] ? loop_get_status64+0x140/0x140 [ 2486.341619] kthread_create_on_node+0xb1/0xe0 [ 2486.346145] ? __kthread_create_on_node+0x4c0/0x4c0 [ 2486.351214] lo_ioctl+0x7f6/0x1d70 [ 2486.354805] ? lo_rw_aio_complete+0x450/0x450 [ 2486.359341] blkdev_ioctl+0x9cd/0x2030 [ 2486.363242] ? lock_acquire+0x1e4/0x540 [ 2486.367227] ? blkpg_ioctl+0xc40/0xc40 [ 2486.371137] ? lock_release+0xa30/0xa30 [ 2486.375134] ? save_stack+0xa9/0xd0 [ 2486.378769] ? save_stack+0x43/0xd0 [ 2486.382415] ? __fget+0x4d5/0x740 [ 2486.385905] ? ksys_dup3+0x690/0x690 [ 2486.389651] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2486.394271] ? kasan_check_write+0x14/0x20 [ 2486.398525] ? do_raw_spin_lock+0xc1/0x200 [ 2486.402793] block_ioctl+0xee/0x130 [ 2486.406434] ? blkdev_fallocate+0x400/0x400 [ 2486.410943] do_vfs_ioctl+0x1de/0x1720 [ 2486.414954] ? ioctl_preallocate+0x300/0x300 [ 2486.419377] ? __fget_light+0x2f7/0x440 [ 2486.423361] ? fget_raw+0x20/0x20 [ 2486.426827] ? trace_hardirqs_on+0xd/0x10 [ 2486.430985] ? kmem_cache_free+0x22e/0x2d0 [ 2486.435240] ? putname+0xf7/0x130 [ 2486.438717] ? do_sys_open+0x3cb/0x720 [ 2486.442624] ? security_file_ioctl+0x94/0xc0 [ 2486.447045] ksys_ioctl+0xa9/0xd0 [ 2486.450515] __x64_sys_ioctl+0x73/0xb0 [ 2486.454416] do_syscall_64+0x1b9/0x820 [ 2486.458313] ? finish_task_switch+0x1d3/0x870 [ 2486.462837] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2486.467794] ? syscall_return_slowpath+0x31d/0x5e0 [ 2486.472763] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2486.476121] FAT-fs (loop4): bogus number of reserved sectors [ 2486.477800] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2486.477821] ? perf_trace_sys_enter+0xb10/0xb10 [ 2486.477842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2486.477868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2486.483679] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2486.488658] RIP: 0033:0x455c97 [ 2486.488663] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2486.514221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2486.531916] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2486.531935] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2486.531945] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2486.531954] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2486.531964] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2486.531973] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000007 [ 2486.592357] FAT-fs (loop7): bogus logical sector size 384 [ 2486.598085] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2486.619068] FAT-fs (loop4): bogus number of reserved sectors 08:32:52 executing program 6 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:52 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x600}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404070a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2486.625082] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2486.633267] FAT-fs (loop5): bogus number of reserved sectors [ 2486.639183] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2486.687518] FAULT_INJECTION: forcing a failure. [ 2486.687518] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.698924] CPU: 0 PID: 29665 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2486.707351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2486.716726] Call Trace: [ 2486.719337] dump_stack+0x1c9/0x2b4 [ 2486.722997] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2486.728225] ? perf_trace_lock+0x49d/0x920 08:32:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404040a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2486.732197] FAT-fs (loop5): bogus number of reserved sectors [ 2486.732490] should_fail.cold.4+0xa/0x11 [ 2486.738346] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2486.742347] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2486.742368] ? memset+0x31/0x40 [ 2486.742411] ? zap_class+0x740/0x740 [ 2486.760407] ? rcu_note_context_switch+0x730/0x730 [ 2486.765379] ? lock_acquire+0x1e4/0x540 [ 2486.769415] ? fs_reclaim_acquire+0x20/0x20 [ 2486.773750] ? lock_downgrade+0x8f0/0x8f0 [ 2486.777919] ? check_same_owner+0x340/0x340 [ 2486.782337] ? mutex_trylock+0x2b0/0x2b0 [ 2486.786406] ? memset+0x31/0x40 [ 2486.789701] ? rcu_note_context_switch+0x730/0x730 [ 2486.794661] __should_failslab+0x124/0x180 [ 2486.798923] should_failslab+0x9/0x14 [ 2486.802739] kmem_cache_alloc_trace+0x2cb/0x780 [ 2486.807422] ? init_wait_entry+0x1c0/0x1c0 [ 2486.811757] ? lock_release+0xa30/0xa30 [ 2486.815756] ? loop_get_status64+0x140/0x140 [ 2486.820175] __kthread_create_on_node+0x127/0x4c0 [ 2486.825090] ? __kthread_parkme+0x1b0/0x1b0 [ 2486.829422] ? __fget+0x4d5/0x740 [ 2486.832913] ? __lockdep_init_map+0x105/0x590 [ 2486.837427] ? loop_get_status64+0x140/0x140 [ 2486.841851] kthread_create_on_node+0xb1/0xe0 [ 2486.846361] ? __kthread_create_on_node+0x4c0/0x4c0 [ 2486.851416] lo_ioctl+0x7f6/0x1d70 [ 2486.854996] ? lo_rw_aio_complete+0x450/0x450 [ 2486.859519] blkdev_ioctl+0x9cd/0x2030 [ 2486.860274] FAT-fs (loop7): bogus logical sector size 5120 [ 2486.863420] ? lock_acquire+0x1e4/0x540 [ 2486.863442] ? blkpg_ioctl+0xc40/0xc40 [ 2486.863464] ? lock_release+0xa30/0xa30 [ 2486.863491] ? save_stack+0xa9/0xd0 [ 2486.863511] ? save_stack+0x43/0xd0 [ 2486.869153] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2486.873099] ? __fget+0x4d5/0x740 [ 2486.873122] ? ksys_dup3+0x690/0x690 [ 2486.873142] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2486.905853] ? kasan_check_write+0x14/0x20 [ 2486.910108] ? do_raw_spin_lock+0xc1/0x200 [ 2486.914366] block_ioctl+0xee/0x130 [ 2486.918004] ? blkdev_fallocate+0x400/0x400 [ 2486.922350] do_vfs_ioctl+0x1de/0x1720 [ 2486.926258] ? ioctl_preallocate+0x300/0x300 [ 2486.930684] ? __fget_light+0x2f7/0x440 [ 2486.934673] ? fget_raw+0x20/0x20 [ 2486.938142] ? trace_hardirqs_on+0xd/0x10 [ 2486.942306] ? kmem_cache_free+0x22e/0x2d0 [ 2486.946559] ? putname+0xf7/0x130 [ 2486.950115] ? do_sys_open+0x3cb/0x720 [ 2486.954029] ? security_file_ioctl+0x94/0xc0 [ 2486.958458] ksys_ioctl+0xa9/0xd0 [ 2486.961931] __x64_sys_ioctl+0x73/0xb0 [ 2486.965838] do_syscall_64+0x1b9/0x820 [ 2486.969737] ? finish_task_switch+0x1d3/0x870 [ 2486.974251] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2486.979198] ? syscall_return_slowpath+0x31d/0x5e0 [ 2486.984144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2486.989183] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2486.994224] ? perf_trace_sys_enter+0xb10/0xb10 [ 2486.998917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2487.000466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2487.003785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2487.003800] RIP: 0033:0x455c97 [ 2487.003806] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:32:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000044) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2487.004162] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2487.004181] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2487.004191] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2487.004202] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2487.004212] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2487.004222] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000008 08:32:52 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) prlimit64(r2, 0xb, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x6c00}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x1000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:52 executing program 6 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffffc3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2487.142853] FAT-fs (loop7): bogus logical sector size 5120 [ 2487.148622] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:52 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174480404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:52 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404050a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2487.212537] FAT-fs (loop4): bogus number of reserved sectors [ 2487.218456] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2487.228808] FAT-fs (loop5): bogus number of reserved sectors [ 2487.234755] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2487.243107] FAULT_INJECTION: forcing a failure. [ 2487.243107] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.254471] CPU: 0 PID: 29694 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2487.262892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2487.272434] Call Trace: [ 2487.275047] dump_stack+0x1c9/0x2b4 [ 2487.278725] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2487.283955] ? perf_trace_lock+0x49d/0x920 [ 2487.288250] should_fail.cold.4+0xa/0x11 [ 2487.292361] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2487.297508] ? kasan_check_write+0x14/0x20 [ 2487.297835] FAT-fs (loop7): bogus logical sector size 1096 [ 2487.301770] ? __mutex_lock+0x6c4/0x1680 [ 2487.301808] ? mutex_trylock+0x2b0/0x2b0 [ 2487.301833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2487.301863] ? lock_acquire+0x1e4/0x540 [ 2487.301882] ? fs_reclaim_acquire+0x20/0x20 [ 2487.307555] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2487.311594] ? lock_downgrade+0x8f0/0x8f0 [ 2487.311625] ? check_same_owner+0x340/0x340 [ 2487.311652] ? kernfs_add_one+0x2d4/0x4d0 [ 2487.311671] ? rcu_note_context_switch+0x730/0x730 [ 2487.311697] __should_failslab+0x124/0x180 [ 2487.311714] should_failslab+0x9/0x14 08:32:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2487.311728] kmem_cache_alloc+0x2af/0x760 [ 2487.311742] ? wait_for_completion+0x8d0/0x8d0 [ 2487.311762] ? kasan_check_read+0x11/0x20 [ 2487.311780] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2487.311796] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2487.311815] __kernfs_new_node+0xef/0x5a0 [ 2487.321982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2487.324604] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2487.324626] ? kasan_check_write+0x14/0x20 [ 2487.324652] ? __kernfs_new_node+0x426/0x5a0 [ 2487.324681] ? mutex_unlock+0xd/0x10 [ 2487.324695] ? kernfs_activate+0x21a/0x2c0 [ 2487.324720] kernfs_new_node+0x80/0xf0 [ 2487.324739] __kernfs_create_file+0x4d/0x330 [ 2487.324758] sysfs_add_file_mode_ns+0x21a/0x560 [ 2487.324783] internal_create_group+0x26d/0x9e0 [ 2487.324809] sysfs_create_group+0x1f/0x30 [ 2487.324828] lo_ioctl+0x1307/0x1d70 [ 2487.324855] ? lo_rw_aio_complete+0x450/0x450 [ 2487.324874] blkdev_ioctl+0x9cd/0x2030 [ 2487.324893] ? lock_acquire+0x1e4/0x540 [ 2487.324910] ? blkpg_ioctl+0xc40/0xc40 [ 2487.324930] ? lock_release+0xa30/0xa30 [ 2487.324956] ? save_stack+0xa9/0xd0 [ 2487.324974] ? save_stack+0x43/0xd0 [ 2487.467631] ? __fget+0x4d5/0x740 [ 2487.471118] ? ksys_dup3+0x690/0x690 [ 2487.474854] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2487.479463] ? kasan_check_write+0x14/0x20 [ 2487.483719] ? do_raw_spin_lock+0xc1/0x200 [ 2487.487980] block_ioctl+0xee/0x130 [ 2487.491639] ? blkdev_fallocate+0x400/0x400 [ 2487.495996] do_vfs_ioctl+0x1de/0x1720 [ 2487.499911] ? ioctl_preallocate+0x300/0x300 [ 2487.504340] ? __fget_light+0x2f7/0x440 [ 2487.508338] ? fget_raw+0x20/0x20 [ 2487.510396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2487.511802] ? trace_hardirqs_on+0xd/0x10 [ 2487.511823] ? kmem_cache_free+0x22e/0x2d0 [ 2487.511846] ? putname+0xf7/0x130 [ 2487.511866] ? do_sys_open+0x3cb/0x720 [ 2487.511891] ? security_file_ioctl+0x94/0xc0 [ 2487.511911] ksys_ioctl+0xa9/0xd0 [ 2487.511930] __x64_sys_ioctl+0x73/0xb0 [ 2487.511948] do_syscall_64+0x1b9/0x820 [ 2487.511961] ? finish_task_switch+0x1d3/0x870 [ 2487.511978] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2487.511997] ? syscall_return_slowpath+0x31d/0x5e0 [ 2487.512016] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2487.512034] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2487.512053] ? perf_trace_sys_enter+0xb10/0xb10 [ 2487.512073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2487.512102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2487.512116] RIP: 0033:0x455c97 [ 2487.512121] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2487.611633] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2487.619366] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2487.626650] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2487.633931] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2487.641211] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2487.648492] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000009 [ 2487.666637] FAT-fs (loop6): bogus number of reserved sectors [ 2487.671198] FAT-fs (loop4): bogus number of reserved sectors [ 2487.672591] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2487.678337] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2487.679562] FAT-fs (loop5): bogus number of reserved sectors [ 2487.696051] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2487.708421] FAT-fs (loop7): bogus logical sector size 1096 08:32:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x734f000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2487.714454] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf6ffffff00000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3203}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:53 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740e0404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404100a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2487.788672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xc3ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:53 executing program 6 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2487.865169] FAT-fs (loop7): bogus logical sector size 1038 [ 2487.870999] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2487.878273] FAT-fs (loop5): bogus number of reserved sectors [ 2487.884185] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2487.894100] FAT-fs (loop4): bogus number of reserved sectors [ 2487.900037] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2487.928605] FAT-fs (loop7): bogus logical sector size 1038 [ 2487.934380] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2487.941814] FAT-fs (loop5): bogus number of reserved sectors [ 2487.947767] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2487.950930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2487.971197] FAT-fs (loop4): bogus number of reserved sectors [ 2487.977131] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2487.983756] FAULT_INJECTION: forcing a failure. [ 2487.983756] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.995142] CPU: 1 PID: 29738 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2488.003561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.012926] Call Trace: [ 2488.015527] dump_stack+0x1c9/0x2b4 [ 2488.019167] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2488.024365] ? zap_class+0x740/0x740 [ 2488.028091] ? perf_trace_lock+0xde/0x920 [ 2488.032249] should_fail.cold.4+0xa/0x11 [ 2488.036319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2488.041438] ? kernfs_activate+0x8e/0x2c0 [ 2488.045595] ? ___ratelimit.cold.2+0x6b/0x6b [ 2488.050010] ? kasan_check_write+0x14/0x20 [ 2488.054253] ? kernfs_activate+0x21a/0x2c0 [ 2488.058494] ? lock_downgrade+0x8f0/0x8f0 [ 2488.062648] ? lock_acquire+0x1e4/0x540 [ 2488.066624] ? fs_reclaim_acquire+0x20/0x20 [ 2488.071129] ? lock_downgrade+0x8f0/0x8f0 [ 2488.075286] ? check_same_owner+0x340/0x340 [ 2488.079610] ? kasan_check_write+0x14/0x20 [ 2488.083851] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2488.088784] ? rcu_note_context_switch+0x730/0x730 [ 2488.093718] __should_failslab+0x124/0x180 [ 2488.097956] should_failslab+0x9/0x14 [ 2488.101764] kmem_cache_alloc+0x2af/0x760 [ 2488.105913] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2488.110844] ? kasan_check_write+0x14/0x20 [ 2488.115088] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2488.120108] __kernfs_new_node+0xef/0x5a0 [ 2488.124258] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2488.129013] ? mutex_unlock+0xd/0x10 [ 2488.132727] ? kernfs_activate+0x21a/0x2c0 [ 2488.136961] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2488.141815] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2488.147367] ? kernfs_link_sibling+0x1d2/0x3b0 [ 2488.151976] kernfs_new_node+0x80/0xf0 [ 2488.156707] __kernfs_create_file+0x4d/0x330 [ 2488.161131] sysfs_add_file_mode_ns+0x21a/0x560 [ 2488.165826] internal_create_group+0x26d/0x9e0 [ 2488.170439] sysfs_create_group+0x1f/0x30 [ 2488.174598] lo_ioctl+0x1307/0x1d70 [ 2488.178231] ? lo_rw_aio_complete+0x450/0x450 [ 2488.182736] blkdev_ioctl+0x9cd/0x2030 [ 2488.186624] ? lock_acquire+0x1e4/0x540 [ 2488.190598] ? blkpg_ioctl+0xc40/0xc40 [ 2488.194487] ? lock_release+0xa30/0xa30 [ 2488.198476] ? save_stack+0xa9/0xd0 [ 2488.202102] ? save_stack+0x43/0xd0 [ 2488.205733] ? __fget+0x4d5/0x740 [ 2488.209190] ? ksys_dup3+0x690/0x690 [ 2488.212905] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2488.217490] ? kasan_check_write+0x14/0x20 [ 2488.221723] ? do_raw_spin_lock+0xc1/0x200 [ 2488.225960] block_ioctl+0xee/0x130 [ 2488.229585] ? blkdev_fallocate+0x400/0x400 [ 2488.233911] do_vfs_ioctl+0x1de/0x1720 [ 2488.237803] ? ioctl_preallocate+0x300/0x300 [ 2488.242211] ? __fget_light+0x2f7/0x440 [ 2488.246186] ? fget_raw+0x20/0x20 [ 2488.249642] ? trace_hardirqs_on+0xd/0x10 [ 2488.253795] ? kmem_cache_free+0x22e/0x2d0 [ 2488.258030] ? putname+0xf7/0x130 [ 2488.261488] ? do_sys_open+0x3cb/0x720 [ 2488.265386] ? security_file_ioctl+0x94/0xc0 [ 2488.269797] ksys_ioctl+0xa9/0xd0 [ 2488.273250] __x64_sys_ioctl+0x73/0xb0 [ 2488.277152] do_syscall_64+0x1b9/0x820 [ 2488.281044] ? finish_task_switch+0x1d3/0x870 [ 2488.285554] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2488.290492] ? syscall_return_slowpath+0x31d/0x5e0 [ 2488.295464] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2488.300491] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2488.305508] ? perf_trace_sys_enter+0xb10/0xb10 [ 2488.310178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2488.315030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2488.320219] RIP: 0033:0x455c97 [ 2488.323408] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2488.342744] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2488.350456] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2488.357721] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2488.364987] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2488.372254] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2488.379539] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000a [ 2488.389531] FAT-fs (loop6): bogus number of reserved sectors [ 2488.395431] FAT-fs (loop6): Can't find a valid FAT filesystem 08:32:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000f1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:53 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x4001, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x700000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404be0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:53 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174100404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfdfdffff00000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:53 executing program 6 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:53 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040f0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2488.487306] FAT-fs (loop5): bogus number of reserved sectors [ 2488.493204] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2488.546467] FAT-fs (loop4): bogus number of reserved sectors [ 2488.552510] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2488.557420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2488.566221] FAULT_INJECTION: forcing a failure. [ 2488.566221] name failslab, interval 1, probability 0, space 0, times 0 [ 2488.568108] FAT-fs (loop7): bogus logical sector size 1040 [ 2488.577540] CPU: 1 PID: 29764 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2488.583172] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2488.591542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2488.591550] Call Trace: [ 2488.591574] dump_stack+0x1c9/0x2b4 [ 2488.591596] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2488.618656] ? zap_class+0x740/0x740 [ 2488.620097] FAT-fs (loop5): bogus number of reserved sectors [ 2488.622386] ? perf_trace_lock+0xde/0x920 [ 2488.622413] should_fail.cold.4+0xa/0x11 [ 2488.628209] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2488.632334] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2488.632347] ? kernfs_activate+0x8e/0x2c0 [ 2488.632368] ? ___ratelimit.cold.2+0x6b/0x6b [ 2488.655939] ? kasan_check_write+0x14/0x20 [ 2488.660202] ? kernfs_activate+0x21a/0x2c0 [ 2488.664462] ? lock_downgrade+0x8f0/0x8f0 [ 2488.668624] ? lock_acquire+0x1e4/0x540 [ 2488.672623] ? fs_reclaim_acquire+0x20/0x20 [ 2488.677317] ? lock_downgrade+0x8f0/0x8f0 [ 2488.681483] ? check_same_owner+0x340/0x340 [ 2488.685814] ? kasan_check_write+0x14/0x20 [ 2488.690057] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2488.694988] ? rcu_note_context_switch+0x730/0x730 [ 2488.699960] __should_failslab+0x124/0x180 [ 2488.704206] should_failslab+0x9/0x14 [ 2488.708025] kmem_cache_alloc+0x2af/0x760 [ 2488.712193] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2488.717129] ? kasan_check_write+0x14/0x20 [ 2488.721371] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2488.726388] __kernfs_new_node+0xef/0x5a0 [ 2488.730538] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2488.735295] ? mutex_unlock+0xd/0x10 [ 2488.739012] ? kernfs_activate+0x21a/0x2c0 [ 2488.743252] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2488.748100] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2488.753638] ? kernfs_link_sibling+0x1d2/0x3b0 [ 2488.758660] kernfs_new_node+0x80/0xf0 [ 2488.762554] __kernfs_create_file+0x4d/0x330 [ 2488.766971] sysfs_add_file_mode_ns+0x21a/0x560 [ 2488.771828] internal_create_group+0x26d/0x9e0 [ 2488.776434] sysfs_create_group+0x1f/0x30 [ 2488.780586] lo_ioctl+0x1307/0x1d70 [ 2488.784220] ? lo_rw_aio_complete+0x450/0x450 [ 2488.788720] blkdev_ioctl+0x9cd/0x2030 [ 2488.792612] ? lock_acquire+0x1e4/0x540 [ 2488.796676] ? blkpg_ioctl+0xc40/0xc40 [ 2488.800567] ? lock_release+0xa30/0xa30 [ 2488.804576] ? save_stack+0xa9/0xd0 [ 2488.808207] ? save_stack+0x43/0xd0 [ 2488.811837] ? __fget+0x4d5/0x740 [ 2488.815294] ? ksys_dup3+0x690/0x690 [ 2488.819028] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2488.823618] ? kasan_check_write+0x14/0x20 [ 2488.827872] ? do_raw_spin_lock+0xc1/0x200 [ 2488.832115] block_ioctl+0xee/0x130 [ 2488.835744] ? blkdev_fallocate+0x400/0x400 [ 2488.840087] do_vfs_ioctl+0x1de/0x1720 [ 2488.843983] ? ioctl_preallocate+0x300/0x300 [ 2488.848395] ? __fget_light+0x2f7/0x440 [ 2488.852369] ? fget_raw+0x20/0x20 [ 2488.855824] ? trace_hardirqs_on+0xd/0x10 [ 2488.859971] ? kmem_cache_free+0x22e/0x2d0 [ 2488.864216] ? putname+0xf7/0x130 [ 2488.867674] ? do_sys_open+0x3cb/0x720 [ 2488.871579] ? security_file_ioctl+0x94/0xc0 [ 2488.875987] ksys_ioctl+0xa9/0xd0 [ 2488.879538] __x64_sys_ioctl+0x73/0xb0 [ 2488.883432] do_syscall_64+0x1b9/0x820 [ 2488.887326] ? syscall_slow_exit_work+0x500/0x500 [ 2488.892173] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2488.897109] ? syscall_return_slowpath+0x31d/0x5e0 [ 2488.902045] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2488.907068] ? perf_trace_sys_enter+0xb10/0xb10 [ 2488.911744] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2488.916598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2488.921784] RIP: 0033:0x455c97 [ 2488.924962] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 08:32:54 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@rand_addr=0x4604, 0x4e20, 0x0, 0x4e23, 0x2, 0x0, 0xa0, 0xa0, 0xff, 0x0, r5}, {0x1, 0x1, 0xff, 0x4, 0x101, 0x5, 0x81, 0x1}, {0x200, 0x6, 0x4281, 0xfffffffffffffd2f}, 0xfa4e, 0x6e6bbd, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x3ff}, 0x4d4, 0xff}, 0xa, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x3, 0x3, 0x11, 0xfffffffffffffffb, 0x1f}}, 0xe8) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 2488.944286] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2488.952021] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2488.959300] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2488.966569] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2488.973840] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2488.981113] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000b [ 2488.996164] FAT-fs (loop6): bogus number of reserved sectors [ 2489.002283] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2489.021934] FAT-fs (loop4): bogus number of reserved sectors [ 2489.027864] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2489.037939] FAT-fs (loop7): bogus logical sector size 1040 08:32:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf0a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2489.043693] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404020a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x700000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:54 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174090404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2489.113119] FAT-fs (loop5): bogus number of reserved sectors [ 2489.119111] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2489.151933] FAT-fs (loop5): bogus number of reserved sectors 08:32:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404030a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2489.157925] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2489.165442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2489.196070] FAT-fs (loop7): bogus logical sector size 1033 [ 2489.201820] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2489.216567] FAT-fs (loop4): bogus number of reserved sectors [ 2489.222512] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2489.260275] FAT-fs (loop7): bogus logical sector size 1033 [ 2489.266057] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2489.274359] FAT-fs (loop4): bogus number of reserved sectors [ 2489.280310] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000022) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x23000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:54 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174f00404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:54 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404090a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x900000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:54 executing program 6 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2489.506530] FAT-fs (loop7): bogus logical sector size 1264 [ 2489.512298] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2489.528285] FAT-fs (loop4): bogus number of reserved sectors [ 2489.534200] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2489.536645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2489.542307] FAT-fs (loop5): bogus number of reserved sectors 08:32:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010f02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2489.552886] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x81000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2489.588095] FAT-fs (loop4): bogus number of reserved sectors [ 2489.594046] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2489.603006] FAT-fs (loop7): bogus logical sector size 1264 [ 2489.608759] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2489.618509] FAT-fs (loop5): bogus number of reserved sectors [ 2489.624463] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2489.668414] FAULT_INJECTION: forcing a failure. [ 2489.668414] name failslab, interval 1, probability 0, space 0, times 0 [ 2489.679827] CPU: 0 PID: 29832 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2489.688251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2489.697618] Call Trace: [ 2489.700235] dump_stack+0x1c9/0x2b4 [ 2489.703899] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2489.709125] ? perf_trace_lock+0x49d/0x920 [ 2489.710777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2489.713657] should_fail.cold.4+0xa/0x11 [ 2489.713685] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2489.713701] ? kernfs_activate+0x8e/0x2c0 [ 2489.713728] ? ___ratelimit.cold.2+0x6b/0x6b [ 2489.713753] ? kasan_check_write+0x14/0x20 [ 2489.713779] ? kernfs_activate+0x21a/0x2c0 [ 2489.713797] ? lock_downgrade+0x8f0/0x8f0 [ 2489.713824] ? lock_acquire+0x1e4/0x540 [ 2489.713841] ? fs_reclaim_acquire+0x20/0x20 [ 2489.713859] ? lock_downgrade+0x8f0/0x8f0 [ 2489.713884] ? check_same_owner+0x340/0x340 [ 2489.713899] ? kasan_check_write+0x14/0x20 [ 2489.713912] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2489.713928] ? rcu_note_context_switch+0x730/0x730 [ 2489.713951] __should_failslab+0x124/0x180 [ 2489.713973] should_failslab+0x9/0x14 [ 2489.713989] kmem_cache_alloc+0x2af/0x760 [ 2489.714005] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2489.714020] ? kasan_check_write+0x14/0x20 [ 2489.714043] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2489.714061] __kernfs_new_node+0xef/0x5a0 [ 2489.714081] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2489.714098] ? mutex_unlock+0xd/0x10 [ 2489.820668] ? kernfs_activate+0x21a/0x2c0 [ 2489.824917] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2489.829783] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2489.835332] ? kernfs_link_sibling+0x1d2/0x3b0 [ 2489.839936] kernfs_new_node+0x80/0xf0 [ 2489.843842] __kernfs_create_file+0x4d/0x330 [ 2489.848267] sysfs_add_file_mode_ns+0x21a/0x560 [ 2489.852959] internal_create_group+0x26d/0x9e0 [ 2489.857565] sysfs_create_group+0x1f/0x30 [ 2489.861723] lo_ioctl+0x1307/0x1d70 [ 2489.865373] ? lo_rw_aio_complete+0x450/0x450 [ 2489.869882] blkdev_ioctl+0x9cd/0x2030 [ 2489.873778] ? lock_acquire+0x1e4/0x540 [ 2489.877764] ? blkpg_ioctl+0xc40/0xc40 [ 2489.881666] ? lock_release+0xa30/0xa30 [ 2489.885661] ? save_stack+0xa9/0xd0 [ 2489.889297] ? save_stack+0x43/0xd0 [ 2489.892953] ? __fget+0x4d5/0x740 [ 2489.896428] ? ksys_dup3+0x690/0x690 [ 2489.900151] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2489.904748] ? kasan_check_write+0x14/0x20 [ 2489.908990] ? do_raw_spin_lock+0xc1/0x200 [ 2489.913247] block_ioctl+0xee/0x130 [ 2489.916902] ? blkdev_fallocate+0x400/0x400 [ 2489.921236] do_vfs_ioctl+0x1de/0x1720 [ 2489.925139] ? ioctl_preallocate+0x300/0x300 [ 2489.929556] ? __fget_light+0x2f7/0x440 [ 2489.933539] ? fget_raw+0x20/0x20 [ 2489.937004] ? trace_hardirqs_on+0xd/0x10 [ 2489.941161] ? kmem_cache_free+0x22e/0x2d0 [ 2489.945413] ? putname+0xf7/0x130 [ 2489.948875] ? do_sys_open+0x3cb/0x720 [ 2489.952783] ? security_file_ioctl+0x94/0xc0 [ 2489.957208] ksys_ioctl+0xa9/0xd0 [ 2489.960674] __x64_sys_ioctl+0x73/0xb0 [ 2489.964573] do_syscall_64+0x1b9/0x820 [ 2489.968466] ? finish_task_switch+0x1d3/0x870 [ 2489.972975] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2489.977916] ? syscall_return_slowpath+0x31d/0x5e0 [ 2489.982857] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2489.987886] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2489.992910] ? perf_trace_sys_enter+0xb10/0xb10 [ 2489.997593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2490.002458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2490.007652] RIP: 0033:0x455c97 [ 2490.010840] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2490.030458] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2490.038187] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2490.045466] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2490.052763] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2490.060037] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 08:32:55 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000140)) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0xffffffffffffff59) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r0, r3}) 08:32:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa9040000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:55 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174db0104010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xffffff8c}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010802000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x8100}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2490.067317] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000c [ 2490.089996] FAT-fs (loop6): bogus number of reserved sectors [ 2490.095925] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2490.136792] FAT-fs (loop4): bogus number of reserved sectors [ 2490.142758] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2490.152522] FAT-fs (loop7): bogus logical sector size 475 [ 2490.159101] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2490.163814] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2490.172446] FAT-fs (loop5): bogus number of reserved sectors [ 2490.178395] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010602000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2490.206989] FAT-fs (loop7): bogus logical sector size 475 [ 2490.212656] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2490.218628] FAT-fs (loop4): bogus number of reserved sectors [ 2490.222130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2490.224482] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2490.226886] FAT-fs (loop5): bogus number of reserved sectors [ 2490.243255] FAT-fs (loop5): Can't find a valid FAT filesystem 08:32:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000f0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:55 executing program 6 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfffffdfd}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa01}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:55 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174c00004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:55 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a04000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xc3ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2490.530015] FAT-fs (loop5): bogus number of reserved sectors [ 2490.535980] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2490.540468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2490.543089] FAULT_INJECTION: forcing a failure. [ 2490.543089] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.560166] CPU: 1 PID: 29883 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2490.568579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.577938] Call Trace: 08:32:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a05000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xc0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2490.579647] FAT-fs (loop4): bogus number of reserved sectors [ 2490.580541] dump_stack+0x1c9/0x2b4 [ 2490.580561] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2490.580577] ? zap_class+0x740/0x740 [ 2490.580598] ? perf_trace_lock+0xde/0x920 [ 2490.586418] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2490.590018] should_fail.cold.4+0xa/0x11 [ 2490.590038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2490.590059] ? kernfs_activate+0x8e/0x2c0 [ 2490.622223] ? ___ratelimit.cold.2+0x6b/0x6b [ 2490.626653] ? kasan_check_write+0x14/0x20 [ 2490.630909] ? kernfs_activate+0x21a/0x2c0 [ 2490.635258] ? lock_downgrade+0x8f0/0x8f0 [ 2490.639442] ? lock_acquire+0x1e4/0x540 [ 2490.643424] ? fs_reclaim_acquire+0x20/0x20 [ 2490.647758] ? lock_downgrade+0x8f0/0x8f0 [ 2490.651937] ? check_same_owner+0x340/0x340 [ 2490.656280] ? kasan_check_write+0x14/0x20 [ 2490.660524] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2490.665478] ? rcu_note_context_switch+0x730/0x730 [ 2490.670425] __should_failslab+0x124/0x180 [ 2490.670580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2490.674660] should_failslab+0x9/0x14 [ 2490.674676] kmem_cache_alloc+0x2af/0x760 [ 2490.674692] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2490.674707] ? kasan_check_write+0x14/0x20 [ 2490.674725] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2490.674744] __kernfs_new_node+0xef/0x5a0 [ 2490.707427] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2490.712197] ? mutex_unlock+0xd/0x10 [ 2490.715920] ? kernfs_activate+0x21a/0x2c0 [ 2490.720171] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2490.725027] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2490.730576] ? kernfs_link_sibling+0x1d2/0x3b0 [ 2490.735177] kernfs_new_node+0x80/0xf0 [ 2490.739077] __kernfs_create_file+0x4d/0x330 [ 2490.743498] sysfs_add_file_mode_ns+0x21a/0x560 [ 2490.748184] internal_create_group+0x26d/0x9e0 [ 2490.752781] sysfs_create_group+0x1f/0x30 [ 2490.756933] lo_ioctl+0x1307/0x1d70 [ 2490.760567] ? lo_rw_aio_complete+0x450/0x450 [ 2490.765066] blkdev_ioctl+0x9cd/0x2030 [ 2490.768957] ? lock_acquire+0x1e4/0x540 [ 2490.772933] ? blkpg_ioctl+0xc40/0xc40 [ 2490.776830] ? lock_release+0xa30/0xa30 [ 2490.780813] ? save_stack+0xa9/0xd0 [ 2490.784452] ? save_stack+0x43/0xd0 [ 2490.788089] ? __fget+0x4d5/0x740 [ 2490.791548] ? ksys_dup3+0x690/0x690 [ 2490.795264] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2490.799859] ? kasan_check_write+0x14/0x20 [ 2490.804097] ? do_raw_spin_lock+0xc1/0x200 [ 2490.808338] block_ioctl+0xee/0x130 [ 2490.811967] ? blkdev_fallocate+0x400/0x400 [ 2490.816293] do_vfs_ioctl+0x1de/0x1720 [ 2490.820188] ? ioctl_preallocate+0x300/0x300 [ 2490.824598] ? __fget_light+0x2f7/0x440 [ 2490.828573] ? fget_raw+0x20/0x20 [ 2490.832029] ? trace_hardirqs_on+0xd/0x10 [ 2490.836180] ? kmem_cache_free+0x22e/0x2d0 [ 2490.840417] ? putname+0xf7/0x130 [ 2490.843873] ? do_sys_open+0x3cb/0x720 [ 2490.847765] ? security_file_ioctl+0x94/0xc0 [ 2490.852175] ksys_ioctl+0xa9/0xd0 [ 2490.855631] __x64_sys_ioctl+0x73/0xb0 [ 2490.859523] do_syscall_64+0x1b9/0x820 [ 2490.863416] ? syscall_slow_exit_work+0x500/0x500 [ 2490.868263] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2490.873195] ? syscall_return_slowpath+0x31d/0x5e0 [ 2490.878135] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2490.883161] ? perf_trace_sys_enter+0xb10/0xb10 [ 2490.887840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2490.892691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2490.897881] RIP: 0033:0x455c97 [ 2490.901063] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2490.920730] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2490.928446] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2490.935721] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2490.942994] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2490.950266] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2490.957540] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000d [ 2490.967544] FAT-fs (loop7): bogus logical sector size 192 [ 2490.973182] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2490.979342] FAT-fs (loop6): bogus number of reserved sectors [ 2490.985339] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2491.008632] FAT-fs (loop5): bogus number of reserved sectors [ 2491.009379] FAT-fs (loop4): bogus number of reserved sectors [ 2491.014574] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2491.020368] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2491.032241] FAT-fs (loop7): bogus logical sector size 192 [ 2491.037860] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:56 executing program 1: epoll_create(0x9) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/218, &(0x7f0000000140)=0xda) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) userfaultfd(0x80000) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x6000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a01000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:56 executing program 6 (fault-call:1 fault-nth:14): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:56 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174400104010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x8}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa00}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2491.246776] FAT-fs (loop7): bogus logical sector size 320 [ 2491.252443] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2491.254861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2491.286130] FAT-fs (loop7): bogus logical sector size 320 [ 2491.291794] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2491.307874] FAT-fs (loop4): invalid media value (0x53) [ 2491.313291] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2491.333090] FAT-fs (loop5): bogus number of reserved sectors [ 2491.339037] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2491.363534] FAT-fs (loop4): invalid media value (0x53) [ 2491.368964] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2491.378319] FAT-fs (loop5): bogus number of reserved sectors [ 2491.384373] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2491.391706] FAULT_INJECTION: forcing a failure. [ 2491.391706] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.403122] CPU: 0 PID: 29923 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2491.411544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.420914] Call Trace: [ 2491.423525] dump_stack+0x1c9/0x2b4 [ 2491.427176] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2491.432387] ? perf_trace_lock+0x49d/0x920 [ 2491.436651] should_fail.cold.4+0xa/0x11 [ 2491.440731] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2491.445845] ? kernfs_activate+0x8e/0x2c0 [ 2491.450021] ? ___ratelimit.cold.2+0x6b/0x6b [ 2491.454474] ? kasan_check_write+0x14/0x20 [ 2491.458756] ? kernfs_activate+0x21a/0x2c0 [ 2491.463012] ? lock_downgrade+0x8f0/0x8f0 [ 2491.467186] ? lock_acquire+0x1e4/0x540 [ 2491.471175] ? fs_reclaim_acquire+0x20/0x20 [ 2491.475509] ? lock_downgrade+0x8f0/0x8f0 [ 2491.479707] ? check_same_owner+0x340/0x340 [ 2491.484052] ? kasan_check_write+0x14/0x20 [ 2491.488315] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2491.493260] ? rcu_note_context_switch+0x730/0x730 [ 2491.498220] __should_failslab+0x124/0x180 [ 2491.502472] should_failslab+0x9/0x14 [ 2491.506292] kmem_cache_alloc+0x2af/0x760 08:32:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000c0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:56 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010402000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x734f0000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:56 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2491.510450] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2491.515394] ? kasan_check_write+0x14/0x20 [ 2491.519651] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2491.524685] __kernfs_new_node+0xef/0x5a0 [ 2491.528863] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2491.533640] ? mutex_unlock+0xd/0x10 [ 2491.537374] ? kernfs_activate+0x21a/0x2c0 [ 2491.541633] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2491.546505] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2491.552073] ? kernfs_link_sibling+0x1d2/0x3b0 [ 2491.556701] kernfs_new_node+0x80/0xf0 [ 2491.560622] __kernfs_create_file+0x4d/0x330 [ 2491.565058] sysfs_add_file_mode_ns+0x21a/0x560 [ 2491.569765] internal_create_group+0x26d/0x9e0 [ 2491.574385] sysfs_create_group+0x1f/0x30 [ 2491.578550] lo_ioctl+0x1307/0x1d70 [ 2491.582208] ? lo_rw_aio_complete+0x450/0x450 [ 2491.583682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2491.586712] blkdev_ioctl+0x9cd/0x2030 [ 2491.586732] ? lock_acquire+0x1e4/0x540 [ 2491.586749] ? blkpg_ioctl+0xc40/0xc40 [ 2491.586770] ? lock_release+0xa30/0xa30 [ 2491.586799] ? save_stack+0xa9/0xd0 [ 2491.586816] ? save_stack+0x43/0xd0 [ 2491.586838] ? __fget+0x4d5/0x740 [ 2491.586860] ? ksys_dup3+0x690/0x690 [ 2491.586874] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2491.586892] ? kasan_check_write+0x14/0x20 [ 2491.586908] ? do_raw_spin_lock+0xc1/0x200 [ 2491.586934] block_ioctl+0xee/0x130 [ 2491.586950] ? blkdev_fallocate+0x400/0x400 [ 2491.586968] do_vfs_ioctl+0x1de/0x1720 [ 2491.586990] ? ioctl_preallocate+0x300/0x300 [ 2491.587006] ? __fget_light+0x2f7/0x440 [ 2491.587025] ? fget_raw+0x20/0x20 [ 2491.587045] ? trace_hardirqs_on+0xd/0x10 [ 2491.587063] ? kmem_cache_free+0x22e/0x2d0 [ 2491.587083] ? putname+0xf7/0x130 [ 2491.587104] ? do_sys_open+0x3cb/0x720 [ 2491.587127] ? security_file_ioctl+0x94/0xc0 [ 2491.587145] ksys_ioctl+0xa9/0xd0 [ 2491.587163] __x64_sys_ioctl+0x73/0xb0 [ 2491.587184] do_syscall_64+0x1b9/0x820 [ 2491.587197] ? syscall_slow_exit_work+0x500/0x500 [ 2491.587215] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2491.701408] ? syscall_return_slowpath+0x31d/0x5e0 [ 2491.706357] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2491.711388] ? perf_trace_sys_enter+0xb10/0xb10 [ 2491.716072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2491.720954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.726151] RIP: 0033:0x455c97 [ 2491.729338] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2491.748933] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2491.756660] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2491.763941] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2491.771222] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2491.778508] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2491.785785] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000e [ 2491.800903] FAT-fs (loop7): bogus logical sector size 768 [ 2491.801183] FAT-fs (loop6): bogus number of reserved sectors 08:32:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xffffffffffffffff}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010302000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xe}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2491.806570] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2491.818727] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2491.851576] FAT-fs (loop7): bogus logical sector size 768 [ 2491.857407] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:57 executing program 6 (fault-call:1 fault-nth:15): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2491.924688] FAT-fs (loop5): invalid media value (0x2e) [ 2491.930091] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2491.940090] FAT-fs (loop4): bogus number of reserved sectors [ 2491.946037] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2491.953858] FAULT_INJECTION: forcing a failure. [ 2491.953858] name failslab, interval 1, probability 0, space 0, times 0 [ 2491.955922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2491.965258] CPU: 0 PID: 29958 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2491.965271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.965278] Call Trace: [ 2491.965300] dump_stack+0x1c9/0x2b4 [ 2491.965325] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2491.965348] ? perf_trace_lock+0x49d/0x920 [ 2491.965375] should_fail.cold.4+0xa/0x11 [ 2491.965398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2491.965416] ? kasan_check_write+0x14/0x20 [ 2491.965433] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2491.965447] ? lock_downgrade+0x8f0/0x8f0 [ 2491.965467] ? wait_for_completion+0x8d0/0x8d0 [ 2491.965486] ? kasan_check_read+0x11/0x20 [ 2491.965502] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2491.965523] ? kasan_check_write+0x14/0x20 [ 2491.965540] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2491.965555] ? kasan_check_write+0x14/0x20 [ 2491.965574] ? wait_for_completion+0x8d0/0x8d0 [ 2491.965600] ? lock_acquire+0x1e4/0x540 [ 2492.063232] ? fs_reclaim_acquire+0x20/0x20 [ 2492.067609] ? lock_downgrade+0x8f0/0x8f0 [ 2492.071800] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2492.076659] ? check_same_owner+0x340/0x340 [ 2492.081005] ? rcu_note_context_switch+0x730/0x730 [ 2492.085953] __should_failslab+0x124/0x180 [ 2492.090202] should_failslab+0x9/0x14 [ 2492.094019] kmem_cache_alloc_trace+0x2cb/0x780 [ 2492.098713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.104264] ? sysfs_add_file_mode_ns+0x22c/0x560 [ 2492.109121] ? sysfs_add_file_mode_ns+0x23c/0x560 [ 2492.113987] ? device_create_file+0x1e0/0x1e0 [ 2492.118495] kobject_uevent_env+0x20f/0x1110 [ 2492.122916] ? internal_create_group+0x39a/0x9e0 [ 2492.127784] kobject_uevent+0x1f/0x30 [ 2492.131598] lo_ioctl+0x1385/0x1d70 [ 2492.135255] ? lo_rw_aio_complete+0x450/0x450 [ 2492.139761] blkdev_ioctl+0x9cd/0x2030 [ 2492.143657] ? lock_acquire+0x1e4/0x540 [ 2492.147643] ? blkpg_ioctl+0xc40/0xc40 [ 2492.151549] ? lock_release+0xa30/0xa30 [ 2492.155556] ? save_stack+0xa9/0xd0 [ 2492.159196] ? save_stack+0x43/0xd0 [ 2492.162845] ? __fget+0x4d5/0x740 [ 2492.166314] ? ksys_dup3+0x690/0x690 [ 2492.170034] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2492.174631] ? kasan_check_write+0x14/0x20 [ 2492.178884] ? do_raw_spin_lock+0xc1/0x200 [ 2492.183147] block_ioctl+0xee/0x130 [ 2492.186787] ? blkdev_fallocate+0x400/0x400 [ 2492.191117] do_vfs_ioctl+0x1de/0x1720 [ 2492.195026] ? ioctl_preallocate+0x300/0x300 [ 2492.199617] ? __fget_light+0x2f7/0x440 [ 2492.203600] ? fget_raw+0x20/0x20 [ 2492.207066] ? trace_hardirqs_on+0xd/0x10 [ 2492.211228] ? kmem_cache_free+0x22e/0x2d0 [ 2492.215477] ? putname+0xf7/0x130 [ 2492.218947] ? do_sys_open+0x3cb/0x720 [ 2492.222853] ? security_file_ioctl+0x94/0xc0 [ 2492.227281] ksys_ioctl+0xa9/0xd0 [ 2492.230754] __x64_sys_ioctl+0x73/0xb0 [ 2492.234658] do_syscall_64+0x1b9/0x820 [ 2492.238555] ? finish_task_switch+0x1d3/0x870 [ 2492.243067] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2492.248011] ? syscall_return_slowpath+0x31d/0x5e0 [ 2492.252964] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2492.258000] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2492.263032] ? perf_trace_sys_enter+0xb10/0xb10 [ 2492.267741] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2492.272611] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.277807] RIP: 0033:0x455c97 [ 2492.280998] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2492.300595] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2492.308324] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2492.315611] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2492.323722] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2492.331010] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2492.338288] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000000f [ 2492.348353] FAT-fs (loop6): bogus number of reserved sectors [ 2492.354321] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2492.374674] FAT-fs (loop5): invalid media value (0x2e) [ 2492.380077] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2492.386531] FAT-fs (loop4): bogus number of reserved sectors [ 2492.392395] FAT-fs (loop4): Can't find a valid FAT filesystem 08:32:57 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x64}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xd022}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)="89f21fcdfd9da71c4352554875053abd1ad11607de9f3f31159f0bc6572cc8b5b0ee74a91f0b2a8b50c3650320fb7b2d8c74f93afceea27045a7a7e531e496d5cecf161f3f72a631ca127c055006ce615d5bf0314699409a5a6c6ca1341496216e69a767b586cdec23f570e3704e0959d271fc63c28c9d0db249888ac25007434917eed101f3487f69bbbda87b423982327170bb21992ac9de18897648a3db227a3c5b439be9db7dff387991035040f9097962ba2dfe", 0xb6}, {&(0x7f0000000500)="488be598e09db92e8509e4738372fc6ea9e08b0845129d09bbe9b9e38f4af8b867059243d25969c552db00f2123f0256ea16598641c21eeafbbc6af029fed3fb066d147d2199f1928ce35513a8410581d1d4230c754bfccc10cd89c21866a5b6e7f60f8a6d4e5da7ebea1b3f36836150dbea29d07a504fe7aad2ec7c013021e9d84dc83ed64d43f8c38c12cd9c693eda2f0b830339da9f", 0x97}, {&(0x7f00000005c0)="0e6a0f4af0f3c411b5f277ae85ec53f58cb490fd6be7cb0e672102c1f0092f91ab4d8fe8f350587f4776da3f81a2d68d53beb0b3e6f712d17ab450b7c72488058e31e25a2fb9d888530c6718b325cd847bc1c89133cfa953774f5290e85bab36c7749d26139e29ebbc30fb1e27ec4f5cae65a196d4ed0fda858aaadc3df1c60f0ddf7a4f8b132252da0af780e90ff9d33a9f36f6d3206d2867cbd65756deaf63613da8e38735a86eeccfdd87999379482400550e22719c565de88891c4faa4487e9389cbaae8824cdec00e32baf2eb9f092b4a1045461b", 0xd7}, {&(0x7f0000000440)="b888c613f7be5abb8e70a531e8553e2b1a1d5c9421ecd645409f38d154fb217d8213813a2f1f07b3cb818954fde3c5cd10344b289029c3f6dc68adf10c371767fd677ce9", 0x44}], 0x4, &(0x7f0000000880)=[@rights={0x38, 0x1, 0x1, [r0, r2, r2, r0, r2, r2, r2, r2, r0, r2]}, @cred={0x20, 0x1, 0x2, r1, r3, r4}], 0x58, 0x20000050}, 0x4004014) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000040)='\x00', r0}, 0x330) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, &(0x7f0000000940)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000980)=@assoc_value={r8, 0x1}, 0x8) mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_fuseblk_mount(&(0x7f0000000000)='./control\x00', &(0x7f0000000080)='./control/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000240)='./control/file0\x00', &(0x7f0000001bc0)='./file0\x00') unlink(&(0x7f0000000480)='./file0\x00') sendto$llc(r6, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:32:57 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174080404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x2000000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:57 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a00000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x300}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:57 executing program 6 (fault-call:1 fault-nth:16): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x6800000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2492.536753] FAT-fs (loop7): bogus logical sector size 1032 [ 2492.542504] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2492.548846] FAT-fs (loop2): bogus number of FAT structure [ 2492.553851] FAT-fs (loop5): bogus number of reserved sectors [ 2492.554473] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2492.560314] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2492.575462] FAT-fs (loop4): bogus number of reserved sectors [ 2492.581543] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2492.588285] FAULT_INJECTION: forcing a failure. [ 2492.588285] name failslab, interval 1, probability 0, space 0, times 0 [ 2492.599595] CPU: 1 PID: 29979 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2492.608005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.617369] Call Trace: [ 2492.619980] dump_stack+0x1c9/0x2b4 [ 2492.623630] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2492.628849] ? perf_trace_lock+0xde/0x920 [ 2492.633034] should_fail.cold.4+0xa/0x11 [ 2492.637117] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2492.642227] ? kasan_check_write+0x14/0x20 [ 2492.646469] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2492.651403] ? lock_downgrade+0x8f0/0x8f0 [ 2492.655556] ? wait_for_completion+0x8d0/0x8d0 [ 2492.660152] ? kasan_check_read+0x11/0x20 [ 2492.664311] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2492.668759] ? kasan_check_write+0x14/0x20 [ 2492.673007] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 2492.677950] ? kasan_check_write+0x14/0x20 [ 2492.682192] ? wait_for_completion+0x8d0/0x8d0 [ 2492.686783] ? lock_acquire+0x1e4/0x540 [ 2492.690760] ? fs_reclaim_acquire+0x20/0x20 [ 2492.695090] ? lock_downgrade+0x8f0/0x8f0 [ 2492.699247] ? kernfs_walk_and_get_ns+0x340/0x340 [ 2492.704092] ? check_same_owner+0x340/0x340 [ 2492.708416] ? rcu_note_context_switch+0x730/0x730 [ 2492.713352] __should_failslab+0x124/0x180 [ 2492.717595] should_failslab+0x9/0x14 [ 2492.721415] kmem_cache_alloc_trace+0x2cb/0x780 [ 2492.726096] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2492.731650] ? sysfs_add_file_mode_ns+0x22c/0x560 [ 2492.736513] ? sysfs_add_file_mode_ns+0x23c/0x560 [ 2492.741379] ? device_create_file+0x1e0/0x1e0 [ 2492.745882] kobject_uevent_env+0x20f/0x1110 [ 2492.750297] ? internal_create_group+0x39a/0x9e0 [ 2492.755070] kobject_uevent+0x1f/0x30 [ 2492.758875] lo_ioctl+0x1385/0x1d70 [ 2492.762507] ? lo_rw_aio_complete+0x450/0x450 [ 2492.767100] blkdev_ioctl+0x9cd/0x2030 [ 2492.771302] ? lock_acquire+0x1e4/0x540 [ 2492.775289] ? blkpg_ioctl+0xc40/0xc40 [ 2492.779187] ? lock_release+0xa30/0xa30 [ 2492.783174] ? save_stack+0xa9/0xd0 [ 2492.786813] ? save_stack+0x43/0xd0 [ 2492.790445] ? __fget+0x4d5/0x740 [ 2492.793900] ? ksys_dup3+0x690/0x690 [ 2492.797612] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2492.802200] ? kasan_check_write+0x14/0x20 [ 2492.806433] ? do_raw_spin_lock+0xc1/0x200 [ 2492.810671] block_ioctl+0xee/0x130 [ 2492.814299] ? blkdev_fallocate+0x400/0x400 [ 2492.818619] do_vfs_ioctl+0x1de/0x1720 [ 2492.822512] ? ioctl_preallocate+0x300/0x300 [ 2492.826918] ? __fget_light+0x2f7/0x440 [ 2492.830890] ? fget_raw+0x20/0x20 [ 2492.834348] ? trace_hardirqs_on+0xd/0x10 [ 2492.838498] ? kmem_cache_free+0x22e/0x2d0 [ 2492.842733] ? putname+0xf7/0x130 [ 2492.846188] ? do_sys_open+0x3cb/0x720 [ 2492.850085] ? security_file_ioctl+0x94/0xc0 [ 2492.854492] ksys_ioctl+0xa9/0xd0 [ 2492.857962] __x64_sys_ioctl+0x73/0xb0 [ 2492.861850] do_syscall_64+0x1b9/0x820 [ 2492.865737] ? finish_task_switch+0x1d3/0x870 [ 2492.870234] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2492.875163] ? syscall_return_slowpath+0x31d/0x5e0 [ 2492.880114] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2492.885140] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2492.890154] ? perf_trace_sys_enter+0xb10/0xb10 [ 2492.894821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2492.899674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2492.905298] RIP: 0033:0x455c97 [ 2492.908481] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2492.927817] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:32:58 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000001d) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:58 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174030404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2492.935545] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2492.942817] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2492.950083] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2492.957352] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2492.964618] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000010 [ 2492.975267] FAT-fs (loop6): bogus number of reserved sectors [ 2492.981193] FAT-fs (loop6): Can't find a valid FAT filesystem 08:32:58 executing program 6 (fault-call:1 fault-nth:17): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2493.001387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2493.002275] FAT-fs (loop4): bogus number of reserved sectors [ 2493.013828] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2493.016637] FAT-fs (loop2): bogus number of FAT structure [ 2493.025364] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2493.029731] FAT-fs (loop7): bogus logical sector size 1027 [ 2493.036989] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2493.037297] FAT-fs (loop5): bogus number of reserved sectors [ 2493.048731] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2493.065478] FAT-fs (loop7): bogus logical sector size 1027 [ 2493.071244] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2493.091764] FAULT_INJECTION: forcing a failure. [ 2493.091764] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.103117] CPU: 0 PID: 30003 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2493.111548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.120925] Call Trace: [ 2493.123546] dump_stack+0x1c9/0x2b4 [ 2493.127206] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2493.132432] ? perf_trace_lock+0x49d/0x920 [ 2493.136709] should_fail.cold.4+0xa/0x11 [ 2493.140808] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2493.145977] ? save_stack+0xa9/0xd0 [ 2493.149645] ? kasan_kmalloc+0xc4/0xe0 [ 2493.153563] ? kmem_cache_alloc_trace+0x152/0x780 [ 2493.158423] ? kobject_uevent_env+0x20f/0x1110 [ 2493.163534] ? kobject_uevent+0x1f/0x30 [ 2493.167519] ? lo_ioctl+0x1385/0x1d70 [ 2493.171327] ? blkdev_ioctl+0x9cd/0x2030 [ 2493.175394] ? block_ioctl+0xee/0x130 [ 2493.179216] ? ksys_ioctl+0xa9/0xd0 [ 2493.182856] ? __x64_sys_ioctl+0x73/0xb0 [ 2493.186949] ? do_syscall_64+0x1b9/0x820 [ 2493.191025] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2493.196406] ? kasan_check_write+0x14/0x20 [ 2493.200665] ? lock_acquire+0x1e4/0x540 [ 2493.204651] ? fs_reclaim_acquire+0x20/0x20 [ 2493.208985] ? lock_downgrade+0x8f0/0x8f0 [ 2493.213156] ? check_same_owner+0x340/0x340 [ 2493.217494] ? lock_release+0xa30/0xa30 [ 2493.221478] ? rcu_note_context_switch+0x730/0x730 [ 2493.226427] __should_failslab+0x124/0x180 [ 2493.230693] should_failslab+0x9/0x14 [ 2493.234520] __kmalloc+0x2c8/0x760 [ 2493.238096] ? kobject_get_path+0xc2/0x1a0 [ 2493.242559] kobject_get_path+0xc2/0x1a0 [ 2493.246657] kobject_uevent_env+0x234/0x1110 [ 2493.251093] ? internal_create_group+0x39a/0x9e0 [ 2493.255899] kobject_uevent+0x1f/0x30 [ 2493.259720] lo_ioctl+0x1385/0x1d70 [ 2493.263375] ? lo_rw_aio_complete+0x450/0x450 [ 2493.267882] blkdev_ioctl+0x9cd/0x2030 [ 2493.271792] ? lock_acquire+0x1e4/0x540 [ 2493.275766] ? blkpg_ioctl+0xc40/0xc40 [ 2493.279656] ? lock_release+0xa30/0xa30 [ 2493.283666] ? save_stack+0xa9/0xd0 [ 2493.287286] ? save_stack+0x43/0xd0 [ 2493.290910] ? __fget+0x4d5/0x740 [ 2493.294359] ? ksys_dup3+0x690/0x690 [ 2493.298063] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2493.302641] ? kasan_check_write+0x14/0x20 [ 2493.306879] ? do_raw_spin_lock+0xc1/0x200 [ 2493.311132] block_ioctl+0xee/0x130 [ 2493.314751] ? blkdev_fallocate+0x400/0x400 [ 2493.319064] do_vfs_ioctl+0x1de/0x1720 [ 2493.322960] ? ioctl_preallocate+0x300/0x300 [ 2493.327385] ? __fget_light+0x2f7/0x440 [ 2493.331351] ? fget_raw+0x20/0x20 [ 2493.334797] ? trace_hardirqs_on+0xd/0x10 [ 2493.338935] ? kmem_cache_free+0x22e/0x2d0 [ 2493.343165] ? putname+0xf7/0x130 [ 2493.346612] ? do_sys_open+0x3cb/0x720 [ 2493.350495] ? security_file_ioctl+0x94/0xc0 [ 2493.354896] ksys_ioctl+0xa9/0xd0 [ 2493.358354] __x64_sys_ioctl+0x73/0xb0 [ 2493.362252] do_syscall_64+0x1b9/0x820 [ 2493.366131] ? finish_task_switch+0x1d3/0x870 [ 2493.370618] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2493.375543] ? syscall_return_slowpath+0x31d/0x5e0 [ 2493.380463] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2493.385904] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2493.390910] ? perf_trace_sys_enter+0xb10/0xb10 [ 2493.395574] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2493.400417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2493.405594] RIP: 0033:0x455c97 [ 2493.408769] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2493.428164] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2493.435876] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2493.443145] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 08:32:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:58 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a03000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x8100}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7a00}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2493.450403] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2493.457746] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2493.465005] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000011 [ 2493.479192] FAT-fs (loop6): bogus number of reserved sectors [ 2493.485203] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2493.485358] FAT-fs (loop5): bogus number of reserved sectors [ 2493.495980] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:32:58 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174050404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2493.497061] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2493.532943] FAT-fs (loop7): bogus logical sector size 1029 [ 2493.538811] FAT-fs (loop7): Can't find a valid FAT filesystem 08:32:59 executing program 6 (fault-call:1 fault-nth:18): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2493.548825] FAT-fs (loop5): bogus number of reserved sectors [ 2493.554819] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2493.565508] FAT-fs (loop4): bogus number of reserved sectors [ 2493.571399] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2493.586420] FAULT_INJECTION: forcing a failure. [ 2493.586420] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.597787] CPU: 1 PID: 30026 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2493.606197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.615544] Call Trace: [ 2493.618127] dump_stack+0x1c9/0x2b4 [ 2493.621745] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2493.626936] ? perf_trace_lock+0xde/0x920 [ 2493.631089] should_fail.cold.4+0xa/0x11 [ 2493.635158] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2493.640267] ? lock_acquire+0x1e4/0x540 [ 2493.644267] ? trace_hardirqs_on+0x10/0x10 [ 2493.648524] ? lock_release+0xa30/0xa30 [ 2493.652513] ? check_same_owner+0x340/0x340 [ 2493.656871] ? lock_acquire+0x1e4/0x540 [ 2493.660854] ? fs_reclaim_acquire+0x20/0x20 [ 2493.665173] ? lock_downgrade+0x8f0/0x8f0 [ 2493.669323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2493.674872] ? check_same_owner+0x340/0x340 [ 2493.679193] ? number+0x967/0xc90 [ 2493.682635] ? rcu_note_context_switch+0x730/0x730 [ 2493.687566] __should_failslab+0x124/0x180 [ 2493.691812] should_failslab+0x9/0x14 [ 2493.695606] kmem_cache_alloc_node+0x272/0x780 [ 2493.700182] ? set_precision+0xe0/0xe0 08:32:59 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_open_pts(r0, 0x40) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000140)) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) sysinfo(&(0x7f00000002c0)=""/172) 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x4}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:32:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a06000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2493.704066] __alloc_skb+0x119/0x790 [ 2493.707878] ? skb_scrub_packet+0x490/0x490 [ 2493.712219] ? lock_release+0xa30/0xa30 [ 2493.716204] ? pointer+0x990/0x990 [ 2493.719848] ? device_get_devnode+0x2e0/0x2e0 [ 2493.724358] ? kasan_unpoison_shadow+0x35/0x50 [ 2493.728962] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2493.734000] ? netlink_has_listeners+0x2cf/0x4a0 [ 2493.738776] ? netlink_tap_init_net+0x3e0/0x3e0 [ 2493.743467] alloc_uevent_skb+0x89/0x220 [ 2493.747560] kobject_uevent_env+0x866/0x1110 [ 2493.751989] ? internal_create_group+0x39a/0x9e0 [ 2493.756766] kobject_uevent+0x1f/0x30 [ 2493.760589] lo_ioctl+0x1385/0x1d70 [ 2493.764231] ? lo_rw_aio_complete+0x450/0x450 [ 2493.765799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2493.768754] blkdev_ioctl+0x9cd/0x2030 [ 2493.768772] ? lock_acquire+0x1e4/0x540 [ 2493.768785] ? blkpg_ioctl+0xc40/0xc40 [ 2493.768801] ? lock_release+0xa30/0xa30 [ 2493.790973] ? save_stack+0xa9/0xd0 [ 2493.794610] ? save_stack+0x43/0xd0 [ 2493.798247] ? __fget+0x4d5/0x740 08:32:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x500}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2493.801705] ? ksys_dup3+0x690/0x690 [ 2493.805420] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2493.810019] ? kasan_check_write+0x14/0x20 [ 2493.814268] ? do_raw_spin_lock+0xc1/0x200 [ 2493.818521] block_ioctl+0xee/0x130 [ 2493.822163] ? blkdev_fallocate+0x400/0x400 [ 2493.826499] do_vfs_ioctl+0x1de/0x1720 [ 2493.830414] ? ioctl_preallocate+0x300/0x300 [ 2493.834833] ? __fget_light+0x2f7/0x440 [ 2493.838824] ? fget_raw+0x20/0x20 [ 2493.842292] ? trace_hardirqs_on+0xd/0x10 [ 2493.846454] ? kmem_cache_free+0x22e/0x2d0 [ 2493.850702] ? putname+0xf7/0x130 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2493.854168] ? do_sys_open+0x3cb/0x720 [ 2493.855916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2493.858063] ? security_file_ioctl+0x94/0xc0 [ 2493.858081] ksys_ioctl+0xa9/0xd0 [ 2493.858098] __x64_sys_ioctl+0x73/0xb0 [ 2493.858115] do_syscall_64+0x1b9/0x820 [ 2493.858131] ? syscall_slow_exit_work+0x500/0x500 [ 2493.885041] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2493.889987] ? syscall_return_slowpath+0x31d/0x5e0 [ 2493.894930] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2493.899963] ? perf_trace_sys_enter+0xb10/0xb10 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2493.904651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2493.909514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2493.913387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2493.914704] RIP: 0033:0x455c97 [ 2493.914708] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2493.943678] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2493.951404] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2493.958715] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2493.966002] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2493.970054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2493.973280] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2493.973289] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000012 [ 2493.979126] FAT-fs (loop7): bogus logical sector size 1029 [ 2493.989418] FAT-fs (loop4): bogus number of reserved sectors [ 2493.996419] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2494.012674] FAT-fs (loop6): bogus number of reserved sectors [ 2494.013863] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2494.025676] FAT-fs (loop6): Can't find a valid FAT filesystem 08:32:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000ed) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:32:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x3f00}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:32:59 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010902000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:59 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174800304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:32:59 executing program 6 (fault-call:1 fault-nth:19): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x4000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2494.071409] FAT-fs (loop4): bogus number of reserved sectors [ 2494.077318] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2494.110608] FAT-fs (loop5): bogus number of reserved sectors 08:32:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xffffffffffffff7f}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2494.116586] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2494.128130] FAULT_INJECTION: forcing a failure. [ 2494.128130] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.139472] CPU: 1 PID: 30063 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2494.147906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2494.158152] Call Trace: [ 2494.160737] dump_stack+0x1c9/0x2b4 [ 2494.164371] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2494.169578] ? lock_acquire+0x1e4/0x540 [ 2494.173559] ? perf_trace_lock+0xde/0x920 [ 2494.177717] should_fail.cold.4+0xa/0x11 [ 2494.181792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2494.186989] ? rcu_is_watching+0x8c/0x150 [ 2494.191141] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2494.195828] ? is_bpf_text_address+0xd7/0x170 [ 2494.200333] ? __kernel_text_address+0xd/0x40 [ 2494.204837] ? perf_trace_lock+0xde/0x920 [ 2494.208997] ? __save_stack_trace+0x8d/0xf0 [ 2494.213322] ? lock_acquire+0x1e4/0x540 [ 2494.217292] ? fs_reclaim_acquire+0x20/0x20 [ 2494.221608] ? lock_downgrade+0x8f0/0x8f0 [ 2494.225758] ? save_stack+0xa9/0xd0 [ 2494.229393] ? __kmalloc_reserve.isra.41+0x3a/0xe0 [ 2494.234324] ? check_same_owner+0x340/0x340 [ 2494.238848] ? blkdev_ioctl+0x9cd/0x2030 [ 2494.242914] ? block_ioctl+0xee/0x130 [ 2494.246843] ? rcu_note_context_switch+0x730/0x730 [ 2494.251774] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2494.257146] __should_failslab+0x124/0x180 [ 2494.261386] should_failslab+0x9/0x14 [ 2494.265362] kmem_cache_alloc+0x2af/0x760 [ 2494.269506] ? lock_acquire+0x1e4/0x540 [ 2494.273478] skb_clone+0x1f5/0x500 [ 2494.277033] ? refcount_add_not_zero+0x290/0x330 [ 2494.281799] ? skb_split+0x11f0/0x11f0 [ 2494.285692] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2494.290705] ? netlink_trim+0x1ba/0x380 [ 2494.294674] ? netlink_skb_destructor+0x210/0x210 [ 2494.299508] netlink_broadcast_filtered+0x10b7/0x1620 [ 2494.304698] ? __netlink_sendskb+0xd0/0xd0 [ 2494.308931] ? pointer+0x990/0x990 [ 2494.312486] ? device_get_devnode+0x2e0/0x2e0 [ 2494.316995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2494.322567] ? refcount_inc_not_zero+0x1e5/0x2f0 [ 2494.327319] ? refcount_add_not_zero+0x330/0x330 [ 2494.332078] ? netlink_has_listeners+0x2cf/0x4a0 [ 2494.336847] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2494.341867] netlink_broadcast+0x3a/0x50 [ 2494.345929] kobject_uevent_env+0x829/0x1110 [ 2494.350587] ? internal_create_group+0x39a/0x9e0 [ 2494.355349] kobject_uevent+0x1f/0x30 [ 2494.359138] lo_ioctl+0x1385/0x1d70 [ 2494.362769] ? lo_rw_aio_complete+0x450/0x450 [ 2494.367262] blkdev_ioctl+0x9cd/0x2030 [ 2494.371151] ? lock_acquire+0x1e4/0x540 [ 2494.375121] ? blkpg_ioctl+0xc40/0xc40 [ 2494.379008] ? lock_release+0xa30/0xa30 [ 2494.382986] ? save_stack+0xa9/0xd0 [ 2494.386602] ? save_stack+0x43/0xd0 [ 2494.390220] ? __fget+0x4d5/0x740 [ 2494.393663] ? ksys_dup3+0x690/0x690 [ 2494.397364] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2494.401938] ? kasan_check_write+0x14/0x20 [ 2494.406169] ? do_raw_spin_lock+0xc1/0x200 [ 2494.410403] block_ioctl+0xee/0x130 [ 2494.414027] ? blkdev_fallocate+0x400/0x400 [ 2494.418343] do_vfs_ioctl+0x1de/0x1720 [ 2494.422405] ? ioctl_preallocate+0x300/0x300 [ 2494.426871] ? __fget_light+0x2f7/0x440 [ 2494.430840] ? fget_raw+0x20/0x20 [ 2494.434286] ? trace_hardirqs_on+0xd/0x10 [ 2494.438440] ? kmem_cache_free+0x22e/0x2d0 [ 2494.442682] ? putname+0xf7/0x130 [ 2494.446145] ? do_sys_open+0x3cb/0x720 [ 2494.450030] ? security_file_ioctl+0x94/0xc0 [ 2494.454443] ksys_ioctl+0xa9/0xd0 [ 2494.457895] __x64_sys_ioctl+0x73/0xb0 [ 2494.461782] do_syscall_64+0x1b9/0x820 [ 2494.465660] ? finish_task_switch+0x1d3/0x870 [ 2494.470159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2494.475081] ? syscall_return_slowpath+0x31d/0x5e0 [ 2494.480023] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2494.485047] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2494.490057] ? perf_trace_sys_enter+0xb10/0xb10 [ 2494.494720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2494.499568] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2494.504749] RIP: 0033:0x455c97 [ 2494.507925] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2494.527215] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2494.534921] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2494.542188] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2494.549477] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2494.556765] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2494.564034] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000013 [ 2494.578519] FAT-fs (loop6): bogus number of reserved sectors [ 2494.581165] FAT-fs (loop4): bogus number of reserved sectors [ 2494.584472] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2494.590286] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2494.602792] FAT-fs (loop7): bogus logical sector size 896 [ 2494.604930] FAT-fs (loop5): bogus number of reserved sectors [ 2494.608442] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2494.614201] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404011402000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2494.617696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:00 executing program 6 (fault-call:1 fault-nth:20): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2494.672818] FAT-fs (loop4): bogus number of reserved sectors [ 2494.678773] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2494.697260] FAT-fs (loop7): bogus logical sector size 896 [ 2494.702969] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:00 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r5, 0x6, 0x10, 0x101, 0x6}, &(0x7f0000000300)=0x18) 08:33:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x2000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xaa040000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x600000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:00 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174a80204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2494.788597] FAT-fs (loop5): bogus number of reserved sectors [ 2494.791242] FAULT_INJECTION: forcing a failure. [ 2494.791242] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.794571] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2494.805786] CPU: 0 PID: 30094 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2494.820075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2494.829470] Call Trace: [ 2494.832089] dump_stack+0x1c9/0x2b4 [ 2494.835763] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2494.840996] ? perf_trace_lock+0x49d/0x920 [ 2494.841921] FAT-fs (loop4): bogus number of reserved sectors [ 2494.845269] should_fail.cold.4+0xa/0x11 [ 2494.845298] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2494.845317] ? blkpg_ioctl+0xc40/0xc40 [ 2494.845350] ? save_stack+0xa9/0xd0 [ 2494.851170] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2494.855186] ? save_stack+0x43/0xd0 [ 2494.855208] ? __fget+0x4d5/0x740 [ 2494.855235] ? lock_acquire+0x1e4/0x540 08:33:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a08000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2494.864872] FAT-fs (loop7): bogus logical sector size 680 [ 2494.867814] ? fs_reclaim_acquire+0x20/0x20 [ 2494.867835] ? lock_downgrade+0x8f0/0x8f0 [ 2494.867863] ? check_same_owner+0x340/0x340 [ 2494.867879] ? block_ioctl+0xee/0x130 [ 2494.867898] ? rcu_note_context_switch+0x730/0x730 [ 2494.873792] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2494.877406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2494.877429] __should_failslab+0x124/0x180 [ 2494.877450] should_failslab+0x9/0x14 [ 2494.891935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xfffff000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2494.894729] kmem_cache_alloc+0x2af/0x760 [ 2494.894749] ? fget_raw+0x20/0x20 [ 2494.894776] getname_flags+0xd0/0x5a0 [ 2494.894798] do_mkdirat+0xc5/0x310 [ 2494.894824] ? __ia32_sys_mknod+0xb0/0xb0 [ 2494.894839] ? fput+0x130/0x1a0 [ 2494.894856] ? ksys_ioctl+0x81/0xd0 [ 2494.894876] __x64_sys_mkdir+0x5c/0x80 [ 2494.894895] do_syscall_64+0x1b9/0x820 [ 2494.894908] ? syscall_slow_exit_work+0x500/0x500 [ 2494.894927] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2494.894942] ? syscall_return_slowpath+0x31d/0x5e0 [ 2494.894967] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2494.894986] ? perf_trace_sys_enter+0xb10/0xb10 [ 2494.895006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2494.895036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2494.895049] RIP: 0033:0x455267 [ 2494.895055] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2495.029702] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2495.037452] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2495.037603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2495.044729] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2495.044738] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2495.044747] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2495.044757] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000014 [ 2495.103072] FAT-fs (loop7): bogus logical sector size 680 [ 2495.108874] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2495.120487] FAT-fs (loop5): bogus number of reserved sectors [ 2495.126373] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2495.147070] FAT-fs (loop4): bogus number of reserved sectors 08:33:00 executing program 6 (fault-call:1 fault-nth:21): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000122) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x9effffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2495.153113] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:00 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174450004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfcfdffff}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2495.199568] FAULT_INJECTION: forcing a failure. [ 2495.199568] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.211009] CPU: 0 PID: 30122 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2495.219441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2495.228816] Call Trace: [ 2495.231434] dump_stack+0x1c9/0x2b4 [ 2495.235098] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2495.240324] ? perf_trace_lock+0x49d/0x920 [ 2495.244605] should_fail.cold.4+0xa/0x11 08:33:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xc}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2495.248709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2495.253847] ? lock_repin_lock+0x430/0x430 [ 2495.258121] ? kasan_check_write+0x14/0x20 [ 2495.262405] ? __schedule+0x884/0x1ed0 [ 2495.266343] ? __sched_text_start+0x8/0x8 [ 2495.270525] ? __fget+0x4d5/0x740 [ 2495.271108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2495.274020] ? lock_acquire+0x1e4/0x540 [ 2495.274041] ? fs_reclaim_acquire+0x20/0x20 [ 2495.274062] ? lock_downgrade+0x8f0/0x8f0 [ 2495.274094] ? check_same_owner+0x340/0x340 08:33:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a09000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2495.274110] ? block_ioctl+0xee/0x130 [ 2495.274128] ? rcu_note_context_switch+0x730/0x730 [ 2495.274150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2495.274172] __should_failslab+0x124/0x180 [ 2495.274193] should_failslab+0x9/0x14 [ 2495.274212] kmem_cache_alloc+0x2af/0x760 [ 2495.274229] ? __schedule+0x1ed0/0x1ed0 [ 2495.274249] ? fget_raw+0x20/0x20 [ 2495.274277] getname_flags+0xd0/0x5a0 [ 2495.317322] FAT-fs (loop7): bogus logical sector size 69 [ 2495.319850] do_mkdirat+0xc5/0x310 [ 2495.319877] ? __ia32_sys_mknod+0xb0/0xb0 [ 2495.319902] ? syscall_slow_exit_work+0x500/0x500 [ 2495.324074] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2495.328011] ? ksys_ioctl+0x81/0xd0 [ 2495.328037] __x64_sys_mkdir+0x5c/0x80 [ 2495.328059] do_syscall_64+0x1b9/0x820 [ 2495.356649] FAT-fs (loop5): invalid media value (0x61) [ 2495.359139] ? finish_task_switch+0x1d3/0x870 [ 2495.359164] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2495.359181] ? syscall_return_slowpath+0x31d/0x5e0 [ 2495.359203] ? prepare_exit_to_usermode+0x3b0/0x3b0 08:33:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xc0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2495.362860] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2495.366746] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2495.366764] ? perf_trace_sys_enter+0xb10/0xb10 [ 2495.366785] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2495.374076] FAT-fs (loop4): bogus number of reserved sectors [ 2495.375990] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2495.376005] RIP: 0033:0x455267 [ 2495.376011] Code: 1f 40 00 b8 5a 00 [ 2495.380563] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2495.385471] 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2495.457389] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2495.463500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2495.465119] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2495.465131] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2495.465142] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2495.465153] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2495.465164] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000015 [ 2495.532375] FAT-fs (loop7): bogus logical sector size 69 [ 2495.537951] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2495.546858] FAT-fs (loop5): invalid media value (0x61) [ 2495.552228] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2495.558614] FAT-fs (loop4): bogus number of reserved sectors [ 2495.564480] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:01 executing program 6 (fault-call:1 fault-nth:22): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2495.666381] FAULT_INJECTION: forcing a failure. [ 2495.666381] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.677737] CPU: 1 PID: 30151 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2495.686139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2495.695488] Call Trace: [ 2495.698082] dump_stack+0x1c9/0x2b4 [ 2495.701727] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2495.706939] ? lock_acquire+0x1e4/0x540 [ 2495.710932] ? perf_trace_lock+0xde/0x920 [ 2495.715099] should_fail.cold.4+0xa/0x11 [ 2495.719187] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2495.724309] ? rcu_is_watching+0x8c/0x150 [ 2495.728475] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2495.733158] ? is_bpf_text_address+0xd7/0x170 [ 2495.737662] ? __kernel_text_address+0xd/0x40 [ 2495.742162] ? perf_trace_lock+0xde/0x920 [ 2495.746313] ? __save_stack_trace+0x8d/0xf0 [ 2495.750646] ? lock_acquire+0x1e4/0x540 [ 2495.754623] ? fs_reclaim_acquire+0x20/0x20 [ 2495.758945] ? lock_downgrade+0x8f0/0x8f0 [ 2495.763092] ? save_stack+0xa9/0xd0 [ 2495.766783] ? __kmalloc_reserve.isra.41+0x3a/0xe0 [ 2495.771719] ? check_same_owner+0x340/0x340 [ 2495.776043] ? blkdev_ioctl+0x9cd/0x2030 [ 2495.780111] ? block_ioctl+0xee/0x130 [ 2495.783914] ? rcu_note_context_switch+0x730/0x730 [ 2495.788856] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2495.794231] __should_failslab+0x124/0x180 [ 2495.798469] should_failslab+0x9/0x14 [ 2495.802272] kmem_cache_alloc+0x2af/0x760 [ 2495.806425] ? lock_acquire+0x1e4/0x540 [ 2495.810405] skb_clone+0x1f5/0x500 [ 2495.813951] ? refcount_add_not_zero+0x290/0x330 [ 2495.818706] ? skb_split+0x11f0/0x11f0 [ 2495.822596] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2495.827623] ? netlink_trim+0x1ba/0x380 [ 2495.831597] ? netlink_skb_destructor+0x210/0x210 [ 2495.836460] netlink_broadcast_filtered+0x10b7/0x1620 [ 2495.841676] ? __netlink_sendskb+0xd0/0xd0 [ 2495.845920] ? pointer+0x990/0x990 [ 2495.849467] ? device_get_devnode+0x2e0/0x2e0 [ 2495.853986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2495.859534] ? refcount_inc_not_zero+0x1e5/0x2f0 [ 2495.864279] ? refcount_add_not_zero+0x330/0x330 [ 2495.869026] ? netlink_has_listeners+0x2cf/0x4a0 [ 2495.873775] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2495.878781] netlink_broadcast+0x3a/0x50 [ 2495.882836] kobject_uevent_env+0x829/0x1110 [ 2495.887230] ? internal_create_group+0x39a/0x9e0 [ 2495.891976] kobject_uevent+0x1f/0x30 [ 2495.895765] lo_ioctl+0x1385/0x1d70 [ 2495.899384] ? lo_rw_aio_complete+0x450/0x450 [ 2495.903862] blkdev_ioctl+0x9cd/0x2030 [ 2495.907743] ? lock_acquire+0x1e4/0x540 [ 2495.911697] ? blkpg_ioctl+0xc40/0xc40 [ 2495.915576] ? lock_release+0xa30/0xa30 [ 2495.919537] ? save_stack+0xa9/0xd0 [ 2495.923144] ? save_stack+0x43/0xd0 [ 2495.926756] ? __fget+0x4d5/0x740 [ 2495.930189] ? ksys_dup3+0x690/0x690 [ 2495.933886] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2495.938454] ? kasan_check_write+0x14/0x20 [ 2495.942680] ? do_raw_spin_lock+0xc1/0x200 [ 2495.946899] block_ioctl+0xee/0x130 [ 2495.950515] ? blkdev_fallocate+0x400/0x400 [ 2495.954829] do_vfs_ioctl+0x1de/0x1720 [ 2495.958700] ? ioctl_preallocate+0x300/0x300 [ 2495.963090] ? __fget_light+0x2f7/0x440 [ 2495.967045] ? fget_raw+0x20/0x20 [ 2495.970482] ? trace_hardirqs_on+0xd/0x10 [ 2495.974609] ? kmem_cache_free+0x22e/0x2d0 [ 2495.978827] ? putname+0xf7/0x130 [ 2495.982272] ? do_sys_open+0x3cb/0x720 [ 2495.986144] ? security_file_ioctl+0x94/0xc0 [ 2495.990532] ksys_ioctl+0xa9/0xd0 [ 2495.993977] __x64_sys_ioctl+0x73/0xb0 [ 2495.997859] do_syscall_64+0x1b9/0x820 [ 2496.001736] ? finish_task_switch+0x1d3/0x870 [ 2496.006227] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2496.011139] ? syscall_return_slowpath+0x31d/0x5e0 08:33:01 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getpeername$inet(r0, &(0x7f0000000240)={0x0, 0x0, @dev}, &(0x7f00000002c0)=0x10) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mkdirat(r0, &(0x7f0000000140)='./file0/file0\x00', 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:01 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174c00304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a07000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xfcfdffff00000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc4270000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2496.016058] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2496.021079] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2496.026112] ? perf_trace_sys_enter+0xb10/0xb10 [ 2496.030796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2496.035658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2496.040870] RIP: 0033:0x455c97 [ 2496.044070] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2496.063392] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2496.071119] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455c97 [ 2496.078404] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000016 [ 2496.084788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2496.085677] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2496.085687] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2496.085696] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000016 [ 2496.102255] FAT-fs (loop7): bogus logical sector size 960 [ 2496.111753] FAT-fs (loop5): bogus number of reserved sectors [ 2496.115033] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2496.118468] FAT-fs (loop6): bogus number of reserved sectors [ 2496.120764] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2496.144427] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2496.156007] FAT-fs (loop4): bogus number of reserved sectors [ 2496.161963] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0xf0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:01 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010502000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2496.174111] FAT-fs (loop7): bogus logical sector size 960 [ 2496.179852] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2496.187106] FAT-fs (loop5): bogus number of reserved sectors [ 2496.193068] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2496.204125] FAT-fs (loop4): bogus number of reserved sectors [ 2496.210041] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000009c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:01 executing program 6 (fault-call:1 fault-nth:23): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:01 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174c00204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x2000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x32030000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2496.275590] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2496.288328] FAT-fs (loop7): bogus logical sector size 704 [ 2496.293983] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2496.300323] FAULT_INJECTION: forcing a failure. [ 2496.300323] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2496.312160] CPU: 1 PID: 30187 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2496.320562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.330004] Call Trace: [ 2496.332609] dump_stack+0x1c9/0x2b4 [ 2496.336240] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2496.341435] ? trace_hardirqs_off+0xd/0x10 [ 2496.345677] should_fail.cold.4+0xa/0x11 [ 2496.349745] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2496.354851] ? trace_hardirqs_off+0xd/0x10 [ 2496.359088] ? wait_for_completion+0x8d0/0x8d0 [ 2496.363673] ? __kasan_slab_free+0x131/0x170 [ 2496.368089] ? trace_hardirqs_on+0x10/0x10 [ 2496.372327] ? kobject_uevent_env+0x288/0x1110 [ 2496.376911] ? internal_create_group+0x39a/0x9e0 [ 2496.381676] ? mutex_unlock+0xd/0x10 [ 2496.385391] ? lo_ioctl+0xe6/0x1d70 [ 2496.389017] ? perf_trace_lock+0xde/0x920 [ 2496.393170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2496.398708] ? should_fail+0x246/0xd86 [ 2496.402595] ? zap_class+0x740/0x740 [ 2496.406313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2496.411420] ? blkpg_ioctl+0xc40/0xc40 [ 2496.415315] __alloc_pages_nodemask+0x36e/0xdb0 [ 2496.419997] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2496.425018] ? save_stack+0xa9/0xd0 [ 2496.428650] ? save_stack+0x43/0xd0 [ 2496.432276] ? __fget+0x4d5/0x740 [ 2496.435740] ? lock_acquire+0x1e4/0x540 [ 2496.439743] ? fs_reclaim_acquire+0x20/0x20 [ 2496.444071] ? lock_downgrade+0x8f0/0x8f0 [ 2496.448221] ? lock_release+0xa30/0xa30 [ 2496.452215] ? check_same_owner+0x340/0x340 [ 2496.456543] cache_grow_begin+0x91/0x710 [ 2496.460611] kmem_cache_alloc+0x689/0x760 [ 2496.464760] ? fget_raw+0x20/0x20 [ 2496.468219] getname_flags+0xd0/0x5a0 [ 2496.472022] do_mkdirat+0xc5/0x310 [ 2496.475567] ? __ia32_sys_mknod+0xb0/0xb0 [ 2496.479718] ? fput+0x130/0x1a0 [ 2496.482996] ? ksys_ioctl+0x81/0xd0 [ 2496.486625] __x64_sys_mkdir+0x5c/0x80 [ 2496.490601] do_syscall_64+0x1b9/0x820 [ 2496.494492] ? finish_task_switch+0x1d3/0x870 [ 2496.498988] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2496.503919] ? syscall_return_slowpath+0x31d/0x5e0 [ 2496.508851] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2496.513867] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2496.518887] ? perf_trace_sys_enter+0xb10/0xb10 [ 2496.523559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2496.528408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2496.533597] RIP: 0033:0x455267 [ 2496.536776] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2496.556094] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2496.563803] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2496.571074] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2496.578344] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2496.585609] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2496.592876] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000017 [ 2496.616539] FAT-fs (loop6): bogus number of reserved sectors 08:33:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010702000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2496.623084] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2496.631526] FAT-fs (loop5): bogus number of reserved sectors [ 2496.637448] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2496.645174] FAT-fs (loop7): bogus logical sector size 704 [ 2496.651000] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2496.661487] FAT-fs (loop4): bogus number of reserved sectors [ 2496.663989] FAT-fs (loop5): bogus number of reserved sectors 08:33:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:02 executing program 6 (fault-call:1 fault-nth:24): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2496.667476] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2496.673217] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2496.718339] FAT-fs (loop4): bogus number of reserved sectors [ 2496.724288] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2496.752823] FAULT_INJECTION: forcing a failure. [ 2496.752823] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.764127] CPU: 1 PID: 30213 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2496.772537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.781917] Call Trace: [ 2496.784514] dump_stack+0x1c9/0x2b4 [ 2496.788148] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2496.793348] ? rcu_note_context_switch+0x730/0x730 [ 2496.798284] ? kasan_check_write+0x14/0x20 [ 2496.802554] should_fail.cold.4+0xa/0x11 [ 2496.806638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2496.811745] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2496.817109] ? trace_hardirqs_on+0x10/0x10 [ 2496.821350] ? __find_get_block+0xe60/0xe60 [ 2496.825669] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 2496.830338] ? mem_cgroup_handle_over_high+0x130/0x130 [ 2496.835659] ? perf_trace_lock+0xde/0x920 [ 2496.839810] ? perf_trace_lock+0xde/0x920 [ 2496.843963] ? __lockdep_init_map+0x105/0x590 [ 2496.848462] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2496.853485] ? ext4_get_group_desc+0x1cd/0x2d0 [ 2496.858074] ? check_same_owner+0x340/0x340 [ 2496.862415] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2496.867435] ? rcu_note_context_switch+0x730/0x730 [ 2496.872382] __should_failslab+0x124/0x180 [ 2496.876620] should_failslab+0x9/0x14 [ 2496.880425] kmem_cache_alloc+0x2af/0x760 [ 2496.884578] ? ext4fs_dirhash+0x1090/0x1090 [ 2496.888906] jbd2__journal_start+0x1e7/0xa80 [ 2496.893326] ? jbd2_write_access_granted.part.9+0x430/0x430 [ 2496.899035] ? rcu_note_context_switch+0x730/0x730 [ 2496.903967] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2496.909509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2496.915048] __ext4_journal_start_sb+0x182/0x600 [ 2496.919805] ? __ext4_new_inode+0x388f/0x6620 [ 2496.924306] ? ext4_journal_abort_handle.isra.5+0x260/0x260 [ 2496.930015] ? find_next_zero_bit+0x111/0x140 [ 2496.934511] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2496.939535] ? find_inode_bit.isra.17+0x36f/0x510 [ 2496.944384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2496.949949] __ext4_new_inode+0x388f/0x6620 [ 2496.954314] ? ext4_free_inode+0x1aa0/0x1aa0 [ 2496.958735] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2496.963763] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2496.968534] ? lock_acquire+0x1e4/0x540 [ 2496.972510] ? is_bpf_text_address+0xae/0x170 [ 2496.977004] ? lock_downgrade+0x8f0/0x8f0 [ 2496.981152] ? lock_release+0xa30/0xa30 [ 2496.985126] ? kasan_check_read+0x11/0x20 [ 2496.989280] ? rcu_is_watching+0x8c/0x150 [ 2496.993430] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2496.998096] ? zap_class+0x740/0x740 [ 2497.001809] ? is_bpf_text_address+0xd7/0x170 [ 2497.006306] ? kernel_text_address+0x79/0xf0 [ 2497.010813] ? __kernel_text_address+0xd/0x40 [ 2497.015310] ? unwind_get_return_address+0x61/0xa0 [ 2497.020241] ? __save_stack_trace+0x8d/0xf0 [ 2497.024571] ? save_stack+0xa9/0xd0 [ 2497.028196] ? save_stack+0x43/0xd0 [ 2497.031822] ? __kasan_slab_free+0x11a/0x170 [ 2497.036227] ? kasan_slab_free+0xe/0x10 [ 2497.040201] ? kmem_cache_free+0x86/0x2d0 [ 2497.044349] ? putname+0xf2/0x130 [ 2497.047799] ? filename_create+0x2b2/0x5b0 [ 2497.052030] ? do_mkdirat+0xda/0x310 [ 2497.055743] ? __x64_sys_mkdir+0x5c/0x80 [ 2497.059802] ? do_syscall_64+0x1b9/0x820 [ 2497.063861] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.069749] ? kasan_check_read+0x11/0x20 [ 2497.073910] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2497.078346] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2497.082941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.088490] ? __dquot_initialize+0x61d/0xde0 [ 2497.092993] ? do_raw_spin_lock+0xc1/0x200 [ 2497.097227] ? trace_hardirqs_off+0xd/0x10 [ 2497.101458] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2497.106558] ? dquot_get_next_dqblk+0x180/0x180 [ 2497.111224] ? debug_check_no_obj_freed+0x30b/0x595 [ 2497.116237] ? kasan_check_write+0x14/0x20 [ 2497.120481] ? trace_hardirqs_off+0xd/0x10 [ 2497.124718] ext4_mkdir+0x2e1/0xe60 [ 2497.128354] ? ext4_init_dot_dotdot+0x510/0x510 [ 2497.133025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.138563] ? security_inode_permission+0xd2/0x100 [ 2497.143582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.149131] ? security_inode_mkdir+0xe8/0x120 [ 2497.153715] vfs_mkdir+0x42e/0x6b0 [ 2497.157259] do_mkdirat+0x27b/0x310 [ 2497.160889] ? __ia32_sys_mknod+0xb0/0xb0 [ 2497.165037] ? ksys_ioctl+0x81/0xd0 [ 2497.168666] __x64_sys_mkdir+0x5c/0x80 [ 2497.172551] do_syscall_64+0x1b9/0x820 [ 2497.176437] ? finish_task_switch+0x1d3/0x870 [ 2497.180933] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2497.185858] ? syscall_return_slowpath+0x31d/0x5e0 [ 2497.190788] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2497.195818] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2497.200830] ? perf_trace_sys_enter+0xb10/0xb10 [ 2497.205500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2497.210350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.215533] RIP: 0033:0x455267 [ 2497.218712] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2497.238027] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2497.245732] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2497.252996] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2497.260263] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 08:33:02 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140), 0x0) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:02 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010202000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:02 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001f04010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x80000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2497.267527] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2497.274793] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000018 [ 2497.283271] EXT4-fs error (device sda1) in __ext4_new_inode:930: Out of memory 08:33:02 executing program 6 (fault-call:1 fault-nth:25): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x2300}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2497.320385] FAT-fs (loop7): bogus logical sector size 7936 [ 2497.323902] FAT-fs (loop5): bogus number of reserved sectors [ 2497.326167] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2497.331941] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2497.379078] FAT-fs (loop5): bogus number of reserved sectors [ 2497.384976] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2497.409185] FAT-fs (loop7): bogus logical sector size 7936 [ 2497.414985] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2497.446651] FAULT_INJECTION: forcing a failure. [ 2497.446651] name failslab, interval 1, probability 0, space 0, times 0 [ 2497.458099] CPU: 0 PID: 30240 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2497.466510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2497.475871] Call Trace: [ 2497.478476] dump_stack+0x1c9/0x2b4 [ 2497.482128] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2497.487342] ? rcu_note_context_switch+0x730/0x730 [ 2497.492294] ? kasan_check_write+0x14/0x20 [ 2497.496560] should_fail.cold.4+0xa/0x11 [ 2497.500638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2497.505757] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2497.510868] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 2497.515999] ? __find_get_block+0xe60/0xe60 [ 2497.520326] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 2497.525014] ? memset+0x31/0x40 [ 2497.528310] ? perf_trace_lock+0x49d/0x920 [ 2497.532557] ? perf_trace_lock+0x49d/0x920 [ 2497.536814] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2497.541296] FAT-fs (loop4): bogus number of reserved sectors [ 2497.541847] ? ext4_get_group_desc+0x1cd/0x2d0 [ 2497.547687] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2497.552227] ? check_same_owner+0x340/0x340 [ 2497.552250] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2497.552273] ? rcu_note_context_switch+0x730/0x730 [ 2497.572413] __should_failslab+0x124/0x180 [ 2497.576688] should_failslab+0x9/0x14 [ 2497.580512] kmem_cache_alloc+0x2af/0x760 [ 2497.584685] ? ext4fs_dirhash+0x1090/0x1090 [ 2497.589046] jbd2__journal_start+0x1e7/0xa80 08:33:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000072) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:03 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r2, 0x1, 0x6, @random="4c7502427893"}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404011002000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:03 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174006304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffe}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2497.593488] ? jbd2_write_access_granted.part.9+0x430/0x430 [ 2497.599223] ? rcu_note_context_switch+0x730/0x730 [ 2497.604184] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2497.609815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.615399] __ext4_journal_start_sb+0x182/0x600 [ 2497.620259] ? __ext4_new_inode+0x388f/0x6620 [ 2497.624783] ? ext4_journal_abort_handle.isra.5+0x260/0x260 [ 2497.630508] ? find_next_zero_bit+0x111/0x140 [ 2497.635025] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2497.640058] ? find_inode_bit.isra.17+0x36f/0x510 [ 2497.644912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.650475] __ext4_new_inode+0x388f/0x6620 [ 2497.655020] ? ext4_free_inode+0x1aa0/0x1aa0 [ 2497.659445] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2497.664475] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2497.669264] ? lock_acquire+0x1e4/0x540 [ 2497.673282] ? is_bpf_text_address+0xae/0x170 [ 2497.677827] ? lock_downgrade+0x8f0/0x8f0 [ 2497.681993] ? lock_release+0xa30/0xa30 [ 2497.685986] ? kasan_check_read+0x11/0x20 [ 2497.690147] ? rcu_is_watching+0x8c/0x150 [ 2497.694307] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2497.698987] ? zap_class+0x740/0x740 [ 2497.702723] ? is_bpf_text_address+0xd7/0x170 [ 2497.707236] ? kernel_text_address+0x79/0xf0 [ 2497.711661] ? __kernel_text_address+0xd/0x40 [ 2497.716171] ? unwind_get_return_address+0x61/0xa0 [ 2497.721113] ? __save_stack_trace+0x8d/0xf0 [ 2497.725468] ? save_stack+0xa9/0xd0 [ 2497.729108] ? save_stack+0x43/0xd0 [ 2497.732763] ? __kasan_slab_free+0x11a/0x170 [ 2497.737193] ? kasan_slab_free+0xe/0x10 [ 2497.741201] ? kmem_cache_free+0x86/0x2d0 [ 2497.745347] ? putname+0xf2/0x130 [ 2497.748804] ? filename_create+0x2b2/0x5b0 [ 2497.753038] ? do_mkdirat+0xda/0x310 [ 2497.756748] ? __x64_sys_mkdir+0x5c/0x80 [ 2497.760799] ? do_syscall_64+0x1b9/0x820 [ 2497.764854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.770226] ? kasan_check_read+0x11/0x20 [ 2497.774364] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2497.778763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2497.783337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.788864] ? __dquot_initialize+0x61d/0xde0 [ 2497.793350] ? do_raw_spin_lock+0xc1/0x200 [ 2497.797578] ? trace_hardirqs_off+0xd/0x10 [ 2497.801806] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 2497.806899] ? dquot_get_next_dqblk+0x180/0x180 [ 2497.811556] ? debug_check_no_obj_freed+0x30b/0x595 [ 2497.816561] ? kasan_check_write+0x14/0x20 [ 2497.820797] ? trace_hardirqs_off+0xd/0x10 [ 2497.825033] ext4_mkdir+0x2e1/0xe60 [ 2497.828667] ? ext4_init_dot_dotdot+0x510/0x510 [ 2497.833334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.838875] ? security_inode_permission+0xd2/0x100 [ 2497.843897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2497.850305] ? security_inode_mkdir+0xe8/0x120 [ 2497.854885] vfs_mkdir+0x42e/0x6b0 [ 2497.858419] do_mkdirat+0x27b/0x310 [ 2497.862042] ? __ia32_sys_mknod+0xb0/0xb0 [ 2497.866183] ? ksys_ioctl+0x81/0xd0 [ 2497.869805] __x64_sys_mkdir+0x5c/0x80 [ 2497.873707] do_syscall_64+0x1b9/0x820 [ 2497.877584] ? finish_task_switch+0x1d3/0x870 [ 2497.882082] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2497.887003] ? syscall_return_slowpath+0x31d/0x5e0 [ 2497.891929] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2497.896950] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2497.901958] ? perf_trace_sys_enter+0xb10/0xb10 [ 2497.906621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2497.911463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.916654] RIP: 0033:0x455267 [ 2497.919830] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2497.939237] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2497.946938] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2497.954197] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2497.961459] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2497.968719] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2497.975976] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000019 [ 2497.983353] EXT4-fs error (device sda1) in __ext4_new_inode:930: Out of memory [ 2497.989623] FAT-fs (loop7): bogus logical sector size 25344 08:33:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xffffffffffffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xc0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2497.996543] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:03 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0fff0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:03 executing program 6 (fault-call:1 fault-nth:26): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2498.029881] FAT-fs (loop4): bogus number of reserved sectors [ 2498.035781] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2498.046385] FAT-fs (loop7): bogus logical sector size 25344 [ 2498.052194] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2498.064146] FAT-fs (loop5): bogus number of reserved sectors [ 2498.070051] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2498.099199] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2498.105550] FAT-fs (loop5): bogus number of reserved sectors [ 2498.109155] FAULT_INJECTION: forcing a failure. [ 2498.109155] name failslab, interval 1, probability 0, space 0, times 0 [ 2498.111645] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2498.122871] CPU: 1 PID: 30270 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2498.137103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.146456] Call Trace: [ 2498.149049] dump_stack+0x1c9/0x2b4 [ 2498.152684] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2498.158814] should_fail.cold.4+0xa/0x11 [ 2498.162886] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2498.167993] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2498.172407] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2498.177002] ? kasan_check_write+0x14/0x20 [ 2498.181238] ? do_raw_spin_lock+0xc1/0x200 [ 2498.185479] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2498.191022] ? __mark_inode_dirty+0x495/0x1550 [ 2498.195615] ? __inode_attach_wb+0x13e0/0x13e0 [ 2498.200225] ? kasan_check_read+0x11/0x20 [ 2498.204380] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2498.208791] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2498.213378] ? kasan_check_write+0x14/0x20 [ 2498.217624] ? check_same_owner+0x340/0x340 [ 2498.221961] ? __dquot_alloc_space+0x4b6/0x8c0 [ 2498.226979] ? rcu_note_context_switch+0x730/0x730 [ 