00000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:41:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xff00}) [ 500.054738][T22155] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.062728][T22155] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 500.070722][T22155] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 500.131236][ T25] audit: type=1800 audit(1635046910.312:257): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15725 res=0 errno=0 03:41:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 62) [ 500.176163][ T25] audit: type=1804 audit(1635046910.312:258): pid=22161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/621/file0" dev="sda1" ino=15725 res=1 errno=0 03:41:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48880) 03:41:50 executing program 5: pkey_mprotect(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'xfrm0\x00', {0x3}}) 03:41:50 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff", @ANYRES32=r2], 0x58}}, 0x0) 03:41:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) write(r3, &(0x7f0000000080)="6eb8eb706855ffa04d5b18b685d93df77ad46e4a36413f89c46b84c6ad7ff2a2feaf6c322c9bcec0dd40e61af1e2066841d8fcd0b9c5068d3f1e04c5d6ebdc7b7f6b6722a5f296b2e6", 0x49) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x1000000}) [ 500.467026][T22183] FAULT_INJECTION: forcing a failure. [ 500.467026][T22183] name failslab, interval 1, probability 0, space 0, times 0 [ 500.479829][T22183] CPU: 0 PID: 22183 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 500.488610][T22183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.498674][T22183] Call Trace: [ 500.501965][T22183] dump_stack_lvl+0x201/0x2d8 [ 500.506664][T22183] ? show_regs_print_info+0x12/0x12 [ 500.511878][T22183] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 500.517628][T22183] should_fail+0x384/0x4b0 [ 500.522062][T22183] ? mempool_alloc_slab+0x49/0x60 [ 500.527094][T22183] should_failslab+0x5/0x20 [ 500.531608][T22183] kmem_cache_alloc+0x74/0x300 [ 500.536387][T22183] ? mempool_free+0x360/0x360 [ 500.541079][T22183] mempool_alloc_slab+0x49/0x60 [ 500.545945][T22183] mempool_alloc+0x179/0x6d0 [ 500.550556][T22183] ? submit_bio_noacct+0xa13/0xa90 [ 500.555687][T22183] ? mempool_resize+0x8f0/0x8f0 [ 500.560551][T22183] ? blk_put_request+0x20/0x20 [ 500.565316][T22183] bio_alloc_bioset+0x12e/0x8a0 [ 500.570162][T22183] submit_bh_wbc+0x1c6/0x680 [ 500.574743][T22183] ? submit_bio_noacct+0xa90/0xa90 [ 500.579852][T22183] __block_write_full_page+0x8fb/0x10a0 [ 500.585392][T22183] ? mark_buffer_write_io_error+0x340/0x340 [ 500.591279][T22183] ? blkdev_fallocate+0x3d0/0x3d0 [ 500.596295][T22183] __writepage+0x60/0x120 [ 500.600613][T22183] write_cache_pages+0xa02/0xf80 [ 500.605549][T22183] ? generic_writepages+0x160/0x160 [ 500.610737][T22183] ? tag_pages_for_writeback+0x690/0x690 [ 500.616369][T22183] ? __lock_acquire+0x1382/0x2b00 [ 500.621386][T22183] generic_writepages+0xfb/0x160 [ 500.626316][T22183] ? trace_wbc_writepage+0x270/0x270 [ 500.631590][T22183] ? rcu_read_lock_sched_held+0x89/0x130 [ 500.637210][T22183] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 500.643181][T22183] ? blkdev_readpage+0x20/0x20 [ 500.648110][T22183] do_writepages+0x49d/0x760 [ 500.652694][T22183] ? __writepage+0x120/0x120 [ 500.657273][T22183] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 500.662803][T22183] ? __lock_acquire+0x2b00/0x2b00 [ 500.667810][T22183] ? do_raw_spin_lock+0x151/0x8e0 [ 500.672826][T22183] ? do_raw_spin_unlock+0x134/0x8a0 [ 500.678011][T22183] ? I_BDEV+0x9/0x20 [ 500.681892][T22183] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 500.687872][T22183] filemap_fdatawrite_wbc+0x1d3/0x230 [ 