2498.231912] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2498.236929] __should_failslab+0x124/0x180 [ 2498.241172] should_failslab+0x9/0x14 [ 2498.244972] kmem_cache_alloc+0x2af/0x760 [ 2498.249124] ? percpu_counter_add_batch+0xf2/0x150 [ 2498.254149] ext4_mb_new_blocks+0x774/0x4740 [ 2498.258567] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2498.263587] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2498.268355] ? ext4_discard_preallocations+0x13d0/0x13d0 [ 2498.273822] ? lock_release+0xa30/0xa30 [ 2498.278157] ? kasan_check_read+0x11/0x20 [ 2498.282317] ? rcu_is_watching+0x8c/0x150 [ 2498.286471] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2498.291147] ? is_bpf_text_address+0xd7/0x170 [ 2498.295653] ? kernel_text_address+0x79/0xf0 [ 2498.300067] ? __kernel_text_address+0xd/0x40 [ 2498.304564] ? unwind_get_return_address+0x61/0xa0 [ 2498.309498] ? __save_stack_trace+0x8d/0xf0 [ 2498.313830] ? save_stack+0xa9/0xd0 [ 2498.317461] ? save_stack+0x43/0xd0 [ 2498.321092] ? kasan_kmalloc+0xc4/0xe0 [ 2498.324984] ? __kmalloc+0x14e/0x760 [ 2498.328696] ? ext4_find_extent+0x775/0xa10 [ 2498.333017] ? ext4_ext_map_blocks+0x293/0x62e0 [ 2498.337689] ? ext4_map_blocks+0x8f3/0x1b60 [ 2498.342009] ? ext4_getblk+0x10e/0x630 [ 2498.345897] ? ext4_bread+0x95/0x2b0 [ 2498.349607] ? ext4_append+0x14e/0x370 [ 2498.353493] ? ext4_mkdir+0x532/0xe60 [ 2498.357293] ? vfs_mkdir+0x42e/0x6b0 [ 2498.361182] ? do_mkdirat+0x27b/0x310 [ 2498.364982] ? __x64_sys_mkdir+0x5c/0x80 [ 2498.369060] ? do_syscall_64+0x1b9/0x820 [ 2498.373125] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.378498] ? save_stack+0xa9/0xd0 [ 2498.382126] ? save_stack+0x43/0xd0 [ 2498.385756] ? __kasan_slab_free+0x11a/0x170 [ 2498.390172] ? kasan_slab_free+0xe/0x10 [ 2498.394150] ? kfree+0xd9/0x260 [ 2498.397434] ? ext4_ext_map_blocks+0xede/0x62e0 [ 2498.402118] ? ext4_map_blocks+0xe31/0x1b60 [ 2498.406448] ? ext4_getblk+0x10e/0x630 [ 2498.410341] ? ext4_bread+0x95/0x2b0 [ 2498.414064] ? ext4_append+0x14e/0x370 [ 2498.417956] ? ext4_mkdir+0x532/0xe60 [ 2498.421763] ? vfs_mkdir+0x42e/0x6b0 [ 2498.426185] ? do_mkdirat+0x27b/0x310 [ 2498.429987] ? __x64_sys_mkdir+0x5c/0x80 [ 2498.434054] ? do_syscall_64+0x1b9/0x820 [ 2498.438117] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.443589] ? kasan_check_read+0x11/0x20 [ 2498.447736] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2498.452185] ? check_same_owner+0x340/0x340 [ 2498.456519] ? kasan_check_write+0x14/0x20 [ 2498.460766] ? kasan_unpoison_shadow+0x35/0x50 [ 2498.465352] ? kasan_kmalloc+0xc4/0xe0 [ 2498.469243] ? __kmalloc+0x315/0x760 [ 2498.472962] ? trace_hardirqs_off+0xd/0x10 [ 2498.477371] ? ext4_find_extent+0x775/0xa10 [ 2498.481699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2498.487251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2498.492794] ? ext4_inode_to_goal_block+0x2e3/0x3f0 [ 2498.497821] ext4_ext_map_blocks+0x2dc0/0x62e0 [ 2498.502415] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 2498.507440] ? perf_trace_lock+0xde/0x920 [ 2498.511600] ? zap_class+0x740/0x740 [ 2498.515320] ? lock_acquire+0x1e4/0x540 [ 2498.519302] ? ext4_es_lookup_extent+0x42c/0xde0 [ 2498.524061] ? lock_downgrade+0x8f0/0x8f0 [ 2498.528316] ? ext4_map_blocks+0x480/0x1b60 [ 2498.532646] ? lock_acquire+0x1e4/0x540 [ 2498.536624] ? ext4_map_blocks+0x88b/0x1b60 [ 2498.540953] ? lock_release+0xa30/0xa30 [ 2498.544928] ? check_same_owner+0x340/0x340 08:33:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000005d) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2498.549265] ? ext4_map_blocks+0x66a/0x1b60 [ 2498.553683] ? rcu_note_context_switch+0x730/0x730 [ 2498.558630] ? down_write+0x8f/0x130 [ 2498.562357] ? ext4_map_blocks+0x88b/0x1b60 [ 2498.566690] ? down_read+0x1d0/0x1d0 [ 2498.570424] ext4_map_blocks+0x8f3/0x1b60 [ 2498.574585] ? __save_stack_trace+0x8d/0xf0 [ 2498.578925] ? ext4_issue_zeroout+0x190/0x190 [ 2498.583429] ? save_stack+0x43/0xd0 [ 2498.587055] ? __kasan_slab_free+0x11a/0x170 [ 2498.591548] ? kasan_slab_free+0xe/0x10 [ 2498.595521] ? kmem_cache_free+0x86/0x2d0 [ 2498.599673] ext4_getblk+0x10e/0x630 [ 2498.603396] ? ext4_iomap_begin+0x1350/0x1350 [ 2498.607899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2498.613437] ? __dquot_initialize+0x61d/0xde0 [ 2498.617939] ext4_bread+0x95/0x2b0 [ 2498.621488] ? ext4_getblk+0x630/0x630 [ 2498.625372] ? dquot_get_next_dqblk+0x180/0x180 [ 2498.630042] ? debug_check_no_obj_freed+0x30b/0x595 [ 2498.635059] ? kasan_check_write+0x14/0x20 [ 2498.639299] ext4_append+0x14e/0x370 [ 2498.643019] ext4_mkdir+0x532/0xe60 [ 2498.646653] ? ext4_init_dot_dotdot+0x510/0x510 [ 2498.651325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2498.656950] ? security_inode_permission+0xd2/0x100 [ 2498.661966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2498.667502] ? security_inode_mkdir+0xe8/0x120 [ 2498.672093] vfs_mkdir+0x42e/0x6b0 [ 2498.675661] do_mkdirat+0x27b/0x310 [ 2498.679316] ? __ia32_sys_mknod+0xb0/0xb0 [ 2498.683474] ? ksys_ioctl+0x81/0xd0 [ 2498.687102] __x64_sys_mkdir+0x5c/0x80 [ 2498.691013] do_syscall_64+0x1b9/0x820 [ 2498.694916] ? finish_task_switch+0x1d3/0x870 [ 2498.699412] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2498.704355] ? syscall_return_slowpath+0x31d/0x5e0 [ 2498.709290] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2498.714309] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2498.719331] ? perf_trace_sys_enter+0xb10/0xb10 [ 2498.724003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2498.728855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.734044] RIP: 0033:0x455267 08:33:04 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174800204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x68}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2498.737226] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2498.756544] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2498.764272] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2498.771540] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2498.779242] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2498.786513] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2498.793781] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001a 08:33:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xe000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2498.882954] FAT-fs (loop7): bogus logical sector size 640 [ 2498.888599] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2498.890315] FAT-fs (loop4): bogus number of reserved sectors [ 2498.900495] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:04 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000a04010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2498.940132] FAT-fs (loop7): bogus logical sector size 640 [ 2498.941789] FAT-fs (loop5): bogus number of reserved sectors [ 2498.945799] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2498.957736] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2498.999860] FAT-fs (loop4): bogus number of reserved sectors [ 2499.004670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2499.005832] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2499.025255] FAT-fs (loop7): bogus logical sector size 2560 [ 2499.027739] FAT-fs (loop5): bogus number of reserved sectors [ 2499.031027] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2499.036801] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2499.061469] FAT-fs (loop2): bogus number of directory entries (767) [ 2499.068226] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:04 executing program 6 (fault-call:1 fault-nth:27): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:04 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) clock_gettime(0x0, &(0x7f0000003a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003900)=[{{&(0x7f0000000440)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)=""/67, 0x43}], 0x2, &(0x7f0000000600)=""/193, 0xc1, 0xdc}, 0x1ff}, {{&(0x7f0000000700)=@ipx, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/35, 0x23}], 0x4, &(0x7f0000000900)=""/190, 0xbe, 0x2}, 0x9}, {{&(0x7f00000009c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/246, 0xf6}, {&(0x7f0000000b40)=""/64, 0x40}, {&(0x7f0000000b80)=""/51, 0x33}, {&(0x7f0000000bc0)=""/170, 0xaa}], 0x5, &(0x7f0000000d00)=""/201, 0xc9, 0x6}, 0x8}, {{&(0x7f0000000e00)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000e80)=""/240, 0xf0}, {&(0x7f0000000f80)=""/254, 0xfe}, {&(0x7f0000001080)=""/203, 0xcb}], 0x3, &(0x7f00000011c0)=""/177, 0xb1, 0x3}, 0x4}, {{&(0x7f0000003300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003380)=""/112, 0x70}, {&(0x7f0000003400)=""/165, 0xa5}, {&(0x7f0000001280)=""/19, 0x13}, {&(0x7f00000034c0)=""/186, 0xba}], 0x4, 0x0, 0x0, 0x10000}, 0x100000000}, {{&(0x7f00000035c0)=@nfc, 0x80, &(0x7f0000003840)=[{&(0x7f0000003640)=""/221, 0xdd}, {&(0x7f0000003740)=""/216, 0xd8}], 0x2, &(0x7f0000003880)=""/127, 0x7f, 0x870}, 0x1}], 0x6, 0x42, &(0x7f0000003ac0)={r1, r2+10000000}) r3 = getpgrp(0x0) sched_setattr(r3, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x400000000000001}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000240)={&(0x7f0000000140)}, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f00000003c0)=0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r4}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r5, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000500)=0x1, 0x4) 08:33:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x2}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf0a0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:04 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2499.104605] FAT-fs (loop7): bogus logical sector size 2560 [ 2499.110330] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2499.169163] FAT-fs (loop2): bogus number of directory entries (767) [ 2499.170154] FAT-fs (loop5): bogus number of reserved sectors [ 2499.175736] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2499.181700] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2499.199121] FAT-fs (loop4): invalid media value (0x0c) [ 2499.204612] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2499.217873] FAT-fs (loop7): bogus logical sector size 768 [ 2499.223535] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:04 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0e000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2499.260354] FAT-fs (loop4): invalid media value (0x0c) [ 2499.265948] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2499.277709] FAT-fs (loop7): bogus logical sector size 768 [ 2499.283369] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2499.304252] FAULT_INJECTION: forcing a failure. [ 2499.304252] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.313760] FAT-fs (loop5): bogus number of reserved sectors [ 2499.315602] CPU: 1 PID: 30326 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2499.321416] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2499.329764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.329770] Call Trace: [ 2499.329799] dump_stack+0x1c9/0x2b4 [ 2499.329814] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2499.329837] ? zap_class+0x740/0x740 [ 2499.360218] ? update_curr+0x4c8/0xc00 [ 2499.364135] should_fail.cold.4+0xa/0x11 [ 2499.368229] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2499.373354] ? visit_groups_merge+0x541/0x6c0 [ 2499.377859] ? pinned_sched_in+0xc70/0xc70 [ 2499.382103] ? trace_hardirqs_on+0x10/0x10 [ 2499.386347] ? kvm_clock_read+0x25/0x30 [ 2499.390324] ? kvm_sched_clock_read+0x9/0x20 [ 2499.394731] ? sched_clock+0x31/0x40 [ 2499.398456] ? __perf_event_task_sched_in+0x91d/0xbb0 [ 2499.403667] ? perf_trace_lock+0xde/0x920 [ 2499.407818] ? visit_groups_merge+0x6c0/0x6c0 [ 2499.412321] ? zap_class+0x740/0x740 [ 2499.416035] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2499.420625] ? kasan_check_write+0x14/0x20 [ 2499.424861] ? check_same_owner+0x340/0x340 [ 2499.429183] ? rcu_note_context_switch+0x730/0x730 [ 2499.434115] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 2499.439309] __should_failslab+0x124/0x180 [ 2499.443563] should_failslab+0x9/0x14 [ 2499.447367] __kmalloc+0x2c8/0x760 [ 2499.450913] ? ext4_find_extent+0x775/0xa10 [ 2499.455246] ext4_find_extent+0x775/0xa10 [ 2499.459404] ext4_ext_map_blocks+0x293/0x62e0 [ 2499.463904] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2499.468500] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 2499.473604] ? finish_task_switch+0x18a/0x870 [ 2499.478119] ? preempt_notifier_register+0x200/0x200 [ 2499.483250] ? lock_repin_lock+0x430/0x430 [ 2499.487501] ? kasan_check_write+0x14/0x20 [ 2499.491769] ? __schedule+0x884/0x1ed0 [ 2499.495659] ? lock_downgrade+0x8f0/0x8f0 [ 2499.499815] ? __sched_text_start+0x8/0x8 [ 2499.503970] ? ext4_map_blocks+0x480/0x1b60 [ 2499.508295] ? lock_acquire+0x1e4/0x540 [ 2499.512268] ? ext4_map_blocks+0x88b/0x1b60 [ 2499.516634] ? lock_release+0xa30/0xa30 [ 2499.520610] ? check_same_owner+0x340/0x340 [ 2499.524951] ? lock_downgrade+0x8f0/0x8f0 [ 2499.529103] ? down_write+0x8f/0x130 [ 2499.532818] ? ext4_map_blocks+0x88b/0x1b60 [ 2499.537133] ? down_read+0x1d0/0x1d0 [ 2499.540850] ext4_map_blocks+0x8f3/0x1b60 [ 2499.544998] ? __save_stack_trace+0x8d/0xf0 [ 2499.549327] ? ext4_issue_zeroout+0x190/0x190 [ 2499.553826] ? save_stack+0x43/0xd0 [ 2499.557451] ? __kasan_slab_free+0x11a/0x170 [ 2499.561856] ? kasan_slab_free+0xe/0x10 [ 2499.565835] ? kmem_cache_free+0x86/0x2d0 [ 2499.569987] ext4_getblk+0x10e/0x630 [ 2499.573702] ? ext4_iomap_begin+0x1350/0x1350 [ 2499.578204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2499.583739] ? __dquot_initialize+0x61d/0xde0 [ 2499.588239] ext4_bread+0x95/0x2b0 [ 2499.591783] ? ext4_getblk+0x630/0x630 [ 2499.595688] ? dquot_get_next_dqblk+0x180/0x180 [ 2499.600359] ? debug_check_no_obj_freed+0x30b/0x595 [ 2499.605375] ? kasan_check_write+0x14/0x20 [ 2499.609616] ext4_append+0x14e/0x370 [ 2499.613332] ext4_mkdir+0x532/0xe60 [ 2499.616962] ? ext4_init_dot_dotdot+0x510/0x510 [ 2499.621639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2499.627179] ? security_inode_permission+0xd2/0x100 [ 2499.632232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2499.637770] ? security_inode_mkdir+0xe8/0x120 [ 2499.642354] vfs_mkdir+0x42e/0x6b0 [ 2499.645908] do_mkdirat+0x27b/0x310 [ 2499.649545] ? __ia32_sys_mknod+0xb0/0xb0 [ 2499.653698] ? syscall_slow_exit_work+0x500/0x500 [ 2499.658547] ? ksys_ioctl+0x81/0xd0 [ 2499.662180] __x64_sys_mkdir+0x5c/0x80 [ 2499.666079] do_syscall_64+0x1b9/0x820 [ 2499.669967] ? finish_task_switch+0x1d3/0x870 [ 2499.674465] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2499.679399] ? syscall_return_slowpath+0x31d/0x5e0 [ 2499.684330] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2499.689355] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2499.694377] ? perf_trace_sys_enter+0xb10/0xb10 [ 2499.699054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2499.703900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2499.709180] RIP: 0033:0x455267 [ 2499.712364] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2499.731677] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2499.739390] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2499.746657] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2499.753923] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 08:33:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x4f73}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:05 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000904010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000037) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xab04000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xff070400}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2499.761203] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2499.768471] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001b 08:33:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x734f000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:05 executing program 6 (fault-call:1 fault-nth:28): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0f000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2499.839564] FAT-fs (loop4): bogus number of reserved sectors [ 2499.845514] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2499.851467] FAT-fs (loop7): bogus logical sector size 2304 [ 2499.857111] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2499.886538] FAT-fs (loop5): bogus number of reserved sectors [ 2499.892476] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2499.903480] FAT-fs (loop4): bogus number of reserved sectors [ 2499.908981] FAULT_INJECTION: forcing a failure. [ 2499.908981] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.909422] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2499.920637] CPU: 1 PID: 30360 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2499.934933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.944463] Call Trace: [ 2499.947059] dump_stack+0x1c9/0x2b4 [ 2499.950688] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2499.955883] ? zap_class+0x740/0x740 [ 2499.959596] should_fail.cold.4+0xa/0x11 [ 2499.963649] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2499.968761] ? trace_hardirqs_on+0x10/0x10 [ 2499.972986] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2499.978025] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2499.982771] ? lock_acquire+0x1e4/0x540 [ 2499.986742] ? is_bpf_text_address+0xae/0x170 [ 2499.991226] ? perf_trace_lock+0xde/0x920 [ 2499.995360] ? lock_release+0xa30/0xa30 [ 2499.999323] ? zap_class+0x740/0x740 [ 2500.003034] ? rcu_is_watching+0x8c/0x150 [ 2500.007170] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2500.011842] ? is_bpf_text_address+0xd7/0x170 [ 2500.016328] ? kernel_text_address+0x79/0xf0 [ 2500.020727] __should_failslab+0x124/0x180 [ 2500.024954] should_failslab+0x9/0x14 [ 2500.028740] kmem_cache_alloc+0x47/0x760 [ 2500.032788] ? __es_tree_search.isra.13+0x1ba/0x220 [ 2500.037988] __es_insert_extent+0x305/0x1140 [ 2500.042391] ? ext4_es_insert_extent+0x21c/0x7e0 [ 2500.047135] ? ext4_es_free_extent+0x820/0x820 [ 2500.051705] ? lock_release+0xa30/0xa30 [ 2500.055668] ? __x64_sys_mkdir+0x5c/0x80 [ 2500.059714] ? do_syscall_64+0x1b9/0x820 [ 2500.063762] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2500.069116] ? kasan_check_write+0x14/0x20 [ 2500.073336] ? do_raw_write_lock+0xbd/0x1b0 [ 2500.077649] ext4_es_insert_extent+0x2ea/0x7e0 [ 2500.082741] ? ext4_es_find_delayed_extent_range+0xd80/0xd80 [ 2500.088531] ? kasan_unpoison_shadow+0x35/0x50 [ 2500.093129] ? kasan_kmalloc+0xc4/0xe0 [ 2500.097023] ? __kmalloc+0x315/0x760 [ 2500.100726] ext4_ext_put_gap_in_cache+0x158/0x1f0 [ 2500.105640] ? ext4_zeroout_es+0x160/0x160 [ 2500.109865] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2500.115390] ext4_ext_map_blocks+0x2453/0x62e0 [ 2500.119964] ? unregister_lsm_notifier+0x20/0x20 [ 2500.124706] ? ext4_init_acl+0x1d6/0x300 [ 2500.128764] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 2500.133776] ? lock_acquire+0x1e4/0x540 [ 2500.137740] ? ext4_es_lookup_extent+0x42c/0xde0 [ 2500.142481] ? lock_downgrade+0x8f0/0x8f0 [ 2500.146617] ? lock_release+0xa30/0xa30 [ 2500.150592] ? lock_acquire+0x1e4/0x540 [ 2500.155313] ? ext4_map_blocks+0x480/0x1b60 [ 2500.159626] ? lock_release+0xa30/0xa30 [ 2500.163607] ? check_same_owner+0x340/0x340 [ 2500.167915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2500.173439] ? ext4_es_lookup_extent+0x465/0xde0 [ 2500.178181] ? rcu_note_context_switch+0x730/0x730 [ 2500.183450] ? down_read+0xb5/0x1d0 [ 2500.187075] ? ext4_map_blocks+0x480/0x1b60 [ 2500.191380] ? __down_interruptible+0x700/0x700 [ 2500.196041] ? kernel_text_address+0x79/0xf0 [ 2500.200448] ext4_map_blocks+0xe31/0x1b60 [ 2500.204585] ? __save_stack_trace+0x8d/0xf0 [ 2500.208895] ? ext4_issue_zeroout+0x190/0x190 [ 2500.213391] ? save_stack+0x43/0xd0 [ 2500.217005] ? __kasan_slab_free+0x11a/0x170 [ 2500.221403] ? kasan_slab_free+0xe/0x10 [ 2500.225363] ? kmem_cache_free+0x86/0x2d0 [ 2500.229518] ext4_getblk+0x10e/0x630 [ 2500.233233] ? ext4_iomap_begin+0x1350/0x1350 [ 2500.237725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2500.243247] ? __dquot_initialize+0x61d/0xde0 [ 2500.247743] ext4_bread+0x95/0x2b0 [ 2500.251272] ? ext4_getblk+0x630/0x630 [ 2500.255145] ? dquot_get_next_dqblk+0x180/0x180 [ 2500.259798] ? debug_check_no_obj_freed+0x30b/0x595 [ 2500.264801] ? kasan_check_write+0x14/0x20 [ 2500.269039] ext4_append+0x14e/0x370 [ 2500.272742] ext4_mkdir+0x532/0xe60 [ 2500.276358] ? ext4_init_dot_dotdot+0x510/0x510 [ 2500.281018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2500.286544] ? security_inode_permission+0xd2/0x100 [ 2500.291549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2500.297070] ? security_inode_mkdir+0xe8/0x120 [ 2500.301640] vfs_mkdir+0x42e/0x6b0 [ 2500.305169] do_mkdirat+0x27b/0x310 [ 2500.308794] ? __ia32_sys_mknod+0xb0/0xb0 [ 2500.312930] ? ksys_ioctl+0x81/0xd0 [ 2500.316544] __x64_sys_mkdir+0x5c/0x80 [ 2500.320418] do_syscall_64+0x1b9/0x820 [ 2500.324310] ? finish_task_switch+0x1d3/0x870 [ 2500.328817] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2500.333733] ? syscall_return_slowpath+0x31d/0x5e0 [ 2500.338659] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2500.343681] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2500.348683] ? perf_trace_sys_enter+0xb10/0xb10 [ 2500.353341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2500.358173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2500.363347] RIP: 0033:0x455267 [ 2500.366531] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2500.385730] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2500.393423] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2500.400680] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2500.407945] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2500.415204] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2500.422468] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001c 08:33:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfcfdffff00000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2500.439929] FAT-fs (loop6): bogus number of reserved sectors [ 2500.440240] FAT-fs (loop7): bogus logical sector size 2304 [ 2500.445907] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2500.451580] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2500.466648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2500.508754] FAT-fs (loop5): bogus number of reserved sectors [ 2500.514672] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2500.537072] FAT-fs (loop4): bogus number of reserved sectors [ 2500.542979] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2500.595244] FAT-fs (loop4): bogus number of reserved sectors [ 2500.601153] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:06 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 08:33:06 executing program 6 (fault-call:1 fault-nth:29): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:06 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174006304010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a06030274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4c00}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x77260000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2500.750752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2500.750914] FAT-fs (loop2): bogus number of directory entries (515) [ 2500.764046] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2500.775362] FAT-fs (loop7): bogus logical sector size 25344 [ 2500.781186] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2500.807616] FAT-fs (loop5): bogus number of reserved sectors [ 2500.813562] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2500.826094] FAT-fs (loop4): bogus number of reserved sectors [ 2500.832033] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2500.852759] FAULT_INJECTION: forcing a failure. [ 2500.852759] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.858428] FAT-fs (loop7): bogus logical sector size 25344 [ 2500.864210] CPU: 0 PID: 30393 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2500.869819] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2500.878192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.878202] Call Trace: [ 2500.878231] dump_stack+0x1c9/0x2b4 [ 2500.878254] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2500.888501] FAT-fs (loop5): bogus number of reserved sectors [ 2500.893499] ? perf_tp_event+0x91b/0xc40 [ 2500.893527] ? kasan_check_read+0x11/0x20 [ 2500.896122] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2500.899814] ? rcu_is_watching+0x8c/0x150 [ 2500.899848] should_fail.cold.4+0xa/0x11 [ 2500.933178] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2500.938301] ? kernel_text_address+0x79/0xf0 [ 2500.942730] ? __save_stack_trace+0x8d/0xf0 [ 2500.947084] ? save_stack+0xa9/0xd0 [ 2500.950734] ? save_stack+0x43/0xd0 [ 2500.954371] ? __kasan_slab_free+0x11a/0x170 [ 2500.958783] ? kasan_slab_free+0xe/0x10 [ 2500.962764] ? kfree+0xd9/0x260 [ 2500.966052] ? ext4_ext_map_blocks+0xede/0x62e0 [ 2500.970729] ? ext4_map_blocks+0xe31/0x1b60 [ 2500.975062] ? ext4_getblk+0x10e/0x630 [ 2500.978958] ? ext4_bread+0x95/0x2b0 [ 2500.982677] ? ext4_append+0x14e/0x370 [ 2500.986569] ? ext4_mkdir+0x532/0xe60 [ 2500.990379] ? vfs_mkdir+0x42e/0x6b0 [ 2500.994101] ? __x64_sys_mkdir+0x5c/0x80 [ 2500.998173] ? do_syscall_64+0x1b9/0x820 [ 2501.002243] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2501.007620] ? kasan_check_read+0x11/0x20 [ 2501.011782] ? check_same_owner+0x340/0x340 [ 2501.016114] ? kasan_check_write+0x14/0x20 [ 2501.020358] ? rcu_note_context_switch+0x730/0x730 [ 2501.025303] __should_failslab+0x124/0x180 [ 2501.029555] should_failslab+0x9/0x14 [ 2501.033363] __kmalloc+0x2c8/0x760 [ 2501.036919] ? trace_hardirqs_off+0xd/0x10 [ 2501.041168] ? ext4_find_extent+0x775/0xa10 [ 2501.045505] ext4_find_extent+0x775/0xa10 [ 2501.049668] ? trace_hardirqs_on+0xd/0x10 [ 2501.053832] ext4_ext_map_blocks+0x293/0x62e0 [ 2501.058362] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 2501.063385] ? memset+0x31/0x40 [ 2501.066685] ? perf_trace_lock+0x49d/0x920 [ 2501.070944] ? zap_class+0x740/0x740 [ 2501.074666] ? lock_acquire+0x1e4/0x540 [ 2501.078648] ? ext4_es_lookup_extent+0x42c/0xde0 [ 2501.083424] ? lock_downgrade+0x8f0/0x8f0 [ 2501.087589] ? lock_release+0xa30/0xa30 [ 2501.091582] ? ext4_map_blocks+0x480/0x1b60 [ 2501.095919] ? lock_acquire+0x1e4/0x540 [ 2501.099902] ? ext4_map_blocks+0x88b/0x1b60 [ 2501.104241] ? lock_release+0xa30/0xa30 [ 2501.108222] ? check_same_owner+0x340/0x340 [ 2501.112554] ? ext4_map_blocks+0x66a/0x1b60 [ 2501.116890] ? rcu_note_context_switch+0x730/0x730 [ 2501.121846] ? down_write+0x8f/0x130 [ 2501.125567] ? ext4_map_blocks+0x88b/0x1b60 [ 2501.129897] ? down_read+0x1d0/0x1d0 [ 2501.133632] ext4_map_blocks+0x8f3/0x1b60 [ 2501.137789] ? __save_stack_trace+0x8d/0xf0 [ 2501.142139] ? ext4_issue_zeroout+0x190/0x190 [ 2501.146651] ? save_stack+0x43/0xd0 [ 2501.150296] ? __kasan_slab_free+0x11a/0x170 [ 2501.154712] ? kasan_slab_free+0xe/0x10 [ 2501.158696] ? kmem_cache_free+0x86/0x2d0 [ 2501.162859] ext4_getblk+0x10e/0x630 [ 2501.166594] ? ext4_iomap_begin+0x1350/0x1350 [ 2501.171108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2501.176656] ? __dquot_initialize+0x61d/0xde0 [ 2501.181175] ext4_bread+0x95/0x2b0 [ 2501.184729] ? ext4_getblk+0x630/0x630 [ 2501.188621] ? dquot_get_next_dqblk+0x180/0x180 [ 2501.193298] ? debug_check_no_obj_freed+0x30b/0x595 [ 2501.198327] ? kasan_check_write+0x14/0x20 [ 2501.202772] ext4_append+0x14e/0x370 [ 2501.206509] ext4_mkdir+0x532/0xe60 [ 2501.210161] ? ext4_init_dot_dotdot+0x510/0x510 [ 2501.214847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2501.220394] ? security_inode_permission+0xd2/0x100 [ 2501.225430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2501.230998] ? security_inode_mkdir+0xe8/0x120 [ 2501.235599] vfs_mkdir+0x42e/0x6b0 [ 2501.239158] do_mkdirat+0x27b/0x310 [ 2501.242805] ? __ia32_sys_mknod+0xb0/0xb0 [ 2501.246965] ? ksys_ioctl+0x81/0xd0 [ 2501.250611] __x64_sys_mkdir+0x5c/0x80 [ 2501.254511] do_syscall_64+0x1b9/0x820 [ 2501.258870] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2501.263810] ? syscall_return_slowpath+0x31d/0x5e0 [ 2501.268754] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2501.274046] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2501.279081] ? perf_trace_sys_enter+0xb10/0xb10 [ 2501.283764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2501.288627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2501.293822] RIP: 0033:0x455267 [ 2501.297010] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2501.316602] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2501.324325] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2501.331601] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2501.338876] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2501.346154] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 08:33:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000be) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x4000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2501.353428] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001d [ 2501.367112] FAT-fs (loop2): bogus number of directory entries (515) [ 2501.373691] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:06 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000204010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x9401}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2501.400479] FAT-fs (loop4): bogus number of reserved sectors [ 2501.406372] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2501.418635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:06 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0a000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xa00}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:06 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2501.456607] FAT-fs (loop5): bogus number of reserved sectors [ 2501.462583] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2501.527674] FAT-fs (loop7): bogus logical sector size 5120 [ 2501.533498] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2501.544485] FAT-fs (loop5): bogus number of reserved sectors [ 2501.550433] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2501.551635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2501.557080] FAT-fs (loop4): bogus number of reserved sectors [ 2501.569130] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2501.591705] FAT-fs (loop7): bogus logical sector size 5120 [ 2501.597543] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2501.622151] FAT-fs (loop4): bogus number of reserved sectors [ 2501.628508] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:07 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00') clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000002c0)) 08:33:07 executing program 6 (fault-call:1 fault-nth:30): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a10000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:07 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174001004010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc327}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2501.755757] FAULT_INJECTION: forcing a failure. [ 2501.755757] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.767245] CPU: 1 PID: 30439 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2501.775668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.781636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2501.785036] Call Trace: [ 2501.785065] dump_stack+0x1c9/0x2b4 [ 2501.785085] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2501.785113] ? kasan_check_read+0x11/0x20 [ 2501.807190] ? rcu_is_watching+0x8c/0x150 [ 2501.811388] should_fail.cold.4+0xa/0x11 [ 2501.815474] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2501.820605] ? kernel_text_address+0x79/0xf0 [ 2501.825033] ? __kernel_text_address+0xd/0x40 [ 2501.829529] ? unwind_get_return_address+0x61/0xa0 [ 2501.834477] ? __save_stack_trace+0x8d/0xf0 [ 2501.838806] ? save_stack+0xa9/0xd0 [ 2501.842424] ? save_stack+0x43/0xd0 [ 2501.846041] ? __kasan_slab_free+0x11a/0x170 [ 2501.850704] ? kasan_slab_free+0xe/0x10 [ 2501.854663] ? kfree+0xd9/0x260 [ 2501.857931] ? ext4_ext_map_blocks+0xede/0x62e0 [ 2501.862587] ? ext4_map_blocks+0xe31/0x1b60 [ 2501.866895] ? ext4_getblk+0x10e/0x630 [ 2501.870768] ? ext4_bread+0x95/0x2b0 [ 2501.874466] ? ext4_append+0x14e/0x370 [ 2501.878337] ? ext4_mkdir+0x532/0xe60 [ 2501.882126] ? vfs_mkdir+0x42e/0x6b0 [ 2501.885825] ? __x64_sys_mkdir+0x5c/0x80 [ 2501.889879] ? do_syscall_64+0x1b9/0x820 [ 2501.893929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2501.899279] ? kasan_check_read+0x11/0x20 [ 2501.903427] ? check_same_owner+0x340/0x340 [ 2501.907750] ? kasan_check_write+0x14/0x20 [ 2501.911971] ? rcu_note_context_switch+0x730/0x730 [ 2501.916892] __should_failslab+0x124/0x180 [ 2501.921119] should_failslab+0x9/0x14 [ 2501.924993] __kmalloc+0x2c8/0x760 [ 2501.928523] ? trace_hardirqs_off+0xd/0x10 [ 2501.932743] ? ext4_find_extent+0x775/0xa10 [ 2501.937051] ext4_find_extent+0x775/0xa10 [ 2501.941186] ? trace_hardirqs_on+0xd/0x10 [ 2501.945322] ext4_ext_map_blocks+0x293/0x62e0 [ 2501.949811] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 2501.954817] ? perf_trace_lock+0xde/0x920 [ 2501.958954] ? zap_class+0x740/0x740 [ 2501.962665] ? lock_acquire+0x1e4/0x540 [ 2501.966640] ? ext4_es_lookup_extent+0x42c/0xde0 [ 2501.972524] ? lock_downgrade+0x8f0/0x8f0 [ 2501.976660] ? lock_release+0xa30/0xa30 [ 2501.980627] ? ext4_map_blocks+0x480/0x1b60 [ 2501.984936] ? lock_acquire+0x1e4/0x540 [ 2501.988895] ? ext4_map_blocks+0x88b/0x1b60 [ 2501.993204] ? lock_release+0xa30/0xa30 [ 2501.997424] ? check_same_owner+0x340/0x340 [ 2502.001731] ? ext4_map_blocks+0x66a/0x1b60 [ 2502.006038] ? rcu_note_context_switch+0x730/0x730 [ 2502.010959] ? down_write+0x8f/0x130 [ 2502.014682] ? ext4_map_blocks+0x88b/0x1b60 [ 2502.018987] ? down_read+0x1d0/0x1d0 [ 2502.022704] ext4_map_blocks+0x8f3/0x1b60 [ 2502.026845] ? __save_stack_trace+0x8d/0xf0 [ 2502.031156] ? ext4_issue_zeroout+0x190/0x190 [ 2502.035640] ? save_stack+0x43/0xd0 [ 2502.039266] ? __kasan_slab_free+0x11a/0x170 [ 2502.043686] ? kasan_slab_free+0xe/0x10 [ 2502.047644] ? kmem_cache_free+0x86/0x2d0 [ 2502.051779] ext4_getblk+0x10e/0x630 [ 2502.055494] ? ext4_iomap_begin+0x1350/0x1350 [ 2502.059978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.065529] ? __dquot_initialize+0x61d/0xde0 [ 2502.070454] ext4_bread+0x95/0x2b0 [ 2502.073983] ? ext4_getblk+0x630/0x630 [ 2502.077860] ? dquot_get_next_dqblk+0x180/0x180 [ 2502.082529] ? debug_check_no_obj_freed+0x30b/0x595 [ 2502.087531] ? kasan_check_write+0x14/0x20 [ 2502.091754] ext4_append+0x14e/0x370 [ 2502.095459] ext4_mkdir+0x532/0xe60 [ 2502.099076] ? ext4_init_dot_dotdot+0x510/0x510 [ 2502.103732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.109279] ? security_inode_permission+0xd2/0x100 [ 2502.114283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.119815] ? security_inode_mkdir+0xe8/0x120 [ 2502.124390] vfs_mkdir+0x42e/0x6b0 [ 2502.127916] do_mkdirat+0x27b/0x310 [ 2502.131542] ? __ia32_sys_mknod+0xb0/0xb0 [ 2502.135678] ? ksys_ioctl+0x81/0xd0 [ 2502.139379] __x64_sys_mkdir+0x5c/0x80 [ 2502.143362] do_syscall_64+0x1b9/0x820 [ 2502.147255] ? finish_task_switch+0x1d3/0x870 [ 2502.151737] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2502.157428] ? syscall_return_slowpath+0x31d/0x5e0 [ 2502.162355] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2502.167359] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2502.172361] ? perf_trace_sys_enter+0xb10/0xb10 [ 2502.177026] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2502.181869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2502.187053] RIP: 0033:0x455267 [ 2502.190571] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2502.209793] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2502.217618] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2502.224968] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2502.232331] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2502.239595] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2502.246850] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001e 08:33:07 executing program 6 (fault-call:1 fault-nth:31): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2502.264092] FAT-fs (loop4): bogus number of reserved sectors [ 2502.270068] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2502.277132] FAT-fs (loop5): invalid media value (0x00) [ 2502.283233] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2502.316374] FAULT_INJECTION: forcing a failure. [ 2502.316374] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.327755] CPU: 1 PID: 30461 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2502.337475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.347008] Call Trace: [ 2502.349611] dump_stack+0x1c9/0x2b4 [ 2502.353346] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2502.358558] should_fail.cold.4+0xa/0x11 [ 2502.362638] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2502.367754] ? kasan_check_read+0x11/0x20 [ 2502.372546] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2502.376959] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2502.381580] ? kasan_check_write+0x14/0x20 [ 2502.385833] ? do_raw_spin_lock+0xc1/0x200 [ 2502.390074] ? trace_hardirqs_on+0xd/0x10 [ 2502.394232] ? __find_get_block+0x36d/0xe60 [ 2502.399440] ? block_invalidatepage+0x520/0x520 [ 2502.404223] ? check_same_owner+0x340/0x340 [ 2502.408556] ? lock_downgrade+0x8f0/0x8f0 [ 2502.412708] ? check_same_owner+0x340/0x340 [ 2502.417059] ? rcu_note_context_switch+0x730/0x730 [ 2502.421999] __should_failslab+0x124/0x180 [ 2502.426243] should_failslab+0x9/0x14 [ 2502.430072] kmem_cache_alloc+0x2af/0x760 [ 2502.434224] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2502.439271] ? __find_get_block+0xe60/0xe60 [ 2502.443597] jbd2_journal_add_journal_head+0x1ef/0x5d0 [ 2502.448886] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2502.454428] ? jbd2_journal_write_metadata_buffer+0xf00/0xf00 [ 2502.460330] jbd2_journal_get_create_access+0x42/0x600 [ 2502.465615] ? rcu_note_context_switch+0x730/0x730 [ 2502.470555] __ext4_journal_get_create_access+0x46/0x90 [ 2502.475928] ext4_getblk+0x2be/0x630 [ 2502.479652] ? ext4_iomap_begin+0x1350/0x1350 [ 2502.484155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.489697] ? __dquot_initialize+0x61d/0xde0 [ 2502.494212] ext4_bread+0x95/0x2b0 [ 2502.497758] ? ext4_getblk+0x630/0x630 [ 2502.501826] ? dquot_get_next_dqblk+0x180/0x180 [ 2502.506497] ? debug_check_no_obj_freed+0x30b/0x595 [ 2502.511536] ? kasan_check_write+0x14/0x20 [ 2502.515812] ext4_append+0x14e/0x370 [ 2502.519559] ext4_mkdir+0x532/0xe60 [ 2502.523198] ? ext4_init_dot_dotdot+0x510/0x510 [ 2502.527876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.533434] ? security_inode_permission+0xd2/0x100 [ 2502.538455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2502.543996] ? security_inode_mkdir+0xe8/0x120 [ 2502.548589] vfs_mkdir+0x42e/0x6b0 [ 2502.552142] do_mkdirat+0x27b/0x310 [ 2502.555794] ? __ia32_sys_mknod+0xb0/0xb0 [ 2502.559950] ? syscall_slow_exit_work+0x500/0x500 [ 2502.564901] ? ksys_ioctl+0x81/0xd0 [ 2502.568535] __x64_sys_mkdir+0x5c/0x80 [ 2502.572429] do_syscall_64+0x1b9/0x820 [ 2502.576323] ? finish_task_switch+0x1d3/0x870 [ 2502.580828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2502.585759] ? syscall_return_slowpath+0x31d/0x5e0 [ 2502.590697] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2502.595722] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2502.600747] ? perf_trace_sys_enter+0xb10/0xb10 [ 2502.605420] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2502.610295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2502.615485] RIP: 0033:0x455267 [ 2502.618669] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2502.637992] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2502.645708] RAX: ffffffffffffffda RBX: 0000000020001350 RCX: 0000000000455267 [ 2502.652982] RDX: 0000000000000015 RSI: 00000000000001ff RDI: 0000000020000080 [ 2502.660253] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2502.667530] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000015 [ 2502.674804] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000001f [ 2502.682449] ENOMEM in journal_alloc_journal_head, retrying. [ 2502.716427] FAT-fs (loop6): bogus number of reserved sectors [ 2502.722506] FAT-fs (loop6): Can't find a valid FAT filesystem 08:33:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000009) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:08 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404000a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x80a0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc627}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010abe000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:08 executing program 6 (fault-call:1 fault-nth:32): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2502.856340] FAT-fs (loop5): bogus number of reserved sectors [ 2502.862246] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2502.864954] FAT-fs (loop4): bogus number of reserved sectors [ 2502.872822] FAULT_INJECTION: forcing a failure. [ 2502.872822] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.874135] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2502.885422] CPU: 1 PID: 30474 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2502.885433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.885437] Call Trace: [ 2502.885462] dump_stack+0x1c9/0x2b4 [ 2502.885480] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2502.885499] ? perf_trace_lock+0xde/0x920 [ 2502.885522] should_fail.cold.4+0xa/0x11 [ 2502.885542] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2502.885560] ? zap_class+0x740/0x740 [ 2502.885582] ? save_stack+0xa9/0xd0 [ 2502.885598] ? save_stack+0x43/0xd0 [ 2502.885611] ? kasan_kmalloc+0xc4/0xe0 [ 2502.885624] ? __kmalloc_track_caller+0x14a/0x760 [ 2502.885638] ? memdup_user+0x2c/0xa0 [ 2502.885649] ? strndup_user+0x77/0xd0 [ 2502.885669] ? ksys_mount+0x3c/0x140 [ 2502.964765] ? do_syscall_64+0x1b9/0x820 [ 2502.968819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2502.974181] ? lock_acquire+0x1e4/0x540 [ 2502.978147] ? handle_mm_fault+0x417/0xc80 [ 2502.982374] ? lock_acquire+0x1e4/0x540 [ 2502.986350] ? fs_reclaim_acquire+0x20/0x20 [ 2502.990661] ? lock_downgrade+0x8f0/0x8f0 [ 2502.994800] ? check_same_owner+0x340/0x340 [ 2502.999109] ? lock_release+0xa30/0xa30 [ 2503.003072] ? rcu_note_context_switch+0x730/0x730 [ 2503.007991] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2503.013016] __should_failslab+0x124/0x180 [ 2503.017258] should_failslab+0x9/0x14 [ 2503.021048] __kmalloc_track_caller+0x2c4/0x760 [ 2503.025707] ? strncpy_from_user+0x510/0x510 [ 2503.030105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2503.035631] ? strndup_user+0x77/0xd0 [ 2503.039419] memdup_user+0x2c/0xa0 [ 2503.042944] strndup_user+0x77/0xd0 [ 2503.046562] ksys_mount+0x73/0x140 [ 2503.050096] __x64_sys_mount+0xbe/0x150 [ 2503.054061] do_syscall_64+0x1b9/0x820 [ 2503.057934] ? finish_task_switch+0x1d3/0x870 [ 2503.062416] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2503.067333] ? syscall_return_slowpath+0x31d/0x5e0 [ 2503.072252] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2503.077260] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2503.082789] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2503.088072] ? perf_trace_sys_enter+0xb10/0xb10 [ 2503.092731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2503.097571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.102762] RIP: 0033:0x45885a [ 2503.105936] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2503.125154] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2503.132866] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2503.140124] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2503.147817] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 08:33:08 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpid() r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = memfd_create(&(0x7f0000000240)='/dev/sequencer\x00', 0x3) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000140)={0x6004, 0x1c000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r4}, 0x10) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000300)={[{0x3, 0x2, 0x3ff, 0x81, 0x9e, 0x8, 0x5, 0x200, 0x52, 0x6, 0x7ff, 0x400, 0x3}, {0x80, 0x7, 0x400, 0xfb2, 0x3, 0x3, 0x5, 0x0, 0x7ff, 0x1f, 0x4, 0x1000, 0x800}, {0x212, 0x6, 0x800, 0xfff, 0x0, 0x2d1, 0xffffffffffffffc0, 0x2, 0x0, 0x17b7a1dd, 0x9, 0x1000, 0x2}], 0x1ff}) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000380)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) ioctl$BLKFRASET(r4, 0x1264, &(0x7f00000002c0)=0x8) sendto$llc(r5, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000480)='./file0/file0\x00', 0x200) [ 2503.155076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2503.162354] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000020 [ 2503.179600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2503.200781] FAT-fs (loop4): bogus number of reserved sectors 08:33:08 executing program 6 (fault-call:1 fault-nth:33): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2503.206845] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:08 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000463010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:08 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a000a0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2503.228675] FAT-fs (loop5): bogus number of reserved sectors [ 2503.234826] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x734f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x10a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2503.297303] FAULT_INJECTION: forcing a failure. [ 2503.297303] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.308655] CPU: 1 PID: 30500 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2503.314702] FAT-fs (loop2): bogus number of FAT structure [ 2503.317063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.317071] Call Trace: [ 2503.317097] dump_stack+0x1c9/0x2b4 [ 2503.317116] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2503.317142] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2503.322709] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2503.332052] ? perf_trace_lock+0xde/0x920 [ 2503.332077] should_fail.cold.4+0xa/0x11 [ 2503.332100] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2503.363818] FAT-fs (loop5): bogus number of reserved sectors [ 2503.367225] ? zap_class+0x740/0x740 [ 2503.367259] ? lock_acquire+0x1e4/0x540 [ 2503.367280] ? handle_mm_fault+0x417/0xc80 [ 2503.373099] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2503.376783] ? lock_acquire+0x1e4/0x540 [ 2503.376797] ? fs_reclaim_acquire+0x20/0x20 [ 2503.376817] ? lock_downgrade+0x8f0/0x8f0 [ 2503.403905] ? check_same_owner+0x340/0x340 [ 2503.408246] ? rcu_note_context_switch+0x730/0x730 [ 2503.413188] __should_failslab+0x124/0x180 [ 2503.417435] should_failslab+0x9/0x14 [ 2503.421240] __kmalloc_track_caller+0x2c4/0x760 [ 2503.425921] ? strncpy_from_user+0x510/0x510 [ 2503.430338] ? strndup_user+0x77/0xd0 [ 2503.434145] memdup_user+0x2c/0xa0 [ 2503.437691] strndup_user+0x77/0xd0 [ 2503.441348] ksys_mount+0x3c/0x140 [ 2503.444899] __x64_sys_mount+0xbe/0x150 [ 2503.448885] do_syscall_64+0x1b9/0x820 [ 2503.452776] ? finish_task_switch+0x1d3/0x870 [ 2503.457281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2503.462218] ? syscall_return_slowpath+0x31d/0x5e0 [ 2503.467154] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2503.472189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2503.477736] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2503.482756] ? perf_trace_sys_enter+0xb10/0xb10 [ 2503.487435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2503.492296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.497487] RIP: 0033:0x45885a [ 2503.500668] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2503.519997] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2503.527724] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2503.534993] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 08:33:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffffc0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2503.542262] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2503.549533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2503.556809] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000021 [ 2503.578753] FAT-fs (loop2): bogus number of FAT structure [ 2503.584410] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4a7}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:09 executing program 6 (fault-call:1 fault-nth:34): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2503.603142] FAT-fs (loop5): bogus number of reserved sectors [ 2503.609122] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2503.640911] FAT-fs (loop7): bogus sectors per cluster 99 [ 2503.645925] FAT-fs (loop4): bogus number of reserved sectors [ 2503.646495] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2503.652306] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2503.681983] FAULT_INJECTION: forcing a failure. [ 2503.681983] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.693512] CPU: 0 PID: 30524 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2503.701924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.711283] Call Trace: [ 2503.713896] dump_stack+0x1c9/0x2b4 [ 2503.717541] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2503.722746] ? perf_trace_lock+0x49d/0x920 [ 2503.727011] should_fail.cold.4+0xa/0x11 [ 2503.731090] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2503.736221] ? save_stack+0xa9/0xd0 [ 2503.739859] ? save_stack+0x43/0xd0 [ 2503.743497] ? kasan_kmalloc+0xc4/0xe0 [ 2503.747394] ? vfs_new_fs_context+0x5a/0x700 [ 2503.751812] ? do_mount+0x5cf/0x1fb0 [ 2503.755536] ? __x64_sys_mount+0xbe/0x150 [ 2503.759695] ? do_syscall_64+0x1b9/0x820 [ 2503.763854] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.769242] ? trace_hardirqs_off+0xd/0x10 [ 2503.773502] ? lock_acquire+0x1e4/0x540 [ 2503.777494] ? fs_reclaim_acquire+0x20/0x20 [ 2503.781827] ? lock_downgrade+0x8f0/0x8f0 [ 2503.785988] ? fs_reclaim_acquire+0x20/0x20 [ 2503.790334] ? check_same_owner+0x340/0x340 [ 2503.794669] ? debug_mutex_init+0x2d/0x60 [ 2503.798837] ? rcu_note_context_switch+0x730/0x730 [ 2503.803785] __should_failslab+0x124/0x180 [ 2503.808045] should_failslab+0x9/0x14 [ 2503.811866] __kmalloc_track_caller+0x2c4/0x760 [ 2503.816561] ? vfs_set_fs_source+0x67/0x180 [ 2503.820905] kmemdup_nul+0x31/0xa0 [ 2503.824466] vfs_set_fs_source+0x67/0x180 [ 2503.828633] do_mount+0x61b/0x1fb0 [ 2503.832202] ? check_same_owner+0x340/0x340 [ 2503.836535] ? lock_release+0xa30/0xa30 [ 2503.840540] ? copy_mount_string+0x40/0x40 [ 2503.844796] ? kasan_kmalloc+0xc4/0xe0 [ 2503.848699] ? kmem_cache_alloc_trace+0x318/0x780 [ 2503.853561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2503.859112] ? _copy_from_user+0xdf/0x150 [ 2503.863277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2503.868824] ? copy_mount_options+0x285/0x380 [ 2503.873339] ksys_mount+0x12d/0x140 [ 2503.876983] __x64_sys_mount+0xbe/0x150 [ 2503.880965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2503.886526] do_syscall_64+0x1b9/0x820 [ 2503.890441] ? syscall_slow_exit_work+0x500/0x500 [ 2503.895318] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2503.900266] ? syscall_return_slowpath+0x31d/0x5e0 [ 2503.905230] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2503.910263] ? perf_trace_sys_enter+0xb10/0xb10 [ 2503.915732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2503.920600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.925817] RIP: 0033:0x45885a [ 2503.929007] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2503.948636] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2503.956375] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2503.963675] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2503.970966] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2503.978256] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2503.985535] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000022 [ 2503.997825] FAT-fs (loop7): bogus sectors per cluster 99 [ 2504.003393] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2504.011627] FAT-fs (loop4): bogus number of reserved sectors [ 2504.017581] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000078) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffffc3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:09 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a03000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa09}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:09 executing program 6 (fault-call:1 fault-nth:35): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:09 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000403010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x333}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2504.205939] FAT-fs (loop7): bogus sectors per cluster 3 [ 2504.211426] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2504.212979] FAT-fs (loop5): bogus number of reserved sectors [ 2504.223214] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2504.239294] FAT-fs (loop4): bogus number of reserved sectors [ 2504.240906] FAT-fs (loop7): bogus sectors per cluster 3 [ 2504.245407] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2504.250805] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2504.265612] FAULT_INJECTION: forcing a failure. [ 2504.265612] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.277012] CPU: 0 PID: 30548 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2504.285428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.294794] Call Trace: [ 2504.297403] dump_stack+0x1c9/0x2b4 [ 2504.301051] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2504.306262] ? perf_trace_lock+0x49d/0x920 [ 2504.310522] should_fail.cold.4+0xa/0x11 [ 2504.314608] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2504.319735] ? kasan_check_read+0x11/0x20 [ 2504.324726] ? rcu_is_watching+0x8c/0x150 [ 2504.328902] ? is_bpf_text_address+0xd7/0x170 [ 2504.333411] ? kernel_text_address+0x79/0xf0 [ 2504.337840] ? lock_acquire+0x1e4/0x540 [ 2504.341823] ? fs_reclaim_acquire+0x20/0x20 [ 2504.346162] ? lock_downgrade+0x8f0/0x8f0 [ 2504.350336] ? check_same_owner+0x340/0x340 [ 2504.354678] ? save_stack+0xa9/0xd0 [ 2504.358325] ? rcu_note_context_switch+0x730/0x730 [ 2504.363267] ? kmem_cache_alloc_trace+0x152/0x780 [ 2504.368140] ? copy_mount_options+0x5f/0x380 [ 2504.372577] __should_failslab+0x124/0x180 [ 2504.376845] should_failslab+0x9/0x14 [ 2504.380656] kmem_cache_alloc+0x2af/0x760 [ 2504.384823] ? lock_acquire+0x1e4/0x540 [ 2504.388813] getname_flags+0xd0/0x5a0 [ 2504.392630] user_path_at_empty+0x2d/0x50 [ 2504.396791] do_mount+0x180/0x1fb0 [ 2504.400350] ? kasan_check_write+0x14/0x20 [ 2504.405039] ? copy_mount_string+0x40/0x40 [ 2504.409283] ? kasan_kmalloc+0xc4/0xe0 [ 2504.413189] ? kmem_cache_alloc_trace+0x318/0x780 [ 2504.418050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2504.423603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.429154] ? copy_mount_options+0x285/0x380 [ 2504.433683] ksys_mount+0x12d/0x140 [ 2504.437333] __x64_sys_mount+0xbe/0x150 [ 2504.441328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.446896] do_syscall_64+0x1b9/0x820 [ 2504.450811] ? syscall_slow_exit_work+0x500/0x500 [ 2504.455677] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2504.460628] ? syscall_return_slowpath+0x31d/0x5e0 [ 2504.465577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.471129] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2504.476175] ? perf_trace_sys_enter+0xb10/0xb10 [ 2504.480862] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2504.485727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2504.490924] RIP: 0033:0x45885a [ 2504.494112] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2504.513728] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2504.521441] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2504.528703] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2504.535981] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2504.543243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 08:33:10 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x400, 0xa9f, 0xfff, 0xa000000, 0x5, 0x17a, 0x7, 0x5, 0x6, 0xffffffff, 0x8, 0x30}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2504.550506] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000023 08:33:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a14000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:10 executing program 6 (fault-call:1 fault-nth:36): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x600000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2504.583376] FAT-fs (loop5): bogus number of reserved sectors [ 2504.589284] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2504.615826] FAT-fs (loop4): bogus number of reserved sectors [ 2504.621758] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:10 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000409010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2504.685151] FAULT_INJECTION: forcing a failure. [ 2504.685151] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.696610] CPU: 0 PID: 30570 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2504.702617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2504.705032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.705040] Call Trace: [ 2504.705070] dump_stack+0x1c9/0x2b4 [ 2504.705098] ? dump_stack_print_info.cold.2+0x52/0x52 08:33:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x60000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x1000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a04000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2504.705127] ? trace_hardirqs_on+0xd/0x10 [ 2504.705152] should_fail.cold.4+0xa/0x11 [ 2504.705172] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2504.705188] ? lock_repin_lock+0x430/0x430 [ 2504.705208] ? kasan_check_write+0x14/0x20 [ 2504.705237] ? __schedule+0x884/0x1ed0 [ 2504.705265] ? __sched_text_start+0x8/0x8 [ 2504.705283] ? kernel_text_address+0x79/0xf0 [ 2504.705309] ? lock_acquire+0x1e4/0x540 [ 2504.705324] ? fs_reclaim_acquire+0x20/0x20 [ 2504.705343] ? lock_downgrade+0x8f0/0x8f0 [ 2504.705371] ? check_same_owner+0x340/0x340 [ 2504.705387] ? save_stack+0xa9/0xd0 [ 2504.705405] ? kasan_kmalloc+0xc4/0xe0 [ 2504.705420] ? kmem_cache_alloc_trace+0x152/0x780 [ 2504.705435] ? copy_mount_options+0x5f/0x380 [ 2504.705453] __should_failslab+0x124/0x180 [ 2504.705473] should_failslab+0x9/0x14 [ 2504.705492] kmem_cache_alloc+0x2af/0x760 [ 2504.812707] ? lock_acquire+0x1e4/0x540 [ 2504.816735] ? handle_mm_fault+0x417/0xc80 [ 2504.821005] getname_flags+0xd0/0x5a0 [ 2504.824860] user_path_at_empty+0x2d/0x50 [ 2504.829033] do_mount+0x180/0x1fb0 [ 2504.830051] FAT-fs (loop4): bogus number of reserved sectors [ 2504.832596] ? check_same_owner+0x340/0x340 [ 2504.832614] ? lock_release+0xa30/0xa30 [ 2504.832629] ? check_same_owner+0x340/0x340 [ 2504.832653] ? copy_mount_string+0x40/0x40 [ 2504.832678] ? retint_kernel+0x10/0x10 [ 2504.838491] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2504.842792] ? copy_mount_options+0x1f0/0x380 [ 2504.842807] ? copy_mount_options+0x1f6/0x380 [ 2504.842830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.850938] FAT-fs (loop7): bogus sectors per cluster 9 [ 2504.851479] ? copy_mount_options+0x285/0x380 [ 2504.851505] ksys_mount+0x12d/0x140 [ 2504.851528] __x64_sys_mount+0xbe/0x150 [ 2504.855791] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2504.859636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.859657] do_syscall_64+0x1b9/0x820 [ 2504.859676] ? syscall_slow_exit_work+0x500/0x500 [ 2504.870722] FAT-fs (loop5): bogus number of reserved sectors [ 2504.874545] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2504.874565] ? syscall_return_slowpath+0x31d/0x5e0 [ 2504.874590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2504.874605] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2504.874625] ? perf_trace_sys_enter+0xb10/0xb10 [ 2504.880178] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2504.885514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2504.885542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2504.885554] RIP: 0033:0x45885a [ 2504.885559] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2504.987231] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2504.994961] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2505.002238] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2505.009604] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2505.016884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2505.024162] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000024 [ 2505.056783] FAT-fs (loop7): bogus sectors per cluster 9 [ 2505.057942] FAT-fs (loop5): bogus number of reserved sectors [ 2505.062256] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2505.068075] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2505.082170] FAT-fs (loop4): bogus number of reserved sectors [ 2505.088116] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000a5) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:10 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000414010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:10 executing program 6 (fault-call:1 fault-nth:37): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x60a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:10 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02001474f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x600}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2505.443343] FAT-fs (loop5): bogus number of reserved sectors [ 2505.443504] FAULT_INJECTION: forcing a failure. [ 2505.443504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2505.449262] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2505.461062] CPU: 0 PID: 30599 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2505.461075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.461082] Call Trace: [ 2505.461109] dump_stack+0x1c9/0x2b4 [ 2505.461138] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2505.496386] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2505.501530] should_fail.cold.4+0xa/0x11 [ 2505.505628] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2505.510760] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2505.515876] ? zap_class+0x740/0x740 [ 2505.519601] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2505.524715] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 2505.529838] ? perf_tp_event+0xc40/0xc40 [ 2505.533911] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2505.538354] ? memset+0x31/0x40 [ 2505.541650] ? perf_trace_lock+0x49d/0x920 [ 2505.545904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2505.551452] ? should_fail+0x246/0xd86 [ 2505.555348] ? zap_class+0x740/0x740 [ 2505.559085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2505.564212] __alloc_pages_nodemask+0x36e/0xdb0 [ 2505.568898] ? kasan_check_read+0x11/0x20 [ 2505.573060] ? rcu_is_watching+0x8c/0x150 [ 2505.577224] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2505.582253] ? is_bpf_text_address+0xd7/0x170 [ 2505.586784] ? kernel_text_address+0x79/0xf0 [ 2505.591211] ? lock_acquire+0x1e4/0x540 [ 2505.595195] ? fs_reclaim_acquire+0x20/0x20 [ 2505.599527] ? lock_downgrade+0x8f0/0x8f0 [ 2505.603688] ? lock_release+0xa30/0xa30 [ 2505.607677] ? check_same_owner+0x340/0x340 [ 2505.612006] ? save_stack+0xa9/0xd0 [ 2505.615652] cache_grow_begin+0x91/0x710 [ 2505.619735] kmem_cache_alloc+0x689/0x760 [ 2505.623939] getname_flags+0xd0/0x5a0 [ 2505.627762] user_path_at_empty+0x2d/0x50 [ 2505.631927] do_mount+0x180/0x1fb0 [ 2505.635483] ? kasan_check_write+0x14/0x20 [ 2505.639734] ? copy_mount_string+0x40/0x40 [ 2505.643981] ? kasan_kmalloc+0xc4/0xe0 [ 2505.647888] ? kmem_cache_alloc_trace+0x318/0x780 [ 2505.652766] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2505.658324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2505.663883] ? copy_mount_options+0x285/0x380 [ 2505.668396] ksys_mount+0x12d/0x140 [ 2505.672047] __x64_sys_mount+0xbe/0x150 [ 2505.676036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2505.681593] do_syscall_64+0x1b9/0x820 [ 2505.685494] ? syscall_slow_exit_work+0x500/0x500 [ 2505.690356] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2505.695305] ? syscall_return_slowpath+0x31d/0x5e0 [ 2505.700254] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2505.705304] ? perf_trace_sys_enter+0xb10/0xb10 [ 2505.709986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2505.714855] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2505.720052] RIP: 0033:0x45885a [ 2505.723244] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2505.742839] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2505.750567] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2505.757846] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2505.765150] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2505.772430] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2505.779707] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000025 [ 2505.792324] FAT-fs (loop4): bogus number of reserved sectors [ 2505.798402] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2505.802347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2505.821595] FAT-fs (loop7): bogus sectors per cluster 20 [ 2505.827393] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2505.841726] FAT-fs (loop6): bogus number of reserved sectors [ 2505.845916] FAT-fs (loop5): bogus number of reserved sectors [ 2505.847702] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2505.853778] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02020274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:11 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x100, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x6b0, 0xfffffffffffffff9, 0x5, 0x8001, 0x1ff, 0x7, 0x1f}, 0xc) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000440)) sched_getscheduler(r1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200041, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x125180, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='vboxnet0securitymd5sum!GpL\x00', r2}, 0xfffffffffffffeee) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x202, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x1, 0x9, 0x40, 0xfffffffffffffffa, 0x4, 0x0, 0x1, 0x3, 0x5, 0xd8d0, 0x81, 0x42, 0x10000, 0x2, 0x6]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r5, @in6={{0xa, 0x4e20, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0xbfa7, 0x104}, 0x90) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x40a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xc3ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:11 executing program 6 (fault-call:1 fault-nth:38): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2505.887438] FAT-fs (loop4): bogus number of reserved sectors [ 2505.893356] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2505.894104] FAT-fs (loop7): bogus sectors per cluster 20 [ 2505.904843] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2505.921517] FAT-fs (loop2): bogus number of directory entries (514) [ 2505.928050] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:11 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000410010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2505.971529] FAT-fs (loop2): bogus number of directory entries (514) [ 2505.978104] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2505.999092] FAT-fs (loop5): bogus number of reserved sectors [ 2506.005046] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:11 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000402010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2506.025489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2506.042870] FAULT_INJECTION: forcing a failure. [ 2506.042870] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.054288] CPU: 0 PID: 30635 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2506.062714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.072098] Call Trace: 08:33:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x900}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:11 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a020c0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2506.074714] dump_stack+0x1c9/0x2b4 [ 2506.078378] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2506.083605] ? perf_trace_lock+0x49d/0x920 [ 2506.087895] should_fail.cold.4+0xa/0x11 [ 2506.092010] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2506.097168] ? kasan_check_write+0x14/0x20 [ 2506.101444] ? zap_class+0x740/0x740 [ 2506.105198] ? debug_check_no_obj_freed+0x30b/0x595 [ 2506.110255] ? path_lookupat.isra.45+0x27d/0xbf0 [ 2506.115061] ? trace_hardirqs_off+0xd/0x10 [ 2506.119332] ? quarantine_put+0x10d/0x1b0 [ 2506.123543] ? lock_acquire+0x1e4/0x540 [ 2506.127526] ? fs_reclaim_acquire+0x20/0x20 [ 2506.131859] ? lock_downgrade+0x8f0/0x8f0 [ 2506.136026] ? check_same_owner+0x340/0x340 [ 2506.140349] ? lock_downgrade+0x8f0/0x8f0 [ 2506.144489] ? rcu_note_context_switch+0x730/0x730 [ 2506.149416] __should_failslab+0x124/0x180 [ 2506.153669] should_failslab+0x9/0x14 [ 2506.157466] kmem_cache_alloc_trace+0x2cb/0x780 [ 2506.162158] ? kasan_check_write+0x14/0x20 [ 2506.166388] ? do_raw_read_unlock+0x3f/0x60 [ 2506.170721] vfs_new_fs_context+0x5a/0x700 [ 2506.174985] do_mount+0x5cf/0x1fb0 [ 2506.178523] ? kasan_check_write+0x14/0x20 [ 2506.182753] ? copy_mount_string+0x40/0x40 [ 2506.186985] ? kasan_kmalloc+0xc4/0xe0 [ 2506.190874] ? kmem_cache_alloc_trace+0x318/0x780 [ 2506.195714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2506.201248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2506.206779] ? copy_mount_options+0x285/0x380 [ 2506.211272] ksys_mount+0x12d/0x140 [ 2506.214893] __x64_sys_mount+0xbe/0x150 [ 2506.218860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2506.224398] do_syscall_64+0x1b9/0x820 [ 2506.228280] ? syscall_slow_exit_work+0x500/0x500 [ 2506.233117] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2506.238053] ? syscall_return_slowpath+0x31d/0x5e0 [ 2506.242983] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2506.247991] ? perf_trace_sys_enter+0xb10/0xb10 [ 2506.252672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2506.257527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2506.262722] RIP: 0033:0x45885a [ 2506.265898] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2506.285909] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2506.293614] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2506.300910] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2506.308209] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2506.315472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2506.323729] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000026 [ 2506.336391] FAT-fs (loop2): bogus number of directory entries (524) [ 2506.342975] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2506.353295] FAT-fs (loop4): bogus number of reserved sectors [ 2506.359194] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2506.380367] FAT-fs (loop5): bogus number of reserved sectors [ 2506.386303] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2506.394560] FAT-fs (loop4): bogus number of reserved sectors [ 2506.400573] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2506.412982] FAT-fs (loop2): bogus number of directory entries (524) [ 2506.419605] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000010a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:12 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e66617400040a010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfeffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:12 executing program 6 (fault-call:1 fault-nth:39): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xffffff7f}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3303}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02740274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2506.818769] FAT-fs (loop2): bogus number of directory entries (628) [ 2506.825285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2506.847743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2506.859820] FAULT_INJECTION: forcing a failure. [ 2506.859820] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.871235] CPU: 0 PID: 30672 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2506.879664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.889040] Call Trace: [ 2506.891655] dump_stack+0x1c9/0x2b4 [ 2506.895297] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2506.900506] ? perf_trace_lock+0x49d/0x920 [ 2506.904762] should_fail.cold.4+0xa/0x11 [ 2506.908847] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2506.914069] ? kasan_check_write+0x14/0x20 [ 2506.918326] ? zap_class+0x740/0x740 [ 2506.922056] ? debug_check_no_obj_freed+0x30b/0x595 [ 2506.927087] ? path_lookupat.isra.45+0x27d/0xbf0 [ 2506.931870] ? trace_hardirqs_off+0xd/0x10 [ 2506.936132] ? quarantine_put+0x10d/0x1b0 [ 2506.940310] ? lock_acquire+0x1e4/0x540 [ 2506.944294] ? fs_reclaim_acquire+0x20/0x20 [ 2506.948628] ? lock_downgrade+0x8f0/0x8f0 [ 2506.952802] ? check_same_owner+0x340/0x340 [ 2506.957135] ? lock_downgrade+0x8f0/0x8f0 [ 2506.961295] ? rcu_note_context_switch+0x730/0x730 [ 2506.966247] __should_failslab+0x124/0x180 [ 2506.970494] should_failslab+0x9/0x14 [ 2506.974319] kmem_cache_alloc_trace+0x2cb/0x780 [ 2506.976900] FAT-fs (loop7): bogus sectors per cluster 10 [ 2506.979026] ? kasan_check_write+0x14/0x20 [ 2506.979049] ? do_raw_read_unlock+0x3f/0x60 [ 2506.979080] vfs_new_fs_context+0x5a/0x700 [ 2506.979105] do_mount+0x5cf/0x1fb0 [ 2506.984596] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2506.988792] ? kasan_check_write+0x14/0x20 [ 2506.988824] ? copy_mount_string+0x40/0x40 [ 2507.015259] ? kasan_kmalloc+0xc4/0xe0 [ 2507.019525] ? kmem_cache_alloc_trace+0x318/0x780 [ 2507.024392] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2507.029955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.035506] ? copy_mount_options+0x285/0x380 [ 2507.040038] ksys_mount+0x12d/0x140 [ 2507.043693] __x64_sys_mount+0xbe/0x150 [ 2507.044767] FAT-fs (loop4): bogus number of reserved sectors [ 2507.047712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.047735] do_syscall_64+0x1b9/0x820 [ 2507.047751] ? syscall_slow_exit_work+0x500/0x500 [ 2507.047769] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2507.047788] ? syscall_return_slowpath+0x31d/0x5e0 [ 2507.047806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.047826] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2507.053852] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2507.059153] ? perf_trace_sys_enter+0xb10/0xb10 [ 2507.059171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2507.059199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.106840] FAT-fs (loop5): bogus number of reserved sectors [ 2507.109008] RIP: 0033:0x45885a [ 2507.109015] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f [ 2507.114941] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2507.118090] fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2507.145007] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2507.152740] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2507.160026] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2507.167314] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2507.174604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2507.181903] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000027 [ 2507.195605] FAT-fs (loop2): bogus number of directory entries (628) [ 2507.202162] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2507.202179] FAT-fs (loop5): bogus number of reserved sectors [ 2507.214055] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2507.222258] FAT-fs (loop7): bogus sectors per cluster 10 [ 2507.227869] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2507.232427] FAT-fs (loop4): bogus number of reserved sectors [ 2507.239677] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3f, 0x440000) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000240), 0x80800) r1 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000340)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000380), &(0x7f0000000200), &(0x7f0000000300)) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000240), 0x0, 0x8094, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x400000, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x300}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x700}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02070274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:12 executing program 6 (fault-call:1 fault-nth:40): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:12 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404070a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2507.345849] FAULT_INJECTION: forcing a failure. [ 2507.345849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2507.357786] CPU: 1 PID: 30687 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2507.359735] FAT-fs (loop5): bogus number of reserved sectors [ 2507.367676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.367683] Call Trace: [ 2507.367714] dump_stack+0x1c9/0x2b4 [ 2507.367731] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2507.367749] ? perf_trace_lock+0xde/0x920 [ 2507.367775] ? lock_acquire+0x1e4/0x540 [ 2507.373607] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2507.382935] should_fail.cold.4+0xa/0x11 [ 2507.382958] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2507.382982] ? kasan_check_read+0x11/0x20 [ 2507.401259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2507.402477] ? rcu_is_watching+0x8c/0x150 [ 2507.402498] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2507.402517] ? is_bpf_text_address+0xd7/0x170 [ 2507.441455] ? kernel_text_address+0x79/0xf0 [ 2507.445877] ? __kernel_text_address+0xd/0x40 [ 2507.450423] ? lock_acquire+0x1e4/0x540 [ 2507.454390] ? fs_reclaim_acquire+0x20/0x20 [ 2507.459150] ? lock_downgrade+0x8f0/0x8f0 [ 2507.463302] ? check_same_owner+0x340/0x340 [ 2507.467629] ? save_stack+0x43/0xd0 [ 2507.471247] ? rcu_note_context_switch+0x730/0x730 [ 2507.476163] ? do_mount+0x69e/0x1fb0 [ 2507.479869] __alloc_pages_nodemask+0x36e/0xdb0 [ 2507.484526] ? trace_hardirqs_off+0xd/0x10 [ 2507.488760] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2507.493775] ? lock_acquire+0x1e4/0x540 [ 2507.497735] ? fs_reclaim_acquire+0x20/0x20 [ 2507.502053] ? lock_downgrade+0x8f0/0x8f0 [ 2507.506197] ? lock_release+0xa30/0xa30 [ 2507.510159] ? lock_release+0xa30/0xa30 [ 2507.514119] ? check_same_owner+0x340/0x340 [ 2507.518436] ? debug_mutex_init+0x2d/0x60 [ 2507.522579] ? kasan_unpoison_shadow+0x35/0x50 [ 2507.527149] ? kasan_kmalloc+0xc4/0xe0 [ 2507.531028] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2507.536558] alloc_pages_current+0x10c/0x210 [ 2507.540964] get_zeroed_page+0x14/0x50 [ 2507.544836] legacy_validate+0x111/0x210 [ 2507.548881] ? kmemdup+0x44/0x50 [ 2507.552242] ? legacy_get_tree+0x440/0x440 [ 2507.556460] vfs_get_tree+0x144/0x5c0 [ 2507.560246] ? vfs_set_fs_source+0x12c/0x180 [ 2507.564644] do_mount+0x6c1/0x1fb0 [ 2507.568173] ? check_same_owner+0x340/0x340 [ 2507.572477] ? lock_release+0xa30/0xa30 [ 2507.576437] ? copy_mount_string+0x40/0x40 [ 2507.580660] ? retint_kernel+0x10/0x10 [ 2507.584541] ? copy_mount_options+0x1f0/0x380 [ 2507.589025] ? copy_mount_options+0x200/0x380 [ 2507.593511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.599033] ? copy_mount_options+0x285/0x380 [ 2507.603516] ksys_mount+0x12d/0x140 [ 2507.607142] __x64_sys_mount+0xbe/0x150 [ 2507.611295] do_syscall_64+0x1b9/0x820 [ 2507.625171] ? finish_task_switch+0x1d3/0x870 [ 2507.629746] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2507.634661] ? syscall_return_slowpath+0x31d/0x5e0 [ 2507.639758] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2507.644761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.650282] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2507.655284] ? perf_trace_sys_enter+0xb10/0xb10 [ 2507.659939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2507.664784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.669969] RIP: 0033:0x45885a [ 2507.673147] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2507.692366] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2507.700059] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2507.707323] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2507.714582] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2507.721845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2507.729106] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000028 08:33:13 executing program 6 (fault-call:1 fault-nth:41): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2507.756673] FAT-fs (loop5): bogus number of reserved sectors [ 2507.762599] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2507.771668] FAT-fs (loop4): bogus number of reserved sectors [ 2507.777574] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2507.785986] FAT-fs (loop2): bogus number of directory entries (519) [ 2507.792654] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2507.841151] FAT-fs (loop4): bogus number of reserved sectors [ 2507.847145] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2507.860744] FAT-fs (loop2): bogus number of directory entries (519) [ 2507.867277] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2507.884094] FAULT_INJECTION: forcing a failure. [ 2507.884094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2507.895968] CPU: 0 PID: 30713 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2507.904386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.913755] Call Trace: [ 2507.916366] dump_stack+0x1c9/0x2b4 [ 2507.920009] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2507.925238] should_fail.cold.4+0xa/0x11 [ 2507.929327] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 2507.934105] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2507.939232] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2507.944360] ? is_bpf_text_address+0xae/0x170 [ 2507.948878] ? lock_downgrade+0x8f0/0x8f0 [ 2507.953044] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 2507.958163] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 2507.963473] ? perf_tp_event+0xc40/0xc40 [ 2507.967557] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2507.972249] ? memset+0x31/0x40 [ 2507.975561] ? perf_trace_lock+0x49d/0x920 [ 2507.979832] ? unwind_get_return_address+0x61/0xa0 [ 2507.984786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2507.990368] ? should_fail+0x246/0xd86 [ 2507.994268] ? zap_class+0x740/0x740 [ 2507.998005] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2508.003133] __alloc_pages_nodemask+0x36e/0xdb0 [ 2508.007821] ? kasan_kmalloc+0xc4/0xe0 [ 2508.011714] ? __kmalloc_track_caller+0x14a/0x760 [ 2508.016578] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2508.021607] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2508.026985] ? do_syscall_64+0x1b9/0x820 [ 2508.031067] ? __sched_text_start+0x8/0x8 [ 2508.035240] ? lock_acquire+0x1e4/0x540 [ 2508.039225] ? fs_reclaim_acquire+0x20/0x20 [ 2508.043564] ? lock_downgrade+0x8f0/0x8f0 [ 2508.047722] ? lock_downgrade+0x8f0/0x8f0 [ 2508.051882] ? lock_release+0xa30/0xa30 [ 2508.055864] ? lock_release+0xa30/0xa30 [ 2508.061762] ? check_same_owner+0x340/0x340 [ 2508.066090] ? check_same_owner+0x340/0x340 [ 2508.070432] cache_grow_begin+0x91/0x710 [ 2508.074526] __kmalloc_track_caller+0x684/0x760 [ 2508.079203] ? __kmalloc_track_caller+0x311/0x760 [ 2508.084065] ? legacy_parse_monolithic+0xc1/0x1d0 [ 2508.088924] kmemdup+0x24/0x50 [ 2508.092127] legacy_parse_monolithic+0xc1/0x1d0 [ 2508.096809] ? vfs_set_fs_source+0x12c/0x180 [ 2508.101225] ? legacy_validate+0x210/0x210 [ 2508.105471] do_mount+0x69e/0x1fb0 [ 2508.109020] ? kasan_check_write+0x14/0x20 [ 2508.113273] ? copy_mount_string+0x40/0x40 [ 2508.117524] ? kasan_kmalloc+0xc4/0xe0 [ 2508.121431] ? kmem_cache_alloc_trace+0x318/0x780 [ 2508.126289] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2508.131846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2508.137394] ? copy_mount_options+0x285/0x380 [ 2508.141908] ksys_mount+0x12d/0x140 [ 2508.145551] __x64_sys_mount+0xbe/0x150 [ 2508.149531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2508.155100] do_syscall_64+0x1b9/0x820 [ 2508.158998] ? syscall_slow_exit_work+0x500/0x500 [ 2508.163855] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2508.168799] ? syscall_return_slowpath+0x31d/0x5e0 [ 2508.173745] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2508.178769] ? perf_trace_sys_enter+0xb10/0xb10 [ 2508.183453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2508.188318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2508.193524] RIP: 0033:0x45885a [ 2508.196727] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2508.216343] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2508.224082] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2508.231360] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2508.238984] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2508.246269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2508.253653] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000029 08:33:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000097) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:13 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404080a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x2300}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xc3ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4a8}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02680274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2508.312758] FAT-fs (loop6): bogus number of reserved sectors [ 2508.318709] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2508.342339] FAT-fs (loop5): bogus number of reserved sectors [ 2508.348250] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2508.381178] FAT-fs (loop2): bogus number of directory entries (616) [ 2508.387707] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2508.394584] FAT-fs (loop5): bogus number of reserved sectors [ 2508.400525] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2508.409441] FAT-fs (loop4): bogus number of reserved sectors [ 2508.415365] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:13 executing program 1: r0 = open(&(0x7f00000003c0)='./file0/file0\x00', 0x4, 0x1000008) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="03fb0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x5) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) lremovexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)=@random={'system.', '-\x00'}) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:13 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404000a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:13 executing program 6 (fault-call:1 fault-nth:42): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x50a000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2508.444676] FAT-fs (loop2): bogus number of directory entries (616) [ 2508.451405] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2508.460611] FAT-fs (loop4): bogus number of reserved sectors [ 2508.466528] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02930274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4a9}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2508.552953] FAULT_INJECTION: forcing a failure. [ 2508.552953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2508.565088] CPU: 0 PID: 30757 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2508.573513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.578222] FAT-fs (loop2): bogus number of directory entries (659) [ 2508.582881] Call Trace: [ 2508.582912] dump_stack+0x1c9/0x2b4 [ 2508.582935] ? dump_stack_print_info.cold.2+0x52/0x52 08:33:14 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404030a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x7400000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2508.582969] should_fail.cold.4+0xa/0x11 [ 2508.589378] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2508.591962] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2508.591985] ? kasan_check_read+0x11/0x20 [ 2508.620016] ? rcu_is_watching+0x8c/0x150 [ 2508.624203] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2508.628910] ? is_bpf_text_address+0xd7/0x170 [ 2508.633426] ? kernel_text_address+0x79/0xf0 [ 2508.637850] ? __kernel_text_address+0xd/0x40 [ 2508.642395] ? lock_acquire+0x1e4/0x540 [ 2508.646382] ? fs_reclaim_acquire+0x20/0x20 [ 2508.650712] ? lock_downgrade+0x8f0/0x8f0 [ 2508.654883] ? check_same_owner+0x340/0x340 [ 2508.659217] ? save_stack+0x43/0xd0 [ 2508.662854] ? rcu_note_context_switch+0x730/0x730 [ 2508.667792] ? do_mount+0x69e/0x1fb0 [ 2508.671529] __alloc_pages_nodemask+0x36e/0xdb0 [ 2508.676220] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 2508.681259] ? kasan_check_read+0x11/0x20 [ 2508.685415] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2508.689841] ? kasan_check_write+0x14/0x20 [ 2508.694085] ? do_raw_spin_lock+0xc1/0x200 [ 2508.698335] ? kasan_unpoison_shadow+0x35/0x50 [ 2508.702925] ? kasan_kmalloc+0xc4/0xe0 [ 2508.706829] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2508.712385] alloc_pages_current+0x10c/0x210 [ 2508.716811] get_zeroed_page+0x14/0x50 [ 2508.720726] legacy_validate+0x111/0x210 [ 2508.724810] ? kmemdup+0x44/0x50 [ 2508.728185] ? legacy_get_tree+0x440/0x440 [ 2508.732431] vfs_get_tree+0x144/0x5c0 [ 2508.736239] ? vfs_set_fs_source+0x12c/0x180 [ 2508.740660] do_mount+0x6c1/0x1fb0 [ 2508.744210] ? kasan_check_write+0x14/0x20 [ 2508.748466] ? copy_mount_string+0x40/0x40 [ 2508.752718] ? retint_kernel+0x10/0x10 [ 2508.756633] ? copy_mount_options+0x1f0/0x380 [ 2508.761140] ? copy_mount_options+0x206/0x380 [ 2508.765646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2508.771193] ? copy_mount_options+0x285/0x380 [ 2508.775703] ksys_mount+0x12d/0x140 [ 2508.779350] __x64_sys_mount+0xbe/0x150 [ 2508.783341] do_syscall_64+0x1b9/0x820 [ 2508.787241] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2508.792182] ? syscall_return_slowpath+0x31d/0x5e0 [ 2508.797123] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2508.802148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2508.807692] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2508.812717] ? perf_trace_sys_enter+0xb10/0xb10 [ 2508.817403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2508.822267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2508.827464] RIP: 0033:0x45885a [ 2508.830654] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2508.850265] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2508.857991] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2508.865267] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2508.872542] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2508.879820] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2508.887113] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002a [ 2508.908426] FAT-fs (loop4): bogus number of reserved sectors [ 2508.914383] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2508.943134] FAT-fs (loop2): bogus number of directory entries (659) [ 2508.949743] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2508.971481] FAT-fs (loop5): bogus number of reserved sectors [ 2508.977405] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2508.991925] FAT-fs (loop4): bogus number of reserved sectors [ 2508.997871] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2509.015336] FAT-fs (loop5): bogus number of reserved sectors [ 2509.021272] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000003d) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x81000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:14 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000e74f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:14 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040b0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xe000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xf0ffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:14 executing program 6 (fault-call:1 fault-nth:43): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2509.311193] FAT-fs (loop5): bogus number of reserved sectors [ 2509.317309] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2509.319686] FAT-fs (loop4): bogus number of reserved sectors [ 2509.329205] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2509.348903] FAT-fs (loop5): bogus number of reserved sectors [ 2509.354884] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2509.364918] FAULT_INJECTION: forcing a failure. [ 2509.364918] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.376295] CPU: 0 PID: 30800 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2509.384728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.394104] Call Trace: [ 2509.396737] dump_stack+0x1c9/0x2b4 [ 2509.400399] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2509.405624] ? perf_trace_lock+0x49d/0x920 [ 2509.409889] should_fail.cold.4+0xa/0x11 [ 2509.413972] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2509.419085] ? should_fail+0x246/0xd86 [ 2509.423028] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2509.428148] ? kasan_check_read+0x11/0x20 [ 2509.432307] ? rcu_is_watching+0x8c/0x150 [ 2509.436480] ? is_bpf_text_address+0xd7/0x170 [ 2509.441000] ? kernel_text_address+0x79/0xf0 [ 2509.445439] ? lock_acquire+0x1e4/0x540 [ 2509.449426] ? fs_reclaim_acquire+0x20/0x20 [ 2509.453769] ? lock_downgrade+0x8f0/0x8f0 [ 2509.457924] ? fs_reclaim_acquire+0x20/0x20 [ 2509.462275] ? check_same_owner+0x340/0x340 [ 2509.466609] ? check_same_owner+0x340/0x340 [ 2509.470945] ? rcu_note_context_switch+0x730/0x730 [ 2509.475884] ? rcu_note_context_switch+0x730/0x730 [ 2509.480834] __should_failslab+0x124/0x180 [ 2509.485084] should_failslab+0x9/0x14 [ 2509.488896] kmem_cache_alloc+0x2af/0x760 [ 2509.493055] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 2509.497926] getname_kernel+0x54/0x370 [ 2509.501916] kern_path+0x1e/0x40 [ 2509.505300] lookup_bdev+0x10c/0x250 [ 2509.509030] ? blkdev_open+0x280/0x280 [ 2509.512935] ? kasan_check_write+0x14/0x20 [ 2509.517190] ? do_raw_spin_lock+0xc1/0x200 [ 2509.521447] blkdev_get_by_path+0x1f/0xe0 [ 2509.525614] mount_bdev+0x61/0x3e0 [ 2509.529170] ? vfat_mount+0x50/0x50 [ 2509.532818] vfat_mount+0x3c/0x50 [ 2509.536284] ? setup+0x120/0x120 [ 2509.539663] legacy_get_tree+0x118/0x440 [ 2509.543749] vfs_get_tree+0x1cb/0x5c0 [ 2509.547558] ? vfs_set_fs_source+0x12c/0x180 [ 2509.551983] do_mount+0x6c1/0x1fb0 [ 2509.555539] ? kasan_check_write+0x14/0x20 [ 2509.559793] ? copy_mount_string+0x40/0x40 [ 2509.564043] ? kasan_kmalloc+0xc4/0xe0 [ 2509.567951] ? kmem_cache_alloc_trace+0x318/0x780 [ 2509.572812] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2509.578372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2509.583923] ? copy_mount_options+0x285/0x380 [ 2509.588442] ksys_mount+0x12d/0x140 [ 2509.592112] __x64_sys_mount+0xbe/0x150 [ 2509.596114] do_syscall_64+0x1b9/0x820 [ 2509.600013] ? finish_task_switch+0x1d3/0x870 [ 2509.604521] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2509.609468] ? syscall_return_slowpath+0x31d/0x5e0 [ 2509.614415] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2509.619446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2509.625002] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2509.630035] ? perf_trace_sys_enter+0xb10/0xb10 [ 2509.634731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2509.639603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2509.644804] RIP: 0033:0x45885a [ 2509.647993] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2509.667761] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2509.675489] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2509.682769] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2509.690045] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2509.697324] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2509.704604] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002b [ 2509.731359] FAT-fs (loop4): bogus number of reserved sectors [ 2509.737273] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:15 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) io_setup(0x6, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) io_pgetevents(r1, 0x1000, 0x2, &(0x7f0000000440)=[{}, {}], &(0x7f0000000500)={r2, r3+10000000}, &(0x7f0000000580)={&(0x7f0000000540), 0x8}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) sigaltstack(&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000140)) r4 = getpgrp(0x0) sched_setattr(r4, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x1}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000900)={"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"}) tkill(r4, 0x2a) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r5}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r7, &(0x7f00000002c0)="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", 0xfb, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1f}}, 0x10) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000240)) 08:33:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x80020000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000f74f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:15 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040d0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:15 executing program 6 (fault-call:1 fault-nth:44): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xf5ffffff00000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2509.926854] FAULT_INJECTION: forcing a failure. [ 2509.926854] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.938383] CPU: 0 PID: 30814 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2509.946807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.954456] FAT-fs (loop5): bogus number of reserved sectors [ 2509.956171] Call Trace: [ 2509.956200] dump_stack+0x1c9/0x2b4 [ 2509.956227] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2509.962053] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2509.964654] ? perf_trace_lock+0x49d/0x920 [ 2509.964688] should_fail.cold.4+0xa/0x11 [ 2509.987952] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2509.993090] ? should_fail+0x246/0xd86 [ 2509.997017] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2510.002148] ? kasan_check_read+0x11/0x20 [ 2510.006318] ? rcu_is_watching+0x8c/0x150 [ 2510.010520] ? is_bpf_text_address+0xd7/0x170 [ 2510.015045] ? kernel_text_address+0x79/0xf0 [ 2510.017612] FAT-fs (loop4): bogus number of reserved sectors [ 2510.019484] ? lock_acquire+0x1e4/0x540 [ 2510.019503] ? fs_reclaim_acquire+0x20/0x20 [ 2510.019521] ? lock_downgrade+0x8f0/0x8f0 [ 2510.019540] ? fs_reclaim_acquire+0x20/0x20 [ 2510.025360] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2510.029313] ? check_same_owner+0x340/0x340 [ 2510.029327] ? check_same_owner+0x340/0x340 [ 2510.029348] ? rcu_note_context_switch+0x730/0x730 [ 2510.061662] ? rcu_note_context_switch+0x730/0x730 [ 2510.066612] __should_failslab+0x124/0x180 [ 2510.070869] should_failslab+0x9/0x14 [ 2510.074681] kmem_cache_alloc+0x2af/0x760 [ 2510.078847] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 2510.083716] getname_kernel+0x54/0x370 [ 2510.087627] kern_path+0x1e/0x40 [ 2510.091007] lookup_bdev+0x10c/0x250 [ 2510.094730] ? blkdev_open+0x280/0x280 [ 2510.098636] ? kasan_check_write+0x14/0x20 [ 2510.102884] ? do_raw_spin_lock+0xc1/0x200 [ 2510.107135] blkdev_get_by_path+0x1f/0xe0 [ 2510.111298] mount_bdev+0x61/0x3e0 [ 2510.114848] ? vfat_mount+0x50/0x50 [ 2510.118490] vfat_mount+0x3c/0x50 [ 2510.121952] ? setup+0x120/0x120 [ 2510.125329] legacy_get_tree+0x118/0x440 [ 2510.129423] vfs_get_tree+0x1cb/0x5c0 [ 2510.133241] ? vfs_set_fs_source+0x12c/0x180 [ 2510.137673] do_mount+0x6c1/0x1fb0 [ 2510.141226] ? kasan_check_write+0x14/0x20 [ 2510.145501] ? copy_mount_string+0x40/0x40 [ 2510.149748] ? kasan_kmalloc+0xc4/0xe0 [ 2510.153673] ? kmem_cache_alloc_trace+0x318/0x780 [ 2510.158533] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2510.164104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.169685] ? copy_mount_options+0x285/0x380 [ 2510.174199] ksys_mount+0x12d/0x140 08:33:15 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404100a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.177840] __x64_sys_mount+0xbe/0x150 [ 2510.181833] do_syscall_64+0x1b9/0x820 [ 2510.185733] ? finish_task_switch+0x1d3/0x870 [ 2510.190245] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2510.195192] ? syscall_return_slowpath+0x31d/0x5e0 [ 2510.200130] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2510.205161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.210718] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2510.215760] ? perf_trace_sys_enter+0xb10/0xb10 [ 2510.220455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2510.225335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2510.230544] RIP: 0033:0x45885a [ 2510.233742] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2510.253296] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2510.261040] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2510.268331] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2510.275621] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2510.282902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2510.290185] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002c [ 2510.332154] FAT-fs (loop4): bogus number of reserved sectors [ 2510.338066] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2510.345326] FAT-fs (loop5): bogus number of reserved sectors [ 2510.351195] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000130) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:15 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02060274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:15 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x9, 0x7fff}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000240)=0xc) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:15 executing program 6 (fault-call:1 fault-nth:45): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x8100}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x300000000000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x1000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:15 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404050a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2510.422883] FAT-fs (loop2): bogus number of directory entries (518) [ 2510.428540] FAULT_INJECTION: forcing a failure. [ 2510.428540] name failslab, interval 1, probability 0, space 0, times 0 [ 2510.429411] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2510.440675] CPU: 0 PID: 30850 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2510.454959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.464336] Call Trace: [ 2510.466962] dump_stack+0x1c9/0x2b4 [ 2510.470635] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2510.475865] ? perf_trace_lock+0x49d/0x920 [ 2510.480151] should_fail.cold.4+0xa/0x11 [ 2510.484245] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2510.489404] ? save_stack+0xa9/0xd0 [ 2510.493054] ? save_stack+0x43/0xd0 [ 2510.496700] ? kasan_kmalloc+0xc4/0xe0 [ 2510.500603] ? __kmalloc+0x14e/0x760 [ 2510.504331] ? __list_lru_init+0x151/0x840 [ 2510.508574] ? alloc_super+0x976/0xb10 [ 2510.512481] ? sget+0x10b/0x150 [ 2510.515771] ? mount_bdev+0x115/0x3e0 [ 2510.519600] ? vfat_mount+0x3c/0x50 [ 2510.523239] ? legacy_get_tree+0x118/0x440 [ 2510.527491] ? vfs_get_tree+0x1cb/0x5c0 [ 2510.531479] ? do_mount+0x6c1/0x1fb0 [ 2510.535218] ? lock_acquire+0x1e4/0x540 [ 2510.539199] ? fs_reclaim_acquire+0x20/0x20 [ 2510.543530] ? lock_downgrade+0x8f0/0x8f0 [ 2510.547705] ? check_same_owner+0x340/0x340 [ 2510.552046] ? rcu_note_context_switch+0x730/0x730 [ 2510.556995] __should_failslab+0x124/0x180 [ 2510.561244] should_failslab+0x9/0x14 [ 2510.565057] kmem_cache_alloc_node_trace+0x26f/0x770 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.570170] ? kasan_kmalloc+0xc4/0xe0 [ 2510.574086] __kmalloc_node+0x33/0x70 [ 2510.577902] kvmalloc_node+0x65/0xf0 [ 2510.581629] __list_lru_init+0x5d9/0x840 [ 2510.585717] ? list_lru_destroy+0x500/0x500 [ 2510.590074] ? prealloc_shrinker+0x213/0x480 [ 2510.594497] ? __init_waitqueue_head+0x9e/0x150 [ 2510.599187] ? inactive_list_is_low+0x850/0x850 [ 2510.603881] ? __lockdep_init_map+0x105/0x590 [ 2510.608403] alloc_super+0x976/0xb10 [ 2510.612148] ? destroy_unused_super.part.11+0x110/0x110 [ 2510.617569] ? lock_downgrade+0x8f0/0x8f0 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.621769] ? kasan_check_read+0x11/0x20 [ 2510.625937] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2510.630544] ? kasan_check_write+0x14/0x20 [ 2510.634806] ? do_raw_spin_lock+0xc1/0x200 [ 2510.639069] sget_userns+0x276/0x860 [ 2510.642796] ? kill_litter_super+0x60/0x60 [ 2510.647050] ? test_single_super+0x10/0x10 [ 2510.651303] ? vfs_get_super+0x270/0x270 [ 2510.655383] ? kasan_check_read+0x11/0x20 [ 2510.659554] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2510.664180] ? kasan_check_write+0x14/0x20 [ 2510.668444] ? do_raw_spin_lock+0xc1/0x200 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.672742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.678310] ? ns_capable_common+0x13f/0x170 [ 2510.682749] ? kill_litter_super+0x60/0x60 [ 2510.687005] sget+0x10b/0x150 [ 2510.690131] ? test_single_super+0x10/0x10 [ 2510.694416] mount_bdev+0x115/0x3e0 [ 2510.698060] ? vfat_mount+0x50/0x50 [ 2510.701707] vfat_mount+0x3c/0x50 [ 2510.705181] ? setup+0x120/0x120 [ 2510.708569] legacy_get_tree+0x118/0x440 [ 2510.712661] vfs_get_tree+0x1cb/0x5c0 [ 2510.716481] ? vfs_set_fs_source+0x12c/0x180 [ 2510.720915] do_mount+0x6c1/0x1fb0 [ 2510.724474] ? check_same_owner+0x340/0x340 [ 2510.728899] ? lock_release+0xa30/0xa30 [ 2510.732897] ? copy_mount_string+0x40/0x40 [ 2510.737158] ? retint_kernel+0x10/0x10 [ 2510.741116] ? copy_mount_options+0x1f0/0x380 [ 2510.745628] ? copy_mount_options+0x206/0x380 [ 2510.750160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.755727] ? copy_mount_options+0x285/0x380 [ 2510.755740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2510.760227] ksys_mount+0x12d/0x140 [ 2510.760251] __x64_sys_mount+0xbe/0x150 [ 2510.760272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2510.760293] do_syscall_64+0x1b9/0x820 [ 2510.760309] ? syscall_slow_exit_work+0x500/0x500 [ 2510.760328] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2510.760346] ? syscall_return_slowpath+0x31d/0x5e0 [ 2510.760367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2510.760382] ? perf_trace_sys_enter+0xb10/0xb10 [ 2510.760398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2510.760423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2510.760437] RIP: 0033:0x45885a 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x734f0000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.760442] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2510.842212] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2510.847159] FAT-fs (loop4): bogus number of reserved sectors [ 2510.849959] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2510.849971] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.849982] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2510.849992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2510.850002] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002d [ 2510.892701] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2510.913354] FAT-fs (loop5): bogus number of reserved sectors [ 2510.919424] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2510.928125] FAT-fs (loop2): bogus number of directory entries (518) [ 2510.934714] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2510.953332] FAT-fs (loop5): bogus number of reserved sectors [ 2510.959236] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2510.967646] FAT-fs (loop4): bogus number of reserved sectors 08:33:16 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040e0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x50a0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2510.973546] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2511.048782] FAT-fs (loop5): bogus number of reserved sectors [ 2511.054693] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2511.087399] FAT-fs (loop5): bogus number of reserved sectors [ 2511.093301] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000cb) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:16 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02080274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x2677}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:16 executing program 6 (fault-call:1 fault-nth:46): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:16 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040fff02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa604}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:16 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x4000, 0x1}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 2511.455641] FAT-fs (loop4): bogus number of reserved sectors [ 2511.461790] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2511.472337] FAT-fs (loop2): bogus number of directory entries (520) [ 2511.478838] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2511.493784] FAT-fs (loop5): bogus number of reserved sectors [ 2511.499716] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xffffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2511.499941] FAT-fs (loop7): count of clusters too big (4294966421) [ 2511.509062] FAT-fs (loop4): bogus number of reserved sectors [ 