500.693234][T22183] file_write_and_wait_range+0x1d6/0x2d0 [ 500.698856][T22183] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 500.705529][T22183] blkdev_fsync+0x6f/0xc0 [ 500.709844][T22183] blkdev_write_iter+0x442/0x530 [ 500.714793][T22183] ? blkdev_read_iter+0x180/0x180 [ 500.719801][T22183] ? iter_file_splice_write+0x23c/0xfa0 [ 500.725335][T22183] ? do_syscall_64+0x44/0xd0 [ 500.729908][T22183] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.735968][T22183] do_iter_readv_writev+0x54f/0x740 [ 500.741157][T22183] ? generic_file_rw_checks+0x260/0x260 [ 500.746693][T22183] ? iov_iter_bvec+0xf0/0x1f0 [ 500.751353][T22183] ? bpf_lsm_file_permission+0x5/0x10 [ 500.756714][T22183] ? security_file_permission+0xe0/0x5d0 [ 500.762333][T22183] ? do_iter_write+0x174/0x7b0 [ 500.767084][T22183] do_iter_write+0x21e/0x7b0 [ 500.771668][T22183] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 500.777632][T22183] ? vfs_iter_write+0x69/0xa0 [ 500.782297][T22183] iter_file_splice_write+0x7eb/0xfa0 [ 500.787689][T22183] ? splice_from_pipe+0x210/0x210 [ 500.792701][T22183] ? generic_file_splice_read+0x529/0x760 [ 500.798411][T22183] ? splice_shrink_spd+0xb0/0xb0 [ 500.803526][T22183] ? splice_from_pipe+0x210/0x210 [ 500.808539][T22183] direct_splice_actor+0xe6/0x1c0 [ 500.813565][T22183] splice_direct_to_actor+0x529/0xd00 [ 500.818935][T22183] ? do_splice_direct+0x3e0/0x3e0 [ 500.823951][T22183] ? pipe_to_sendpage+0x340/0x340 [ 500.828963][T22183] ? rcu_lock_release+0x9/0x20 [ 500.833712][T22183] ? bpf_lsm_file_permission+0x5/0x10 [ 500.839082][T22183] ? security_file_permission+0xe0/0x5d0 [ 500.844704][T22183] do_splice_direct+0x291/0x3e0 [ 500.849551][T22183] ? splice_direct_to_actor+0xd00/0xd00 [ 500.855090][T22183] ? bpf_lsm_file_permission+0x5/0x10 [ 500.860459][T22183] ? security_file_permission+0xe0/0x5d0 [ 500.866075][T22183] ? do_sendfile+0x6a9/0x1040 [ 500.870755][T22183] do_sendfile+0x6fe/0x1040 [ 500.875255][T22183] ? do_pwritev+0x370/0x370 [ 500.879750][T22183] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 500.885719][T22183] __se_sys_sendfile64+0x171/0x1d0 [ 500.890822][T22183] ? __x64_sys_sendfile64+0xa0/0xa0 [ 500.896008][T22183] ? lockdep_hardirqs_on+0x95/0x140 [ 500.901211][T22183] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 500.907178][T22183] do_syscall_64+0x44/0xd0 [ 500.911581][T22183] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.917459][T22183] RIP: 0033:0x7f4e83dcaa39 [ 500.921862][T22183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.941452][T22183] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 500.949852][T22183] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 500.957808][T22183] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 500.965765][T22183] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.973721][T22183] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 500.981678][T22183] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 501.037824][ T25] audit: type=1800 audit(1635046911.633:259): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=13954 res=0 errno=0 [ 501.060084][ T25] audit: type=1804 audit(1635046911.653:260): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/494/file0" dev="sda1" ino=13954 res=1 errno=0 [ 501.101850][T22191] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.129057][ T1361] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.137845][ T1361] ieee802154 phy1 wpan1: encryption failed: -22 03:41:51 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x2000000}) 03:41:51 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00'}) 03:41:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 63) 03:41:51 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff", @ANYRES32=r2], 