2511.512013] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2511.517836] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2511.545887] FAT-fs (loop2): bogus number of directory entries (520) 08:33:17 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a020a0074f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2511.552446] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2511.573464] FAT-fs (loop7): count of clusters too big (4294966421) [ 2511.579921] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2511.598820] FAT-fs (loop5): bogus number of reserved sectors [ 2511.604769] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2511.619708] FAULT_INJECTION: forcing a failure. [ 2511.619708] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.627962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2511.631081] CPU: 0 PID: 30928 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2511.631093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.631100] Call Trace: [ 2511.631125] dump_stack+0x1c9/0x2b4 [ 2511.631149] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2511.631171] ? perf_trace_lock+0x49d/0x920 [ 2511.631203] should_fail.cold.4+0xa/0x11 [ 2511.631228] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2511.631254] ? save_stack+0xa9/0xd0 [ 2511.631270] ? save_stack+0x43/0xd0 [ 2511.631288] ? kmem_cache_alloc_trace+0x152/0x780 [ 2511.631304] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2511.631319] ? __list_lru_init+0x4d6/0x840 [ 2511.631335] ? alloc_super+0x976/0xb10 [ 2511.631351] ? sget+0x10b/0x150 [ 2511.631366] ? mount_bdev+0x115/0x3e0 [ 2511.631381] ? legacy_get_tree+0x118/0x440 [ 2511.631394] ? vfs_get_tree+0x1cb/0x5c0 [ 2511.631412] ? do_mount+0x6c1/0x1fb0 [ 2511.724676] ? ksys_mount+0x12d/0x140 [ 2511.728491] ? __x64_sys_mount+0xbe/0x150 [ 2511.732650] ? do_syscall_64+0x1b9/0x820 [ 2511.736728] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2511.742131] ? lock_acquire+0x1e4/0x540 [ 2511.746118] ? fs_reclaim_acquire+0x20/0x20 [ 2511.750458] ? lock_downgrade+0x8f0/0x8f0 [ 2511.754627] ? do_mount+0x6c1/0x1fb0 [ 2511.758364] ? check_same_owner+0x340/0x340 [ 2511.762702] ? rcu_note_context_switch+0x730/0x730 [ 2511.767647] __should_failslab+0x124/0x180 [ 2511.771901] should_failslab+0x9/0x14 [ 2511.775716] kmem_cache_alloc_trace+0x2cb/0x780 [ 2511.780394] ? kasan_kmalloc+0xc4/0xe0 [ 2511.784308] __memcg_init_list_lru_node+0x185/0x2d0 [ 2511.789339] ? kvfree_rcu+0x20/0x20 [ 2511.792976] ? __kmalloc_node+0x47/0x70 [ 2511.796964] __list_lru_init+0x4d6/0x840 [ 2511.801043] ? list_lru_destroy+0x500/0x500 [ 2511.805394] ? prealloc_shrinker+0x213/0x480 [ 2511.809823] ? __init_waitqueue_head+0x9e/0x150 [ 2511.814524] ? inactive_list_is_low+0x850/0x850 [ 2511.819222] ? __lockdep_init_map+0x105/0x590 [ 2511.823746] alloc_super+0x976/0xb10 [ 2511.827497] ? destroy_unused_super.part.11+0x110/0x110 [ 2511.830897] FAT-fs (loop4): bogus number of reserved sectors [ 2511.832878] ? lock_downgrade+0x8f0/0x8f0 [ 2511.832909] ? kasan_check_read+0x11/0x20 [ 2511.832930] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2511.832948] ? kasan_check_write+0x14/0x20 08:33:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfffffff5}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:17 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404060a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2511.832960] ? do_raw_spin_lock+0xc1/0x200 [ 2511.832987] sget_userns+0x276/0x860 [ 2511.833001] ? kill_litter_super+0x60/0x60 [ 2511.833022] ? test_single_super+0x10/0x10 [ 2511.833039] ? vfs_get_super+0x270/0x270 [ 2511.833053] ? kasan_check_read+0x11/0x20 [ 2511.833067] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2511.833085] ? kasan_check_write+0x14/0x20 [ 2511.833097] ? do_raw_spin_lock+0xc1/0x200 [ 2511.833151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.833170] ? ns_capable_common+0x13f/0x170 [ 2511.833188] ? kill_litter_super+0x60/0x60 [ 2511.833201] sget+0x10b/0x150 [ 2511.833217] ? test_single_super+0x10/0x10 [ 2511.833238] mount_bdev+0x115/0x3e0 [ 2511.833259] ? vfat_mount+0x50/0x50 [ 2511.839071] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2511.843213] vfat_mount+0x3c/0x50 [ 2511.843229] ? setup+0x120/0x120 [ 2511.843248] legacy_get_tree+0x118/0x440 [ 2511.939195] vfs_get_tree+0x1cb/0x5c0 [ 2511.943009] ? vfs_set_fs_source+0x12c/0x180 [ 2511.947433] do_mount+0x6c1/0x1fb0 [ 2511.950990] ? check_same_owner+0x340/0x340 [ 2511.955321] ? lock_release+0xa30/0xa30 [ 2511.959315] ? copy_mount_string+0x40/0x40 [ 2511.963562] ? retint_kernel+0x10/0x10 [ 2511.967482] ? copy_mount_options+0x1a1/0x380 [ 2511.971988] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 2511.976842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2511.982388] ? copy_mount_options+0x285/0x380 [ 2511.986900] ksys_mount+0x12d/0x140 [ 2511.990546] __x64_sys_mount+0xbe/0x150 [ 2511.994534] do_syscall_64+0x1b9/0x820 [ 2511.998470] ? finish_task_switch+0x1d3/0x870 [ 2512.002980] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2512.007925] ? syscall_return_slowpath+0x31d/0x5e0 [ 2512.012868] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2512.017896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.023479] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2512.028508] ? perf_trace_sys_enter+0xb10/0xb10 [ 2512.033195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2512.038063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.043269] RIP: 0033:0x45885a [ 2512.046544] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2512.066131] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2512.073861] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2512.081140] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2512.088420] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2512.095708] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 08:33:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x407fe}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2512.103077] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002e [ 2512.118469] FAT-fs (loop2): bogus number of directory entries (10) [ 2512.125035] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2512.133378] FAT-fs (loop4): bogus number of reserved sectors [ 2512.139356] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:17 executing program 6 (fault-call:1 fault-nth:47): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2512.164515] FAT-fs (loop2): bogus number of directory entries (10) [ 2512.170947] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2512.182603] FAT-fs (loop5): bogus number of reserved sectors [ 2512.188611] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2512.221905] FAT-fs (loop5): bogus number of reserved sectors [ 2512.228137] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2512.248990] FAULT_INJECTION: forcing a failure. [ 2512.248990] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.260301] CPU: 1 PID: 30960 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2512.268715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.278091] Call Trace: [ 2512.280686] dump_stack+0x1c9/0x2b4 [ 2512.284317] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2512.289519] ? perf_trace_lock+0xde/0x920 [ 2512.293674] should_fail.cold.4+0xa/0x11 [ 2512.297741] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2512.302864] ? save_stack+0xa9/0xd0 [ 2512.307883] ? save_stack+0x43/0xd0 [ 2512.311513] ? kasan_kmalloc+0xc4/0xe0 [ 2512.315401] ? kmem_cache_alloc_trace+0x152/0x780 [ 2512.320261] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2512.325453] ? __list_lru_init+0x4d6/0x840 [ 2512.329690] ? alloc_super+0x976/0xb10 [ 2512.333588] ? sget+0x10b/0x150 [ 2512.336870] ? mount_bdev+0x115/0x3e0 [ 2512.340681] ? legacy_get_tree+0x118/0x440 [ 2512.344918] ? vfs_get_tree+0x1cb/0x5c0 [ 2512.348899] ? do_mount+0x6c1/0x1fb0 [ 2512.352625] ? ksys_mount+0x12d/0x140 [ 2512.356428] ? __x64_sys_mount+0xbe/0x150 [ 2512.360578] ? do_syscall_64+0x1b9/0x820 [ 2512.364648] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.370040] ? lock_acquire+0x1e4/0x540 [ 2512.374026] ? fs_reclaim_acquire+0x20/0x20 [ 2512.378359] ? lock_downgrade+0x8f0/0x8f0 [ 2512.382522] ? do_mount+0x6c1/0x1fb0 [ 2512.386248] ? check_same_owner+0x340/0x340 [ 2512.390579] ? rcu_note_context_switch+0x730/0x730 [ 2512.395520] __should_failslab+0x124/0x180 [ 2512.399758] should_failslab+0x9/0x14 [ 2512.403560] kmem_cache_alloc_trace+0x2cb/0x780 [ 2512.408226] ? kasan_kmalloc+0xc4/0xe0 [ 2512.412121] __memcg_init_list_lru_node+0x185/0x2d0 [ 2512.417151] ? kvfree_rcu+0x20/0x20 [ 2512.420790] ? __kmalloc_node+0x47/0x70 [ 2512.424775] __list_lru_init+0x4d6/0x840 [ 2512.428938] ? list_lru_destroy+0x500/0x500 [ 2512.433270] ? prealloc_shrinker+0x213/0x480 [ 2512.437686] ? __init_waitqueue_head+0x9e/0x150 [ 2512.442373] ? inactive_list_is_low+0x850/0x850 [ 2512.447055] ? __lockdep_init_map+0x105/0x590 [ 2512.451555] alloc_super+0x976/0xb10 [ 2512.455277] ? destroy_unused_super.part.11+0x110/0x110 [ 2512.460644] ? lock_downgrade+0x8f0/0x8f0 [ 2512.464798] ? kasan_check_read+0x11/0x20 [ 2512.468946] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2512.473533] ? kasan_check_write+0x14/0x20 [ 2512.477771] ? do_raw_spin_lock+0xc1/0x200 [ 2512.482016] sget_userns+0x276/0x860 [ 2512.485731] ? kill_litter_super+0x60/0x60 [ 2512.489965] ? test_single_super+0x10/0x10 [ 2512.494209] ? vfs_get_super+0x270/0x270 [ 2512.498270] ? kasan_check_read+0x11/0x20 [ 2512.502419] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2512.507000] ? kasan_check_write+0x14/0x20 [ 2512.511236] ? do_raw_spin_lock+0xc1/0x200 [ 2512.515485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.521034] ? ns_capable_common+0x13f/0x170 [ 2512.525448] ? kill_litter_super+0x60/0x60 [ 2512.529679] sget+0x10b/0x150 [ 2512.532785] ? test_single_super+0x10/0x10 [ 2512.537039] mount_bdev+0x115/0x3e0 [ 2512.540665] ? vfat_mount+0x50/0x50 [ 2512.544301] vfat_mount+0x3c/0x50 [ 2512.547752] ? setup+0x120/0x120 [ 2512.551117] legacy_get_tree+0x118/0x440 [ 2512.555189] vfs_get_tree+0x1cb/0x5c0 [ 2512.558988] ? vfs_set_fs_source+0x12c/0x180 [ 2512.563400] do_mount+0x6c1/0x1fb0 [ 2512.566942] ? check_same_owner+0x340/0x340 [ 2512.571262] ? lock_release+0xa30/0xa30 [ 2512.575237] ? copy_mount_string+0x40/0x40 [ 2512.579477] ? kasan_kmalloc+0xc4/0xe0 [ 2512.584095] ? kmem_cache_alloc_trace+0x318/0x780 [ 2512.588949] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2512.594503] ? _copy_from_user+0xdf/0x150 [ 2512.598654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.604190] ? copy_mount_options+0x285/0x380 [ 2512.608686] ksys_mount+0x12d/0x140 [ 2512.612314] __x64_sys_mount+0xbe/0x150 [ 2512.616292] do_syscall_64+0x1b9/0x820 [ 2512.620177] ? finish_task_switch+0x1d3/0x870 [ 2512.624683] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2512.629613] ? syscall_return_slowpath+0x31d/0x5e0 [ 2512.634545] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2512.639565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2512.645107] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2512.650127] ? perf_trace_sys_enter+0xb10/0xb10 [ 2512.654795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2512.659645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.664834] RIP: 0033:0x45885a [ 2512.668013] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2512.687327] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2512.695038] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2512.702304] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2512.709573] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2512.716840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 08:33:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000008f) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:18 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404090a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xff0f000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:18 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a024c0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x40000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:18 executing program 1: setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getpid() getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000280)={0x0, 0x0}) r1 = getpgrp(r0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f00000003c0)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000500)="36c14ec037eb7894e7ea2f1d232aeeb5f9b3ba1ebcbfc97c6c2ce648c42053969f3c6b188c025135315d55e16143c00087405cebc49d25dbcc3fc89a4b75e33596472b8265c9547d390734e5bb2b8f2d1f2801000ba87a806c8be23ddd4a5f326d86d2f30aaaf8a07c9c00ac8b23ef679d0c5d19ffb2678e327146852ec39c3bb9a9ac165079bb8e1a97de9f86842fb87f01b04668bca9cb8e059824894f2ab84a8d46ecf598592686961cca68dba9d20b12c35759c19298d3c4640b65") ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x5}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000006c0)=ANY=[@ANYBLOB="00f0ffffffffffff04000000000000000600000000000000", @ANYRES32, @ANYBLOB="00000000ff7f00000000000000000000000000000000000000000000", @ANYRES32, @ANYBLOB="009a000000000000000000000000000000e1ff871fa11ad1165613a091c7a49904c7b1ffffffffffff000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000000000000000ffff0000000000000000000000000000000000", @ANYRES32, @ANYBLOB="000000008000000000000000000000000000001508000054a5a95e00"]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x200, 0x0) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000080)={0x20000001}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x8002) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f00000005c0)="6bce11e43898d5c2a9c9d49ee017664fb7badc34001746cf63d46e5739dca34a408c4b8f9e26a0b07aaab1c5953566d56414b0b71eb9eabe25e132aa064f67887b086ac4e28099f461e5cb3c5d9618cbc07c93f84ca91e41869b6a93fe9e56b7f9629103a6fd9861aa683cd644c83ee7cd30eebdbc8d050f73171fa81ecb6e7dde8c7fd3a8323e733dd06ac1c9e73000a0714e1b9839a8edbcd9d941748469a10b475c1ca6418f32bad7fcc80efb8d397bdc43cbf0188f97cdec62bb38b5763b4b7f0e29", 0xc4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') 08:33:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x7}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2512.724108] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000002f 08:33:18 executing program 6 (fault-call:1 fault-nth:48): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2512.779217] FAT-fs (loop2): bogus number of directory entries (588) [ 2512.784983] FAT-fs (loop4): bogus number of reserved sectors [ 2512.785819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2512.791647] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:18 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404040a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2512.848638] FAULT_INJECTION: forcing a failure. [ 2512.848638] name failslab, interval 1, probability 0, space 0, times 0 [ 2512.850480] FAT-fs (loop4): bogus number of reserved sectors [ 2512.860083] CPU: 1 PID: 30992 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2512.865803] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2512.874183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.874190] Call Trace: [ 2512.874216] dump_stack+0x1c9/0x2b4 08:33:18 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x84, 0x7, 0xf, 0x400, 0x70bd29, 0x25dfdbfd, {0xf, 0x0, 0x7}, [@typed={0xc, 0x4, @str=')),(\x00'}, @typed={0x64, 0x90, @binary="b9e21452a584cb2aa85ae2230a27e90f7a4dc691057b6766db2ff6d25ca010c5941a925ae6b151de5263813f2689ede827e7eb8de59d591c963bc36b2a15bf9ef5d0a229369662d9bc581578a294c2e72d3dcc8bdd0d6d6a37026da9cd26"}]}, 0x84}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xfeffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2512.874235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2512.874260] ? perf_trace_lock+0xde/0x920 [ 2512.905041] should_fail.cold.4+0xa/0x11 [ 2512.909330] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2512.914457] ? save_stack+0xa9/0xd0 [ 2512.918105] ? save_stack+0x43/0xd0 [ 2512.921748] ? kasan_kmalloc+0xc4/0xe0 [ 2512.925654] ? kmem_cache_alloc_trace+0x152/0x780 [ 2512.930513] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2512.935719] ? __list_lru_init+0x4d6/0x840 [ 2512.938692] FAT-fs (loop5): invalid media value (0x01) [ 2512.939959] ? alloc_super+0x976/0xb10 [ 2512.939975] ? sget+0x10b/0x150 [ 2512.939990] ? mount_bdev+0x115/0x3e0 [ 2512.940005] ? legacy_get_tree+0x118/0x440 [ 2512.940023] ? vfs_get_tree+0x1cb/0x5c0 [ 2512.945320] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2512.949185] ? do_mount+0x6c1/0x1fb0 [ 2512.949198] ? ksys_mount+0x12d/0x140 [ 2512.949208] ? __x64_sys_mount+0xbe/0x150 [ 2512.949230] ? do_syscall_64+0x1b9/0x820 [ 2512.986018] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.991408] ? lock_acquire+0x1e4/0x540 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xc0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2512.995396] ? fs_reclaim_acquire+0x20/0x20 [ 2512.999732] ? lock_downgrade+0x8f0/0x8f0 [ 2513.003886] ? do_mount+0x6c1/0x1fb0 [ 2513.007606] ? check_same_owner+0x340/0x340 [ 2513.011929] ? rcu_note_context_switch+0x730/0x730 [ 2513.016879] __should_failslab+0x124/0x180 [ 2513.021128] should_failslab+0x9/0x14 [ 2513.024938] kmem_cache_alloc_trace+0x2cb/0x780 [ 2513.029615] ? kasan_kmalloc+0xc4/0xe0 [ 2513.033516] __memcg_init_list_lru_node+0x185/0x2d0 [ 2513.038654] ? kvfree_rcu+0x20/0x20 [ 2513.042292] ? __kmalloc_node+0x47/0x70 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2513.046277] __list_lru_init+0x4d6/0x840 [ 2513.050360] ? list_lru_destroy+0x500/0x500 [ 2513.054705] ? prealloc_shrinker+0x213/0x480 [ 2513.059136] ? __init_waitqueue_head+0x9e/0x150 [ 2513.063811] ? inactive_list_is_low+0x850/0x850 [ 2513.068490] ? __lockdep_init_map+0x105/0x590 [ 2513.072996] alloc_super+0x976/0xb10 [ 2513.076719] ? destroy_unused_super.part.11+0x110/0x110 [ 2513.082094] ? lock_downgrade+0x8f0/0x8f0 [ 2513.086254] ? kasan_check_read+0x11/0x20 [ 2513.090414] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2513.095012] ? kasan_check_write+0x14/0x20 [ 2513.099349] ? do_raw_spin_lock+0xc1/0x200 [ 2513.103616] sget_userns+0x276/0x860 [ 2513.107340] ? kill_litter_super+0x60/0x60 [ 2513.111581] ? test_single_super+0x10/0x10 [ 2513.115825] ? vfs_get_super+0x270/0x270 [ 2513.119896] ? kasan_check_read+0x11/0x20 [ 2513.124062] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2513.128653] ? kasan_check_write+0x14/0x20 [ 2513.132892] ? do_raw_spin_lock+0xc1/0x200 [ 2513.137144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2513.142686] ? ns_capable_common+0x13f/0x170 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2513.147103] ? kill_litter_super+0x60/0x60 [ 2513.151341] sget+0x10b/0x150 [ 2513.154455] ? test_single_super+0x10/0x10 [ 2513.158702] mount_bdev+0x115/0x3e0 [ 2513.162337] ? vfat_mount+0x50/0x50 [ 2513.165980] vfat_mount+0x3c/0x50 [ 2513.169440] ? setup+0x120/0x120 [ 2513.172810] legacy_get_tree+0x118/0x440 [ 2513.176878] vfs_get_tree+0x1cb/0x5c0 [ 2513.180685] ? vfs_set_fs_source+0x12c/0x180 [ 2513.185108] do_mount+0x6c1/0x1fb0 [ 2513.188656] ? check_same_owner+0x340/0x340 [ 2513.192987] ? copy_mount_string+0x40/0x40 08:33:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x600}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2513.197231] ? retint_kernel+0x10/0x10 [ 2513.201128] ? copy_mount_options+0x213/0x380 [ 2513.205634] ? write_comp_data+0x6c/0x70 [ 2513.209702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2513.215251] ? copy_mount_options+0x285/0x380 [ 2513.219764] ksys_mount+0x12d/0x140 [ 2513.223410] __x64_sys_mount+0xbe/0x150 [ 2513.227398] do_syscall_64+0x1b9/0x820 [ 2513.236117] ? finish_task_switch+0x1d3/0x870 [ 2513.240625] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2513.245575] ? syscall_return_slowpath+0x31d/0x5e0 [ 2513.250544] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2513.255588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2513.261146] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2513.266174] ? perf_trace_sys_enter+0xb10/0xb10 [ 2513.270859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2513.275714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2513.280910] RIP: 0033:0x45885a [ 2513.284097] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2513.303390] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2513.311108] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2513.318382] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2513.325652] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2513.332921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2513.340197] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000030 [ 2513.366526] FAT-fs (loop2): bogus number of directory entries (588) [ 2513.373063] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2513.387134] FAT-fs (loop5): invalid media value (0x01) [ 2513.392517] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:19 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000e1) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02100274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:19 executing program 6 (fault-call:1 fault-nth:49): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xffffff7f00000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:19 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404230a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x1000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2513.799404] FAT-fs (loop2): bogus number of directory entries (528) [ 2513.805920] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:19 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404020a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2513.864643] FAT-fs (loop2): bogus number of directory entries (528) [ 2513.867191] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2513.871178] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:19 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000140)={0x0, 0x4, 0x5}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2513.930918] FAULT_INJECTION: forcing a failure. [ 2513.930918] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.942263] CPU: 1 PID: 31044 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2513.950683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.960049] Call Trace: [ 2513.962658] dump_stack+0x1c9/0x2b4 [ 2513.966313] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2513.971530] ? perf_trace_lock+0xde/0x920 [ 2513.975705] should_fail.cold.4+0xa/0x11 [ 2513.979802] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2513.984936] ? save_stack+0xa9/0xd0 [ 2513.988591] ? save_stack+0x43/0xd0 [ 2513.992242] ? kasan_kmalloc+0xc4/0xe0 [ 2513.996160] ? kmem_cache_alloc_trace+0x152/0x780 [ 2514.001032] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2514.006252] ? __list_lru_init+0x4d6/0x840 [ 2514.006855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2514.010499] ? alloc_super+0x976/0xb10 [ 2514.010516] ? sget+0x10b/0x150 [ 2514.010533] ? mount_bdev+0x115/0x3e0 08:33:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2514.010552] ? legacy_get_tree+0x118/0x440 [ 2514.010569] ? vfs_get_tree+0x1cb/0x5c0 [ 2514.036219] ? do_mount+0x6c1/0x1fb0 [ 2514.039948] ? ksys_mount+0x12d/0x140 [ 2514.043763] ? __x64_sys_mount+0xbe/0x150 [ 2514.047939] ? do_syscall_64+0x1b9/0x820 [ 2514.052028] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2514.057414] ? lock_acquire+0x1e4/0x540 [ 2514.061406] ? fs_reclaim_acquire+0x20/0x20 [ 2514.065746] ? lock_downgrade+0x8f0/0x8f0 [ 2514.066208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2514.069909] ? do_mount+0x6c1/0x1fb0 08:33:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000374f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2514.069931] ? check_same_owner+0x340/0x340 [ 2514.069949] ? rcu_note_context_switch+0x730/0x730 [ 2514.069966] __should_failslab+0x124/0x180 [ 2514.069986] should_failslab+0x9/0x14 [ 2514.094273] FAT-fs (loop4): bogus number of reserved sectors [ 2514.097464] kmem_cache_alloc_trace+0x2cb/0x780 [ 2514.097483] ? kasan_kmalloc+0xc4/0xe0 [ 2514.097523] __memcg_init_list_lru_node+0x185/0x2d0 [ 2514.097551] ? kvfree_rcu+0x20/0x20 [ 2514.103353] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2514.107995] ? __kmalloc_node+0x47/0x70 [ 2514.108014] __list_lru_init+0x4d6/0x840 [ 2514.108033] ? list_lru_destroy+0x500/0x500 [ 2514.138717] ? prealloc_shrinker+0x213/0x480 [ 2514.143125] ? __init_waitqueue_head+0x9e/0x150 [ 2514.147787] ? inactive_list_is_low+0x850/0x850 [ 2514.153466] ? __lockdep_init_map+0x105/0x590 [ 2514.157953] alloc_super+0x976/0xb10 [ 2514.161656] ? destroy_unused_super.part.11+0x110/0x110 [ 2514.167008] ? lock_downgrade+0x8f0/0x8f0 [ 2514.171152] ? kasan_check_read+0x11/0x20 [ 2514.175287] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2514.179855] ? kasan_check_write+0x14/0x20 [ 2514.184075] ? do_raw_spin_lock+0xc1/0x200 [ 2514.188301] sget_userns+0x276/0x860 [ 2514.192014] ? kill_litter_super+0x60/0x60 [ 2514.196237] ? test_single_super+0x10/0x10 [ 2514.200457] ? vfs_get_super+0x270/0x270 [ 2514.204506] ? kasan_check_read+0x11/0x20 [ 2514.208657] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2514.213229] ? kasan_check_write+0x14/0x20 [ 2514.217446] ? do_raw_spin_lock+0xc1/0x200 [ 2514.221690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2514.227215] ? ns_capable_common+0x13f/0x170 [ 2514.231623] ? kill_litter_super+0x60/0x60 [ 2514.236058] sget+0x10b/0x150 [ 2514.239153] ? test_single_super+0x10/0x10 [ 2514.243376] mount_bdev+0x115/0x3e0 [ 2514.247136] ? vfat_mount+0x50/0x50 [ 2514.250770] vfat_mount+0x3c/0x50 [ 2514.254210] ? setup+0x120/0x120 [ 2514.257563] legacy_get_tree+0x118/0x440 [ 2514.261631] vfs_get_tree+0x1cb/0x5c0 [ 2514.265636] ? vfs_set_fs_source+0x12c/0x180 [ 2514.270048] do_mount+0x6c1/0x1fb0 [ 2514.273587] ? check_same_owner+0x340/0x340 [ 2514.277894] ? lock_release+0xa30/0xa30 [ 2514.281866] ? copy_mount_string+0x40/0x40 [ 2514.286089] ? kasan_kmalloc+0xc4/0xe0 [ 2514.289964] ? kmem_cache_alloc_trace+0x318/0x780 [ 2514.294835] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2514.300379] ? _copy_from_user+0xdf/0x150 [ 2514.304515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2514.310043] ? copy_mount_options+0x285/0x380 [ 2514.314538] ksys_mount+0x12d/0x140 [ 2514.318244] __x64_sys_mount+0xbe/0x150 [ 2514.322229] do_syscall_64+0x1b9/0x820 [ 2514.326109] ? finish_task_switch+0x1d3/0x870 [ 2514.330602] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2514.335520] ? syscall_return_slowpath+0x31d/0x5e0 [ 2514.340436] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2514.345439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2514.350963] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2514.355965] ? perf_trace_sys_enter+0xb10/0xb10 [ 2514.360623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2514.365471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2514.370645] RIP: 0033:0x45885a [ 2514.373817] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2514.393113] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2514.400810] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2514.408073] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2514.415333] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2514.422588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2514.429846] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000031 08:33:19 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040a0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:19 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000a74f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2514.460418] FAT-fs (loop4): bogus number of reserved sectors [ 2514.466378] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2514.472359] FAT-fs (loop5): bogus number of reserved sectors [ 2514.478211] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3f00000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2514.510122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2514.530064] FAT-fs (loop5): bogus number of reserved sectors [ 2514.536050] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2514.588644] FAT-fs (loop4): bogus number of reserved sectors [ 2514.594802] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2514.616860] FAT-fs (loop4): bogus number of reserved sectors [ 2514.622801] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:20 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000091) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc3ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:20 executing program 6 (fault-call:1 fault-nth:50): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:20 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040c0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x8000000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02040274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xfe3f0000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2514.836549] FAULT_INJECTION: forcing a failure. [ 2514.836549] name failslab, interval 1, probability 0, space 0, times 0 [ 2514.847940] CPU: 0 PID: 31087 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2514.856368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.862456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2514.865736] Call Trace: [ 2514.865766] dump_stack+0x1c9/0x2b4 [ 2514.865792] ? dump_stack_print_info.cold.2+0x52/0x52 08:33:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2514.865815] ? perf_trace_lock+0x49d/0x920 [ 2514.887975] should_fail.cold.4+0xa/0x11 [ 2514.892105] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2514.897241] ? is_bpf_text_address+0xd7/0x170 [ 2514.901770] ? __kernel_text_address+0xd/0x40 [ 2514.906317] ? unwind_get_return_address+0x61/0xa0 [ 2514.911289] ? __save_stack_trace+0x8d/0xf0 [ 2514.915679] ? lock_acquire+0x1e4/0x540 [ 2514.919681] ? fs_reclaim_acquire+0x20/0x20 [ 2514.924035] ? lock_downgrade+0x8f0/0x8f0 [ 2514.928242] ? do_mount+0x6c1/0x1fb0 [ 2514.932000] ? check_same_owner+0x340/0x340 [ 2514.936353] ? rcu_note_context_switch+0x730/0x730 [ 2514.941322] __should_failslab+0x124/0x180 [ 2514.945756] should_failslab+0x9/0x14 [ 2514.949579] kmem_cache_alloc_trace+0x2cb/0x780 [ 2514.954064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2514.954259] ? kasan_kmalloc+0xc4/0xe0 [ 2514.964675] __memcg_init_list_lru_node+0x185/0x2d0 [ 2514.969710] ? kvfree_rcu+0x20/0x20 [ 2514.973357] ? __kmalloc_node+0x47/0x70 [ 2514.977357] __list_lru_init+0x4d6/0x840 [ 2514.981466] ? list_lru_destroy+0x500/0x500 [ 2514.985815] ? prealloc_shrinker+0x213/0x480 [ 2514.990244] ? __init_waitqueue_head+0x9e/0x150 [ 2514.994935] ? inactive_list_is_low+0x850/0x850 [ 2514.999627] ? __lockdep_init_map+0x105/0x590 [ 2515.004144] alloc_super+0x976/0xb10 [ 2515.007888] ? destroy_unused_super.part.11+0x110/0x110 [ 2515.013275] ? lock_downgrade+0x8f0/0x8f0 [ 2515.017456] ? kasan_check_read+0x11/0x20 [ 2515.021633] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2515.026237] ? kasan_check_write+0x14/0x20 [ 2515.030481] ? do_raw_spin_lock+0xc1/0x200 [ 2515.034738] sget_userns+0x276/0x860 [ 2515.038460] ? kill_litter_super+0x60/0x60 [ 2515.042734] ? test_single_super+0x10/0x10 [ 2515.046984] ? vfs_get_super+0x270/0x270 [ 2515.051061] ? kasan_check_read+0x11/0x20 [ 2515.055224] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2515.059823] ? kasan_check_write+0x14/0x20 [ 2515.064068] ? do_raw_spin_lock+0xc1/0x200 [ 2515.068355] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.073904] ? ns_capable_common+0x13f/0x170 [ 2515.078331] ? kill_litter_super+0x60/0x60 [ 2515.082576] sget+0x10b/0x150 [ 2515.085694] ? test_single_super+0x10/0x10 [ 2515.089947] mount_bdev+0x115/0x3e0 [ 2515.093586] ? vfat_mount+0x50/0x50 [ 2515.097228] vfat_mount+0x3c/0x50 [ 2515.100717] ? setup+0x120/0x120 [ 2515.104097] legacy_get_tree+0x118/0x440 [ 2515.108187] vfs_get_tree+0x1cb/0x5c0 [ 2515.111995] ? vfs_set_fs_source+0x12c/0x180 [ 2515.116418] do_mount+0x6c1/0x1fb0 [ 2515.119967] ? check_same_owner+0x340/0x340 [ 2515.124297] ? lock_release+0xa30/0xa30 [ 2515.128289] ? copy_mount_string+0x40/0x40 [ 2515.132541] ? retint_kernel+0x10/0x10 [ 2515.136455] ? copy_mount_options+0x1f0/0x380 [ 2515.141050] ? copy_mount_options+0x202/0x380 [ 2515.145561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.151112] ? copy_mount_options+0x285/0x380 [ 2515.155631] ksys_mount+0x12d/0x140 [ 2515.159278] __x64_sys_mount+0xbe/0x150 [ 2515.163276] do_syscall_64+0x1b9/0x820 [ 2515.167189] ? finish_task_switch+0x1d3/0x870 [ 2515.171702] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2515.176646] ? syscall_return_slowpath+0x31d/0x5e0 [ 2515.181588] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2515.186619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.192171] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2515.197212] ? perf_trace_sys_enter+0xb10/0xb10 [ 2515.201894] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2515.206762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2515.211961] RIP: 0033:0x45885a [ 2515.215157] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2515.234762] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2515.242486] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2515.249779] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2515.257059] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2515.264341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2515.271619] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000032 [ 2515.288654] FAT-fs (loop4): bogus number of reserved sectors [ 2515.294623] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2515.300889] FAT-fs (loop5): bogus number of reserved sectors [ 2515.306811] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2515.313841] FAT-fs (loop2): bogus number of directory entries (516) [ 2515.320344] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2515.338740] FAT-fs (loop4): bogus number of reserved sectors [ 2515.344675] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2515.346070] FAT-fs (loop2): bogus number of directory entries (516) [ 2515.357078] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2515.366405] FAT-fs (loop5): bogus number of reserved sectors [ 2515.372286] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:20 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xbf, "a31114d87ae082188d6f5e80c3696579e862af2a88f14e9c75087339cb7be0612dd294fdf1d2e446b33523eee2f870f77e33cd0aef04e36cf7bd244de868f221f00da9a1149cf1f3a875cb9f492727a43b581f16831ee4bd60dda98d75bff6cc15d1d99625df43be1462f894bd9e5cc09d245bfa5bf0aecccee30cf9ec6f86bd5656d962f25605aa198f577eb05feb8f5f746dc8620facb1646b7571ae3204d6681280d72ea2c69ea2810236b62610385482932764a76bbfb9e4e107adc851"}, &(0x7f0000000140)=0xc7) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={r5, 0x5, 0x4}, 0x8) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:20 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e6661740004040f0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:20 executing program 6 (fault-call:1 fault-nth:51): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa06}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:20 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02230274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2515.440546] FAULT_INJECTION: forcing a failure. [ 2515.440546] name failslab, interval 1, probability 0, space 0, times 0 [ 2515.451897] CPU: 0 PID: 31116 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2515.460322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.469697] Call Trace: [ 2515.471370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2515.472308] dump_stack+0x1c9/0x2b4 [ 2515.472335] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2515.472362] ? perf_trace_lock+0x49d/0x920 [ 2515.491928] should_fail.cold.4+0xa/0x11 [ 2515.496030] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2515.501176] ? save_stack+0xa9/0xd0 [ 2515.504825] ? save_stack+0x43/0xd0 [ 2515.508491] ? kmem_cache_alloc_trace+0x152/0x780 [ 2515.513362] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2515.518589] ? __list_lru_init+0x4d6/0x840 [ 2515.522854] ? alloc_super+0x976/0xb10 [ 2515.526769] ? sget+0x10b/0x150 [ 2515.530061] ? mount_bdev+0x115/0x3e0 [ 2515.533874] ? legacy_get_tree+0x118/0x440 [ 2515.538124] ? vfs_get_tree+0x1cb/0x5c0 [ 2515.542113] ? do_mount+0x6c1/0x1fb0 [ 2515.545841] ? ksys_mount+0x12d/0x140 [ 2515.549655] ? __x64_sys_mount+0xbe/0x150 [ 2515.553811] ? do_syscall_64+0x1b9/0x820 [ 2515.557887] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2515.563285] ? lock_acquire+0x1e4/0x540 [ 2515.567281] ? fs_reclaim_acquire+0x20/0x20 [ 2515.571643] ? lock_downgrade+0x8f0/0x8f0 [ 2515.575802] ? do_mount+0x6c1/0x1fb0 [ 2515.579537] ? check_same_owner+0x340/0x340 [ 2515.583874] ? rcu_note_context_switch+0x730/0x730 [ 2515.588819] __should_failslab+0x124/0x180 [ 2515.593070] should_failslab+0x9/0x14 [ 2515.596882] kmem_cache_alloc_trace+0x2cb/0x780 [ 2515.601561] ? kasan_kmalloc+0xc4/0xe0 [ 2515.605477] __memcg_init_list_lru_node+0x185/0x2d0 [ 2515.610509] ? kvfree_rcu+0x20/0x20 [ 2515.614153] ? __kmalloc_node+0x47/0x70 [ 2515.618152] __list_lru_init+0x4d6/0x840 [ 2515.622229] ? list_lru_destroy+0x500/0x500 [ 2515.626571] ? prealloc_shrinker+0x213/0x480 [ 2515.630987] ? __init_waitqueue_head+0x9e/0x150 [ 2515.635665] ? inactive_list_is_low+0x850/0x850 [ 2515.640377] ? __lockdep_init_map+0x105/0x590 [ 2515.644894] alloc_super+0x976/0xb10 [ 2515.648630] ? destroy_unused_super.part.11+0x110/0x110 [ 2515.654009] ? lock_downgrade+0x8f0/0x8f0 [ 2515.658179] ? kasan_check_read+0x11/0x20 [ 2515.662345] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2515.666949] ? kasan_check_write+0x14/0x20 [ 2515.671220] ? do_raw_spin_lock+0xc1/0x200 [ 2515.675485] sget_userns+0x276/0x860 [ 2515.679209] ? kill_litter_super+0x60/0x60 [ 2515.683461] ? test_single_super+0x10/0x10 [ 2515.687708] ? vfs_get_super+0x270/0x270 [ 2515.691781] ? kasan_check_read+0x11/0x20 [ 2515.695946] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2515.700543] ? kasan_check_write+0x14/0x20 [ 2515.704796] ? do_raw_spin_lock+0xc1/0x200 [ 2515.709100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.714656] ? ns_capable_common+0x13f/0x170 [ 2515.719086] ? kill_litter_super+0x60/0x60 [ 2515.723336] sget+0x10b/0x150 [ 2515.726453] ? test_single_super+0x10/0x10 [ 2515.730705] mount_bdev+0x115/0x3e0 [ 2515.734340] ? vfat_mount+0x50/0x50 [ 2515.737984] vfat_mount+0x3c/0x50 [ 2515.741446] ? setup+0x120/0x120 [ 2515.744828] legacy_get_tree+0x118/0x440 [ 2515.748909] vfs_get_tree+0x1cb/0x5c0 [ 2515.752806] ? vfs_set_fs_source+0x12c/0x180 [ 2515.757230] do_mount+0x6c1/0x1fb0 [ 2515.760781] ? check_same_owner+0x340/0x340 [ 2515.765114] ? lock_release+0xa30/0xa30 [ 2515.769112] ? copy_mount_string+0x40/0x40 [ 2515.773368] ? kasan_kmalloc+0xc4/0xe0 [ 2515.777284] ? kmem_cache_alloc_trace+0x318/0x780 [ 2515.782149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2515.787702] ? _copy_from_user+0xdf/0x150 [ 2515.791871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.797419] ? copy_mount_options+0x285/0x380 [ 2515.801931] ksys_mount+0x12d/0x140 [ 2515.805575] __x64_sys_mount+0xbe/0x150 [ 2515.809584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2515.815150] do_syscall_64+0x1b9/0x820 [ 2515.819071] ? syscall_slow_exit_work+0x500/0x500 [ 2515.823937] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2515.828896] ? syscall_return_slowpath+0x31d/0x5e0 [ 2515.833861] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2515.838893] ? perf_trace_sys_enter+0xb10/0xb10 [ 2515.843579] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2515.848448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2515.853643] RIP: 0033:0x45885a [ 2515.856837] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2515.876428] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2515.884169] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a 08:33:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000112) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2515.891448] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2515.898725] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2515.906016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2515.913378] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000033 [ 2515.938751] FAT-fs (loop5): bogus number of reserved sectors [ 2515.944753] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2515.951059] FAT-fs (loop4): bogus number of reserved sectors [ 2515.953660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2515.956978] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2515.957676] FAT-fs (loop2): bogus number of directory entries (547) [ 2515.976462] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:21 executing program 6 (fault-call:1 fault-nth:52): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:21 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404140a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x734f000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2516.002405] FAT-fs (loop2): bogus number of directory entries (547) [ 2516.008265] FAT-fs (loop5): bogus number of reserved sectors [ 2516.008995] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2516.014740] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2516.028338] FAT-fs (loop4): bogus number of reserved sectors [ 2516.034221] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2516.086255] FAULT_INJECTION: forcing a failure. [ 2516.086255] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.098005] CPU: 0 PID: 31149 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2516.101146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2516.106448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.106457] Call Trace: [ 2516.106487] dump_stack+0x1c9/0x2b4 [ 2516.106510] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2516.131136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2516.133791] ? perf_trace_lock+0x49d/0x920 [ 2516.133826] should_fail.cold.4+0xa/0x11 [ 2516.148626] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2516.153763] ? save_stack+0xa9/0xd0 [ 2516.157413] ? save_stack+0x43/0xd0 [ 2516.161101] ? kmem_cache_alloc_trace+0x152/0x780 [ 2516.165980] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2516.171191] ? __list_lru_init+0x4d6/0x840 [ 2516.175445] ? alloc_super+0x976/0xb10 [ 2516.179347] ? sget+0x10b/0x150 [ 2516.182636] ? mount_bdev+0x115/0x3e0 [ 2516.186452] ? legacy_get_tree+0x118/0x440 [ 2516.190694] ? vfs_get_tree+0x1cb/0x5c0 [ 2516.194676] ? do_mount+0x6c1/0x1fb0 [ 2516.198412] ? ksys_mount+0x12d/0x140 [ 2516.202221] ? __x64_sys_mount+0xbe/0x150 [ 2516.206376] ? do_syscall_64+0x1b9/0x820 [ 2516.210442] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2516.215835] ? lock_acquire+0x1e4/0x540 [ 2516.219820] ? fs_reclaim_acquire+0x20/0x20 [ 2516.224152] ? lock_downgrade+0x8f0/0x8f0 [ 2516.228309] ? do_mount+0x6c1/0x1fb0 [ 2516.232046] ? check_same_owner+0x340/0x340 [ 2516.236385] ? rcu_note_context_switch+0x730/0x730 [ 2516.241334] __should_failslab+0x124/0x180 [ 2516.245585] should_failslab+0x9/0x14 [ 2516.249396] kmem_cache_alloc_trace+0x2cb/0x780 [ 2516.254070] ? kasan_kmalloc+0xc4/0xe0 [ 2516.257986] __memcg_init_list_lru_node+0x185/0x2d0 [ 2516.263017] ? kvfree_rcu+0x20/0x20 [ 2516.266652] ? __kmalloc_node+0x47/0x70 [ 2516.270645] __list_lru_init+0x4d6/0x840 [ 2516.274720] ? list_lru_destroy+0x500/0x500 [ 2516.279060] ? prealloc_shrinker+0x213/0x480 [ 2516.283499] ? __init_waitqueue_head+0x9e/0x150 [ 2516.288178] ? inactive_list_is_low+0x850/0x850 [ 2516.292879] ? __lockdep_init_map+0x105/0x590 [ 2516.297393] alloc_super+0x976/0xb10 [ 2516.301127] ? destroy_unused_super.part.11+0x110/0x110 [ 2516.306506] ? lock_downgrade+0x8f0/0x8f0 [ 2516.310762] ? kasan_check_read+0x11/0x20 [ 2516.314921] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2516.320279] ? kasan_check_write+0x14/0x20 [ 2516.324549] ? do_raw_spin_lock+0xc1/0x200 [ 2516.328821] sget_userns+0x276/0x860 [ 2516.332547] ? kill_litter_super+0x60/0x60 [ 2516.336797] ? test_single_super+0x10/0x10 [ 2516.341040] ? vfs_get_super+0x270/0x270 [ 2516.345135] ? kasan_check_read+0x11/0x20 [ 2516.349308] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2516.353911] ? kasan_check_write+0x14/0x20 [ 2516.358154] ? do_raw_spin_lock+0xc1/0x200 [ 2516.362467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2516.368030] ? ns_capable_common+0x13f/0x170 [ 2516.372470] ? kill_litter_super+0x60/0x60 [ 2516.376717] sget+0x10b/0x150 [ 2516.379833] ? test_single_super+0x10/0x10 [ 2516.384085] mount_bdev+0x115/0x3e0 [ 2516.387723] ? vfat_mount+0x50/0x50 [ 2516.391376] vfat_mount+0x3c/0x50 [ 2516.394836] ? setup+0x120/0x120 [ 2516.398214] legacy_get_tree+0x118/0x440 [ 2516.402519] vfs_get_tree+0x1cb/0x5c0 [ 2516.406326] ? vfs_set_fs_source+0x12c/0x180 [ 2516.410765] do_mount+0x6c1/0x1fb0 [ 2516.414331] ? kasan_check_write+0x14/0x20 [ 2516.418605] ? copy_mount_string+0x40/0x40 [ 2516.422852] ? retint_kernel+0x10/0x10 [ 2516.426761] ? copy_mount_options+0x1a1/0x380 [ 2516.431267] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 2516.436123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2516.441690] ? copy_mount_options+0x285/0x380 [ 2516.446565] ksys_mount+0x12d/0x140 [ 2516.450211] __x64_sys_mount+0xbe/0x150 [ 2516.454203] do_syscall_64+0x1b9/0x820 [ 2516.458894] ? finish_task_switch+0x1d3/0x870 [ 2516.463415] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2516.468360] ? syscall_return_slowpath+0x31d/0x5e0 [ 2516.473302] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2516.478330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2516.483878] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2516.488910] ? perf_trace_sys_enter+0xb10/0xb10 [ 2516.493589] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2516.498478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2516.503677] RIP: 0033:0x45885a [ 2516.506867] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2516.526463] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 08:33:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02001f74f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xd0a000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x200000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2516.534187] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2516.541463] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2516.548739] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2516.556012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2516.563291] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000034 [ 2516.636967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2516.659142] FAT-fs (loop4): bogus number of reserved sectors [ 2516.665085] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2516.674597] FAT-fs (loop5): bogus number of reserved sectors [ 2516.680576] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2516.714085] FAT-fs (loop5): bogus number of reserved sectors [ 2516.719998] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2516.727595] FAT-fs (loop4): bogus number of reserved sectors [ 2516.733481] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:22 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xd71, @mcast1={0xff, 0x1, [], 0x1}, 0x7fff}], 0x1c) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:22 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404be0a02000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:22 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0200be74f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc3ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:22 executing program 6 (fault-call:1 fault-nth:53): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x100000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xa704000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:22 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000105) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:22 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a01000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2517.028845] FAT-fs (loop5): bogus number of reserved sectors [ 2517.034834] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2517.051417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2517.081244] FAT-fs (loop5): bogus number of reserved sectors [ 2517.087284] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2517.113856] FAT-fs (loop4): bogus number of reserved sectors [ 2517.119820] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2517.142673] FAULT_INJECTION: forcing a failure. [ 2517.142673] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.154152] CPU: 0 PID: 31199 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2517.162588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.171968] Call Trace: [ 2517.174588] dump_stack+0x1c9/0x2b4 [ 2517.178251] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2517.183475] ? perf_trace_lock+0x49d/0x920 [ 2517.187756] should_fail.cold.4+0xa/0x11 [ 2517.191855] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2517.197023] ? save_stack+0xa9/0xd0 [ 2517.200680] ? save_stack+0x43/0xd0 [ 2517.204330] ? kasan_kmalloc+0xc4/0xe0 [ 2517.208239] ? __kmalloc+0x14e/0x760 [ 2517.211979] ? __list_lru_init+0x151/0x840 [ 2517.216250] ? alloc_super+0x9a6/0xb10 [ 2517.220165] ? sget+0x10b/0x150 [ 2517.223649] ? mount_bdev+0x115/0x3e0 [ 2517.227476] ? vfat_mount+0x3c/0x50 [ 2517.231124] ? legacy_get_tree+0x118/0x440 [ 2517.235393] ? vfs_get_tree+0x1cb/0x5c0 [ 2517.239389] ? do_mount+0x6c1/0x1fb0 [ 2517.243141] ? lock_acquire+0x1e4/0x540 [ 2517.247138] ? fs_reclaim_acquire+0x20/0x20 [ 2517.251475] ? lock_downgrade+0x8f0/0x8f0 [ 2517.255649] ? check_same_owner+0x340/0x340 [ 2517.260012] ? rcu_note_context_switch+0x730/0x730 [ 2517.264966] __should_failslab+0x124/0x180 [ 2517.269220] should_failslab+0x9/0x14 [ 2517.273031] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2517.278148] ? kasan_kmalloc+0xc4/0xe0 [ 2517.282066] __kmalloc_node+0x33/0x70 [ 2517.285885] kvmalloc_node+0x65/0xf0 [ 2517.289610] __list_lru_init+0x5d9/0x840 [ 2517.293688] ? list_lru_destroy+0x500/0x500 [ 2517.298042] ? prealloc_shrinker+0x213/0x480 [ 2517.302461] ? __init_waitqueue_head+0x9e/0x150 [ 2517.307145] ? inactive_list_is_low+0x850/0x850 [ 2517.312177] ? __lockdep_init_map+0x105/0x590 [ 2517.316688] alloc_super+0x9a6/0xb10 [ 2517.320504] ? destroy_unused_super.part.11+0x110/0x110 [ 2517.325879] ? lock_downgrade+0x8f0/0x8f0 [ 2517.330048] ? kasan_check_read+0x11/0x20 [ 2517.334205] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2517.338797] ? kasan_check_write+0x14/0x20 [ 2517.343037] ? do_raw_spin_lock+0xc1/0x200 [ 2517.347292] sget_userns+0x276/0x860 [ 2517.351013] ? kill_litter_super+0x60/0x60 [ 2517.355258] ? test_single_super+0x10/0x10 [ 2517.359498] ? vfs_get_super+0x270/0x270 [ 2517.363567] ? kasan_check_read+0x11/0x20 [ 2517.367726] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2517.372321] ? kasan_check_write+0x14/0x20 [ 2517.376562] ? do_raw_spin_lock+0xc1/0x200 [ 2517.380843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2517.386390] ? ns_capable_common+0x13f/0x170 [ 2517.390830] ? kill_litter_super+0x60/0x60 [ 2517.395074] sget+0x10b/0x150 [ 2517.398188] ? test_single_super+0x10/0x10 [ 2517.402436] mount_bdev+0x115/0x3e0 [ 2517.406073] ? vfat_mount+0x50/0x50 [ 2517.409802] vfat_mount+0x3c/0x50 [ 2517.413265] ? setup+0x120/0x120 [ 2517.416643] legacy_get_tree+0x118/0x440 [ 2517.420719] vfs_get_tree+0x1cb/0x5c0 [ 2517.424525] ? vfs_set_fs_source+0x12c/0x180 [ 2517.428945] do_mount+0x6c1/0x1fb0 [ 2517.432500] ? kasan_check_read+0x11/0x20 [ 2517.436657] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2517.441084] ? copy_mount_string+0x40/0x40 [ 2517.445330] ? kasan_kmalloc+0xc4/0xe0 [ 2517.449237] ? kmem_cache_alloc_trace+0x318/0x780 [ 2517.454108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2517.459656] ? copy_mount_options+0x285/0x380 [ 2517.464169] ksys_mount+0x12d/0x140 [ 2517.467827] __x64_sys_mount+0xbe/0x150 [ 2517.471836] do_syscall_64+0x1b9/0x820 [ 2517.475743] ? syscall_slow_exit_work+0x500/0x500 [ 2517.480600] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2517.485541] ? syscall_return_slowpath+0x31d/0x5e0 [ 2517.490486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2517.496120] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2517.501148] ? perf_trace_sys_enter+0xb10/0xb10 [ 2517.505830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2517.510690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2517.515887] RIP: 0033:0x45885a [ 2517.519077] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a026c0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2517.538682] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2517.546409] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2517.553690] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2517.561055] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2517.568335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2517.575613] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000035 08:33:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:23 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0a000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x500000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2517.604655] FAT-fs (loop4): bogus number of reserved sectors [ 2517.610739] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:23 executing program 6 (fault-call:1 fault-nth:54): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xe0000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:23 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0e000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2517.681631] FAT-fs (loop5): bogus number of reserved sectors [ 2517.687586] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2517.690080] FAT-fs (loop2): bogus number of directory entries (620) [ 2517.700252] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2517.710584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2517.749855] FAT-fs (loop4): bogus number of reserved sectors [ 2517.751469] FAT-fs (loop5): bogus number of reserved sectors [ 2517.755881] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2517.761680] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2517.766594] FAULT_INJECTION: forcing a failure. [ 2517.766594] name failslab, interval 1, probability 0, space 0, times 0 [ 2517.784915] CPU: 1 PID: 31222 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2517.790418] FAT-fs (loop2): bogus number of directory entries (620) [ 2517.793321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.793329] Call Trace: [ 2517.793353] dump_stack+0x1c9/0x2b4 [ 2517.793373] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2517.793394] ? perf_trace_lock+0xde/0x920 [ 2517.793416] should_fail.cold.4+0xa/0x11 [ 2517.793432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2517.793455] ? save_stack+0xa9/0xd0 [ 2517.793472] ? save_stack+0x43/0xd0 [ 2517.793486] ? kasan_kmalloc+0xc4/0xe0 [ 2517.793502] ? kmem_cache_alloc_trace+0x152/0x780 [ 2517.793519] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2517.793530] ? __list_lru_init+0x4d6/0x840 [ 