0x58}}, 0x0) 03:41:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:41:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x3000000}) [ 501.421707][T22205] FAULT_INJECTION: forcing a failure. [ 501.421707][T22205] name failslab, interval 1, probability 0, space 0, times 0 [ 501.430456][T22206] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.434450][T22205] CPU: 0 PID: 22205 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 501.452482][T22205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.462670][T22205] Call Trace: [ 501.465964][T22205] dump_stack_lvl+0x201/0x2d8 [ 501.470663][T22205] ? show_regs_print_info+0x12/0x12 [ 501.475872][T22205] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 501.481614][T22205] should_fail+0x384/0x4b0 [ 501.486029][T22205] ? mempool_alloc_slab+0x49/0x60 [ 501.491048][T22205] should_failslab+0x5/0x20 [ 501.495540][T22205] kmem_cache_alloc+0x74/0x300 [ 501.500302][T22205] ? mempool_free+0x360/0x360 [ 501.504967][T22205] mempool_alloc_slab+0x49/0x60 [ 501.509805][T22205] mempool_alloc+0x179/0x6d0 [ 501.514393][T22205] ? submit_bio_noacct+0xa13/0xa90 [ 501.519496][T22205] ? mempool_resize+0x8f0/0x8f0 [ 501.524338][T22205] ? blk_put_request+0x20/0x20 [ 501.529098][T22205] bio_alloc_bioset+0x12e/0x8a0 [ 501.533956][T22205] submit_bh_wbc+0x1c6/0x680 [ 501.538534][T22205] ? submit_bio_noacct+0xa90/0xa90 [ 501.543640][T22205] __block_write_full_page+0x8fb/0x10a0 [ 501.549176][T22205] ? mark_buffer_write_io_error+0x340/0x340 [ 501.555054][T22205] ? blkdev_fallocate+0x3d0/0x3d0 [ 501.560077][T22205] __writepage+0x60/0x120 [ 501.564486][T22205] write_cache_pages+0xa02/0xf80 [ 501.569422][T22205] ? generic_writepages+0x160/0x160 [ 501.574614][T22205] ? tag_pages_for_writeback+0x690/0x690 [ 501.580245][T22205] ? __lock_acquire+0x1382/0x2b00 [ 501.585277][T22205] generic_writepages+0xfb/0x160 [ 501.590208][T22205] ? trace_wbc_writepage+0x270/0x270 [ 501.595486][T22205] ? rcu_read_lock_sched_held+0x89/0x130 [ 501.601106][T22205] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 501.607073][T22205] ? blkdev_readpage+0x20/0x20 [ 501.611828][T22205] do_writepages+0x49d/0x760 [ 501.616428][T22205] ? __writepage+0x120/0x120 [ 501.621011][T22205] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 501.626643][T22205] ? __lock_acquire+0x2b00/0x2b00 [ 501.631653][T22205] ? do_raw_spin_lock+0x151/0x8e0 [ 501.636672][T22205] ? do_raw_spin_unlock+0x134/0x8a0 [ 501.641858][T22205] ? I_BDEV+0x9/0x20 [ 501.645749][T22205] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 501.651735][T22205] filemap_fdatawrite_wbc+0x1d3/0x230 [ 501.657099][T22205] file_write_and_wait_range+0x1d6/0x2d0 [ 501.662729][T22205] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 501.669407][T22205] blkdev_fsync+0x6f/0xc0 [ 501.673734][T22205] blkdev_write_iter+0x442/0x530 [ 501.678664][T22205] ? blkdev_read_iter+0x180/0x180 [ 501.683673][T22205] ? iter_file_splice_write+0x23c/0xfa0 [ 501.689221][T22205] ? do_syscall_64+0x44/0xd0 [ 501.693797][T22205] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.699859][T22205] do_iter_readv_writev+0x54f/0x740 [ 501.705050][T22205] ? generic_file_rw_checks+0x260/0x260 [ 501.710686][T22205] ? iov_iter_bvec+0xf0/0x1f0 [ 501.715458][T22205] ? bpf_lsm_file_permission+0x5/0x10 [ 501.720816][T22205] ? security_file_permission+0xe0/0x5d0 [ 501.726525][T22205] ? do_iter_write+0x174/0x7b0 [ 501.731279][T22205] do_iter_write+0x21e/0x7b0 [ 501.735860][T22205] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 501.741825][T22205] ? vfs_iter_write+0x69/0xa0 [ 501.746491][T22205] iter_file_splice_write+0x7eb/0xfa0 [ 501.751869][T22205] ? splice_from_pipe+0x210/0x210 [ 501.756879][T22205] ? generic_file_splice_read+0x529/0x760 [ 501.762590][T22205] ? splice_shrink_spd+0xb0/0xb0 [ 501.767539][T22205] ? splice_from_pipe+0x210/0x210 [ 501.772562][T22205] direct_splice_actor+0xe6/0x1c0 [ 501.778011][T22205] splice_direct_to_actor+0x529/0xd00 [ 501.783725][T22205] ? do_splice_direct+0x3e0/0x3e0 [ 501.788742][T22205] ? pipe_to_sendpage+0x340/0x340 [ 501.793753][T22205] ? rcu_lock_release+0x9/0x20 [ 501.798517][T22205] ? bpf_lsm_file_permission+0x5/0x10 [ 501.803961][T22205] ? security_file_permission+0xe0/0x5d0 [ 501.809592][T22205] do_splice_direct+0x291/0x3e0 [ 501.814435][T22205] ? splice_direct_to_actor+0xd00/0xd00 [ 501.819974][T22205] ? bpf_lsm_file_permission+0x5/0x10 [ 501.825345][T22205] ? security_file_permission+0xe0/0x5d0 [ 501.831230][T22205] ? do_sendfile+0x6a9/0x1040 [ 501.835906][T22205] do_sendfile+0x6fe/0x1040 [ 501.840404][T22205] ? do_pwritev+0x370/0x370 [ 501.844917][T22205] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 501.850886][T22205] __se_sys_sendfile64+0x171/0x1d0 [ 501.856003][T22205] ? __x64_sys_sendfile64+0xa0/0xa0 [ 501.861189][T22205] ? lockdep_hardirqs_on+0x95/0x140 [ 501.866375][T22205] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 501.872343][T22205] do_syscall_64+0x44/0xd0 [ 501.876749][T22205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.882627][T22205] RIP: 0033:0x7f4e83dcaa39 [ 501.887033][T22205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.906624][T22205] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 501.915026][T22205] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 03:41:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x4000000}) [ 501.922984][T22205] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 501.930941][T22205] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.938897][T22205] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 501.946854][T22205] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x5000000}) 03:41:52 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/185, 0xb9}, {&(0x7f0000000140)=""/79, 0x4f}], 0x2, &(0x7f0000001180)=[@rdma_args={0x48, 0x114, 0x1, {{0x40, 0x8}, {&(0x7f0000000200)=""/76, 0x4c}, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000000580)=""/26, 0x1a}], 0x5, 0x0, 0x7ff}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x6}, {&(0x7f0000000640)=""/123, 0x7b}, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/151, 0x97}], 0x3, 0x2, 0x5}}, @rdma_dest={0x18, 0x114, 0x2, {0x1000, 0x3f}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f0000000900)=""/194, 0xc2}, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/233, 0xe9}], 0x1, 0x24, 0xeb0}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x8001}, &(0x7f0000000b40)=0x5f, &(0x7f0000000b80)=0x9, 0x27dd, 0x5, 0x81, 0x6, 0x87, 0xff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000cc0)=""/229, 0xe5}, &(0x7f0000000bc0), 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffffe}], 0x190, 0x20000000}, 0x40) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {}, 0x4000}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000dc0)={0x234, 0x2, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0xa8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x200}]}, 0x234}, 0x1, 0x0, 0x0, 0xc0}, 0x8080) 03:41:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x10000050, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000}, 0x0) dup2(r1, r0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:52 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000", @ANYRES32=r2], 0x58}}, 0x0) 03:41:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:41:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 64) 03:41:52 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x6000000}) 