2517.793548] ? alloc_super+0x976/0xb10 [ 2517.799982] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2517.809337] ? sget+0x10b/0x150 [ 2517.809354] ? mount_bdev+0x115/0x3e0 [ 2517.809369] ? legacy_get_tree+0x118/0x440 [ 2517.809389] ? vfs_get_tree+0x1cb/0x5c0 [ 2517.884446] ? do_mount+0x6c1/0x1fb0 [ 2517.888162] ? ksys_mount+0x12d/0x140 [ 2517.891964] ? __x64_sys_mount+0xbe/0x150 [ 2517.896119] ? do_syscall_64+0x1b9/0x820 [ 2517.900187] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2517.905570] ? lock_acquire+0x1e4/0x540 [ 2517.909551] ? fs_reclaim_acquire+0x20/0x20 [ 2517.913879] ? lock_downgrade+0x8f0/0x8f0 [ 2517.918031] ? do_mount+0x6c1/0x1fb0 [ 2517.921756] ? check_same_owner+0x340/0x340 [ 2517.926079] ? rcu_note_context_switch+0x730/0x730 [ 2517.931017] __should_failslab+0x124/0x180 [ 2517.935345] should_failslab+0x9/0x14 [ 2517.939170] kmem_cache_alloc_trace+0x2cb/0x780 [ 2517.943869] ? kasan_kmalloc+0xc4/0xe0 [ 2517.947770] __memcg_init_list_lru_node+0x185/0x2d0 [ 2517.952790] ? kvfree_rcu+0x20/0x20 [ 2517.956431] ? __kmalloc_node+0x47/0x70 [ 2517.960418] __list_lru_init+0x4d6/0x840 [ 2517.964497] ? list_lru_destroy+0x500/0x500 [ 2517.968827] ? prealloc_shrinker+0x213/0x480 [ 2517.973249] ? __init_waitqueue_head+0x9e/0x150 [ 2517.977931] ? inactive_list_is_low+0x850/0x850 [ 2517.982611] ? __lockdep_init_map+0x105/0x590 [ 2517.987121] alloc_super+0x976/0xb10 [ 2517.990849] ? destroy_unused_super.part.11+0x110/0x110 [ 2517.996223] ? lock_downgrade+0x8f0/0x8f0 08:33:23 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) gettid() r1 = gettid() r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:23 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a07000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:23 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000036) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2518.000386] ? kasan_check_read+0x11/0x20 [ 2518.004536] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2518.009120] ? kasan_check_write+0x14/0x20 [ 2518.013362] ? do_raw_spin_lock+0xc1/0x200 [ 2518.017607] sget_userns+0x276/0x860 [ 2518.021327] ? kill_litter_super+0x60/0x60 [ 2518.025565] ? test_single_super+0x10/0x10 [ 2518.029805] ? vfs_get_super+0x270/0x270 [ 2518.033876] ? kasan_check_read+0x11/0x20 [ 2518.038061] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2518.042668] ? kasan_check_write+0x14/0x20 [ 2518.046913] ? do_raw_spin_lock+0xc1/0x200 [ 2518.051175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.056744] ? ns_capable_common+0x13f/0x170 [ 2518.061163] ? kill_litter_super+0x60/0x60 [ 2518.065456] sget+0x10b/0x150 [ 2518.068569] ? test_single_super+0x10/0x10 [ 2518.070901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2518.072823] mount_bdev+0x115/0x3e0 [ 2518.072840] ? vfat_mount+0x50/0x50 [ 2518.072856] vfat_mount+0x3c/0x50 [ 2518.072869] ? setup+0x120/0x120 [ 2518.072886] legacy_get_tree+0x118/0x440 [ 2518.097496] vfs_get_tree+0x1cb/0x5c0 [ 2518.101304] ? vfs_set_fs_source+0x12c/0x180 [ 2518.105722] do_mount+0x6c1/0x1fb0 [ 2518.109266] ? kasan_check_write+0x14/0x20 [ 2518.113513] ? copy_mount_string+0x40/0x40 [ 2518.117759] ? kasan_kmalloc+0xc4/0xe0 [ 2518.121658] ? kmem_cache_alloc_trace+0x318/0x780 [ 2518.126520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2518.132078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.137628] ? copy_mount_options+0x285/0x380 [ 2518.142134] ksys_mount+0x12d/0x140 [ 2518.145766] __x64_sys_mount+0xbe/0x150 08:33:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2518.149753] do_syscall_64+0x1b9/0x820 [ 2518.154563] ? finish_task_switch+0x1d3/0x870 [ 2518.159066] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2518.164007] ? syscall_return_slowpath+0x31d/0x5e0 [ 2518.168950] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2518.173978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.179531] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2518.184563] ? perf_trace_sys_enter+0xb10/0xb10 [ 2518.189247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2518.194103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2518.198208] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2518.199293] RIP: 0033:0x45885a [ 2518.199298] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2518.228223] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2518.235947] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2518.243235] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 08:33:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfeffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2518.250510] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2518.257787] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2518.265087] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000036 [ 2518.292486] FAT-fs (loop4): bogus number of reserved sectors 08:33:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02480274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x20400}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:23 executing program 6 (fault-call:1 fault-nth:55): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2518.298409] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xab040000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:23 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a06000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2518.348289] FAT-fs (loop2): bogus number of directory entries (584) [ 2518.354864] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2518.370169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2518.407986] FAT-fs (loop2): bogus number of directory entries (584) [ 2518.414580] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2518.423981] FAT-fs (loop4): bogus number of reserved sectors [ 2518.430067] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2518.441401] FAT-fs (loop5): bogus number of reserved sectors [ 2518.447324] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:23 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02030274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:23 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0c000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2518.463641] FAT-fs (loop4): bogus number of reserved sectors [ 2518.469623] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2518.493766] FAULT_INJECTION: forcing a failure. [ 2518.493766] name failslab, interval 1, probability 0, space 0, times 0 [ 2518.505462] CPU: 0 PID: 31272 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2518.513902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.523275] Call Trace: [ 2518.525902] dump_stack+0x1c9/0x2b4 [ 2518.529569] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2518.534797] ? perf_trace_lock+0x49d/0x920 [ 2518.539059] should_fail.cold.4+0xa/0x11 [ 2518.543138] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2518.548260] ? save_stack+0xa9/0xd0 [ 2518.551903] ? save_stack+0x43/0xd0 [ 2518.555539] ? kmem_cache_alloc_trace+0x152/0x780 [ 2518.560398] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2518.565598] ? __list_lru_init+0x4d6/0x840 [ 2518.569840] ? alloc_super+0x976/0xb10 [ 2518.573743] ? sget+0x10b/0x150 [ 2518.577030] ? mount_bdev+0x115/0x3e0 [ 2518.580839] ? legacy_get_tree+0x118/0x440 [ 2518.585084] ? vfs_get_tree+0x1cb/0x5c0 [ 2518.589154] ? do_mount+0x6c1/0x1fb0 [ 2518.592881] ? ksys_mount+0x12d/0x140 [ 2518.596687] ? __x64_sys_mount+0xbe/0x150 [ 2518.600852] ? do_syscall_64+0x1b9/0x820 [ 2518.604944] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2518.610334] ? lock_acquire+0x1e4/0x540 [ 2518.614316] ? fs_reclaim_acquire+0x20/0x20 [ 2518.618676] ? lock_downgrade+0x8f0/0x8f0 [ 2518.622836] ? lock_downgrade+0x8f0/0x8f0 [ 2518.627009] ? check_same_owner+0x340/0x340 [ 2518.631340] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2518.635773] ? rcu_note_context_switch+0x730/0x730 [ 2518.641087] __should_failslab+0x124/0x180 [ 2518.645347] should_failslab+0x9/0x14 [ 2518.649163] kmem_cache_alloc_trace+0x2cb/0x780 [ 2518.653843] ? kasan_kmalloc+0xc4/0xe0 [ 2518.657762] __memcg_init_list_lru_node+0x185/0x2d0 [ 2518.662790] ? kvfree_rcu+0x20/0x20 [ 2518.666430] ? __kmalloc_node+0x47/0x70 [ 2518.670423] __list_lru_init+0x4d6/0x840 [ 2518.674502] ? list_lru_destroy+0x500/0x500 [ 2518.678844] ? prealloc_shrinker+0x213/0x480 [ 2518.683263] ? __init_waitqueue_head+0x9e/0x150 [ 2518.687941] ? inactive_list_is_low+0x850/0x850 [ 2518.692626] ? __lockdep_init_map+0x105/0x590 [ 2518.697140] alloc_super+0x976/0xb10 [ 2518.700902] ? destroy_unused_super.part.11+0x110/0x110 [ 2518.706281] ? lock_downgrade+0x8f0/0x8f0 [ 2518.710448] ? kasan_check_read+0x11/0x20 [ 2518.714610] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2518.719207] ? kasan_check_write+0x14/0x20 [ 2518.723450] ? do_raw_spin_lock+0xc1/0x200 [ 2518.727705] sget_userns+0x276/0x860 [ 2518.731425] ? kill_litter_super+0x60/0x60 [ 2518.735677] ? test_single_super+0x10/0x10 [ 2518.740018] ? vfs_get_super+0x270/0x270 [ 2518.744091] ? kasan_check_read+0x11/0x20 [ 2518.748250] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2518.752848] ? kasan_check_write+0x14/0x20 [ 2518.757099] ? do_raw_spin_lock+0xc1/0x200 [ 2518.761391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.766937] ? ns_capable_common+0x13f/0x170 [ 2518.771374] ? kill_litter_super+0x60/0x60 [ 2518.775635] sget+0x10b/0x150 [ 2518.778749] ? test_single_super+0x10/0x10 [ 2518.783038] mount_bdev+0x115/0x3e0 [ 2518.786677] ? vfat_mount+0x50/0x50 [ 2518.790320] vfat_mount+0x3c/0x50 [ 2518.793784] ? setup+0x120/0x120 [ 2518.797164] legacy_get_tree+0x118/0x440 [ 2518.801245] vfs_get_tree+0x1cb/0x5c0 [ 2518.805328] ? vfs_set_fs_source+0x12c/0x180 [ 2518.809750] do_mount+0x6c1/0x1fb0 [ 2518.813312] ? copy_mount_string+0x40/0x40 [ 2518.817555] ? retint_kernel+0x10/0x10 [ 2518.821461] ? copy_mount_options+0x1e3/0x380 [ 2518.825970] ? write_comp_data+0x1/0x70 [ 2518.829959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.835505] ? copy_mount_options+0x285/0x380 [ 2518.840031] ksys_mount+0x12d/0x140 [ 2518.843694] __x64_sys_mount+0xbe/0x150 [ 2518.847713] do_syscall_64+0x1b9/0x820 [ 2518.851619] ? finish_task_switch+0x1d3/0x870 [ 2518.856127] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2518.861069] ? syscall_return_slowpath+0x31d/0x5e0 [ 2518.866026] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2518.871053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2518.876601] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2518.881641] ? perf_trace_sys_enter+0xb10/0xb10 [ 2518.886359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2518.891228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2518.896426] RIP: 0033:0x45885a 08:33:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x74000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffffff00000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2518.899622] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2518.919230] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2518.926956] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2518.934230] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2518.941506] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2518.948781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2518.956056] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000037 [ 2518.983629] FAT-fs (loop4): bogus number of reserved sectors [ 2518.989557] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2519.004328] FAT-fs (loop5): bogus number of reserved sectors [ 2519.010575] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2519.024469] FAT-fs (loop2): bogus number of directory entries (515) 08:33:24 executing program 6 (fault-call:1 fault-nth:56): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2519.031033] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2519.058152] FAT-fs (loop4): bogus number of reserved sectors [ 2519.064368] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2519.074068] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2519.120760] FAT-fs (loop2): bogus number of directory entries (515) [ 2519.127520] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2519.140755] FAULT_INJECTION: forcing a failure. [ 2519.140755] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.152129] CPU: 0 PID: 31295 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2519.160568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.169928] Call Trace: [ 2519.172528] dump_stack+0x1c9/0x2b4 [ 2519.176167] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2519.181716] ? perf_trace_lock+0x49d/0x920 [ 2519.185973] should_fail.cold.4+0xa/0x11 [ 2519.190048] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2519.195182] ? save_stack+0xa9/0xd0 [ 2519.198824] ? save_stack+0x43/0xd0 [ 2519.202457] ? kasan_kmalloc+0xc4/0xe0 [ 2519.206354] ? __kmalloc+0x14e/0x760 [ 2519.210073] ? __list_lru_init+0x151/0x840 [ 2519.214312] ? alloc_super+0x9a6/0xb10 [ 2519.218214] ? sget+0x10b/0x150 [ 2519.221497] ? mount_bdev+0x115/0x3e0 [ 2519.225305] ? vfat_mount+0x3c/0x50 [ 2519.228941] ? legacy_get_tree+0x118/0x440 [ 2519.233185] ? vfs_get_tree+0x1cb/0x5c0 [ 2519.237255] ? do_mount+0x6c1/0x1fb0 [ 2519.240998] ? lock_acquire+0x1e4/0x540 [ 2519.244989] ? fs_reclaim_acquire+0x20/0x20 [ 2519.249322] ? lock_downgrade+0x8f0/0x8f0 [ 2519.253493] ? check_same_owner+0x340/0x340 [ 2519.257835] ? rcu_note_context_switch+0x730/0x730 [ 2519.262787] __should_failslab+0x124/0x180 [ 2519.267045] should_failslab+0x9/0x14 [ 2519.270879] kmem_cache_alloc_node_trace+0x26f/0x770 [ 2519.276005] ? kasan_kmalloc+0xc4/0xe0 [ 2519.279920] __kmalloc_node+0x33/0x70 [ 2519.283737] kvmalloc_node+0x65/0xf0 [ 2519.287464] __list_lru_init+0x5d9/0x840 [ 2519.291546] ? list_lru_destroy+0x500/0x500 [ 2519.295888] ? prealloc_shrinker+0x213/0x480 [ 2519.300308] ? __init_waitqueue_head+0x9e/0x150 [ 2519.304989] ? inactive_list_is_low+0x850/0x850 [ 2519.309672] ? __lockdep_init_map+0x105/0x590 [ 2519.314181] alloc_super+0x9a6/0xb10 [ 2519.317914] ? destroy_unused_super.part.11+0x110/0x110 [ 2519.323465] ? lock_downgrade+0x8f0/0x8f0 [ 2519.327631] ? kasan_check_read+0x11/0x20 [ 2519.331792] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2519.336391] ? kasan_check_write+0x14/0x20 [ 2519.340654] ? do_raw_spin_lock+0xc1/0x200 [ 2519.344911] sget_userns+0x276/0x860 [ 2519.348647] ? kill_litter_super+0x60/0x60 [ 2519.352907] ? test_single_super+0x10/0x10 [ 2519.357152] ? vfs_get_super+0x270/0x270 [ 2519.361221] ? kasan_check_read+0x11/0x20 [ 2519.365380] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2519.369978] ? kasan_check_write+0x14/0x20 [ 2519.374220] ? do_raw_spin_lock+0xc1/0x200 [ 2519.378501] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2519.384068] ? ns_capable_common+0x13f/0x170 [ 2519.388491] ? kill_litter_super+0x60/0x60 [ 2519.392753] sget+0x10b/0x150 [ 2519.395870] ? test_single_super+0x10/0x10 [ 2519.400139] mount_bdev+0x115/0x3e0 [ 2519.403775] ? vfat_mount+0x50/0x50 [ 2519.407433] vfat_mount+0x3c/0x50 [ 2519.410896] ? setup+0x120/0x120 [ 2519.414271] legacy_get_tree+0x118/0x440 [ 2519.418351] vfs_get_tree+0x1cb/0x5c0 [ 2519.422157] ? vfs_set_fs_source+0x12c/0x180 [ 2519.426582] do_mount+0x6c1/0x1fb0 [ 2519.430131] ? check_same_owner+0x340/0x340 [ 2519.434462] ? lock_release+0xa30/0xa30 [ 2519.438805] ? copy_mount_string+0x40/0x40 [ 2519.443060] ? retint_kernel+0x10/0x10 [ 2519.446967] ? copy_mount_options+0x1f0/0x380 [ 2519.451469] ? copy_mount_options+0x1fa/0x380 [ 2519.455975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2519.461520] ? copy_mount_options+0x285/0x380 [ 2519.466035] ksys_mount+0x12d/0x140 [ 2519.469677] __x64_sys_mount+0xbe/0x150 [ 2519.473659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2519.479208] do_syscall_64+0x1b9/0x820 [ 2519.483106] ? syscall_slow_exit_work+0x500/0x500 [ 2519.487959] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2519.492902] ? syscall_return_slowpath+0x31d/0x5e0 [ 2519.497846] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2519.502869] ? perf_trace_sys_enter+0xb10/0xb10 [ 2519.507549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2519.512414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2519.517611] RIP: 0033:0x45885a [ 2519.520809] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2519.540392] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2519.548126] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2519.555401] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2519.562678] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 08:33:25 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) mount$9p_tcp(&(0x7f0000000700)='127.0.0.1\x00', &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780)='9p\x00', 0x200000, &(0x7f00000007c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@loose='loose', 0x2c}, {@privport='privport', 0x2c}, {@version_u='version=9p2000.u', 0x2c}]}}) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000004300)=""/4096, &(0x7f0000000640)=0x1000) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000001300)=""/4096) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000680), &(0x7f00000006c0)=0x4) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) process_vm_readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000500)=""/246, 0xf6}], 0x5, &(0x7f0000000600)=[{&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x3, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x4) 08:33:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x8cffffff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:25 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000049) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:25 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0f000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x4800}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2519.569954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2519.577228] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000038 08:33:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a027a0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2519.630635] FAT-fs (loop5): bogus number of reserved sectors [ 2519.636579] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2519.645612] FAT-fs (loop4): bogus number of reserved sectors [ 2519.651701] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2519.675340] FAT-fs (loop5): bogus number of reserved sectors 08:33:25 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a10000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2519.681238] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2519.693661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2519.708868] FAT-fs (loop4): bogus number of reserved sectors [ 2519.715072] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2519.721683] FAT-fs (loop2): bogus number of directory entries (634) 08:33:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x20000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:25 executing program 6 (fault-call:1 fault-nth:57): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2519.728218] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2519.746744] FAULT_INJECTION: forcing a failure. [ 2519.746744] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.758160] CPU: 0 PID: 31324 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2519.766578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.775940] Call Trace: [ 2519.778537] dump_stack+0x1c9/0x2b4 [ 2519.782159] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2519.787345] ? perf_trace_lock+0x49d/0x920 [ 2519.791614] should_fail.cold.4+0xa/0x11 [ 2519.795676] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2519.800784] ? save_stack+0xa9/0xd0 [ 2519.804404] ? save_stack+0x43/0xd0 [ 2519.808039] ? kmem_cache_alloc_trace+0x152/0x780 [ 2519.812875] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2519.818056] ? __list_lru_init+0x4d6/0x840 [ 2519.822282] ? alloc_super+0x976/0xb10 [ 2519.826160] ? sget+0x10b/0x150 [ 2519.829428] ? mount_bdev+0x115/0x3e0 [ 2519.833223] ? legacy_get_tree+0x118/0x440 [ 2519.837453] ? vfs_get_tree+0x1cb/0x5c0 [ 2519.841427] ? do_mount+0x6c1/0x1fb0 [ 2519.845144] ? ksys_mount+0x12d/0x140 [ 2519.848939] ? __x64_sys_mount+0xbe/0x150 [ 2519.853081] ? do_syscall_64+0x1b9/0x820 [ 2519.857138] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2519.862529] ? lock_acquire+0x1e4/0x540 [ 2519.866588] ? fs_reclaim_acquire+0x20/0x20 [ 2519.870902] ? lock_downgrade+0x8f0/0x8f0 [ 2519.875044] ? do_mount+0x6c1/0x1fb0 [ 2519.878782] ? check_same_owner+0x340/0x340 [ 2519.883121] ? rcu_note_context_switch+0x730/0x730 [ 2519.888051] __should_failslab+0x124/0x180 [ 2519.892280] should_failslab+0x9/0x14 [ 2519.896071] kmem_cache_alloc_trace+0x2cb/0x780 [ 2519.900730] ? kasan_kmalloc+0xc4/0xe0 [ 2519.904633] __memcg_init_list_lru_node+0x185/0x2d0 [ 2519.909654] ? kvfree_rcu+0x20/0x20 [ 2519.913273] ? __kmalloc_node+0x47/0x70 [ 2519.917259] __list_lru_init+0x4d6/0x840 [ 2519.921318] ? list_lru_destroy+0x500/0x500 [ 2519.925652] ? prealloc_shrinker+0x213/0x480 [ 2519.930051] ? __init_waitqueue_head+0x9e/0x150 [ 2519.934716] ? inactive_list_is_low+0x850/0x850 [ 2519.939378] ? __lockdep_init_map+0x105/0x590 [ 2519.943869] alloc_super+0x976/0xb10 [ 2519.947581] ? destroy_unused_super.part.11+0x110/0x110 [ 2519.952940] ? lock_downgrade+0x8f0/0x8f0 [ 2519.957087] ? kasan_check_read+0x11/0x20 [ 2519.961238] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2519.965826] ? kasan_check_write+0x14/0x20 [ 2519.970053] ? do_raw_spin_lock+0xc1/0x200 [ 2519.974285] sget_userns+0x276/0x860 [ 2519.977986] ? kill_litter_super+0x60/0x60 [ 2519.982220] ? test_single_super+0x10/0x10 [ 2519.986456] ? vfs_get_super+0x270/0x270 [ 2519.990519] ? kasan_check_read+0x11/0x20 [ 2519.994662] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2519.999250] ? kasan_check_write+0x14/0x20 [ 2520.003478] ? do_raw_spin_lock+0xc1/0x200 [ 2520.008167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.013697] ? ns_capable_common+0x13f/0x170 [ 2520.018100] ? kill_litter_super+0x60/0x60 [ 2520.022327] sget+0x10b/0x150 [ 2520.025422] ? test_single_super+0x10/0x10 [ 2520.029653] mount_bdev+0x115/0x3e0 [ 2520.033273] ? vfat_mount+0x50/0x50 [ 2520.036896] vfat_mount+0x3c/0x50 [ 2520.040341] ? setup+0x120/0x120 [ 2520.043711] legacy_get_tree+0x118/0x440 [ 2520.047804] vfs_get_tree+0x1cb/0x5c0 [ 2520.051620] ? vfs_set_fs_source+0x12c/0x180 [ 2520.056038] do_mount+0x6c1/0x1fb0 [ 2520.059576] ? copy_mount_string+0x40/0x40 [ 2520.063823] ? retint_kernel+0x10/0x10 [ 2520.067710] ? copy_mount_options+0x213/0x380 [ 2520.072199] ? write_comp_data+0x22/0x70 [ 2520.076255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.081797] ? copy_mount_options+0x285/0x380 [ 2520.086288] ksys_mount+0x12d/0x140 [ 2520.089912] __x64_sys_mount+0xbe/0x150 [ 2520.093880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.099431] do_syscall_64+0x1b9/0x820 [ 2520.103328] ? syscall_slow_exit_work+0x500/0x500 [ 2520.108169] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2520.113097] ? syscall_return_slowpath+0x31d/0x5e0 [ 2520.118029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.123573] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2520.128582] ? perf_trace_sys_enter+0xb10/0xb10 [ 2520.133244] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2520.138088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2520.143268] RIP: 0033:0x45885a [ 2520.146441] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2520.165846] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2520.173563] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a 08:33:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x3fff}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2520.180822] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2520.188081] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2520.195339] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2520.202598] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000039 08:33:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:25 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010302000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2520.230736] FAT-fs (loop2): bogus number of directory entries (634) [ 2520.237340] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2520.237908] FAT-fs (loop5): bogus number of reserved sectors [ 2520.249147] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2520.266864] FAT-fs (loop4): bogus number of reserved sectors [ 2520.272776] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:25 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02090274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:25 executing program 6 (fault-call:1 fault-nth:58): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2520.297695] FAT-fs (loop5): bogus number of reserved sectors [ 2520.303616] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2520.321369] FAT-fs (loop4): bogus number of reserved sectors [ 2520.327314] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2520.329339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4a5}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2520.360940] FAT-fs (loop2): bogus number of directory entries (521) [ 2520.367476] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2520.383666] FAULT_INJECTION: forcing a failure. [ 2520.383666] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.395147] CPU: 1 PID: 31347 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2520.403570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2520.412930] Call Trace: [ 2520.415573] dump_stack+0x1c9/0x2b4 [ 2520.419218] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2520.424430] ? perf_trace_lock+0xde/0x920 [ 2520.428605] should_fail.cold.4+0xa/0x11 [ 2520.432686] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2520.437808] ? save_stack+0xa9/0xd0 [ 2520.441444] ? save_stack+0x43/0xd0 [ 2520.445077] ? kasan_kmalloc+0xc4/0xe0 [ 2520.448968] ? kmem_cache_alloc_trace+0x152/0x780 [ 2520.453828] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2520.459022] ? __list_lru_init+0x4d6/0x840 [ 2520.463264] ? alloc_super+0x976/0xb10 [ 2520.467156] ? sget+0x10b/0x150 [ 2520.470442] ? mount_bdev+0x115/0x3e0 [ 2520.474259] ? legacy_get_tree+0x118/0x440 [ 2520.478508] ? vfs_get_tree+0x1cb/0x5c0 [ 2520.482496] ? do_mount+0x6c1/0x1fb0 [ 2520.486221] ? ksys_mount+0x12d/0x140 [ 2520.490127] ? __x64_sys_mount+0xbe/0x150 [ 2520.494289] ? do_syscall_64+0x1b9/0x820 [ 2520.498364] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2520.503756] ? lock_acquire+0x1e4/0x540 [ 2520.507740] ? fs_reclaim_acquire+0x20/0x20 [ 2520.512116] ? lock_downgrade+0x8f0/0x8f0 [ 2520.516270] ? do_mount+0x6c1/0x1fb0 [ 2520.519992] ? check_same_owner+0x340/0x340 [ 2520.524321] ? rcu_note_context_switch+0x730/0x730 [ 2520.529258] __should_failslab+0x124/0x180 [ 2520.533507] should_failslab+0x9/0x14 [ 2520.537328] kmem_cache_alloc_trace+0x2cb/0x780 [ 2520.542015] ? kasan_kmalloc+0xc4/0xe0 [ 2520.545927] __memcg_init_list_lru_node+0x185/0x2d0 [ 2520.550969] ? kvfree_rcu+0x20/0x20 [ 2520.554615] ? __kmalloc_node+0x47/0x70 [ 2520.558606] __list_lru_init+0x4d6/0x840 [ 2520.562675] ? list_lru_destroy+0x500/0x500 [ 2520.567008] ? prealloc_shrinker+0x213/0x480 [ 2520.571425] ? __init_waitqueue_head+0x9e/0x150 [ 2520.576106] ? inactive_list_is_low+0x850/0x850 [ 2520.580796] ? __lockdep_init_map+0x105/0x590 [ 2520.585307] alloc_super+0x976/0xb10 [ 2520.589035] ? destroy_unused_super.part.11+0x110/0x110 [ 2520.594412] ? lock_downgrade+0x8f0/0x8f0 [ 2520.598572] ? kasan_check_read+0x11/0x20 [ 2520.602730] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2520.607324] ? kasan_check_write+0x14/0x20 [ 2520.611566] ? do_raw_spin_lock+0xc1/0x200 [ 2520.615809] sget_userns+0x276/0x860 [ 2520.619526] ? kill_litter_super+0x60/0x60 [ 2520.623769] ? test_single_super+0x10/0x10 [ 2520.628012] ? vfs_get_super+0x270/0x270 [ 2520.632093] ? kasan_check_read+0x11/0x20 [ 2520.636250] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2520.640837] ? kasan_check_write+0x14/0x20 [ 2520.645080] ? do_raw_spin_lock+0xc1/0x200 [ 2520.649339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.654882] ? ns_capable_common+0x13f/0x170 08:33:26 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010202000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000059) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7a}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x734f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2520.659296] ? kill_litter_super+0x60/0x60 [ 2520.663538] sget+0x10b/0x150 [ 2520.666654] ? test_single_super+0x10/0x10 [ 2520.670898] mount_bdev+0x115/0x3e0 [ 2520.674536] ? vfat_mount+0x50/0x50 [ 2520.678164] vfat_mount+0x3c/0x50 [ 2520.681638] ? setup+0x120/0x120 [ 2520.685017] legacy_get_tree+0x118/0x440 [ 2520.689097] vfs_get_tree+0x1cb/0x5c0 [ 2520.692906] ? vfs_set_fs_source+0x12c/0x180 [ 2520.697326] do_mount+0x6c1/0x1fb0 [ 2520.700880] ? kasan_check_write+0x14/0x20 [ 2520.705130] ? copy_mount_string+0x40/0x40 [ 2520.709381] ? kasan_kmalloc+0xc4/0xe0 [ 2520.713285] ? kmem_cache_alloc_trace+0x318/0x780 [ 2520.718149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2520.723708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.729253] ? copy_mount_options+0x285/0x380 [ 2520.733758] ksys_mount+0x12d/0x140 [ 2520.737390] __x64_sys_mount+0xbe/0x150 [ 2520.741371] do_syscall_64+0x1b9/0x820 [ 2520.745261] ? syscall_slow_exit_work+0x500/0x500 [ 2520.750119] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2520.755053] ? syscall_return_slowpath+0x31d/0x5e0 [ 2520.759996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2520.765542] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2520.770561] ? perf_trace_sys_enter+0xb10/0xb10 [ 2520.775251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2520.780132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2520.785341] RIP: 0033:0x45885a [ 2520.788536] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2520.807868] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2520.815591] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2520.822876] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2520.830158] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2520.837448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2520.844732] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003a [ 2520.857656] FAT-fs (loop4): bogus number of reserved sectors [ 2520.863758] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2520.865467] FAT-fs (loop5): bogus number of reserved sectors [ 2520.875702] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:26 executing program 6 (fault-call:1 fault-nth:59): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) [ 2520.909201] FAT-fs (loop5): bogus number of reserved sectors [ 2520.915094] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2520.921706] FAT-fs (loop2): bogus number of directory entries (521) [ 2520.928247] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2520.928536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2520.953499] FAT-fs (loop4): bogus number of reserved sectors 08:33:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010802000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2520.959542] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2520.987327] FAULT_INJECTION: forcing a failure. [ 2520.987327] name failslab, interval 1, probability 0, space 0, times 0 [ 2520.998770] CPU: 0 PID: 31380 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2521.007204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.016586] Call Trace: [ 2521.019210] dump_stack+0x1c9/0x2b4 [ 2521.022883] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2521.028090] ? perf_trace_lock+0x49d/0x920 [ 2521.032378] should_fail.cold.4+0xa/0x11 [ 2521.036484] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2521.041612] ? save_stack+0xa9/0xd0 [ 2521.045253] ? save_stack+0x43/0xd0 [ 2521.048892] ? kmem_cache_alloc_trace+0x152/0x780 [ 2521.053747] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2521.058964] ? __list_lru_init+0x4d6/0x840 [ 2521.063213] ? alloc_super+0x976/0xb10 [ 2521.067115] ? sget+0x10b/0x150 [ 2521.070406] ? mount_bdev+0x115/0x3e0 [ 2521.074216] ? legacy_get_tree+0x118/0x440 [ 2521.078456] ? vfs_get_tree+0x1cb/0x5c0 [ 2521.082442] ? do_mount+0x6c1/0x1fb0 [ 2521.086164] ? ksys_mount+0x12d/0x140 [ 2521.089979] ? __x64_sys_mount+0xbe/0x150 [ 2521.094140] ? do_syscall_64+0x1b9/0x820 [ 2521.098214] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2521.103613] ? lock_acquire+0x1e4/0x540 [ 2521.107605] ? fs_reclaim_acquire+0x20/0x20 [ 2521.111937] ? lock_downgrade+0x8f0/0x8f0 [ 2521.116092] ? lock_downgrade+0x8f0/0x8f0 [ 2521.120266] ? check_same_owner+0x340/0x340 [ 2521.124600] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2521.129053] ? rcu_note_context_switch+0x730/0x730 [ 2521.134007] __should_failslab+0x124/0x180 [ 2521.138461] should_failslab+0x9/0x14 [ 2521.142296] kmem_cache_alloc_trace+0x2cb/0x780 [ 2521.147149] ? kasan_kmalloc+0xc4/0xe0 [ 2521.151062] __memcg_init_list_lru_node+0x185/0x2d0 [ 2521.156102] ? kvfree_rcu+0x20/0x20 [ 2521.159743] ? __kmalloc_node+0x47/0x70 [ 2521.163961] __list_lru_init+0x4d6/0x840 [ 2521.168035] ? list_lru_destroy+0x500/0x500 [ 2521.172378] ? prealloc_shrinker+0x213/0x480 [ 2521.176792] ? __init_waitqueue_head+0x9e/0x150 [ 2521.181472] ? inactive_list_is_low+0x850/0x850 [ 2521.186157] ? __lockdep_init_map+0x105/0x590 [ 2521.190673] alloc_super+0x976/0xb10 [ 2521.194403] ? destroy_unused_super.part.11+0x110/0x110 [ 2521.199774] ? lock_downgrade+0x8f0/0x8f0 [ 2521.203943] ? kasan_check_read+0x11/0x20 [ 2521.208103] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2521.212699] ? kasan_check_write+0x14/0x20 [ 2521.216942] ? do_raw_spin_lock+0xc1/0x200 [ 2521.221193] sget_userns+0x276/0x860 [ 2521.224920] ? kill_litter_super+0x60/0x60 [ 2521.229164] ? test_single_super+0x10/0x10 [ 2521.233409] ? vfs_get_super+0x270/0x270 [ 2521.237475] ? kasan_check_read+0x11/0x20 [ 2521.241638] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2521.246233] ? kasan_check_write+0x14/0x20 [ 2521.250473] ? do_raw_spin_lock+0xc1/0x200 [ 2521.254775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.260325] ? ns_capable_common+0x13f/0x170 [ 2521.264748] ? kill_litter_super+0x60/0x60 [ 2521.268993] sget+0x10b/0x150 [ 2521.272108] ? test_single_super+0x10/0x10 [ 2521.276355] mount_bdev+0x115/0x3e0 [ 2521.279992] ? vfat_mount+0x50/0x50 [ 2521.283641] vfat_mount+0x3c/0x50 [ 2521.287099] ? setup+0x120/0x120 [ 2521.290479] legacy_get_tree+0x118/0x440 [ 2521.294557] vfs_get_tree+0x1cb/0x5c0 [ 2521.298364] ? vfs_set_fs_source+0x12c/0x180 [ 2521.302785] do_mount+0x6c1/0x1fb0 [ 2521.306336] ? kasan_check_write+0x14/0x20 [ 2521.310586] ? copy_mount_string+0x40/0x40 [ 2521.315989] ? retint_kernel+0x10/0x10 [ 2521.319911] ? copy_mount_options+0x1a1/0x380 [ 2521.324417] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 2521.329290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.335185] ? copy_mount_options+0x285/0x380 [ 2521.339708] ksys_mount+0x12d/0x140 [ 2521.343361] __x64_sys_mount+0xbe/0x150 [ 2521.347365] do_syscall_64+0x1b9/0x820 [ 2521.351262] ? syscall_slow_exit_work+0x500/0x500 [ 2521.356117] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2521.361061] ? syscall_return_slowpath+0x31d/0x5e0 [ 2521.366004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.371562] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2521.376587] ? perf_trace_sys_enter+0xb10/0xb10 [ 2521.381273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2521.386137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2521.391334] RIP: 0033:0x45885a [ 2521.394697] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2521.414306] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2521.422029] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2521.429318] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2521.443017] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2521.450293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 08:33:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xff3f000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:26 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a020a0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x4020000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2521.457573] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003b 08:33:26 executing program 6 (fault-call:1 fault-nth:60): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404011402000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2521.510979] FAT-fs (loop5): bogus number of reserved sectors [ 2521.516942] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2521.525982] FAT-fs (loop2): bogus number of directory entries (522) [ 2521.532547] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2521.542650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2521.570778] FAT-fs (loop5): bogus number of reserved sectors [ 2521.576972] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2521.586357] FAULT_INJECTION: forcing a failure. [ 2521.586357] name failslab, interval 1, probability 0, space 0, times 0 [ 2521.597817] CPU: 0 PID: 31398 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2521.606249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2521.615627] Call Trace: [ 2521.618243] dump_stack+0x1c9/0x2b4 [ 2521.621906] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2521.627135] ? perf_trace_lock+0x49d/0x920 [ 2521.631411] should_fail.cold.4+0xa/0x11 [ 2521.635500] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2521.640628] ? do_mount+0x6c1/0x1fb0 [ 2521.644358] ? ksys_mount+0x12d/0x140 [ 2521.648176] ? __x64_sys_mount+0xbe/0x150 [ 2521.652349] ? zap_class+0x740/0x740 [ 2521.656082] ? __list_lru_init+0x409/0x840 [ 2521.660454] ? lock_downgrade+0x8f0/0x8f0 [ 2521.664654] ? lock_acquire+0x1e4/0x540 [ 2521.668655] ? fs_reclaim_acquire+0x20/0x20 [ 2521.673031] ? lock_acquire+0x1e4/0x540 [ 2521.677022] ? fs_reclaim_acquire+0x20/0x20 [ 2521.681362] ? lock_downgrade+0x8f0/0x8f0 [ 2521.685526] ? check_same_owner+0x340/0x340 [ 2521.689872] ? check_same_owner+0x340/0x340 [ 2521.694211] ? rcu_note_context_switch+0x730/0x730 [ 2521.699178] __should_failslab+0x124/0x180 [ 2521.703452] should_failslab+0x9/0x14 [ 2521.707272] __kmalloc+0x2c8/0x760 [ 2521.710826] ? kvfree_rcu+0x20/0x20 [ 2521.714501] ? __list_lru_init+0x151/0x840 [ 2521.718755] __list_lru_init+0x151/0x840 [ 2521.722838] ? list_lru_destroy+0x500/0x500 [ 2521.727184] ? prealloc_shrinker+0x213/0x480 [ 2521.731610] ? __init_waitqueue_head+0x9e/0x150 [ 2521.736320] ? inactive_list_is_low+0x850/0x850 [ 2521.741007] ? __lockdep_init_map+0x105/0x590 [ 2521.745540] alloc_super+0x9a6/0xb10 [ 2521.749290] ? destroy_unused_super.part.11+0x110/0x110 [ 2521.754682] ? lock_downgrade+0x8f0/0x8f0 [ 2521.758862] ? kasan_check_read+0x11/0x20 [ 2521.763024] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2521.767640] ? kasan_check_write+0x14/0x20 [ 2521.771885] ? do_raw_spin_lock+0xc1/0x200 [ 2521.776143] sget_userns+0x276/0x860 [ 2521.779955] ? kill_litter_super+0x60/0x60 [ 2521.784206] ? test_single_super+0x10/0x10 [ 2521.788455] ? vfs_get_super+0x270/0x270 [ 2521.792526] ? kasan_check_read+0x11/0x20 [ 2521.796690] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2521.801286] ? kasan_check_write+0x14/0x20 [ 2521.805563] ? do_raw_spin_lock+0xc1/0x200 [ 2521.809878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.815451] ? ns_capable_common+0x13f/0x170 [ 2521.819889] ? kill_litter_super+0x60/0x60 [ 2521.826236] sget+0x10b/0x150 [ 2521.829364] ? test_single_super+0x10/0x10 [ 2521.833624] mount_bdev+0x115/0x3e0 [ 2521.837273] ? vfat_mount+0x50/0x50 [ 2521.840918] vfat_mount+0x3c/0x50 [ 2521.844385] ? setup+0x120/0x120 [ 2521.847763] legacy_get_tree+0x118/0x440 [ 2521.851841] vfs_get_tree+0x1cb/0x5c0 [ 2521.855652] ? vfs_set_fs_source+0x12c/0x180 [ 2521.860076] do_mount+0x6c1/0x1fb0 [ 2521.863633] ? kasan_check_write+0x14/0x20 [ 2521.867886] ? copy_mount_string+0x40/0x40 [ 2521.872137] ? retint_kernel+0x10/0x10 [ 2521.876048] ? copy_mount_options+0x1a1/0x380 [ 2521.880560] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 2521.885424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.890976] ? copy_mount_options+0x285/0x380 [ 2521.895490] ksys_mount+0x12d/0x140 [ 2521.899133] __x64_sys_mount+0xbe/0x150 [ 2521.903125] do_syscall_64+0x1b9/0x820 [ 2521.907026] ? syscall_slow_exit_work+0x500/0x500 [ 2521.911884] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2521.916844] ? syscall_return_slowpath+0x31d/0x5e0 [ 2521.921806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2521.927361] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2521.932394] ? perf_trace_sys_enter+0xb10/0xb10 [ 2521.937080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2521.941950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2521.947147] RIP: 0033:0x45885a [ 2521.950339] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:27 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010602000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:27 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000002a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2521.969930] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2521.977656] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2521.984933] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2521.992212] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2521.999487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2522.006765] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003c 08:33:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2522.038224] FAT-fs (loop4): bogus number of reserved sectors [ 2522.044159] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2522.055597] FAT-fs (loop2): bogus number of directory entries (522) [ 2522.062186] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2522.097399] FAT-fs (loop4): bogus number of reserved sectors [ 2522.103327] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2522.124604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:27 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xe00000000000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:27 executing program 6 (fault-call:1 fault-nth:61): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:27 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a04000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:27 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02004074f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffe}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7a00000000000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2522.273726] FAULT_INJECTION: forcing a failure. [ 2522.273726] name failslab, interval 1, probability 0, space 0, times 0 [ 2522.285095] CPU: 0 PID: 31423 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2522.293517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.294760] FAT-fs (loop4): bogus number of reserved sectors [ 2522.302885] Call Trace: [ 2522.302918] dump_stack+0x1c9/0x2b4 [ 2522.302942] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2522.302965] ? perf_trace_lock+0x49d/0x920 [ 2522.302999] should_fail.cold.4+0xa/0x11 [ 2522.308856] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2522.311407] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2522.311439] ? save_stack+0xa9/0xd0 [ 2522.344377] ? save_stack+0x43/0xd0 [ 2522.347999] ? kmem_cache_alloc_trace+0x152/0x780 [ 2522.352848] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2522.358032] ? __list_lru_init+0x4d6/0x840 [ 2522.362269] ? alloc_super+0x9a6/0xb10 [ 2522.366150] ? sget+0x10b/0x150 [ 2522.369421] ? mount_bdev+0x115/0x3e0 [ 2522.373232] ? legacy_get_tree+0x118/0x440 [ 2522.377468] ? vfs_get_tree+0x1cb/0x5c0 [ 2522.381445] ? do_mount+0x6c1/0x1fb0 [ 2522.385158] ? ksys_mount+0x12d/0x140 [ 2522.388948] ? __x64_sys_mount+0xbe/0x150 [ 2522.393089] ? do_syscall_64+0x1b9/0x820 [ 2522.397144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2522.402604] ? lock_acquire+0x1e4/0x540 [ 2522.406571] ? fs_reclaim_acquire+0x20/0x20 [ 2522.410895] ? lock_downgrade+0x8f0/0x8f0 [ 2522.415036] ? do_mount+0x6c1/0x1fb0 [ 2522.419030] ? check_same_owner+0x340/0x340 [ 2522.423347] ? rcu_note_context_switch+0x730/0x730 [ 2522.428277] __should_failslab+0x124/0x180 [ 2522.432518] should_failslab+0x9/0x14 [ 2522.436318] kmem_cache_alloc_trace+0x2cb/0x780 [ 2522.440989] ? kasan_kmalloc+0xc4/0xe0 [ 2522.444896] __memcg_init_list_lru_node+0x185/0x2d0 [ 2522.449907] ? kvfree_rcu+0x20/0x20 [ 2522.453529] ? __kmalloc_node+0x47/0x70 [ 2522.457502] __list_lru_init+0x4d6/0x840 [ 2522.461561] ? list_lru_destroy+0x500/0x500 [ 2522.465879] ? prealloc_shrinker+0x213/0x480 [ 2522.470289] ? __init_waitqueue_head+0x9e/0x150 [ 2522.474948] ? inactive_list_is_low+0x850/0x850 [ 2522.479634] ? __lockdep_init_map+0x105/0x590 [ 2522.484136] alloc_super+0x9a6/0xb10 [ 2522.487847] ? destroy_unused_super.part.11+0x110/0x110 [ 2522.493216] ? lock_downgrade+0x8f0/0x8f0 [ 2522.497363] ? kasan_check_read+0x11/0x20 [ 2522.501518] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2522.506102] ? kasan_check_write+0x14/0x20 [ 2522.510328] ? do_raw_spin_lock+0xc1/0x200 [ 2522.514572] sget_userns+0x276/0x860 [ 2522.518275] ? kill_litter_super+0x60/0x60 [ 2522.522515] ? test_single_super+0x10/0x10 [ 2522.526758] ? vfs_get_super+0x270/0x270 [ 2522.530807] ? kasan_check_read+0x11/0x20 [ 2522.534946] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2522.539548] ? kasan_check_write+0x14/0x20 [ 2522.543783] ? do_raw_spin_lock+0xc1/0x200 [ 2522.548042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2522.553582] ? ns_capable_common+0x13f/0x170 [ 2522.557985] ? kill_litter_super+0x60/0x60 [ 2522.562227] sget+0x10b/0x150 [ 2522.565328] ? test_single_super+0x10/0x10 [ 2522.569573] mount_bdev+0x115/0x3e0 [ 2522.573203] ? vfat_mount+0x50/0x50 [ 2522.576836] vfat_mount+0x3c/0x50 [ 2522.580284] ? setup+0x120/0x120 [ 2522.583653] legacy_get_tree+0x118/0x440 [ 2522.587722] vfs_get_tree+0x1cb/0x5c0 [ 2522.591517] ? vfs_set_fs_source+0x12c/0x180 [ 2522.595934] do_mount+0x6c1/0x1fb0 [ 2522.599468] ? check_same_owner+0x340/0x340 [ 2522.603783] ? lock_release+0xa30/0xa30 [ 2522.607766] ? copy_mount_string+0x40/0x40 [ 2522.612001] ? retint_kernel+0x10/0x10 [ 2522.615893] ? copy_mount_options+0x213/0x380 [ 2522.620387] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 2522.625222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2522.630750] ? copy_mount_options+0x285/0x380 [ 2522.635244] ksys_mount+0x12d/0x140 [ 2522.638868] __x64_sys_mount+0xbe/0x150 [ 2522.642850] do_syscall_64+0x1b9/0x820 [ 2522.646737] ? finish_task_switch+0x1d3/0x870 [ 2522.651236] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2522.656167] ? syscall_return_slowpath+0x31d/0x5e0 [ 2522.661089] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2522.666101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2522.671639] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2522.676651] ? perf_trace_sys_enter+0xb10/0xb10 [ 2522.681328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2522.686183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2522.691370] RIP: 0033:0x45885a [ 2522.694552] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2522.713935] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2522.721649] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2522.728921] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2522.736191] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2522.743454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2522.750713] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003d [ 2522.759177] FAT-fs (loop5): bogus number of reserved sectors [ 2522.765124] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:28 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0b000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2522.781812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2522.801477] FAT-fs (loop4): bogus number of reserved sectors [ 2522.807438] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xc5270000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:28 executing program 6 (fault-call:1 fault-nth:62): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:28 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a08000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:28 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000076) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2522.906997] FAT-fs (loop4): bogus number of reserved sectors [ 2522.912937] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2522.929874] FAT-fs (loop5): bogus number of reserved sectors [ 2522.935798] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2522.940357] FAULT_INJECTION: forcing a failure. [ 2522.940357] name failslab, interval 1, probability 0, space 0, times 0 08:33:28 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02030674f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2522.953130] CPU: 1 PID: 31455 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2522.961550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2522.970922] Call Trace: [ 2522.973528] dump_stack+0x1c9/0x2b4 [ 2522.977185] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2522.982402] ? perf_trace_lock+0xde/0x920 [ 2522.984435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2522.986638] should_fail.cold.4+0xa/0x11 [ 2522.986662] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2522.986684] ? save_stack+0xa9/0xd0 [ 2522.986703] ? save_stack+0x43/0xd0 [ 2522.986719] ? kasan_kmalloc+0xc4/0xe0 [ 2522.986735] ? kmem_cache_alloc_trace+0x152/0x780 [ 2522.986750] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2522.986761] ? __list_lru_init+0x4d6/0x840 [ 2522.986773] ? alloc_super+0x9a6/0xb10 [ 2522.986785] ? sget+0x10b/0x150 [ 2522.986796] ? mount_bdev+0x115/0x3e0 [ 2522.986809] ? legacy_get_tree+0x118/0x440 [ 2522.986822] ? vfs_get_tree+0x1cb/0x5c0 [ 2522.986835] ? do_mount+0x6c1/0x1fb0 [ 2522.986849] ? ksys_mount+0x12d/0x140 [ 2522.986861] ? __x64_sys_mount+0xbe/0x150 [ 2522.986876] ? do_syscall_64+0x1b9/0x820 [ 2522.986892] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2522.986913] ? lock_acquire+0x1e4/0x540 [ 2522.986927] ? fs_reclaim_acquire+0x20/0x20 [ 2522.986939] ? lock_downgrade+0x8f0/0x8f0 [ 2522.986951] ? do_mount+0x6c1/0x1fb0 [ 2522.986969] ? check_same_owner+0x340/0x340 [ 2522.986997] ? rcu_note_context_switch+0x730/0x730 [ 2522.987017] __should_failslab+0x124/0x180 [ 2522.987036] should_failslab+0x9/0x14 [ 2522.987048] kmem_cache_alloc_trace+0x2cb/0x780 [ 2522.987061] ? kasan_kmalloc+0xc4/0xe0 [ 2522.987080] __memcg_init_list_lru_node+0x185/0x2d0 [ 2522.987093] ? kvfree_rcu+0x20/0x20 [ 2522.987106] ? __kmalloc_node+0x47/0x70 [ 2522.987123] __list_lru_init+0x4d6/0x840 [ 2522.987136] ? list_lru_destroy+0x500/0x500 [ 2522.987154] ? prealloc_shrinker+0x213/0x480 [ 2522.987166] ? __init_waitqueue_head+0x9e/0x150 [ 2522.987181] ? inactive_list_is_low+0x850/0x850 [ 2522.987197] ? __lockdep_init_map+0x105/0x590 [ 2522.987211] alloc_super+0x9a6/0xb10 [ 2522.987229] ? destroy_unused_super.part.11+0x110/0x110 [ 2522.987241] ? lock_downgrade+0x8f0/0x8f0 [ 2522.987258] ? kasan_check_read+0x11/0x20 [ 2522.987271] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2522.987284] ? kasan_check_write+0x14/0x20 [ 2522.987300] ? do_raw_spin_lock+0xc1/0x200 [ 2523.179735] sget_userns+0x276/0x860 [ 2523.183439] ? kill_litter_super+0x60/0x60 [ 2523.187675] ? test_single_super+0x10/0x10 [ 2523.191908] ? vfs_get_super+0x270/0x270 [ 2523.195957] ? kasan_check_read+0x11/0x20 [ 2523.200096] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2523.204679] ? kasan_check_write+0x14/0x20 [ 2523.208900] ? do_raw_spin_lock+0xc1/0x200 [ 2523.213219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2523.218760] ? ns_capable_common+0x13f/0x170 [ 2523.223159] ? kill_litter_super+0x60/0x60 [ 2523.227379] sget+0x10b/0x150 [ 2523.230472] ? test_single_super+0x10/0x10 [ 2523.234782] mount_bdev+0x115/0x3e0 [ 2523.238394] ? vfat_mount+0x50/0x50 [ 2523.242016] vfat_mount+0x3c/0x50 [ 2523.245457] ? setup+0x120/0x120 [ 2523.248821] legacy_get_tree+0x118/0x440 [ 2523.252873] vfs_get_tree+0x1cb/0x5c0 [ 2523.256670] ? vfs_set_fs_source+0x12c/0x180 [ 2523.261069] do_mount+0x6c1/0x1fb0 [ 2523.264618] ? check_same_owner+0x340/0x340 [ 2523.268927] ? lock_release+0xa30/0xa30 [ 2523.273152] ? copy_mount_string+0x40/0x40 [ 2523.277377] ? kasan_kmalloc+0xc4/0xe0 [ 2523.281258] ? kmem_cache_alloc_trace+0x318/0x780 [ 2523.286107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2523.291643] ? _copy_from_user+0xdf/0x150 [ 2523.295789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2523.301326] ? copy_mount_options+0x285/0x380 [ 2523.305828] ksys_mount+0x12d/0x140 [ 2523.309443] __x64_sys_mount+0xbe/0x150 [ 2523.313409] do_syscall_64+0x1b9/0x820 [ 2523.317286] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2523.322201] ? syscall_return_slowpath+0x31d/0x5e0 [ 2523.327120] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2523.332123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2523.337649] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2523.342657] ? perf_trace_sys_enter+0xb10/0xb10 [ 2523.347315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2523.353807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2523.358999] RIP: 0033:0x45885a [ 2523.362192] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2523.381397] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2523.389095] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2523.396360] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2523.403614] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2523.410867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2523.418133] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003e 08:33:28 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010502000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2523.454850] FAT-fs (loop4): bogus number of reserved sectors [ 2523.460862] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2523.497496] FAT-fs (loop2): bogus number of directory entries (1539) [ 2523.504093] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2523.528366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2523.547781] FAT-fs (loop2): bogus number of directory entries (1539) [ 2523.554488] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:29 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000440)='./file0/file0\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000003c0)={@dev={0xfe, 0x80, [], 0x14}, r4}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="cfcf59b96a23d3259514d8d90968629ba60c6fbb9319a23e17aa2d490084ad789e58b26a95562c588858a31d1c700a88d49abaa776295ad1d0cbb6a420ab5c7fe1d8000acbacc53c", 0x48, 0xfffffffffffffffa) 08:33:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x2745}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:29 executing program 6 (fault-call:1 fault-nth:63): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xff0f0000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:29 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02050274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:29 