03:41:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/147, 0x93}, {&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000640)=""/203, 0xcb}, {&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000a00)=""/148, 0x94}], 0xa, &(0x7f0000000b80)=""/172, 0xac}, 0x8}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/167, 0xa7}, {&(0x7f0000002d00)=""/158, 0x9e}], 0x4, &(0x7f0000002dc0)=""/100, 0x64}, 0x5}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002e40)=""/4096, 0x1000}], 0x1, &(0x7f0000003e40)=""/217, 0xd9}, 0x9}], 0x3, 0x40000000, &(0x7f0000004000)={0x0, 0x989680}) [ 502.341509][T22223] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.350642][T22229] FAULT_INJECTION: forcing a failure. [ 502.350642][T22229] name failslab, interval 1, probability 0, space 0, times 0 [ 502.364032][T22229] CPU: 0 PID: 22229 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 502.372820][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.382891][T22229] Call Trace: [ 502.386184][T22229] dump_stack_lvl+0x201/0x2d8 [ 502.390886][T22229] ? show_regs_print_info+0x12/0x12 [ 502.396103][T22229] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 502.401857][T22229] should_fail+0x384/0x4b0 [ 502.406303][T22229] ? mempool_alloc_slab+0x49/0x60 [ 502.411350][T22229] should_failslab+0x5/0x20 [ 502.415878][T22229] kmem_cache_alloc+0x74/0x300 [ 502.420663][T22229] ? mempool_free+0x360/0x360 [ 502.425353][T22229] mempool_alloc_slab+0x49/0x60 [ 502.430218][T22229] mempool_alloc+0x179/0x6d0 [ 502.434827][T22229] ? submit_bio_noacct+0xa13/0xa90 03:41:53 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000", @ANYRES32=r2], 0x58}}, 0x0) [ 502.439953][T22229] ? mempool_resize+0x8f0/0x8f0 [ 502.446299][T22229] ? blk_put_request+0x20/0x20 [ 502.451618][T22229] bio_alloc_bioset+0x12e/0x8a0 [ 502.456506][T22229] submit_bh_wbc+0x1c6/0x680 [ 502.461113][T22229] ? submit_bio_noacct+0xa90/0xa90 [ 502.466254][T22229] __block_write_full_page+0x8fb/0x10a0 [ 502.471831][T22229] ? mark_buffer_write_io_error+0x340/0x340 [ 502.477748][T22229] ? blkdev_fallocate+0x3d0/0x3d0 [ 502.482789][T22229] __writepage+0x60/0x120 [ 502.487142][T22229] write_cache_pages+0xa02/0xf80 [ 502.492116][T22229] ? generic_writepages+0x160/0x160 [ 502.497339][T22229] ? tag_pages_for_writeback+0x690/0x690 [ 502.503012][T22229] ? __lock_acquire+0x1382/0x2b00 [ 502.508059][T22229] generic_writepages+0xfb/0x160 [ 502.513016][T22229] ? trace_wbc_writepage+0x270/0x270 [ 502.518336][T22229] ? rcu_read_lock_sched_held+0x89/0x130 [ 502.523983][T22229] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 502.529973][T22229] ? blkdev_readpage+0x20/0x20 [ 502.534759][T22229] do_writepages+0x49d/0x760 03:41:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x7000000}) [ 502.539374][T22229] ? __writepage+0x120/0x120 [ 502.543988][T22229] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 502.549542][T22229] ? __lock_acquire+0x2b00/0x2b00 [ 502.554593][T22229] ? do_raw_spin_lock+0x151/0x8e0 [ 502.559644][T22229] ? do_raw_spin_unlock+0x134/0x8a0 [ 502.564857][T22229] ? I_BDEV+0x9/0x20 [ 502.568767][T22229] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 502.574768][T22229] filemap_fdatawrite_wbc+0x1d3/0x230 [ 502.580156][T22229] file_write_and_wait_range+0x1d6/0x2d0 [ 502.585805][T22229] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 502.592514][T22229] blkdev_fsync+0x6f/0xc0 [ 502.596947][T22229] blkdev_write_iter+0x442/0x530 [ 502.601909][T22229] ? blkdev_read_iter+0x180/0x180 [ 502.606942][T22229] ? iter_file_splice_write+0x23c/0xfa0 [ 502.612504][T22229] ? do_syscall_64+0x44/0xd0 [ 502.617416][T22229] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.623508][T22229] do_iter_readv_writev+0x54f/0x740 [ 502.628728][T22229] ? generic_file_rw_checks+0x260/0x260 [ 502.634299][T22229] ? iov_iter_bvec+0xf0/0x1f0 [ 502.638997][T22229] ? bpf_lsm_file_permission+0x5/0x10 [ 502.644380][T22229] ? security_file_permission+0xe0/0x5d0 [ 502.650021][T22229] ? do_iter_write+0x174/0x7b0 [ 502.654800][T22229] do_iter_write+0x21e/0x7b0 [ 502.659408][T22229] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 502.665402][T22229] ? vfs_iter_write+0x69/0xa0 [ 502.670098][T22229] iter_file_splice_write+0x7eb/0xfa0 [ 502.675512][T22229] ? splice_from_pipe+0x210/0x210 [ 502.680547][T22229] ? generic_file_splice_read+0x529/0x760 [ 502.686291][T22229] ? splice_shrink_spd+0xb0/0xb0 [ 502.691255][T22229] ? splice_from_pipe+0x210/0x210 [ 502.696303][T22229] direct_splice_actor+0xe6/0x1c0 [ 502.701348][T22229] splice_direct_to_actor+0x529/0xd00 [ 502.706750][T22229] ? do_splice_direct+0x3e0/0x3e0 [ 502.711789][T22229] ? pipe_to_sendpage+0x340/0x340 [ 502.716827][T22229] ? rcu_lock_release+0x9/0x20 [ 502.721604][T22229] ? bpf_lsm_file_permission+0x5/0x10 [ 502.726987][T22229] ? security_file_permission+0xe0/0x5d0 [ 502.732632][T22229] do_splice_direct+0x291/0x3e0 [ 502.737501][T22229] ? splice_direct_to_actor+0xd00/0xd00 [ 502.743069][T22229] ? bpf_lsm_file_permission+0x5/0x10 [ 502.748451][T22229] ? security_file_permission+0xe0/0x5d0 [ 502.754092][T22229] ? do_sendfile+0x6a9/0x1040 [ 502.758782][T22229] do_sendfile+0x6fe/0x1040 [ 502.763311][T22229] ? do_pwritev+0x370/0x370 [ 502.767828][T22229] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 502.773827][T22229] __se_sys_sendfile64+0x171/0x1d0 [ 502.778952][T22229] ? __x64_sys_sendfile64+0xa0/0xa0 [ 502.784165][T22229] ? lockdep_hardirqs_on+0x95/0x140 [ 502.789377][T22229] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 502.795379][T22229] do_syscall_64+0x44/0xd0 [ 502.799821][T22229] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.805730][T22229] RIP: 0033:0x7f4e83dcaa39 [ 502.810154][T22229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.829775][T22229] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 502.838207][T22229] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 502.846200][T22229] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 502.854182][T22229] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.862164][T22229] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 502.870145][T22229] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 502.898043][T22227] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 03:41:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:41:53 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x8000000}) 03:41:53 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000", @ANYRES32=r2], 0x58}}, 0x0) 03:41:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 65) [ 503.121448][T22247] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 03:41:53 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000180)={0x4, 0x9, 0x5, 0x800, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f00000001c0)=0xff, 0x7fff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) sendfile(r2, r0, &(0x7f0000000240)=0x8, 0x4) r3 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r3], 0x1}, 0x58) r4 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xde, 0x9, 0x20, 0x6, 0x0, 0xfff, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0x80, 0x5, 0x9, 0x9, 0x8, 0x1ff, 0x8, 0x0, 0xfffffeaa}, r3, 0xf, 0xffffffffffffffff, 0x2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x325) r5 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r5], 0x1}, 0x58) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x7, 0xff, 0x0, 0xb9c, 0x20, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0xffffffff7fffffff, 