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404011002000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2523.787678] FAT-fs (loop4): bogus number of reserved sectors [ 2523.793728] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2523.817560] FAT-fs (loop2): bogus number of directory entries (517) [ 2523.824083] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2523.841899] FAULT_INJECTION: forcing a failure. [ 2523.841899] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.853296] CPU: 0 PID: 31492 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2523.861839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2523.871202] Call Trace: [ 2523.873807] dump_stack+0x1c9/0x2b4 [ 2523.877479] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2523.879322] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2523.882730] ? perf_trace_lock+0x49d/0x920 [ 2523.882768] should_fail.cold.4+0xa/0x11 [ 2523.882794] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2523.882821] ? save_stack+0xa9/0xd0 [ 2523.882840] ? save_stack+0x43/0xd0 [ 2523.882856] ? kmem_cache_alloc_trace+0x152/0x780 [ 2523.882870] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2523.882884] ? __list_lru_init+0x4d6/0x840 [ 2523.882898] ? alloc_super+0x9a6/0xb10 [ 2523.882919] ? sget+0x10b/0x150 [ 2523.882933] ? mount_bdev+0x115/0x3e0 [ 2523.882948] ? legacy_get_tree+0x118/0x440 [ 2523.882963] ? vfs_get_tree+0x1cb/0x5c0 [ 2523.882979] ? do_mount+0x6c1/0x1fb0 [ 2523.882993] ? ksys_mount+0x12d/0x140 [ 2523.883009] ? __x64_sys_mount+0xbe/0x150 [ 2523.883026] ? do_syscall_64+0x1b9/0x820 [ 2523.883043] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2523.883077] ? lock_acquire+0x1e4/0x540 [ 2523.883095] ? fs_reclaim_acquire+0x20/0x20 [ 2523.883112] ? lock_downgrade+0x8f0/0x8f0 [ 2523.883127] ? do_mount+0x6c1/0x1fb0 [ 2523.883154] ? check_same_owner+0x340/0x340 [ 2523.883174] ? rcu_note_context_switch+0x730/0x730 08:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000064) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:29 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010702000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2523.883196] __should_failslab+0x124/0x180 [ 2523.994345] should_failslab+0x9/0x14 [ 2523.998165] kmem_cache_alloc_trace+0x2cb/0x780 [ 2524.002839] ? kasan_kmalloc+0xc4/0xe0 [ 2524.006753] __memcg_init_list_lru_node+0x185/0x2d0 [ 2524.011793] ? kvfree_rcu+0x20/0x20 [ 2524.015451] ? __kmalloc_node+0x47/0x70 [ 2524.019493] __list_lru_init+0x4d6/0x840 [ 2524.023582] ? list_lru_destroy+0x500/0x500 [ 2524.027938] ? prealloc_shrinker+0x213/0x480 [ 2524.032370] ? __init_waitqueue_head+0x9e/0x150 [ 2524.037062] ? inactive_list_is_low+0x850/0x850 [ 2524.041762] ? __lockdep_init_map+0x105/0x590 [ 2524.043564] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2524.046280] alloc_super+0x9a6/0xb10 [ 2524.046308] ? destroy_unused_super.part.11+0x110/0x110 [ 2524.046330] ? lock_downgrade+0x8f0/0x8f0 [ 2524.046361] ? kasan_check_read+0x11/0x20 [ 2524.046381] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2524.046405] ? kasan_check_write+0x14/0x20 [ 2524.046419] ? do_raw_spin_lock+0xc1/0x200 [ 2524.046441] sget_userns+0x276/0x860 [ 2524.046456] ? kill_litter_super+0x60/0x60 08:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2524.046475] ? test_single_super+0x10/0x10 [ 2524.046494] ? vfs_get_super+0x270/0x270 [ 2524.100391] ? kasan_check_read+0x11/0x20 [ 2524.104560] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2524.109165] ? kasan_check_write+0x14/0x20 [ 2524.113424] ? do_raw_spin_lock+0xc1/0x200 [ 2524.117727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.123292] ? ns_capable_common+0x13f/0x170 [ 2524.127723] ? kill_litter_super+0x60/0x60 [ 2524.131983] sget+0x10b/0x150 [ 2524.135112] ? test_single_super+0x10/0x10 [ 2524.139386] mount_bdev+0x115/0x3e0 [ 2524.143034] ? vfat_mount+0x50/0x50 [ 2524.146682] vfat_mount+0x3c/0x50 [ 2524.150148] ? setup+0x120/0x120 [ 2524.153534] legacy_get_tree+0x118/0x440 [ 2524.154617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2524.157617] vfs_get_tree+0x1cb/0x5c0 [ 2524.157635] ? vfs_set_fs_source+0x12c/0x180 [ 2524.157656] do_mount+0x6c1/0x1fb0 [ 2524.157678] ? kasan_check_write+0x14/0x20 [ 2524.157698] ? copy_mount_string+0x40/0x40 [ 2524.157716] ? kasan_kmalloc+0xc4/0xe0 [ 2524.157737] ? kmem_cache_alloc_trace+0x318/0x780 08:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2524.157758] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2524.157777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.157791] ? copy_mount_options+0x285/0x380 [ 2524.157814] ksys_mount+0x12d/0x140 [ 2524.157836] __x64_sys_mount+0xbe/0x150 [ 2524.157860] do_syscall_64+0x1b9/0x820 [ 2524.157876] ? syscall_slow_exit_work+0x500/0x500 [ 2524.157892] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2524.157911] ? syscall_return_slowpath+0x31d/0x5e0 [ 2524.157929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.157944] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2524.157961] ? perf_trace_sys_enter+0xb10/0xb10 [ 2524.157982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2524.158011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2524.158026] RIP: 0033:0x45885a [ 2524.158032] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 [ 2524.263010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2524.264732] ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2524.265029] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2524.265046] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2524.265057] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2524.265067] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2524.265076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2524.265089] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000003f 08:33:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:29 executing program 6 (fault-call:1 fault-nth:64): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x6c000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:29 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010902000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2524.345654] FAT-fs (loop5): bogus number of reserved sectors [ 2524.351569] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2524.382962] FAT-fs (loop2): bogus number of directory entries (517) [ 2524.389545] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2524.424609] FAT-fs (loop5): bogus number of reserved sectors [ 2524.430572] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2524.449466] FAT-fs (loop4): bogus number of reserved sectors [ 2524.455406] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2524.480223] FAULT_INJECTION: forcing a failure. [ 2524.480223] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.491667] CPU: 1 PID: 31526 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2524.500093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2524.509445] Call Trace: [ 2524.512039] dump_stack+0x1c9/0x2b4 [ 2524.515668] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2524.520870] ? perf_trace_lock+0xde/0x920 [ 2524.525031] should_fail.cold.4+0xa/0x11 [ 2524.529106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2524.534219] ? save_stack+0xa9/0xd0 [ 2524.537856] ? save_stack+0x43/0xd0 [ 2524.541487] ? kasan_kmalloc+0xc4/0xe0 [ 2524.545378] ? kmem_cache_alloc_trace+0x152/0x780 [ 2524.550223] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2524.555501] ? __list_lru_init+0x4d6/0x840 [ 2524.559738] ? alloc_super+0x9a6/0xb10 [ 2524.563643] ? sget+0x10b/0x150 [ 2524.566927] ? mount_bdev+0x115/0x3e0 [ 2524.570729] ? legacy_get_tree+0x118/0x440 [ 2524.574967] ? vfs_get_tree+0x1cb/0x5c0 [ 2524.578958] ? do_mount+0x6c1/0x1fb0 [ 2524.582674] ? ksys_mount+0x12d/0x140 [ 2524.586473] ? __x64_sys_mount+0xbe/0x150 [ 2524.590620] ? do_syscall_64+0x1b9/0x820 [ 2524.594816] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2524.600203] ? lock_acquire+0x1e4/0x540 [ 2524.604180] ? fs_reclaim_acquire+0x20/0x20 [ 2524.608509] ? lock_downgrade+0x8f0/0x8f0 [ 2524.612659] ? do_mount+0x6c1/0x1fb0 [ 2524.616383] ? check_same_owner+0x340/0x340 [ 2524.620713] ? rcu_note_context_switch+0x730/0x730 [ 2524.625663] __should_failslab+0x124/0x180 [ 2524.629908] should_failslab+0x9/0x14 [ 2524.633714] kmem_cache_alloc_trace+0x2cb/0x780 [ 2524.638391] ? kasan_kmalloc+0xc4/0xe0 [ 2524.642315] __memcg_init_list_lru_node+0x185/0x2d0 [ 2524.647339] ? kvfree_rcu+0x20/0x20 [ 2524.651320] ? __kmalloc_node+0x47/0x70 [ 2524.655311] __list_lru_init+0x4d6/0x840 [ 2524.659379] ? list_lru_destroy+0x500/0x500 [ 2524.663718] ? prealloc_shrinker+0x213/0x480 [ 2524.668131] ? __init_waitqueue_head+0x9e/0x150 [ 2524.672799] ? inactive_list_is_low+0x850/0x850 [ 2524.677471] ? __lockdep_init_map+0x105/0x590 [ 2524.681971] alloc_super+0x9a6/0xb10 [ 2524.685693] ? destroy_unused_super.part.11+0x110/0x110 [ 2524.691060] ? lock_downgrade+0x8f0/0x8f0 [ 2524.695214] ? kasan_check_read+0x11/0x20 [ 2524.699375] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2524.703962] ? kasan_check_write+0x14/0x20 [ 2524.708212] ? do_raw_spin_lock+0xc1/0x200 [ 2524.713321] sget_userns+0x276/0x860 [ 2524.717250] ? kill_litter_super+0x60/0x60 [ 2524.721579] ? test_single_super+0x10/0x10 [ 2524.725847] ? vfs_get_super+0x270/0x270 [ 2524.729934] ? kasan_check_read+0x11/0x20 [ 2524.734098] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2524.738721] ? kasan_check_write+0x14/0x20 [ 2524.742959] ? do_raw_spin_lock+0xc1/0x200 [ 2524.747226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.752785] ? ns_capable_common+0x13f/0x170 [ 2524.757200] ? kill_litter_super+0x60/0x60 [ 2524.761439] sget+0x10b/0x150 [ 2524.764548] ? test_single_super+0x10/0x10 [ 2524.768784] mount_bdev+0x115/0x3e0 [ 2524.772416] ? vfat_mount+0x50/0x50 [ 2524.776047] vfat_mount+0x3c/0x50 [ 2524.779502] ? setup+0x120/0x120 [ 2524.782867] legacy_get_tree+0x118/0x440 [ 2524.786948] vfs_get_tree+0x1cb/0x5c0 [ 2524.790751] ? vfs_set_fs_source+0x12c/0x180 [ 2524.795165] do_mount+0x6c1/0x1fb0 [ 2524.798710] ? kasan_check_write+0x14/0x20 [ 2524.802951] ? copy_mount_string+0x40/0x40 [ 2524.807191] ? retint_kernel+0x10/0x10 [ 2524.811087] ? copy_mount_options+0x1f0/0x380 [ 2524.815586] ? copy_mount_options+0x1f6/0x380 [ 2524.820084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.825623] ? copy_mount_options+0x285/0x380 [ 2524.830127] ksys_mount+0x12d/0x140 [ 2524.833759] __x64_sys_mount+0xbe/0x150 [ 2524.837739] do_syscall_64+0x1b9/0x820 [ 2524.841627] ? finish_task_switch+0x1d3/0x870 [ 2524.846128] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2524.851076] ? syscall_return_slowpath+0x31d/0x5e0 [ 2524.856021] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2524.861046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2524.866593] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2524.871616] ? perf_trace_sys_enter+0xb10/0xb10 [ 2524.876300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2524.881342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2524.886531] RIP: 0033:0x45885a [ 2524.889715] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2524.909054] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2524.916781] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2524.924060] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2524.931331] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2524.938601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2524.945871] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000040 [ 2524.971548] FAT-fs (loop4): bogus number of reserved sectors [ 2524.977497] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2524.986544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:30 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0xfffffffffffffffe, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) userfaultfd(0x800) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20003f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:30 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a020e0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x407ff}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:30 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a05000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:30 executing program 6 (fault-call:1 fault-nth:65): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x93000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2525.333168] FAULT_INJECTION: forcing a failure. [ 2525.333168] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.334099] FAT-fs (loop4): bogus number of reserved sectors [ 2525.344517] CPU: 1 PID: 31549 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2525.350353] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2525.358732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2525.358739] Call Trace: [ 2525.358766] dump_stack+0x1c9/0x2b4 [ 2525.358796] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2525.358821] ? perf_trace_lock+0xde/0x920 [ 2525.389591] should_fail.cold.4+0xa/0x11 [ 2525.393973] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2525.399108] ? save_stack+0xa9/0xd0 [ 2525.402760] ? save_stack+0x43/0xd0 [ 2525.405048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2525.406426] ? kasan_kmalloc+0xc4/0xe0 [ 2525.406442] ? kmem_cache_alloc_trace+0x152/0x780 [ 2525.406457] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2525.406469] ? __list_lru_init+0x4d6/0x840 08:33:30 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000042) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) [ 2525.406487] ? alloc_super+0x9a6/0xb10 [ 2525.435223] ? sget+0x10b/0x150 [ 2525.438513] ? mount_bdev+0x115/0x3e0 [ 2525.444240] ? legacy_get_tree+0x118/0x440 [ 2525.448487] ? vfs_get_tree+0x1cb/0x5c0 [ 2525.451971] FAT-fs (loop5): bogus number of reserved sectors [ 2525.452469] ? do_mount+0x6c1/0x1fb0 [ 2525.452483] ? ksys_mount+0x12d/0x140 [ 2525.452497] ? __x64_sys_mount+0xbe/0x150 [ 2525.452514] ? do_syscall_64+0x1b9/0x820 [ 2525.452529] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.452551] ? lock_acquire+0x1e4/0x540 [ 2525.458367] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2525.462045] ? fs_reclaim_acquire+0x20/0x20 [ 2525.462059] ? lock_downgrade+0x8f0/0x8f0 [ 2525.462080] ? do_mount+0x6c1/0x1fb0 [ 2525.501810] ? check_same_owner+0x340/0x340 [ 2525.506126] ? rcu_note_context_switch+0x730/0x730 [ 2525.511050] __should_failslab+0x124/0x180 [ 2525.515282] should_failslab+0x9/0x14 [ 2525.519071] kmem_cache_alloc_trace+0x2cb/0x780 [ 2525.523737] ? kasan_kmalloc+0xc4/0xe0 [ 2525.527620] __memcg_init_list_lru_node+0x185/0x2d0 [ 2525.532622] ? kvfree_rcu+0x20/0x20 [ 2525.536251] ? __kmalloc_node+0x47/0x70 [ 2525.540226] __list_lru_init+0x4d6/0x840 [ 2525.544275] ? list_lru_destroy+0x500/0x500 [ 2525.548769] ? prealloc_shrinker+0x213/0x480 [ 2525.553179] ? __init_waitqueue_head+0x9e/0x150 [ 2525.557836] ? inactive_list_is_low+0x850/0x850 [ 2525.562505] ? __lockdep_init_map+0x105/0x590 [ 2525.567008] alloc_super+0x9a6/0xb10 [ 2525.570715] ? destroy_unused_super.part.11+0x110/0x110 [ 2525.576073] ? lock_downgrade+0x8f0/0x8f0 [ 2525.580216] ? kasan_check_read+0x11/0x20 [ 2525.584351] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2525.588920] ? kasan_check_write+0x14/0x20 [ 2525.593140] ? do_raw_spin_lock+0xc1/0x200 [ 2525.597376] sget_userns+0x276/0x860 [ 2525.601077] ? kill_litter_super+0x60/0x60 [ 2525.605303] ? test_single_super+0x10/0x10 [ 2525.609533] ? vfs_get_super+0x270/0x270 [ 2525.613593] ? kasan_check_read+0x11/0x20 [ 2525.617729] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2525.622305] ? kasan_check_write+0x14/0x20 [ 2525.626702] ? do_raw_spin_lock+0xc1/0x200 [ 2525.630938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2525.636466] ? ns_capable_common+0x13f/0x170 [ 2525.640864] ? kill_litter_super+0x60/0x60 [ 2525.645084] sget+0x10b/0x150 [ 2525.648187] ? test_single_super+0x10/0x10 [ 2525.652420] mount_bdev+0x115/0x3e0 [ 2525.656039] ? vfat_mount+0x50/0x50 [ 2525.659665] vfat_mount+0x3c/0x50 [ 2525.663115] ? setup+0x120/0x120 [ 2525.666467] legacy_get_tree+0x118/0x440 [ 2525.670519] vfs_get_tree+0x1cb/0x5c0 [ 2525.674306] ? vfs_set_fs_source+0x12c/0x180 [ 2525.678704] do_mount+0x6c1/0x1fb0 [ 2525.682246] ? check_same_owner+0x340/0x340 [ 2525.686556] ? lock_release+0xa30/0xa30 [ 2525.690520] ? copy_mount_string+0x40/0x40 [ 2525.694769] ? kasan_kmalloc+0xc4/0xe0 [ 2525.698647] ? kmem_cache_alloc_trace+0x318/0x780 [ 2525.703494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2525.709027] ? _copy_from_user+0xdf/0x150 [ 2525.713169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2525.718696] ? copy_mount_options+0x285/0x380 [ 2525.723446] ksys_mount+0x12d/0x140 [ 2525.727075] __x64_sys_mount+0xbe/0x150 [ 2525.731040] do_syscall_64+0x1b9/0x820 [ 2525.734915] ? finish_task_switch+0x1d3/0x870 [ 2525.739842] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2525.744761] ? syscall_return_slowpath+0x31d/0x5e0 [ 2525.750285] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2525.755307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2525.761021] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2525.766029] ? perf_trace_sys_enter+0xb10/0xb10 [ 2525.770686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2525.775525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2525.780712] RIP: 0033:0x45885a [ 2525.783901] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2525.803111] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2525.810807] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2525.818075] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2525.825342] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 08:33:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2525.832597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2525.839877] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000041 [ 2525.867056] FAT-fs (loop2): bogus number of directory entries (526) [ 2525.873653] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2525.892068] FAT-fs (loop4): bogus number of reserved sectors [ 2525.897968] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2525.917983] FAT-fs (loop5): bogus number of reserved sectors [ 2525.923965] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2525.931586] FAT-fs (loop2): bogus number of directory entries (526) 08:33:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x60}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x80400}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2525.931738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2525.938153] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000400f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:31 executing program 6 (fault-call:1 fault-nth:66): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2526.033424] FAT-fs (loop5): bogus number of reserved sectors [ 2526.039588] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2526.048633] FAT-fs (loop4): bogus number of reserved sectors [ 2526.054585] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2526.102376] FAT-fs (loop4): bogus number of reserved sectors [ 2526.108383] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2526.138298] FAT-fs (loop5): bogus number of reserved sectors [ 2526.144352] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:31 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000a74f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x5}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2526.145759] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2526.248126] FAT-fs (loop4): invalid media value (0x64) [ 2526.253543] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2526.295774] FAT-fs (loop4): invalid media value (0x64) [ 2526.301213] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2526.441074] FAULT_INJECTION: forcing a failure. [ 2526.441074] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.452595] CPU: 1 PID: 31587 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2526.461264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2526.470612] Call Trace: [ 2526.473200] dump_stack+0x1c9/0x2b4 [ 2526.476829] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2526.482285] ? trace_hardirqs_on+0xd/0x10 [ 2526.486439] should_fail.cold.4+0xa/0x11 [ 2526.490502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2526.495602] ? kvm_sched_clock_read+0x9/0x20 [ 2526.500012] ? lock_repin_lock+0x430/0x430 [ 2526.504249] ? kasan_check_write+0x14/0x20 [ 2526.508487] ? __schedule+0x884/0x1ed0 [ 2526.512371] ? legacy_get_tree+0x118/0x440 [ 2526.516604] ? vfs_get_tree+0x1cb/0x5c0 [ 2526.520581] ? __sched_text_start+0x8/0x8 [ 2526.524733] ? lock_acquire+0x1e4/0x540 [ 2526.528704] ? fs_reclaim_acquire+0x20/0x20 [ 2526.533024] ? lock_downgrade+0x8f0/0x8f0 [ 2526.537174] ? do_mount+0x6c1/0x1fb0 [ 2526.540893] ? check_same_owner+0x340/0x340 [ 2526.545222] __should_failslab+0x124/0x180 [ 2526.549459] should_failslab+0x9/0x14 [ 2526.553274] kmem_cache_alloc_trace+0x2cb/0x780 [ 2526.557942] ? kasan_kmalloc+0xc4/0xe0 [ 2526.561835] __memcg_init_list_lru_node+0x185/0x2d0 [ 2526.566854] ? kvfree_rcu+0x20/0x20 [ 2526.570481] ? __kmalloc_node+0x47/0x70 [ 2526.574464] __list_lru_init+0x4d6/0x840 [ 2526.578528] ? list_lru_destroy+0x500/0x500 [ 2526.582852] ? prealloc_shrinker+0x213/0x480 [ 2526.587259] ? __init_waitqueue_head+0x9e/0x150 [ 2526.591929] ? inactive_list_is_low+0x850/0x850 [ 2526.596601] ? __lockdep_init_map+0x105/0x590 [ 2526.601107] alloc_super+0x9a6/0xb10 [ 2526.604826] ? destroy_unused_super.part.11+0x110/0x110 [ 2526.610192] ? lock_downgrade+0x8f0/0x8f0 [ 2526.614347] ? kasan_check_read+0x11/0x20 [ 2526.618498] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2526.623083] ? kasan_check_write+0x14/0x20 [ 2526.627316] ? do_raw_spin_lock+0xc1/0x200 [ 2526.631573] sget_userns+0x276/0x860 [ 2526.635284] ? kill_litter_super+0x60/0x60 [ 2526.639519] ? test_single_super+0x10/0x10 [ 2526.643754] ? vfs_get_super+0x270/0x270 [ 2526.647816] ? kasan_check_read+0x11/0x20 [ 2526.651962] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2526.656542] ? kasan_check_write+0x14/0x20 [ 2526.660772] ? do_raw_spin_lock+0xc1/0x200 [ 2526.665025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2526.670561] ? ns_capable_common+0x13f/0x170 [ 2526.674971] ? kill_litter_super+0x60/0x60 [ 2526.679218] sget+0x10b/0x150 [ 2526.682326] ? test_single_super+0x10/0x10 [ 2526.686576] mount_bdev+0x115/0x3e0 [ 2526.690201] ? vfat_mount+0x50/0x50 [ 2526.693843] vfat_mount+0x3c/0x50 [ 2526.697314] ? setup+0x120/0x120 [ 2526.700682] legacy_get_tree+0x118/0x440 [ 2526.704757] vfs_get_tree+0x1cb/0x5c0 [ 2526.708556] ? vfs_set_fs_source+0x12c/0x180 [ 2526.712975] do_mount+0x6c1/0x1fb0 [ 2526.716513] ? check_same_owner+0x340/0x340 [ 2526.720832] ? lock_release+0xa30/0xa30 [ 2526.724823] ? copy_mount_string+0x40/0x40 [ 2526.729059] ? kasan_kmalloc+0xc4/0xe0 [ 2526.732952] ? kmem_cache_alloc_trace+0x318/0x780 [ 2526.737800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2526.743341] ? _copy_from_user+0xdf/0x150 [ 2526.747493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2526.753032] ? copy_mount_options+0x285/0x380 [ 2526.757531] ksys_mount+0x12d/0x140 [ 2526.761178] __x64_sys_mount+0xbe/0x150 [ 2526.765156] do_syscall_64+0x1b9/0x820 [ 2526.769049] ? finish_task_switch+0x1d3/0x870 [ 2526.773547] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2526.778476] ? syscall_return_slowpath+0x31d/0x5e0 [ 2526.783409] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2526.788424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2526.793974] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2526.798992] ? perf_trace_sys_enter+0xb10/0xb10 [ 2526.803676] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2526.808626] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2526.813823] RIP: 0033:0x45885a [ 2526.817004] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xe000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:32 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x30, 0x2, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x80, 0x3}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000002c0)={@local, 0x0}, &(0x7f0000000300)=0x14) getsockname$packet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) accept$packet(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000700)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000f00)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000010c0)={0x0, @multicast2, @multicast1}, &(0x7f0000001100)=0xc) getsockname$packet(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000011c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000002300)={@remote, 0x0}, &(0x7f0000002340)=0x14) recvmsg(r3, &(0x7f0000002b00)={&(0x7f0000002380)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002400)=""/197, 0xc5}, {&(0x7f0000002500)=""/28, 0x1c}, {&(0x7f0000002540)=""/247, 0xf7}, {&(0x7f0000002640)=""/49, 0x31}, {&(0x7f0000002680)=""/198, 0xc6}, {&(0x7f0000002780)=""/191, 0xbf}, {&(0x7f0000002840)=""/51, 0x33}, {&(0x7f0000002880)=""/191, 0xbf}, {&(0x7f0000002940)=""/110, 0x6e}], 0x9, &(0x7f0000002a80)=""/110, 0x6e, 0x4}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002b40)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000002c40)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002c80)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000002d80)=0xe8) getsockname$packet(r3, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000032c0)=0x14) getpeername$packet(r3, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003400)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003440)={@empty, 0x0}, &(0x7f0000003480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000034c0)={'vcan0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003540)=0x14) accept$packet(r0, &(0x7f0000003640)={0x0, 0x0, 0x0}, &(0x7f0000003680)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000036c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000037c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003800)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000003900)=0xe8) accept4$packet(r2, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003980)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004100)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000004200)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005580)={@multicast2, @dev, 0x0}, &(0x7f00000055c0)=0xc) ioctl$sock_ifreq(r2, 0x8927, &(0x7f00000091c0)={'bond_slave_0\x00', @ifru_addrs=@xdp={0x2c, 0x1, 0x0, 0x3d}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000009b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000009b40)={&(0x7f0000009200)={0x938, r4, 0x10a, 0x70bd28, 0x25dfdbff, {0x2}, [{{0x8, 0x1, r5}, {0x174, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xdfe9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x294, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8798}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0x4, 0x8, 0x8, 0x1}, {0xffff, 0xdd, 0x5, 0x4}, {0x1, 0xffffffff, 0x4}, {0x8b00, 0x7fff, 0xda76, 0x4}, {0x4, 0x6, 0xffffffff80000001, 0x3}]}}}]}}, {{0x8, 0x1, r16}, {0x1dc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x20000}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r18}, {0xec, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xf8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r23}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r24}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r25}, {0x12c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r26}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x7, 0xffffffff00000001, 0x7fff, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r28}}}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0x880}, 0x48800) r29 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r29, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r29, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000014) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02001474f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:32 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a03000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x27c6}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2526.836268] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2526.843976] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2526.851255] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2526.858517] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2526.865782] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2526.873045] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000042 08:33:32 executing program 6 (fault-call:1 fault-nth:67): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:32 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a09000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2526.952620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 08:33:32 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0200be74f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2526.992982] FAT-fs (loop4): bogus number of reserved sectors [ 2526.998899] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2527.009437] FAT-fs (loop5): bogus number of reserved sectors [ 2527.015378] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2527.046007] FAT-fs (loop4): bogus number of reserved sectors [ 2527.051994] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2527.073348] FAULT_INJECTION: forcing a failure. [ 2527.073348] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.084713] CPU: 0 PID: 31632 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2527.093173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.102564] Call Trace: [ 2527.105160] dump_stack+0x1c9/0x2b4 [ 2527.108816] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2527.114019] ? perf_trace_lock+0x49d/0x920 [ 2527.118280] should_fail.cold.4+0xa/0x11 [ 2527.122357] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2527.127468] ? save_stack+0xa9/0xd0 [ 2527.131101] ? save_stack+0x43/0xd0 [ 2527.134725] ? kmem_cache_alloc_trace+0x152/0x780 [ 2527.139569] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2527.144748] ? __list_lru_init+0x4d6/0x840 [ 2527.148977] ? alloc_super+0x9a6/0xb10 [ 2527.152870] ? sget+0x10b/0x150 [ 2527.156139] ? mount_bdev+0x115/0x3e0 [ 2527.159935] ? legacy_get_tree+0x118/0x440 [ 2527.164175] ? vfs_get_tree+0x1cb/0x5c0 [ 2527.168140] ? do_mount+0x6c1/0x1fb0 [ 2527.171855] ? ksys_mount+0x12d/0x140 [ 2527.175647] ? __x64_sys_mount+0xbe/0x150 [ 2527.179800] ? do_syscall_64+0x1b9/0x820 [ 2527.183859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.189232] ? lock_acquire+0x1e4/0x540 [ 2527.193202] ? fs_reclaim_acquire+0x20/0x20 [ 2527.197531] ? lock_downgrade+0x8f0/0x8f0 [ 2527.201672] ? do_mount+0x6c1/0x1fb0 [ 2527.205385] ? check_same_owner+0x340/0x340 [ 2527.209710] ? rcu_note_context_switch+0x730/0x730 [ 2527.214637] __should_failslab+0x124/0x180 [ 2527.218869] should_failslab+0x9/0x14 [ 2527.222671] kmem_cache_alloc_trace+0x2cb/0x780 [ 2527.227329] ? kasan_kmalloc+0xc4/0xe0 [ 2527.231325] __memcg_init_list_lru_node+0x185/0x2d0 [ 2527.236335] ? kvfree_rcu+0x20/0x20 [ 2527.239969] ? __kmalloc_node+0x47/0x70 [ 2527.243941] __list_lru_init+0x4d6/0x840 [ 2527.247998] ? list_lru_destroy+0x500/0x500 [ 2527.252331] ? prealloc_shrinker+0x213/0x480 [ 2527.256739] ? __init_waitqueue_head+0x9e/0x150 [ 2527.261400] ? inactive_list_is_low+0x850/0x850 [ 2527.266065] ? __lockdep_init_map+0x105/0x590 [ 2527.270557] alloc_super+0x9a6/0xb10 [ 2527.274268] ? destroy_unused_super.part.11+0x110/0x110 [ 2527.279624] ? lock_downgrade+0x8f0/0x8f0 [ 2527.283781] ? kasan_check_read+0x11/0x20 [ 2527.287923] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2527.292508] ? kasan_check_write+0x14/0x20 [ 2527.296733] ? do_raw_spin_lock+0xc1/0x200 [ 2527.300965] sget_userns+0x276/0x860 [ 2527.304682] ? kill_litter_super+0x60/0x60 [ 2527.308913] ? test_single_super+0x10/0x10 [ 2527.313140] ? vfs_get_super+0x270/0x270 [ 2527.317193] ? kasan_check_read+0x11/0x20 [ 2527.321344] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2527.325921] ? kasan_check_write+0x14/0x20 [ 2527.330148] ? do_raw_spin_lock+0xc1/0x200 [ 2527.334414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.339956] ? ns_capable_common+0x13f/0x170 [ 2527.344360] ? kill_litter_super+0x60/0x60 [ 2527.348587] sget+0x10b/0x150 [ 2527.351687] ? test_single_super+0x10/0x10 [ 2527.355918] mount_bdev+0x115/0x3e0 [ 2527.359538] ? vfat_mount+0x50/0x50 [ 2527.363162] vfat_mount+0x3c/0x50 [ 2527.366621] ? setup+0x120/0x120 [ 2527.369979] legacy_get_tree+0x118/0x440 [ 2527.374042] vfs_get_tree+0x1cb/0x5c0 [ 2527.377843] ? vfs_set_fs_source+0x12c/0x180 [ 2527.382246] do_mount+0x6c1/0x1fb0 [ 2527.385783] ? kasan_check_write+0x14/0x20 [ 2527.390020] ? copy_mount_string+0x40/0x40 [ 2527.394247] ? kasan_kmalloc+0xc4/0xe0 [ 2527.398131] ? kmem_cache_alloc_trace+0x318/0x780 [ 2527.402971] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2527.408505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.414036] ? copy_mount_options+0x285/0x380 [ 2527.418539] ksys_mount+0x12d/0x140 [ 2527.422165] __x64_sys_mount+0xbe/0x150 [ 2527.426136] do_syscall_64+0x1b9/0x820 [ 2527.430017] ? syscall_slow_exit_work+0x500/0x500 [ 2527.434856] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2527.439778] ? syscall_return_slowpath+0x31d/0x5e0 [ 2527.444702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.450231] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2527.455240] ? perf_trace_sys_enter+0xb10/0xb10 [ 2527.459902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2527.464752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.469929] RIP: 0033:0x45885a [ 2527.473104] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:32 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0d000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2527.492488] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2527.500189] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2527.507447] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2527.514706] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2527.521974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2527.529233] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000043 [ 2527.542507] FAT-fs (loop5): bogus number of reserved sectors 08:33:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x48}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2527.548589] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x400000000000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:33 executing program 6 (fault-call:1 fault-nth:68): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:33 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a00000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2527.615562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2527.658161] FAT-fs (loop5): bogus number of reserved sectors [ 2527.664136] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2527.678279] FAT-fs (loop4): bogus number of reserved sectors [ 2527.683863] FAT-fs (loop5): bogus number of reserved sectors [ 2527.684242] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2527.690032] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2527.719308] FAULT_INJECTION: forcing a failure. [ 2527.719308] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.730724] CPU: 0 PID: 31651 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2527.739147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.748531] Call Trace: [ 2527.751144] dump_stack+0x1c9/0x2b4 [ 2527.754794] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2527.760110] ? perf_trace_lock+0x49d/0x920 [ 2527.764381] should_fail.cold.4+0xa/0x11 [ 2527.768465] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2527.773597] ? save_stack+0xa9/0xd0 [ 2527.777239] ? save_stack+0x43/0xd0 [ 2527.780875] ? kmem_cache_alloc_trace+0x152/0x780 [ 2527.785731] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2527.790930] ? __list_lru_init+0x4d6/0x840 [ 2527.795191] ? alloc_super+0x9a6/0xb10 [ 2527.799111] ? sget+0x10b/0x150 [ 2527.802404] ? mount_bdev+0x115/0x3e0 [ 2527.806220] ? legacy_get_tree+0x118/0x440 [ 2527.810476] ? vfs_get_tree+0x1cb/0x5c0 [ 2527.814462] ? do_mount+0x6c1/0x1fb0 08:33:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x2}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2527.818195] ? ksys_mount+0x12d/0x140 [ 2527.822009] ? __x64_sys_mount+0xbe/0x150 [ 2527.826180] ? do_syscall_64+0x1b9/0x820 [ 2527.830281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.835707] ? lock_acquire+0x1e4/0x540 [ 2527.839815] ? fs_reclaim_acquire+0x20/0x20 [ 2527.844157] ? lock_downgrade+0x8f0/0x8f0 [ 2527.848318] ? do_mount+0x6c1/0x1fb0 [ 2527.852063] ? check_same_owner+0x340/0x340 [ 2527.856430] ? rcu_note_context_switch+0x730/0x730 [ 2527.861397] __should_failslab+0x124/0x180 [ 2527.865667] should_failslab+0x9/0x14 [ 2527.869500] kmem_cache_alloc_trace+0x2cb/0x780 [ 2527.874197] ? kasan_kmalloc+0xc4/0xe0 [ 2527.878130] __memcg_init_list_lru_node+0x185/0x2d0 [ 2527.883179] ? kvfree_rcu+0x20/0x20 [ 2527.886833] ? __kmalloc_node+0x47/0x70 [ 2527.891025] __list_lru_init+0x4d6/0x840 [ 2527.895126] ? list_lru_destroy+0x500/0x500 [ 2527.899486] ? prealloc_shrinker+0x213/0x480 [ 2527.903919] ? __init_waitqueue_head+0x9e/0x150 [ 2527.908614] ? inactive_list_is_low+0x850/0x850 [ 2527.913314] ? __lockdep_init_map+0x105/0x590 [ 2527.917837] alloc_super+0x9a6/0xb10 [ 2527.921579] ? destroy_unused_super.part.11+0x110/0x110 [ 2527.925099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2527.926960] ? lock_downgrade+0x8f0/0x8f0 [ 2527.926991] ? kasan_check_read+0x11/0x20 [ 2527.927010] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2527.927033] ? kasan_check_write+0x14/0x20 [ 2527.927051] ? do_raw_spin_lock+0xc1/0x200 [ 2527.927077] sget_userns+0x276/0x860 [ 2527.927090] ? kill_litter_super+0x60/0x60 [ 2527.927108] ? test_single_super+0x10/0x10 [ 2527.927123] ? vfs_get_super+0x270/0x270 [ 2527.927135] ? kasan_check_read+0x11/0x20 [ 2527.927152] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2527.927174] ? kasan_check_write+0x14/0x20 [ 2527.927189] ? do_raw_spin_lock+0xc1/0x200 [ 2527.927241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2527.927257] ? ns_capable_common+0x13f/0x170 [ 2527.927274] ? kill_litter_super+0x60/0x60 [ 2527.927289] sget+0x10b/0x150 [ 2527.927304] ? test_single_super+0x10/0x10 [ 2527.927328] mount_bdev+0x115/0x3e0 [ 2527.927345] ? vfat_mount+0x50/0x50 [ 2527.927369] vfat_mount+0x3c/0x50 [ 2527.927385] ? setup+0x120/0x120 [ 2527.927403] legacy_get_tree+0x118/0x440 [ 2527.927427] vfs_get_tree+0x1cb/0x5c0 [ 2528.032066] ? vfs_set_fs_source+0x12c/0x180 [ 2528.036492] do_mount+0x6c1/0x1fb0 [ 2528.040061] ? kasan_check_write+0x14/0x20 [ 2528.044310] ? copy_mount_string+0x40/0x40 [ 2528.048583] ? kasan_kmalloc+0xc4/0xe0 [ 2528.052490] ? kmem_cache_alloc_trace+0x318/0x780 [ 2528.057351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2528.062908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.068458] ? copy_mount_options+0x285/0x380 [ 2528.072975] ksys_mount+0x12d/0x140 [ 2528.076632] __x64_sys_mount+0xbe/0x150 [ 2528.080621] do_syscall_64+0x1b9/0x820 [ 2528.084519] ? finish_task_switch+0x1d3/0x870 [ 2528.089024] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2528.093974] ? syscall_return_slowpath+0x31d/0x5e0 [ 2528.098934] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2528.103962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.109600] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2528.114634] ? perf_trace_sys_enter+0xb10/0xb10 [ 2528.119317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2528.124246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.129449] RIP: 0033:0x45885a [ 2528.132640] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2528.152240] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2528.159974] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2528.167270] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2528.174548] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2528.181833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2528.189120] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000044 [ 2528.211127] FAT-fs (loop5): invalid media value (0x74) [ 2528.216590] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2528.218121] FAT-fs (loop7): bogus number of FAT structure [ 2528.228551] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2528.236861] FAT-fs (loop4): bogus number of reserved sectors [ 2528.242798] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2528.265923] FAT-fs (loop7): bogus number of FAT structure [ 2528.271584] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2528.288885] FAT-fs (loop5): invalid media value (0x74) [ 2528.294293] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:33 executing program 6 (fault-call:1 fault-nth:69): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000a6) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4f73}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xf6ffffff00000000}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x7a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:33 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010402000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:33 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000140)) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0xc) r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x80000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00'}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000140), 0x0, 0x4088, &(0x7f00000012c0)={0x1a, 0x302, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0xffffffffffffff5f) write$binfmt_elf32(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x158) [ 2528.427419] FAT-fs (loop4): bogus number of reserved sectors [ 2528.427609] FAULT_INJECTION: forcing a failure. [ 2528.427609] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.433372] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2528.450735] CPU: 1 PID: 31679 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2528.459151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.468519] Call Trace: [ 2528.471125] dump_stack+0x1c9/0x2b4 [ 2528.474759] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2528.479959] ? perf_trace_lock+0xde/0x920 [ 2528.484121] should_fail.cold.4+0xa/0x11 [ 2528.488193] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2528.493308] ? save_stack+0xa9/0xd0 [ 2528.496943] ? save_stack+0x43/0xd0 [ 2528.500582] ? kasan_kmalloc+0xc4/0xe0 [ 2528.504487] ? kmem_cache_alloc_trace+0x152/0x780 [ 2528.509341] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2528.514537] ? __list_lru_init+0x4d6/0x840 [ 2528.518777] ? alloc_super+0x9a6/0xb10 [ 2528.522678] ? sget+0x10b/0x150 [ 2528.525966] ? mount_bdev+0x115/0x3e0 [ 2528.529775] ? legacy_get_tree+0x118/0x440 [ 2528.534015] ? vfs_get_tree+0x1cb/0x5c0 [ 2528.537998] ? do_mount+0x6c1/0x1fb0 [ 2528.541716] ? ksys_mount+0x12d/0x140 [ 2528.545536] ? __x64_sys_mount+0xbe/0x150 [ 2528.549695] ? do_syscall_64+0x1b9/0x820 [ 2528.553768] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.559148] ? lock_acquire+0x1e4/0x540 [ 2528.563127] ? fs_reclaim_acquire+0x20/0x20 [ 2528.567457] ? lock_downgrade+0x8f0/0x8f0 [ 2528.571613] ? do_mount+0x6c1/0x1fb0 [ 2528.575338] ? check_same_owner+0x340/0x340 [ 2528.579665] ? rcu_note_context_switch+0x730/0x730 [ 2528.584603] __should_failslab+0x124/0x180 [ 2528.588841] should_failslab+0x9/0x14 [ 2528.592651] kmem_cache_alloc_trace+0x2cb/0x780 [ 2528.597328] ? kasan_kmalloc+0xc4/0xe0 [ 2528.601232] __memcg_init_list_lru_node+0x185/0x2d0 [ 2528.606260] ? kvfree_rcu+0x20/0x20 [ 2528.609902] ? __kmalloc_node+0x47/0x70 [ 2528.613902] __list_lru_init+0x4d6/0x840 [ 2528.618012] ? list_lru_destroy+0x500/0x500 [ 2528.622379] ? prealloc_shrinker+0x213/0x480 [ 2528.626830] ? __init_waitqueue_head+0x9e/0x150 [ 2528.631528] ? inactive_list_is_low+0x850/0x850 [ 2528.636224] ? __lockdep_init_map+0x105/0x590 [ 2528.640751] alloc_super+0x9a6/0xb10 [ 2528.644535] ? destroy_unused_super.part.11+0x110/0x110 [ 2528.649926] ? lock_downgrade+0x8f0/0x8f0 [ 2528.654105] ? kasan_check_read+0x11/0x20 [ 2528.655584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2528.658265] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2528.658285] ? kasan_check_write+0x14/0x20 [ 2528.658299] ? do_raw_spin_lock+0xc1/0x200 [ 2528.658320] sget_userns+0x276/0x860 [ 2528.658335] ? kill_litter_super+0x60/0x60 [ 2528.658349] ? test_single_super+0x10/0x10 [ 2528.658363] ? vfs_get_super+0x270/0x270 [ 2528.658377] ? kasan_check_read+0x11/0x20 [ 2528.658390] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2528.658405] ? kasan_check_write+0x14/0x20 [ 2528.658417] ? do_raw_spin_lock+0xc1/0x200 [ 2528.658446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.658460] ? ns_capable_common+0x13f/0x170 [ 2528.658473] ? kill_litter_super+0x60/0x60 [ 2528.658491] sget+0x10b/0x150 [ 2528.658504] ? test_single_super+0x10/0x10 [ 2528.658521] mount_bdev+0x115/0x3e0 [ 2528.658536] ? vfat_mount+0x50/0x50 [ 2528.658552] vfat_mount+0x3c/0x50 [ 2528.658567] ? setup+0x120/0x120 [ 2528.658581] legacy_get_tree+0x118/0x440 [ 2528.658596] vfs_get_tree+0x1cb/0x5c0 [ 2528.658610] ? vfs_set_fs_source+0x12c/0x180 [ 2528.658623] do_mount+0x6c1/0x1fb0 [ 2528.658634] ? kasan_check_read+0x11/0x20 [ 2528.658646] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2528.658661] ? copy_mount_string+0x40/0x40 [ 2528.658681] ? retint_kernel+0x10/0x10 [ 2528.779610] ? copy_mount_options+0x1a1/0x380 [ 2528.784116] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 2528.788970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.794516] ? copy_mount_options+0x285/0x380 [ 2528.799023] ksys_mount+0x12d/0x140 [ 2528.802663] __x64_sys_mount+0xbe/0x150 [ 2528.806649] do_syscall_64+0x1b9/0x820 [ 2528.810537] ? finish_task_switch+0x1d3/0x870 [ 2528.815032] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2528.819976] ? syscall_return_slowpath+0x31d/0x5e0 [ 2528.824918] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2528.829939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2528.835484] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2528.840489] ? perf_trace_sys_enter+0xb10/0xb10 [ 2528.845157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2528.849997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2528.855187] RIP: 0033:0x45885a [ 2528.858379] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:34 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02001074f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2528.877589] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2528.885281] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2528.892536] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2528.899794] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2528.907061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2528.914314] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000045 08:33:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffffc0}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:34 executing program 6 (fault-call:1 fault-nth:70): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:34 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0e000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2528.926057] FAT-fs (loop5): bogus number of reserved sectors [ 2528.932178] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2528.941666] FAT-fs (loop4): bogus number of reserved sectors [ 2528.947559] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x9300}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2528.989691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2529.014522] FAT-fs (loop5): bogus number of reserved sectors [ 2529.020416] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2529.051790] FAT-fs (loop6): bogus number of reserved sectors [ 2529.057806] FAT-fs (loop6): Can't find a valid FAT filesystem 08:33:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa0a}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2529.092119] FAT-fs (loop4): bogus number of reserved sectors [ 2529.098090] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2529.109226] FAULT_INJECTION: forcing a failure. [ 2529.109226] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.120688] CPU: 1 PID: 31709 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2529.129109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.138469] Call Trace: [ 2529.141071] dump_stack+0x1c9/0x2b4 [ 2529.144711] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2529.149914] should_fail.cold.4+0xa/0x11 [ 2529.153984] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2529.159120] ? lock_repin_lock+0x430/0x430 [ 2529.163364] ? kasan_check_write+0x14/0x20 [ 2529.167623] ? __schedule+0x884/0x1ed0 [ 2529.171535] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2529.175955] ? __sched_text_start+0x8/0x8 [ 2529.180114] ? lock_acquire+0x1e4/0x540 [ 2529.184704] ? fs_reclaim_acquire+0x20/0x20 [ 2529.189133] ? lock_downgrade+0x8f0/0x8f0 [ 2529.193307] ? check_same_owner+0x340/0x340 [ 2529.197659] __should_failslab+0x124/0x180 [ 2529.202804] should_failslab+0x9/0x14 [ 2529.206611] kmem_cache_alloc_trace+0x2cb/0x780 [ 2529.211489] ? dev_uevent_name+0xa0/0xe0 [ 2529.215557] ? dev_uevent_name+0xb5/0xe0 [ 2529.219635] ? device_create_file+0x1e0/0x1e0 [ 2529.224139] kobject_uevent_env+0x20f/0x1110 [ 2529.228576] kobject_uevent+0x1f/0x30 [ 2529.232392] loop_clr_fd+0x62f/0xd60 [ 2529.236118] ? loop_attr_do_show_backing_file+0x1a0/0x1a0 [ 2529.241678] lo_ioctl+0x875/0x1d70 [ 2529.245264] ? lock_release+0xa30/0xa30 [ 2529.249270] ? lo_rw_aio_complete+0x450/0x450 [ 2529.250320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2529.253777] blkdev_ioctl+0x9cd/0x2030 [ 2529.253800] ? lock_acquire+0x1e4/0x540 [ 2529.253816] ? blkpg_ioctl+0xc40/0xc40 [ 2529.253835] ? lock_release+0xa30/0xa30 [ 2529.253851] ? kernel_text_address+0x79/0xf0 [ 2529.253866] ? __kernel_text_address+0xd/0x40 [ 2529.253881] ? unwind_get_return_address+0x61/0xa0 08:33:34 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a000a0274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2529.253897] ? __save_stack_trace+0x8d/0xf0 [ 2529.253913] ? __fget+0x4d5/0x740 [ 2529.253928] ? ksys_dup3+0x690/0x690 [ 2529.253941] ? __kasan_slab_free+0x11a/0x170 [ 2529.253954] ? kfree+0xd9/0x260 [ 2529.253967] ? ksys_mount+0xa3/0x140 [ 2529.253980] ? __x64_sys_mount+0xbe/0x150 [ 2529.253995] ? do_syscall_64+0x1b9/0x820 [ 2529.254011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.254030] block_ioctl+0xee/0x130 [ 2529.254043] ? blkdev_fallocate+0x400/0x400 [ 2529.254057] do_vfs_ioctl+0x1de/0x1720 [ 2529.254069] ? kasan_check_write+0x14/0x20 08:33:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2529.254080] ? do_raw_spin_lock+0xc1/0x200 [ 2529.254094] ? ioctl_preallocate+0x300/0x300 [ 2529.254104] ? __fget_light+0x2f7/0x440 [ 2529.254116] ? fget_raw+0x20/0x20 [ 2529.254132] ? trace_hardirqs_off+0xd/0x10 [ 2529.254144] ? quarantine_put+0x10d/0x1b0 [ 2529.254163] ? __kasan_slab_free+0x131/0x170 [ 2529.320782] FAT-fs (loop5): bogus number of reserved sectors [ 2529.321280] ? security_file_ioctl+0x94/0xc0 [ 2529.321299] ksys_ioctl+0xa9/0xd0 [ 2529.321315] __x64_sys_ioctl+0x73/0xb0 [ 2529.321332] do_syscall_64+0x1b9/0x820 [ 2529.321351] ? syscall_slow_exit_work+0x500/0x500 [ 2529.326758] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2529.330322] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2529.330339] ? syscall_return_slowpath+0x31d/0x5e0 [ 2529.330361] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2529.418469] ? perf_trace_sys_enter+0xb10/0xb10 [ 2529.423155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2529.428017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.433213] RIP: 0033:0x455c97 [ 2529.436402] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2529.456082] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2529.460899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2529.463884] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 0000000000455c97 [ 2529.463893] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000016 [ 2529.463901] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2529.463909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2529.463918] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000046 [ 2529.526904] FAT-fs (loop4): bogus number of reserved sectors [ 2529.532892] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:35 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r2 = getpgrp(r1) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r3}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x2, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}, 0x3fc000000}}, 0xa40, 0x6, 0x9, 0xffffffffffffff81, 0x80}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={r6, 0x1}, 0x8) sendto$llc(r5, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x200000000000000b) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000474f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:35 executing program 6 (fault-call:1 fault-nth:71): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000f74f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2529.547093] FAT-fs (loop5): bogus number of reserved sectors [ 2529.552984] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2529.565448] FAT-fs (loop7): bogus number of FAT structure [ 2529.571110] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xff0f}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2529.624577] FAULT_INJECTION: forcing a failure. [ 2529.624577] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.635982] CPU: 1 PID: 31743 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2529.644404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2529.653769] Call Trace: [ 2529.656376] dump_stack+0x1c9/0x2b4 [ 2529.660063] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2529.665278] ? perf_trace_lock+0xde/0x920 [ 2529.669449] should_fail.cold.4+0xa/0x11 08:33:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xc0ed0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x734f0000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2529.673534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2529.678663] ? save_stack+0xa9/0xd0 [ 2529.682308] ? save_stack+0x43/0xd0 [ 2529.685953] ? kasan_kmalloc+0xc4/0xe0 [ 2529.689857] ? kmem_cache_alloc_trace+0x152/0x780 [ 2529.694720] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 2529.699952] ? __list_lru_init+0x4d6/0x840 [ 2529.704203] ? alloc_super+0x9a6/0xb10 [ 2529.708118] ? sget+0x10b/0x150 [ 2529.711461] ? mount_bdev+0x115/0x3e0 [ 2529.715282] ? legacy_get_tree+0x118/0x440 [ 2529.719530] ? vfs_get_tree+0x1cb/0x5c0 [ 2529.723517] ? do_mount+0x6c1/0x1fb0 [ 2529.727240] ? ksys_mount+0x12d/0x140 [ 2529.731052] ? __x64_sys_mount+0xbe/0x150 [ 2529.735208] ? do_syscall_64+0x1b9/0x820 [ 2529.739276] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2529.744661] ? lock_acquire+0x1e4/0x540 [ 2529.748645] ? fs_reclaim_acquire+0x20/0x20 [ 2529.752982] ? lock_downgrade+0x8f0/0x8f0 [ 2529.757139] ? lock_downgrade+0x8f0/0x8f0 [ 2529.761301] ? check_same_owner+0x340/0x340 [ 2529.765634] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2529.770066] ? rcu_note_context_switch+0x730/0x730 [ 2529.775020] __should_failslab+0x124/0x180 [ 2529.779273] should_failslab+0x9/0x14 [ 2529.783084] kmem_cache_alloc_trace+0x2cb/0x780 [ 2529.787759] ? kasan_kmalloc+0xc4/0xe0 [ 2529.791661] __memcg_init_list_lru_node+0x185/0x2d0 [ 2529.796714] ? kvfree_rcu+0x20/0x20 [ 2529.800345] ? __kmalloc_node+0x47/0x70 [ 2529.804324] __list_lru_init+0x4d6/0x840 [ 2529.808399] ? list_lru_destroy+0x500/0x500 [ 2529.812730] ? prealloc_shrinker+0x213/0x480 [ 2529.817138] ? __init_waitqueue_head+0x9e/0x150 [ 2529.821808] ? inactive_list_is_low+0x850/0x850 [ 2529.826481] ? __lockdep_init_map+0x105/0x590 [ 2529.830984] alloc_super+0x9a6/0xb10 [ 2529.834704] ? destroy_unused_super.part.11+0x110/0x110 [ 2529.840075] ? lock_downgrade+0x8f0/0x8f0 [ 2529.844236] ? kasan_check_read+0x11/0x20 [ 2529.848403] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2529.852864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2529.852991] ? kasan_check_write+0x14/0x20 [ 2529.853008] ? do_raw_spin_lock+0xc1/0x200 [ 2529.867957] sget_userns+0x276/0x860 [ 2529.871677] ? kill_litter_super+0x60/0x60 [ 2529.875919] ? test_single_super+0x10/0x10 [ 2529.880160] ? vfs_get_super+0x270/0x270 [ 2529.884231] ? kasan_check_read+0x11/0x20 [ 2529.888397] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2529.892994] ? kasan_check_write+0x14/0x20 [ 2529.897234] ? do_raw_spin_lock+0xc1/0x200 [ 2529.901760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2529.904525] FAT-fs (loop4): bogus number of reserved sectors [ 2529.907305] ? ns_capable_common+0x13f/0x170 [ 2529.907323] ? kill_litter_super+0x60/0x60 [ 2529.907339] sget+0x10b/0x150 08:33:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xfeffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2529.907353] ? test_single_super+0x10/0x10 [ 2529.907385] mount_bdev+0x115/0x3e0 [ 2529.907405] ? vfat_mount+0x50/0x50 [ 2529.913479] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2529.917677] vfat_mount+0x3c/0x50 [ 2529.917690] ? setup+0x120/0x120 [ 2529.917711] legacy_get_tree+0x118/0x440 [ 2529.953190] vfs_get_tree+0x1cb/0x5c0 [ 2529.957003] ? vfs_set_fs_source+0x12c/0x180 [ 2529.961432] do_mount+0x6c1/0x1fb0 [ 2529.965010] ? kasan_check_write+0x14/0x20 [ 2529.969257] ? copy_mount_string+0x40/0x40 [ 2529.973513] ? kasan_kmalloc+0xc4/0xe0 [ 2529.977405] ? kmem_cache_alloc_trace+0x318/0x780 [ 2529.982252] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2529.987809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2529.993351] ? copy_mount_options+0x285/0x380 [ 2529.997860] ksys_mount+0x12d/0x140 [ 2530.001492] __x64_sys_mount+0xbe/0x150 [ 2530.005491] ? __x64_sys_mount+0x1/0x150 [ 2530.009558] do_syscall_64+0x1b9/0x820 [ 2530.013447] ? finish_task_switch+0x1d3/0x870 [ 2530.017948] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2530.022900] ? syscall_return_slowpath+0x31d/0x5e0 [ 2530.027841] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2530.032948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2530.038487] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2530.043509] ? perf_trace_sys_enter+0xb10/0xb10 [ 2530.048182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2530.053034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2530.058230] RIP: 0033:0x45885a [ 2530.061425] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2530.080761] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2530.088483] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2530.095763] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2530.103042] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2530.110321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2530.117604] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000047 08:33:35 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000374f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2530.131742] FAT-fs (loop5): bogus number of reserved sectors [ 2530.137633] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2530.145707] FAT-fs (loop7): bogus number of FAT structure [ 2530.151445] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2530.170291] FAT-fs (loop5): bogus number of reserved sectors 08:33:35 executing program 6 (fault-call:1 fault-nth:72): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:35 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a14000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2530.175516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2530.176249] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2530.189895] FAT-fs (loop4): bogus number of reserved sectors [ 2530.195790] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2530.244822] FAULT_INJECTION: forcing a failure. [ 2530.244822] name failslab, interval 1, probability 0, space 0, times 0 [ 2530.256394] CPU: 0 PID: 31771 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2530.264825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2530.274194] Call Trace: [ 2530.276820] dump_stack+0x1c9/0x2b4 [ 2530.280473] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2530.285695] ? perf_trace_lock+0x49d/0x920 [ 2530.289954] should_fail.cold.4+0xa/0x11 [ 2530.294034] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2530.299173] ? memset+0x31/0x40 [ 2530.302470] ? perf_trace_lock+0x49d/0x920 [ 2530.306729] ? lock_acquire+0x1e4/0x540 [ 2530.310712] ? fs_reclaim_acquire+0x20/0x20 [ 2530.315043] ? lock_downgrade+0x8f0/0x8f0 [ 2530.320129] ? check_same_owner+0x340/0x340 [ 2530.324466] ? rcu_note_context_switch+0x730/0x730 [ 2530.329401] ? string+0x225/0x2d0 [ 2530.332872] __should_failslab+0x124/0x180 [ 2530.337122] should_failslab+0x9/0x14 [ 2530.340931] kmem_cache_alloc_trace+0x2cb/0x780 [ 2530.345617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2530.351162] ? bdev_name.isra.8+0x1a1/0x1f0 [ 2530.355501] ? vfat_cmpi+0x570/0x570 [ 2530.359226] fat_fill_super+0xed/0x4400 [ 2530.363211] ? netdev_bits+0xb0/0xb0 [ 2530.366930] ? format_decode+0x1b1/0xaf0 [ 2530.371012] ? fat_flush_inodes+0x1a0/0x1a0 [ 2530.375353] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2530.380896] ? vsnprintf+0x20d/0x1b60 [ 2530.384715] ? pointer+0x990/0x990 [ 2530.388274] ? snprintf+0xae/0xe0 [ 2530.391733] ? vsprintf+0x40/0x40 [ 2530.395211] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2530.400233] ? set_blocksize+0x2c1/0x340 [ 2530.404311] vfat_fill_super+0x31/0x40 [ 2530.408214] mount_bdev+0x314/0x3e0 [ 2530.411850] ? vfat_mount+0x50/0x50 [ 2530.415487] vfat_mount+0x3c/0x50 [ 2530.418948] ? setup+0x120/0x120 [ 2530.422322] legacy_get_tree+0x118/0x440 [ 2530.426397] vfs_get_tree+0x1cb/0x5c0 [ 2530.430200] ? vfs_set_fs_source+0x12c/0x180 [ 2530.434620] do_mount+0x6c1/0x1fb0 [ 2530.438166] ? kasan_check_write+0x14/0x20 [ 2530.442416] ? copy_mount_string+0x40/0x40 [ 2530.446665] ? retint_kernel+0x10/0x10 [ 2530.450576] ? copy_mount_options+0x1f0/0x380 [ 2530.455080] ? copy_mount_options+0x1fa/0x380 [ 2530.459582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2530.465127] ? copy_mount_options+0x285/0x380 [ 2530.469639] ksys_mount+0x12d/0x140 [ 2530.473278] __x64_sys_mount+0xbe/0x150 [ 2530.477265] do_syscall_64+0x1b9/0x820 [ 2530.481159] ? syscall_slow_exit_work+0x500/0x500 [ 2530.486012] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2530.490950] ? syscall_return_slowpath+0x31d/0x5e0 [ 2530.495891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2530.501435] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2530.506461] ? perf_trace_sys_enter+0xb10/0xb10 [ 2530.511141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2530.515999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2530.521192] RIP: 0033:0x45885a [ 2530.524378] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 08:33:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1e0", 0x16}], 0x0, &(0x7f0000000000)) 08:33:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa03}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffffc3}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2530.543968] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2530.551688] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2530.558965] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2530.566235] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2530.573509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2530.580783] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000048 08:33:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x7726}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2530.629630] FAT-fs (loop5): bogus number of reserved sectors [ 2530.635579] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2530.646284] FAT-fs (loop2): invalid media value (0xe0) [ 2530.651670] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2530.658193] FAT-fs (loop4): bogus number of reserved sectors [ 2530.664129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2530.686518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2530.696334] FAT-fs (loop5): bogus number of reserved sectors [ 2530.702225] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:36 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r4, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$KDDISABIO(r3, 0x4b37) 08:33:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x2000000000000089) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:36 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a03000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) 08:33:36 executing program 6 (fault-call:1 fault-nth:73): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0ffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x1f000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2530.740902] FAT-fs (loop4): bogus number of reserved sectors [ 2530.746854] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2530.747925] FAT-fs (loop2): invalid media value (0xe0) [ 2530.758174] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x100a000000000000}], 0x0, &(0x7f0000000000)) 08:33:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x800000000000000}, {&(0x7f0000000780)="68f37a52bd948b22bd6f90198ef37d2206606e492a4bc1c2e7be0e609bf078648045df0fa9e7f8344b7ea421f8c59d10c08470e73d8184d7c67aee76f9b7fcbb5fc0dcbee65a07df4e5b27b4990c8f051bab19a4d3a63576b7027e1772a82e58f7f5482bc58b0830a021e0a8c75a7a5d4c7d86cb424bb47ad43292d7ae87a0ff02c5159088f15ab4da5ca9ab5fd9bd0d83bd6679d2892c4c296f5e920a889264157f36d3a5d41532b2bc7e73474ecdf3a175b2d967e9b1e1524cae7e022d2a49200fda72f497ea388d70edb646cab50ab18f37e34ae240b7de7ffbafe1ec20b87dd28dcdf3c8a96cca28343f672a72e2c5e060b646945fc396c134483c8244fae9d45b19f68503a71d536b2ccdf147e23b51598337411e63e321cf5c5af58203b0f0cab7ec76d9acf2c46c4ff15d2b96061b0930a52e75eddf3c17882d78206986d6b1f15ec404af646bf86ebda70580dc7b6d14faa8c7180ada6d05a996f84f881a2ea322330bb571ec7215fe7aeac871a98de01a", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:36 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a04000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2530.830914] FAT-fs (loop5): bogus number of reserved sectors [ 2530.836826] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2530.838729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2530.889460] FAT-fs (loop2): bogus number of reserved sectors [ 2530.895463] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2530.901967] FAT-fs (loop5): bogus number of reserved sectors [ 2530.907861] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2530.921879] FAT-fs (loop4): bogus number of reserved sectors [ 2530.927762] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:36 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) accept$alg(r0, 0x0, 0x0) 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:36 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0f000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2530.935548] FAT-fs (loop2): bogus number of reserved sectors [ 2530.941448] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2530.977386] FAT-fs (loop4): bogus number of reserved sectors [ 2530.984048] FAT-fs (loop4): Can't find a valid FAT filesystem 08:33:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xa5040000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2530.991665] FAT-fs (loop6): bogus number of reserved sectors [ 2530.997572] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2531.020412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2531.030372] FAULT_INJECTION: forcing a failure. [ 2531.030372] name failslab, interval 1, probability 0, space 0, times 0 08:33:36 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a06030274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2531.041832] CPU: 1 PID: 31809 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2531.050252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2531.060174] Call Trace: [ 2531.062783] dump_stack+0x1c9/0x2b4 [ 2531.066436] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2531.071667] ? perf_trace_lock+0xde/0x920 [ 2531.075831] should_fail.cold.4+0xa/0x11 [ 2531.079904] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2531.085029] ? save_stack+0xa9/0xd0 [ 2531.088671] ? kasan_kmalloc+0xc4/0xe0 [ 2531.092574] ? kmem_cache_alloc_trace+0x152/0x780 [ 2531.097432] ? kobject_uevent_env+0x20f/0x1110 [ 2531.102037] ? kobject_uevent+0x1f/0x30 [ 2531.106029] ? loop_clr_fd+0x62f/0xd60 [ 2531.108570] FAT-fs (loop5): bogus number of reserved sectors [ 2531.109928] ? lo_ioctl+0x875/0x1d70 [ 2531.109945] ? blkdev_ioctl+0x9cd/0x2030 [ 2531.109964] ? do_vfs_ioctl+0x1de/0x1720 [ 2531.109981] ? ksys_ioctl+0xa9/0xd0 [ 2531.115817] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2531.119480] ? __x64_sys_ioctl+0x73/0xb0 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:36 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x3f000000}], 0x0, &(0x7f0000000000)) [ 2531.119499] ? do_syscall_64+0x1b9/0x820 [ 2531.119525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2531.150540] ? lock_acquire+0x1e4/0x540 [ 2531.154528] ? fs_reclaim_acquire+0x20/0x20 [ 2531.159828] ? lock_downgrade+0x8f0/0x8f0 [ 2531.164003] ? check_same_owner+0x340/0x340 [ 2531.168339] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2531.172762] ? rcu_note_context_switch+0x730/0x730 [ 2531.177712] __should_failslab+0x124/0x180 [ 2531.181963] should_failslab+0x9/0x14 [ 2531.185777] __kmalloc+0x2c8/0x760 [ 2531.189331] ? kobject_get_path+0xc2/0x1a0 [ 2531.193574] kobject_get_path+0xc2/0x1a0 [ 2531.197640] kobject_uevent_env+0x234/0x1110 [ 2531.202061] kobject_uevent+0x1f/0x30 [ 2531.205464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2531.205873] loop_clr_fd+0x62f/0xd60 [ 2531.205892] ? loop_attr_do_show_backing_file+0x1a0/0x1a0 [ 2531.205909] lo_ioctl+0x875/0x1d70 [ 2531.225297] ? lock_release+0xa30/0xa30 [ 2531.229327] ? lo_rw_aio_complete+0x450/0x450 [ 2531.233831] blkdev_ioctl+0x9cd/0x2030 [ 2531.237729] ? lock_acquire+0x1e4/0x540 08:33:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) [ 2531.241715] ? blkpg_ioctl+0xc40/0xc40 [ 2531.245609] ? lock_release+0xa30/0xa30 [ 2531.249595] ? kernel_text_address+0x79/0xf0 [ 2531.254011] ? __kernel_text_address+0xd/0x40 [ 2531.258513] ? unwind_get_return_address+0x61/0xa0 [ 2531.263448] ? __save_stack_trace+0x8d/0xf0 [ 2531.267777] ? __fget+0x4d5/0x740 [ 2531.271242] ? ksys_dup3+0x690/0x690 [ 2531.274971] ? __kasan_slab_free+0x11a/0x170 [ 2531.279392] ? kfree+0xd9/0x260 [ 2531.282680] ? ksys_mount+0xa3/0x140 [ 2531.286399] ? __x64_sys_mount+0xbe/0x150 [ 2531.290558] ? do_syscall_64+0x1b9/0x820 [ 2531.294625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2531.300027] block_ioctl+0xee/0x130 [ 2531.303663] ? blkdev_fallocate+0x400/0x400 [ 2531.307991] do_vfs_ioctl+0x1de/0x1720 [ 2531.311890] ? kasan_check_write+0x14/0x20 [ 2531.314646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2531.316128] ? do_raw_spin_lock+0xc1/0x200 [ 2531.316146] ? ioctl_preallocate+0x300/0x300 [ 2531.316162] ? __fget_light+0x2f7/0x440 [ 2531.316175] ? fget_raw+0x20/0x20 [ 2531.316192] ? trace_hardirqs_off+0xd/0x10 [ 2531.316206] ? quarantine_put+0x10d/0x1b0 [ 2531.316223] ? __kasan_slab_free+0x131/0x170 [ 2531.316242] ? security_file_ioctl+0x94/0xc0 [ 2531.316259] ksys_ioctl+0xa9/0xd0 [ 2531.316272] __x64_sys_ioctl+0x73/0xb0 [ 2531.316287] do_syscall_64+0x1b9/0x820 [ 2531.316299] ? finish_task_switch+0x1d3/0x870 [ 2531.316313] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2531.316327] ? syscall_return_slowpath+0x31d/0x5e0 [ 2531.316344] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2531.316359] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2531.316374] ? perf_trace_sys_enter+0xb10/0xb10 [ 2531.316390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2531.316408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2531.316418] RIP: 0033:0x455c97 [ 2531.316421] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d bb fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2531.413070] FAT-fs (loop2): bogus number of reserved sectors [ 2531.428926] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2531.428941] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 0000000000455c97 [ 2531.428948] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000016 [ 2531.428956] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2531.428963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 2531.428970] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 0000000000000049 [ 2531.479195] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2531.512729] FAT-fs (loop5): bogus number of reserved sectors [ 2531.518627] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2531.524915] FAT-fs (loop2): bogus number of reserved sectors [ 2531.530787] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2531.539074] FAT-fs (loop7): bogus number of directory entries (515) [ 2531.545626] FAT-fs (loop7): Can't find a valid FAT filesystem [ 2531.582548] FAT-fs (loop7): bogus number of directory entries (515) [ 2531.589089] FAT-fs (loop7): Can't find a valid FAT filesystem 08:33:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}], 0x20000000000000e4) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r1, 0x1004000000016) 08:33:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x6800}], 0x0, &(0x7f0000000000)) 08:33:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0xedc0}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) 08:33:37 executing program 6 (fault-call:1 fault-nth:74): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f00000013c0)={[{@iocharset={'iocharset', 0x3d, 'utf8'}, 0x2c}, {@iocharset={'iocharset', 0x3d, 'cp862'}, 0x2c}]}) 08:33:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xc000000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 08:33:37 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010abe000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2531.811554] FAT-fs (loop4): bogus number of reserved sectors [ 2531.817550] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2531.822474] FAT-fs (loop5): bogus number of reserved sectors [ 2531.825623] FAT-fs (loop2): bogus number of reserved sectors [ 2531.829358] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2531.835188] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:37 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a10000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2531.863894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2531.882487] FAT-fs (loop4): bogus number of reserved sectors [ 2531.888681] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2531.898237] FAT-fs (loop2): bogus number of reserved sectors [ 2531.904134] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:37 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006a80)=[{{&(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000740)=""/59, 0x3b}], 0x8, &(0x7f0000001300)=""/4096, 0x1000, 0x9}, 0xba}, {{&(0x7f0000000800)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000980)=""/108, 0x6c}], 0x3, &(0x7f0000000a40)=""/160, 0xa0, 0x4}, 0x7}, {{&(0x7f0000000b00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/84, 0x54}, {&(0x7f0000000c00)=""/79, 0x4f}, {&(0x7f0000000c80)=""/27, 0x1b}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/156, 0x9c}], 0x5, &(0x7f0000004300)=""/4096, 0x1000, 0x2}, 0x787}, {{&(0x7f0000000e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/58, 0x3a}], 0x1, 0x0, 0x0, 0x80000000}, 0x26}, {{&(0x7f0000000f00)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/62, 0x3e}, {&(0x7f0000000fc0)=""/110, 0x6e}, {&(0x7f0000001040)=""/243, 0xf3}], 0x3, &(0x7f0000001180)=""/47, 0x2f, 0x8}, 0x3c8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000011c0)=""/151, 0x97}, {&(0x7f0000005300)=""/185, 0xb9}, {&(0x7f00000053c0)=""/199, 0xc7}], 0x3, 0x0, 0x0, 0x4}, 0x5}, {{&(0x7f00000054c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005740)=[{&(0x7f0000005540)=""/70, 0x46}, {&(0x7f00000055c0)=""/209, 0xd1}, {&(0x7f00000056c0)=""/98, 0x62}], 0x3, 0x0, 0x0, 0x9}, 0x4}, {{&(0x7f0000005780)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005800)=""/22, 0x16}, {&(0x7f0000005840)=""/128, 0x80}, {&(0x7f00000058c0)=""/198, 0xc6}, {&(0x7f00000059c0)=""/114, 0x72}], 0x4, &(0x7f0000005a80)=""/4096, 0x1000, 0x3}, 0xedfa}], 0x8, 0xfffffffffffffffe, &(0x7f00000000c0)={0x77359400}) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000006c80)) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0x7}], 0x0, &(0x7f0000000000)) 08:33:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 08:33:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000580)=[{&(0x7f0000000900)="0c4d7637309c246118e795531e53963264fab60ccdcc4e7ddaf9d222110c2e1816b5e67ad3d2b2c4d0123919e80bb92a1aed6ffb9771a394b003f1c8e6a3602f3e5baa528f79a926338d407732c5995090bd98f7f8dcdc7cb5c4cb7660b8ab7a589819692733cf1192e181f5ac4d34a67b345054b3983a5ce25e0bfc73403a3fda3467000000000000000000", 0x8c, 0x10}, {&(0x7f0000000780)="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", 0x175, 0xfffffffffffffffd}], 0x0, &(0x7f00000000c0)={[{@dots='dots', 0x2c}, {@fat=@errors_continue='errors=continue', 0x2c}]}) [ 2531.943390] FAT-fs (loop5): bogus number of reserved sectors [ 2531.949301] FAT-fs (loop5): Can't find a valid FAT filesystem 08:33:37 executing program 7: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a0a000274f1f8", 0x16}], 0x0, &(0x7f0000000000)) [ 2532.021782] FAT-fs (loop2): invalid media value (0x01) [ 2532.027165] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xe0000}], 0x0, &(0x7f0000000180)={[{@fat=@tz_utc='tz=UTC', 0x2c}, {@dots='dots', 0x2c}, {@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) [ 2532.064689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2532.093375] FAT-fs (loop2): invalid media value (0x01) [ 2532.098781] FAT-fs (loop2): Can't find a valid FAT filesystem 08:33:37 executing program 1: r0 = open(&(0x7f0000000300)='./file0/file0\x00', 0x202, 0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x66}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = fcntl$getown(r0, 0x9) getpgid(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) r5 = getpgrp(r4) sched_setattr(r5, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000000400), &(0x7f0000000200), &(0x7f0000000440)) open(&(0x7f0000000080)='./file0\x00', 0x10080, 0x30) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x200041, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='id_legacy\x00', r6}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) r10 = geteuid() sendmsg$netlink(r7, &(0x7f0000000600)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000001300)={0x26b0, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x11a0, 0x30, [@generic="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", @typed={0x8, 0x3f, @u32=0xffffffff}, @generic="22091be83681ff731df5b8b9c913a35d1742354139bd2aa063a5092e5b3d5c6260f2d2c67f44148ba216ba3163837f32b2eed9af03175334a559efa9bfa057da77658d48fa053588d4887c9dd69b0fbae879593d6bd0864396bc477611ab54901c5b651d33a2735c532aed1cc2f221328dcbf0fdaf481e6f31cf18d0d1", @typed={0xc, 0x7c, @str='self\x00'}, @generic="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", @typed={0x10, 0x3f, @str='keyring!#\x00'}]}, @nested={0x1264, 0x6d, [@typed={0x58, 0x88, @binary="2240ee08ddfccf4c42001f98a82644d0fa823c9824050a3d6258b86ec8bc4af2dfc8854daeeb6a4ca8de52dcf8fe3c3a6e28f27522c8de16d892b8e33237ddc807213b276fa2eb3b8643fdbece062a6c90"}, @generic="498c4967abbb58838936baea45985aa738871e6df83a7a531f96506a41591734807dd3db6a01a93555ecc29a6e8f97b9a43ccfbd026e7ec4b9c7460e1a938fd3ffa9389b95c0a239c15f041d906334bd98c3e90ad28405e4a8f834e2cf6c38f701d3781ce2df802ce0c85e8c2f79f48a66a7b688e7af9d22da2cac5fe342988d398fa79739c0ed2a4b91e69319cb8425ca153c3ef04a5ce86a082d00f1dd525f88d24d84b71a5373d8f29955af8ccfbbeb33b377ae2549a41b6a1fd5083a1088da9aab8f3066d51ee8b202875b0df5", @generic="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", @typed={0xc, 0x4c, @u64=0x4}, @typed={0x14, 0x6f, @str='/dev/sequencer\x00'}, @typed={0x8, 0x3b, @uid=r9}, @generic="0356b4b60a1a604011efd174fbc4b5d1829dd3c9d1b2c6b03cb6d2afc77b3e30", @generic="31222c2e101522d9ad1568c24e0ea3b91ebf59c3a02d58b697f0a80e8c9c8bb107a164f3d3842b065646921b5e3edb4821230c18233b9214614db483650c5d979a986f2145c4b23f12f53ea6ed1077d3ebfe85f85fe3ad37dfabfaac434a30bc14148edc7b4487253793f9f33c977f1e6b5eef384682cdbd4dc029b9eaa640f7da93a42477edb95fb4fcfaaf08e7d6048986a139602a4fd0210d27f776e2d429116e3b28ffae7e3fa05773cac3654509de7aa8e2f96cdd6e1c00b79bc277cb59d51d5336658c77c85fc26e10738a5da3d5f2c5b9937dbddbb8a38b798e916c7f163ae69be41d692458b38d7941abd5c891"]}, @typed={0x8, 0x7, @u32=0x2}, @nested={0x25c, 0x15, [@typed={0x4, 0x49, @binary}, @generic="e1ba235d0eb316bb17ae82e941bbb25bb535ab87ad847abe54efa8faed3f4cb29dcdda878018471cb3da94d06be98784d3c3b91524ad4416bb197bd8c78a33ca6dd81a83e89d8b54c288c26a9893d4690b1ae7849a4ba166ff2339a49a8ed8b6f738581cd2b6232795ca4bb49b4d5379a921bf3e82948ee19972450c785b7dab79e59ba54620ca2a3c5265302e58c1002450942aa01c10157e25df9c4284b1c0fd76419c21b383063380e2b68f16ced5054ecb2e31b7905f3c7fe56024973c5608cda478bd106296e01eb7e3257eb2444f149279720a05c1a85b99e4b5eaac3e", @generic="5c3f4652552d1b09d2bc47baaa8c5023eb0b507c2efdaad5dcabeddaca1b16f144d92b6af7efd0964730bfba3a4736b6cc7f4ddad5e4074ad068db1d25df3b58ecebfda57d1409a5b2144e7f5ea16e42d64b35eac9b987a46682319ac43aa572819163ddd5bbac4a9e05f59a48ec478530ebabeb9af87ca782c35c3302c2c2b1d82da8d73df1b12bdb088d625ce2fe8e9eafee156202deec6ec1b4718f0bbd830cf306f99a3f310cde7c9aa0425db8f790e3ec0d", @generic, @generic="27b8a4ad5c2f40254c605b453a39f32b1efff64822aed49515f01b8651ec41a5c75d51a2c29c8b58eaa137a0345a7805480f290f6882a1726c18496de5a73e845fdedc9320359fa06a80e896d26c071fdde95abd9f740bd00a0ab89a36f9847b9f412788fb6c24a3a712f3f95780f22fe2536741e475b4b2e99ef45493a5890ce95337f723ee5a57f8dc6c41641e84b704bf3a8f03940c79643e5153dd9bc2b6a27f22d52ca89f0b7ef38d1d8ab9ab7a6a023dec15", @typed={0x8, 0x2f, @u32=0x101}]}, @typed={0x14, 0x40, @str='/dev/sequencer\x00'}, @typed={0x8, 0x1e, @pid=r1}, @typed={0x8, 0x54, @ipv4=@multicast1=0xe0000001}, @typed={0x14, 0x7e, @str='/dev/sequencer\x00'}]}, 0x26b0}, {&(0x7f00000039c0)={0x5814, 0x3c, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="95e1c98bc6b25f7f7fdfd48103d5f62fa03f818bb93c86e6d106878ff940067362011e1fe6cc3baae640d2d482f3890faa0dc8c13c96559cd216d696455f032d274ad5bcb17ffe0d756eae8cd19ee6d1fe3c96bf54113d397dec889b4a74467554299ddb34074f73dfb8a58a6b385c35e65c33c414807f120c77cb07bf2ea34c8a9c60645db985c7da48d36e64431f0f4360d452ccba6c6c5cb05809714c0b72f918b4ef88acf138f267659955341e54dd59c61aa82e861fa5889726460c", @typed={0x8, 0x8, @str='\x00'}, @nested={0x2c, 0x11, [@generic="7b36d24cc06799b4e16e6c93d144a1c0c550e1fe3089f20d73e9c546630c970dd860fe590f"]}, @generic="5056a0a8278b190a394d0ae73d332a8c53866f6d0e726303a410aa5ae762e360b7f5bd3fef70a01b3f64d23fc73c00884cc3f76ff52519810b6cb6c4bd6c75c45141063bf1b4cf173864da36ccfd4eea0d5f5c6770221d0cc539466899cd8bc8e6097fd3d1abaf70978e25be9250f89b160912df81887d6ba783cd58bded9a9547c4b787cf9fdd5ded64ba4afc2be69cc2c3812a3dcae545505734e268b158be00bf844f30de5c8455a265e02cf74a99d507de1ebb5b027ba648b9e59647ecbd7602ca910cafb99d831ac52e9581797e0340a013331cbe2b18b0281703d483952b9ab99bd3999b527859d1940362e6bb890e170c9e4f38", @nested={0x20b8, 0x7a, [@generic="d6b4859aa3e51c19c864e5e19f80fa60fb348c2af21c53b4b4f225b3ea14c3c0cfcecab6d98f303ebcc3743da2e38a747bcdf7e57b6858d6122a97117444db1196a0292e42cd34c6768b2d6dd083dfc97de66961f5a07a9dddb22d568f12a9a24026f336d47d8c45181bea9da382f78748015e8be835566894ad4d8b91fe0f790b30ff6854b8158d", @generic="40e123a4f2d280490c3632f9c07b91e1418ae9c9ea0e57e6ee4ae452c5c6e36e3a4f3e90fffb1a0e85f099be", @generic="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", @generic="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"]}, @nested={0x2384, 0x22, [@generic="a0e2285e5d8e7e0c68759cfa04fabff98d26cae38878009ed8f637af2fe01815fdc977868ffb3ed88c94ef8b34402bbf8c7d3f329b45770b2b3c08cf9860f2bb8ca84ce3846920dff472bc240910062276bac082e0c2caaf7e90ebcf60c70d50e2ae1dfc379d108f2eaf3014ef3558b0b5b61ae4449b02ca1cc1e8caaf25b1db5378e32d8ea5107ae8a267c30a7ea5c2e9fbf1ad658c8446a4d18a8e97daab6831114503da7ab4f1a47be1f81a3bafb7ef", @typed={0x8, 0x63, @pid=r3}, @generic="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", @generic="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", @generic="eb09d9c8517a7375ec577661f6d3bd9360ddecacd5c7b7e85cd96ceecb9a4adc5309f80e92004d838e602162ea3522c7cca0834d8adc6d5912ee3459667ff220165f2b84b105b717f4dad72c7215aaae2f003cd30fd091a1000ede51e78ae253424f8bcbf578657cb458ea7febabd62e609834bf9961e77f0f5ed0ffc8ec3b2569a4cb99b897976d54bd56e88b800aba52a42af8d6d3009f99c04f93e2cc8c3bf833a92507f8d793ecde7778fe2194b19777aa0a62c4b37e6bfc964e8effe7de018488ae459bf2b420d3d80040b4f9f7332631a83d1b7bd48aca1398f8", @generic="f673ae0e34ddf4767a57c315092ee90a0c3f19f92411736bba75991c080040c103ae2c22bc91ef92b58c8a823588478f12e8aaf1ec0661df662831a7c4192b3dbd414223314e126bcd74209dee250ccb90afacc3806802f6fc2fe4aac2d07c3664dbc8abfbd1f8e3262daababff0a93144aac00465d9f1ef21880ea289b90eefde9163e74bd1d2f293acbea089b025fe8b93e7287e341a74bbb761f2d42790cd77328e8d170602c3a7781df693cc4505ca74c9c820276539113a0a0b8f7b7fe86e838206db02a117d34d542d14faccee3ef3dbd4e4a46ff79d6aa79163998befa31818557b984aa9349e036c5f3d", @generic="cebccd645ceb39772f47e057035d48ef69e0aa59324891a9bc1bbe9cb11a48e7cbc3af5ef94c5e0b5f488dc7bd6f785d2f94b11e39ea1f6dfdc7dce2c2ecc9bfd6ccd5ca2412bec4f3ed11ac2f7fe639539666373de088464caea900868da3f022cfeae9b52664a15f1a3f3bcc1b0be21f8bf3768d5c7c32b6bd33c357fad0f370975740b6510b6178f2de834fcd943b1e73117fd84ede4798ea0575464c6ecccb3e39ae02b92fcbff9b893ad48c780784a27a28cbb8a8d4dc194b28f7ef5d6dfa801969856014b2dcd1847585ed5c64f5f97bced83e5913e9677d213a29aee8aa5791d76da4a226b19e3cb7f64d0e3ecabed04c4920235087"]}, @nested={0x11d4, 0x5b, [@generic="62185908049ecc599b62ed31c4677465fbc940f6ce17d36062bdb0ed1962b67e59d1e151f94ffd8a28ed127b91f0cba8358c393c83d746ae5b6e07ef0839f775d1b7551b034b56dccaa1ed4e48851170bcd833919cf32ec5a627b30c6afbd381b3126a5259e4a752017484169f3004c7dd2ba1bb6474246d24d6274afb18b005e9f816f2ccd3c6330418fd7f209353e830490698ecfb2866cadee07de50f6018e0b7b5077940ae1fa0840ab00fee6f87c16e87a3ec9d89", @typed={0x1004, 0x21, @binary="c2b5d8b986dc1ba52d533836a67ceb616986415c9791741eb6310625fa5e54c0c760e2228bf0362f2908404c91a262a95f374ee45128ecddf5d8a225f23d0566bedbdab17abdbacd073f1f1765f0b8b926bfd226fb31999ea02d62fa8d889cca34db7b00d9a74ee04a2b3470203eb91f71a52ea52663f857172b065765d56f172d2aa3e3143be03a4b121f075eb58fc07becf41e70ab9360569abc0a16e96d5cf55062d97d4b3123ee161ded155405c944bc276d1880596d4a5c4fda4f8ffd133b370003f23ce1dd9c3456dfac37e9ef086613b9a8b68820cdd8d44bf55d78fbee0dfa86fda758e6b01733134b479ef868fe01b6234034ac43742c80f9d724ae250fe6bd2bd855ca53813db4a7bdb03ea8f56b96ec4a34167520c4cf8de7323d6dcafe343b1ae042b3f1507a377937a29e0ef8cc280137829ef6d37e8540a51cd92b37ea6e8cfc7956fc5d45a01b09bd0e92b8f4fca3b4a92a753a9f31ce7518ced99ba4aa70b686fa05225b755c60da2448c4e27dfae1778e33d68b01f8ac5dc19757cde1de5a456555f6c527b11f903a7db28c765175a826d3ebf7b91518a71983f092ebc946f64e875e237e7be4369cec1f7aacdeadefd4dc307fa493aed7ab95b5766ba3a94680c5ed3fa5f7c58a4d78bbd84aa09750e48c3d90d62209a14524695f108480290d1c20595c6519512e80aaeeb4c34d7f99bd812ee7ccfab163ba58e65d7541a9305a135d84c0b5504fe1745be199fc2cf29d7d5564aca7a9559ac13f5c204f4c14f440572375177c4405b6fa5da2e4be2230d760db4f5aef58a587387b47a1bb8c4e05c1ee0d0113a37c17d5731dd49c977eb0a5688246cc72e74c3ed01848e2fd62abe11b1c30de9f103632351e8f6db8012b1dbac91c283b066b50d2b32a0b7fcf7f672e64a10b95107ca8f5cebc4f1e087be8022d17dd6b142f2c4a301e7ce745ea51e872cf3f67eca9ecc48467e723b182ecac1a45191118ecf821fabef81b084c51be5db31f7dda3adcda63fac072861c5215150ef2b4f05ccf132adae26204949b4666e2848d3942d90aa3e5d7c3c9263642c9c10fa2915a2839e6e63c96b6aa9783ed963e6d8a287166b7e28b05803463ec82d4f1884fe56697c2769960497d2a8d4e9bb00f68546af5e4401d24e83f36b49c70068a3e8bb4a1b58894d6564422a77a48c2ed5a5baa78b0f4e530b9cfff9913bb2723893a43adc9e8271dd433576218c1efc1de7d3989042ebd03c23238c84e5a9ea99e44724d1560425f087c6297f16cbb3733d394510936c802524d05a8d3817b37cdfaea35f247124c7b4d1b030ceb267023082bd0ffda49f222e51c205d8a9d180390545c7a0a62ed460cf8480cf56a62d6fa6af303724d2bf2944d496aba75b7d4a71cbb35a96016694c440434a54970667dd32189d201b64efc4db15e0dfc087ecc2ea2519a345e22eda5b127ff5efbc10c0606e6d6bb18c7364e2b31c541d4230194140ffe6251f3bfda5ab10c226a44272f072e125b259dda534c96efe1d478c864ee760e4e3945419b9bceed9f86352c4077ef35215158852befa22bab7d4640b920ba59243f441653bf4e630b0897e41cdcaaf5dac59b2a98040ac11689831dd959d85142b2441955aee0ca9ea46098a11431d48372366858b1f1e0c561bf6c4fdbf3c5c31608143b13a9e725f74ea26e08098ede91fc20b69e4ad85d0ebc62d94419e2d7ab9d030138503c2aad4f36c572ece7c3641864c7c265343071cd27cd1d1d0ef21cab59c2b2eb765086337d9dea7885c76891514e721c11105d9f93c8033f06ba47a19fe4bf809d75e8b26a90b20a39bee5e10e99bff7401176e8ba2d01c4def1c36418f4acde51421b0e00dbf70ed071e96e46d5ef69a4c012c6133b59e2117560b93920ba2e1a7c1a1752d208d44dd2185f7b83655ddd9031e05d66265e2ccbd8fcef081985e19936a5b7a77002465fa474a702d5943fec5bedfe7cdf5343562442c5b7e69fbbd07fdeed13be9af5762af17acef21ee755dc30143a579cc5aad9b65810d2fab3ce1fbd69e5ffcfd8f57ce607ad4eced10aae32915038f031abb3c55483ce5f399a3c8bf5ecde72d7e699ded6cb4f92efe6c8f2c183dbd32e46cbe17bfbb82f216b64456179d654e5104469b001963366ad1d801eb38f328bd143b6ad555b5d43813466cb63c7de88f8dc2cbdbf424a1db6787906c70bbd6d2604f2d957a6b562a2e87152ad3173110ae357b2615f66540817c22bbb10a06ee6da35b34a0994b21427909a35c42ce3c8c45c07ea7ec72a22fbe745f524a208acf406042daa64bcd9513de7634dfc1945920e4b1a3adec7b5bc3739cbb76f659853644e01b4e2b6a930821d05aaf2af69f4fe96114dd5818f494742dc89cce92fbb6c8d169ddfbe6d8a09708b2a8cbe17025fe248b2fda530145f778a9f59f418399339c7fcb2d9d9a2934e6efa2ecbf647dd5d588e9076c31e5a654fc42fb5892ab33384ac1a3193466193d6b4af57a17d33392dec98f4822ad0943d6c9b17fc1859a5c3ab7d585efbbfef26bd1d111dce646c4b9f33bb513e973f0f7daab53495df2ef6107f75cb06ae3e79b3f380d23f69b99cbddae6d3700f3e70cb40652eb53d1a654cd5b7da3b945f16339568d7782b8425661aa50fb4ba589d75cae62a696340c76a1c3c13d56678f8005d60ed8d039fc425eb7633c10b6be8272ceedcaaab03f7f98b21e2c4bc1331d987e04e0699393e6a58a3c97044be76e7bc680f232d1f503f67529ba69b1a4ab0d79e018e37f0f2747b6fef4ee77096ea57579614f268fbcd9496dcd6cb06e88de6b8998de0950f5b3c9e34c7a00f2dc13e84f0390c9443f84961f5a10c6d23eabaa5e07ba58225a393700ec35b9cea727a593158d6430b27a066134094b5940d459093e22007f4927c8807908d0f2717eec9c4e222e83baad9cef7dd33831d8254904f126bab7e89ff653ebdc831194de23a4bb3ba6472cbde464a18d28815c4b051aa98663fb198b283d45b5947ef48bf67ab8d2580df83a99cda767f1e207cfdc2c2572723831288d2b58cdb2d84b56d8465e0675b4579878e5ea413b99c5c3936d2345d0c625e4d9338a5ef7823d2486eba83bae343d31c6dca5a0b7982a2cb842c6b2b179d186a8a4e83ec913eedb883930893649b573154c12c364abd92039ceaa45f0ca2da944953131097bd57f27e0cfedbe14af212e6cfb7e4a6ba2071a778eed01ee11979d9aa3de4e8f7f0d3e9614c09bc20056101fa1833e7c67730925b903b1ef609cdd17b73b71f55ed025eca261ce704a66c562a9bdffc0a56e2e510a13f7b76cb209dec524383484d37ddba0346f05799ba93ac9f519ee6c8a483b77fece7510abf61711aad10f5b1dbad6a043d2aeb2ff1107f934a7f040c59dc350ffa7020133efbda72b58e9bcb313258a1861d33028753d963ca55e1773640c3ce99031820605bff6ee38484dcc267ec0f4fc259381527cfcd0506acb93a1fe7e508e04a5d792c2185b3a8ee4d89f6ee8facf281ba557d5fb4fbe4919c4da61197a7578986ce6416cd981f72e981e04695a757062efb770e1026417145374185a5371a4ca395dc5713765b8e778880cba50d215e486c157f46572f99ce8fd578983cfb309b755150e188cad11dcec6a64df836ec8aa0a9a7477a9fac3ba69bebaabc2c434045a11dcbab0cbe48dad21e1d358373c02c163ef8c0666e03f3175860856c93eb09c957083b3c106022d5dc8ec2f80ef171d3a106d0411d3b426f908a0b31bd67b7f9a10ca37297f3d51ebe58f7361bfae136d80ef5d310ef5b8144c34d04a73367c611a195e4a2c3b282f37e330bcff667aa73d1f7f848352d6cff534f005a0cbbe9832814f44e6b20e5ad0c66e763f4fa53a2a1a4d424ec104b4e15b32f05098d0a093be1809aff20b38679f2edd111152d092986347bac1f5315a3a20ab553c2341cfe884a13b9b4f1c53f887aed68106036628df8fe59fcb4ecf6bcab39c8d3ba986bd7961d525222de0bfdd75362ef377e862c455dd5b9b96b065a9b1181d4f3bcb7de38f79fb9b299c78c071e562615590271662d2ff053c1ef3b169ded99d75323e1b75742ed5463621ca571f5ec03e18bef02b341f27d6517acb801dbc3ec465925252f1f990c96ac7110d829bee2948009adc879d8e5bffed36e023c97ce881b923e2048cd16848bb4a49d62c71465623f7cad46476a01e06584168e58d8c521e1eda924e398703d7d3a2f4c1d3a7dcda81900a84756f5a87d87faa1efd5c55830409f561e68edd433e6318d5d666ed490c3f7d03fe481207d0a0e316c149becae0b113d130c626465fb42ca7b9101220435034dd99bd7cd1fd3d8669532e6e90b7c468750eb4498e93e658f45326f945068326af864b98563865e21c6050416a69e2edeb5004f125d60c90df8e204e3f94f7d2ee03f57d1e1d8aab3327e29cf5dffddb5afbbf9cf10995f0a02191eab537b86e61865eda05d4d41e7473de56955c120820799cb5e4e9943a1856b33c1f9d161d5bb85b653d9b5501ecbdbad3f8dc7f6a34cf702f482472e2f52d6c748820041145f26770af7488fa62b1e1ca19e4fdccf1c23f8c4d874768862f9df9663ff28eb9373227c6f3aa2e745be4720403f0cd6c606aeedde9981dcd8c8e4bb2b4130fad7632c3ad9db1a99536e0704b83287aa523262b52c4c0176dbe0e692e4f6413faa135fb265c008feb4ffba161652a0243387a83eb482c7d3ba37d38abd306856d29e00f7c8ef48f2994f6e5114ea68521e7fddac733498734fcf2f8b4b224a4e31caa4f21d12b48c4115e08c2d0c093120a67ee04ccf40ba1469e0b6c85b59da6a9bb1b67a496132c59b85f54170cdd808f671ea77b1af311ec5c412afb396da3c739f25f95f1a1795412212f9f0711a88544c425af70b773324de1ea6baf6e6f60de63d0b1f34c806a5f9a900d9422f68c38893af693e7caa0ca90ca35290cf4c813ba47cda503974a95304bb921fc2f72a20948d476460c9da3f50ce09b9e5bb8504825be0d518ab61e476f94c89fe115cefe0de763de1aeb9d146806579ce145312c73942db594fa101c87f8d1a25d71b51ddec950d253831cc633017fbe87a282f25c6af24b6a8808f03cb5d8687bec07334defa7ca5590823fe140cbaa7369fa05ab782660487eabbde975d605e5b942f09ee5fdd301e4337e5c2315ae3cdf8739eb32435d6edfa53eb330ee2aac5ae349bf4e0d9a765342fd55e74dbc63cc27bd571d5d3763722dc6ab0dd914bda8b86fc86c36d13fa99251c62761e5159e0262d1a04ab3ef55cf33b1e8370a6a1efdcf6d76a2a37e124514c2486c05a955663e6e1f15085b99076ffcdc3d4986818e0893dc07cd5a4a86a4cd61c68da47ae7df949dd662f3c761acc17c4ac06dcbe7a86ca8a0f27ee73a967763b60e9248866e6286e1d6800ca5a70965d3495f20d17eb3cafca3d532e3765c7a879ae98fa98c0188e7c52e37f520da33dedc1ee29150ebe478cfd7f8c3bba45fb585eebebfa4c0ff894d014600cdc319bb70dd99855cca6b9f842e46e7d9fd4d89d0a72ba4695caf65e912fd85a4e3862558e6a753728217af8f00dc085111b9c65b549c6a6fc8a3cd373f6d38544bfc6c6f9451a6fef090949224667ae288cfb2cc3167e7ea30f3b4faf28db2653296ba83ff7d8c072fc5bbfbfa7d513bb97785dda4253a65740389cefd2661a92bdf15fc8500640db9891226f4b7da225b2639d100b083dd9e858d71117c7ba"}, @typed={0x8, 0x7c, @ipv4=@multicast2=0xe0000002}, @typed={0x8, 0x3d, @pid=r2}, @generic="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", @typed={0x8, 0x67, @u32=0x6}]}, @typed={0x8, 0x7, @fd=r6}]}, 0x5814}, {&(0x7f0000009200)={0x1200, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@nested={0xc, 0x63, [@typed={0x8, 0x2f, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}]}, @nested={0xf8, 0x58, [@typed={0x8, 0x4, @uid=r10}, @generic="76405dd979d79c3ed9c066761b4bfda5a79e966fbe85afc2a72aff16160ae0c853f539facca759456443b02eab57094cc6000f0e70090a7d8bd7f68c88f6043508884796eeb21bdf6bb2f23f8aa1191d23f7cc429fdb5362617e9b464daef84bda11b9ea6f9398ef8f223f6d3f0cdce22f2f6be92e7379d70a8dd7d6a946fb3fcd92fdb7fbbce5bafa8d4ec04050744f2f07c5f71a3515ffec0493acd28f0c89839b916a91c8be689c5c3b200803ed2ca1d1f7a03948fb0c8dbf079955b1f23290c9630660ec2b8f29103722fb105b0760a8cb9ed7d1a0482c537954a3b52f524750f146112da42d5808"]}, @generic="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", @nested={0x64, 0x28, [@typed={0x4, 0x42}, @generic="e8ae607971372ff710a90585de5300a9a029ed424c6a57144c4d2c84514aeefc4fef15de0c210c7ee2bf41f90d002798fd881c775199ff78fd145191a4d2b28028be695e903acd35980712e7ee3057e511aecbcb3cb59dcdd56938"]}, @typed={0x28, 0x69, @binary="2367c1cea748dbec4d3c314499d8ea333aab67858deae6496b6fd1e69af0976e3612"}, @generic="7a50767bc654928837009dd7c4e3173d0e2cef12d2d266f5ff8c8d2b352c5973f611f900f8a6267f7e71836047fe1d8a678748d7b890052d13c06621c2f488a8fc11f4604a0b1eb4b60e2d24eef9ba4745ef19f5a4db479023760b0d758dae"]}, 0x1200}], 0x3, 0x0, 0x0, 0x10}, 0x1) sendto$llc(r8, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 08:33:37 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16, 0xff07040000000000}], 0x0, &(0x7f0000000000)) [ 2532.125121] FAT-fs (loop4): bogus number of reserved sectors [ 2532.131205] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2532.134215] FAT-fs (loop5): bogus number of reserved sectors [ 2532.143048] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2532.179624] FAULT_INJECTION: forcing a failure. [ 2532.179624] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.188802] FAT-fs (loop4): bogus number of reserved sectors [ 2532.191045] CPU: 1 PID: 31888 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2532.196834] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2532.205210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2532.205217] Call Trace: [ 2532.205248] dump_stack+0x1c9/0x2b4 [ 2532.205263] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2532.205291] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 2532.235596] FAT-fs (loop2): bogus number of reserved sectors [ 2532.236565] ? zap_class+0x740/0x740 [ 2532.236582] ? perf_trace_lock+0xde/0x920 [ 2532.236609] should_fail.cold.4+0xa/0x11 [ 2532.242419] FAT-fs (loop2): Can't find a valid FAT filesystem [ 2532.246188] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2532.246208] ? unwind_get_return_address+0x61/0xa0 [ 2532.270323] ? __save_stack_trace+0x8d/0xf0 [ 2532.274672] ? save_stack+0xa9/0xd0 [ 2532.278319] ? save_stack+0x43/0xd0 [ 2532.281952] ? __kasan_slab_free+0x11a/0x170 [ 2532.286361] ? kasan_slab_free+0xe/0x10 [ 2532.290336] ? kfree+0xd9/0x260 [ 2532.293618] ? parse_options+0xc70/0x1a10 [ 2532.297764] ? fat_fill_super+0x2b3/0x4400 [ 2532.302006] ? lock_acquire+0x1e4/0x540 [ 2532.305984] ? fs_reclaim_acquire+0x20/0x20 [ 2532.310311] ? lock_downgrade+0x8f0/0x8f0 [ 2532.314463] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 2532.319062] ? check_same_owner+0x340/0x340 [ 2532.323415] ? trace_hardirqs_off+0xd/0x10 [ 2532.327666] ? rcu_note_context_switch+0x730/0x730 [ 2532.332597] ? debug_check_no_obj_freed+0x30b/0x595 [ 2532.337620] __should_failslab+0x124/0x180 [ 2532.341861] should_failslab+0x9/0x14 [ 2532.345666] __kmalloc+0x2c8/0x760 [ 2532.349212] ? match_strdup+0x5e/0xa0 [ 2532.353017] match_strdup+0x5e/0xa0 [ 2532.356679] parse_options+0xc7d/0x1a10 [ 2532.360655] ? lock_acquire+0x1e4/0x540 [ 2532.364641] ? fat_alloc_inode+0x70/0x70 [ 2532.368712] ? __ia32_sys_membarrier+0x150/0x150 [ 2532.373481] ? __lockdep_init_map+0x105/0x590 [ 2532.377983] ? vfat_cmpi+0x570/0x570 [ 2532.381696] fat_fill_super+0x2b3/0x4400 [ 2532.385783] ? netdev_bits+0xb0/0xb0 [ 2532.389524] ? format_decode+0x1b1/0xaf0 [ 2532.393597] ? fat_flush_inodes+0x1a0/0x1a0 [ 2532.397937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2532.403475] ? vsnprintf+0x20d/0x1b60 [ 2532.407284] ? pointer+0x990/0x990 [ 2532.410834] ? snprintf+0xae/0xe0 [ 2532.414287] ? vsprintf+0x40/0x40 [ 2532.417745] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2532.422762] ? set_blocksize+0x2c1/0x340 [ 2532.426831] vfat_fill_super+0x31/0x40 [ 2532.430725] mount_bdev+0x314/0x3e0 [ 2532.434355] ? vfat_mount+0x50/0x50 [ 2532.437986] vfat_mount+0x3c/0x50 [ 2532.441442] ? setup+0x120/0x120 [ 2532.444813] legacy_get_tree+0x118/0x440 [ 2532.448880] vfs_get_tree+0x1cb/0x5c0 [ 2532.452683] ? vfs_set_fs_source+0x12c/0x180 [ 2532.457096] do_mount+0x6c1/0x1fb0 [ 2532.460642] ? copy_mount_string+0x40/0x40 [ 2532.464887] ? retint_kernel+0x10/0x10 [ 2532.468784] ? copy_mount_options+0x213/0x380 [ 2532.473286] ? write_comp_data+0x1b/0x70 [ 2532.477353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2532.482894] ? copy_mount_options+0x285/0x380 [ 2532.487398] ksys_mount+0x12d/0x140 [ 2532.491033] __x64_sys_mount+0xbe/0x150 [ 2532.495011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2532.500552] do_syscall_64+0x1b9/0x820 [ 2532.504447] ? syscall_slow_exit_work+0x500/0x500 [ 2532.509390] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2532.514339] ? syscall_return_slowpath+0x31d/0x5e0 [ 2532.519276] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2532.524298] ? perf_trace_sys_enter+0xb10/0xb10 [ 2532.528974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2532.533826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2532.539014] RIP: 0033:0x45885a [ 2532.542209] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2532.561526] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2532.569257] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2532.576617] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2532.583888] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2532.591160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2532.598432] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000004a [ 2532.605791] ================================================================== [ 2532.613176] BUG: KASAN: double-free or invalid-free in fat_fill_super+0xc84/0x4400 [ 2532.620877] [ 2532.622511] CPU: 1 PID: 31888 Comm: syz-executor6 Not tainted 4.18.0-rc4-next-20180711+ #4 [ 2532.630921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2532.640273] Call Trace: [ 2532.642871] dump_stack+0x1c9/0x2b4 [ 2532.646512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2532.651703] ? printk+0xa7/0xcf [ 2532.654985] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 2532.659755] ? fat_fill_super+0xc84/0x4400 [ 2532.663995] ? fat_fill_super+0xc84/0x4400 [ 2532.668254] ? vfat_cmpi+0x570/0x570 [ 2532.671978] print_address_description+0x6c/0x20b [ 2532.676821] ? fat_fill_super+0xc84/0x4400 [ 2532.681060] ? fat_fill_super+0xc84/0x4400 [ 2532.685295] ? vfat_cmpi+0x570/0x570 [ 2532.689010] kasan_report_invalid_free+0x64/0xa0 [ 2532.693769] __kasan_slab_free+0x150/0x170 [ 2532.698004] ? fat_fill_super+0xc84/0x4400 [ 2532.702272] kasan_slab_free+0xe/0x10 [ 2532.706081] kfree+0xd9/0x260 [ 2532.709194] fat_fill_super+0xc84/0x4400 [ 2532.713258] ? netdev_bits+0xb0/0xb0 [ 2532.716973] ? format_decode+0x1b1/0xaf0 [ 2532.721044] ? fat_flush_inodes+0x1a0/0x1a0 [ 2532.725377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2532.730913] ? vsnprintf+0x20d/0x1b60 [ 2532.734703] ? pointer+0x990/0x990 [ 2532.738234] ? snprintf+0xae/0xe0 [ 2532.741684] ? vsprintf+0x40/0x40 [ 2532.745129] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2532.750135] ? set_blocksize+0x2c1/0x340 [ 2532.754185] vfat_fill_super+0x31/0x40 [ 2532.758064] mount_bdev+0x314/0x3e0 [ 2532.761677] ? vfat_mount+0x50/0x50 [ 2532.765304] vfat_mount+0x3c/0x50 [ 2532.768745] ? setup+0x120/0x120 [ 2532.772099] legacy_get_tree+0x118/0x440 [ 2532.776162] vfs_get_tree+0x1cb/0x5c0 [ 2532.779950] ? vfs_set_fs_source+0x12c/0x180 [ 2532.784350] do_mount+0x6c1/0x1fb0 [ 2532.787878] ? copy_mount_string+0x40/0x40 [ 2532.792119] ? retint_kernel+0x10/0x10 [ 2532.795995] ? copy_mount_options+0x213/0x380 [ 2532.800485] ? write_comp_data+0x1b/0x70 [ 2532.804533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2532.810056] ? copy_mount_options+0x285/0x380 [ 2532.814541] ksys_mount+0x12d/0x140 [ 2532.818156] __x64_sys_mount+0xbe/0x150 [ 2532.822123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2532.827653] do_syscall_64+0x1b9/0x820 [ 2532.831527] ? syscall_slow_exit_work+0x500/0x500 [ 2532.836359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2532.841275] ? syscall_return_slowpath+0x31d/0x5e0 [ 2532.846195] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2532.851198] ? perf_trace_sys_enter+0xb10/0xb10 [ 2532.855856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2532.860695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2532.865870] RIP: 0033:0x45885a [ 2532.869041] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2532.888247] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2532.895958] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2532.903213] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2532.910467] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2532.917721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2532.924977] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000004a [ 2532.932237] [ 2532.933851] Allocated by task 31888: [ 2532.937556] save_stack+0x43/0xd0 [ 2532.941097] kasan_kmalloc+0xc4/0xe0 [ 2532.944803] __kmalloc+0x14e/0x760 [ 2532.948335] match_strdup+0x5e/0xa0 [ 2532.951958] parse_options+0xc7d/0x1a10 [ 2532.955916] fat_fill_super+0x2b3/0x4400 [ 2532.959962] vfat_fill_super+0x31/0x40 [ 2532.963836] mount_bdev+0x314/0x3e0 [ 2532.967449] vfat_mount+0x3c/0x50 [ 2532.970888] legacy_get_tree+0x118/0x440 [ 2532.974940] vfs_get_tree+0x1cb/0x5c0 [ 2532.978726] do_mount+0x6c1/0x1fb0 [ 2532.982250] ksys_mount+0x12d/0x140 [ 2532.985861] __x64_sys_mount+0xbe/0x150 [ 2532.989821] do_syscall_64+0x1b9/0x820 [ 2532.993694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2532.998861] [ 2533.000469] Freed by task 31888: [ 2533.003840] save_stack+0x43/0xd0 [ 2533.007282] __kasan_slab_free+0x11a/0x170 [ 2533.011502] kasan_slab_free+0xe/0x10 [ 2533.015289] kfree+0xd9/0x260 [ 2533.018378] parse_options+0xc70/0x1a10 [ 2533.022336] fat_fill_super+0x2b3/0x4400 [ 2533.026381] vfat_fill_super+0x31/0x40 [ 2533.030255] mount_bdev+0x314/0x3e0 [ 2533.033866] vfat_mount+0x3c/0x50 [ 2533.037303] legacy_get_tree+0x118/0x440 [ 2533.041349] vfs_get_tree+0x1cb/0x5c0 [ 2533.045146] do_mount+0x6c1/0x1fb0 [ 2533.048673] ksys_mount+0x12d/0x140 [ 2533.052285] __x64_sys_mount+0xbe/0x150 [ 2533.056247] do_syscall_64+0x1b9/0x820 [ 2533.060127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2533.065299] [ 2533.066913] The buggy address belongs to the object at ffff880190d60c80 [ 2533.066913] which belongs to the cache kmalloc-32 of size 32 [ 2533.079389] The buggy address is located 0 bytes inside of [ 2533.079389] 32-byte region [ffff880190d60c80, ffff880190d60ca0) [ 2533.090984] The buggy address belongs to the page: [ 2533.095903] page:ffffea0006435800 count:1 mapcount:0 mapping:ffff8801da8001c0 index:0xffff880190d60fc1 [ 2533.105335] flags: 0x2fffc0000000100(slab) [ 2533.109559] raw: 02fffc0000000100 ffffea00073fe648 ffffea00060af588 ffff8801da8001c0 [ 2533.117427] raw: ffff880190d60fc1 ffff880190d60000 000000010000000d 0000000000000000 [ 2533.125288] page dumped because: kasan: bad access detected [ 2533.130985] [ 2533.132594] Memory state around the buggy address: [ 2533.137511] ffff880190d60b80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 2533.144862] ffff880190d60c00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 2533.152215] >ffff880190d60c80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 2533.159553] ^ [ 2533.162899] ffff880190d60d00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 2533.170241] ffff880190d60d80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 2533.177579] ================================================================== [ 2533.184931] Kernel panic - not syncing: panic_on_warn set ... [ 2533.184931] [ 2533.192282] CPU: 1 PID: 31888 Comm: syz-executor6 Tainted: G B 4.18.0-rc4-next-20180711+ #4 [ 2533.202053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2533.211400] Call Trace: [ 2533.213990] dump_stack+0x1c9/0x2b4 [ 2533.217618] ? dump_stack_print_info.cold.2+0x52/0x52 [ 2533.222796] ? lock_downgrade+0x8f0/0x8f0 [ 2533.226939] ? fat_fill_super+0xc84/0x4400 [ 2533.231157] ? fat_fill_super+0xbc0/0x4400 [ 2533.235386] ? vfat_cmpi+0x570/0x570 [ 2533.239100] panic+0x238/0x4e7 [ 2533.242365] ? add_taint.cold.5+0x16/0x16 [ 2533.246501] ? print_shadow_for_address+0xba/0x116 [ 2533.251425] ? do_raw_spin_unlock+0xa7/0x2f0 [ 2533.255819] ? fat_fill_super+0xc84/0x4400 [ 2533.260039] ? fat_fill_super+0xc84/0x4400 [ 2533.264268] ? vfat_cmpi+0x570/0x570 [ 2533.267966] kasan_end_report+0x47/0x4f [ 2533.271927] kasan_report_invalid_free+0x81/0xa0 [ 2533.276672] __kasan_slab_free+0x150/0x170 [ 2533.280890] ? fat_fill_super+0xc84/0x4400 [ 2533.285108] kasan_slab_free+0xe/0x10 [ 2533.288902] kfree+0xd9/0x260 [ 2533.291996] fat_fill_super+0xc84/0x4400 [ 2533.296045] ? netdev_bits+0xb0/0xb0 [ 2533.299743] ? format_decode+0x1b1/0xaf0 [ 2533.303791] ? fat_flush_inodes+0x1a0/0x1a0 [ 2533.308103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2533.313621] ? vsnprintf+0x20d/0x1b60 [ 2533.317409] ? pointer+0x990/0x990 [ 2533.320937] ? snprintf+0xae/0xe0 [ 2533.324378] ? vsprintf+0x40/0x40 [ 2533.327818] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2533.332818] ? set_blocksize+0x2c1/0x340 [ 2533.336868] vfat_fill_super+0x31/0x40 [ 2533.340742] mount_bdev+0x314/0x3e0 [ 2533.344366] ? vfat_mount+0x50/0x50 [ 2533.347991] vfat_mount+0x3c/0x50 [ 2533.351432] ? setup+0x120/0x120 [ 2533.354782] legacy_get_tree+0x118/0x440 [ 2533.358833] vfs_get_tree+0x1cb/0x5c0 [ 2533.362616] ? vfs_set_fs_source+0x12c/0x180 [ 2533.367014] do_mount+0x6c1/0x1fb0 [ 2533.370543] ? copy_mount_string+0x40/0x40 [ 2533.374774] ? retint_kernel+0x10/0x10 [ 2533.378653] ? copy_mount_options+0x213/0x380 [ 2533.383133] ? write_comp_data+0x1b/0x70 [ 2533.387182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2533.392705] ? copy_mount_options+0x285/0x380 [ 2533.397187] ksys_mount+0x12d/0x140 [ 2533.400800] __x64_sys_mount+0xbe/0x150 [ 2533.404769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2533.410293] do_syscall_64+0x1b9/0x820 [ 2533.414164] ? syscall_slow_exit_work+0x500/0x500 [ 2533.419270] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2533.424195] ? syscall_return_slowpath+0x31d/0x5e0 [ 2533.429123] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2533.434125] ? perf_trace_sys_enter+0xb10/0xb10 [ 2533.438798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2533.443629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2533.448804] RIP: 0033:0x45885a [ 2533.451972] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 8f fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 8f fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2533.471184] RSP: 002b:00007fd0b961ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2533.478878] RAX: ffffffffffffffda RBX: 00007fd0b961eb30 RCX: 000000000045885a [ 2533.486142] RDX: 00007fd0b961ead0 RSI: 0000000020000080 RDI: 00007fd0b961eaf0 [ 2533.493398] RBP: 0000000020000080 R08: 00007fd0b961eb30 R09: 00007fd0b961ead0 [ 2533.500834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000015 [ 2533.508101] R13: 0000000000000000 R14: 00000000004d3fd0 R15: 000000000000004a [ 2533.515902] Dumping ftrace buffer: [ 2533.519433] (ftrace buffer empty) [ 2533.523133] Kernel Offset: disabled [ 2533.526753] Rebooting in 86400 seconds..