0xffffffff}, 0x1200, 0x2, 0x3, 0x4, 0x3, 0x3, 0x67, 0x0, 0x4, 0x0, 0x2}, r5, 0x9, r4, 0x0) [ 503.270697][T22253] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.305233][T22258] FAULT_INJECTION: forcing a failure. [ 503.305233][T22258] name failslab, interval 1, probability 0, space 0, times 0 [ 503.318133][T22258] CPU: 0 PID: 22258 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 503.326980][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.337044][T22258] Call Trace: [ 503.340333][T22258] dump_stack_lvl+0x201/0x2d8 [ 503.345033][T22258] ? show_regs_print_info+0x12/0x12 [ 503.350249][T22258] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 503.356003][T22258] should_fail+0x384/0x4b0 [ 503.360441][T22258] ? mempool_alloc_slab+0x49/0x60 [ 503.365480][T22258] should_failslab+0x5/0x20 [ 503.369991][T22258] kmem_cache_alloc+0x74/0x300 [ 503.374757][T22258] ? mempool_free+0x360/0x360 [ 503.379424][T22258] mempool_alloc_slab+0x49/0x60 [ 503.384267][T22258] mempool_alloc+0x179/0x6d0 [ 503.388854][T22258] ? submit_bio_noacct+0xa13/0xa90 [ 503.393958][T22258] ? mempool_resize+0x8f0/0x8f0 [ 503.398900][T22258] ? blk_put_request+0x20/0x20 [ 503.403658][T22258] bio_alloc_bioset+0x12e/0x8a0 [ 503.408507][T22258] submit_bh_wbc+0x1c6/0x680 [ 503.413087][T22258] ? submit_bio_noacct+0xa90/0xa90 [ 503.418195][T22258] __block_write_full_page+0x8fb/0x10a0 [ 503.423735][T22258] ? mark_buffer_write_io_error+0x340/0x340 [ 503.429617][T22258] ? blkdev_fallocate+0x3d0/0x3d0 [ 503.434630][T22258] __writepage+0x60/0x120 [ 503.438976][T22258] write_cache_pages+0xa02/0xf80 [ 503.443933][T22258] ? generic_writepages+0x160/0x160 [ 503.449152][T22258] ? tag_pages_for_writeback+0x690/0x690 [ 503.454799][T22258] ? __lock_acquire+0x1382/0x2b00 [ 503.459915][T22258] generic_writepages+0xfb/0x160 [ 503.464850][T22258] ? trace_wbc_writepage+0x270/0x270 [ 503.470131][T22258] ? rcu_read_lock_sched_held+0x89/0x130 [ 503.475769][T22258] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 503.481756][T22258] ? blkdev_readpage+0x20/0x20 [ 503.486514][T22258] do_writepages+0x49d/0x760 [ 503.491102][T22258] ? __writepage+0x120/0x120 [ 503.495684][T22258] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 503.501228][T22258] ? __lock_acquire+0x2b00/0x2b00 [ 503.506249][T22258] ? do_raw_spin_lock+0x151/0x8e0 [ 503.511268][T22258] ? do_raw_spin_unlock+0x134/0x8a0 [ 503.516465][T22258] ? I_BDEV+0x9/0x20 [ 503.520349][T22258] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 503.526317][T22258] filemap_fdatawrite_wbc+0x1d3/0x230 [ 503.531679][T22258] file_write_and_wait_range+0x1d6/0x2d0 [ 503.537301][T22258] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 503.543987][T22258] blkdev_fsync+0x6f/0xc0 [ 503.548313][T22258] blkdev_write_iter+0x442/0x530 [ 503.553264][T22258] ? blkdev_read_iter+0x180/0x180 [ 503.558284][T22258] ? iter_file_splice_write+0x23c/0xfa0 [ 503.563818][T22258] ? do_syscall_64+0x44/0xd0 [ 503.568421][T22258] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.575612][T22258] do_iter_readv_writev+0x54f/0x740 [ 503.580823][T22258] ? generic_file_rw_checks+0x260/0x260 [ 503.586358][T22258] ? iov_iter_bvec+0xf0/0x1f0 [ 503.591022][T22258] ? bpf_lsm_file_permission+0x5/0x10 [ 503.596379][T22258] ? security_file_permission+0xe0/0x5d0 [ 503.601997][T22258] ? do_iter_write+0x174/0x7b0 [ 503.606767][T22258] do_iter_write+0x21e/0x7b0 [ 503.611348][T22258] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 503.617313][T22258] ? vfs_iter_write+0x69/0xa0 [ 503.621981][T22258] iter_file_splice_write+0x7eb/0xfa0 [ 503.627356][T22258] ? splice_from_pipe+0x210/0x210 [ 503.632367][T22258] ? generic_file_splice_read+0x529/0x760 [ 503.638079][T22258] ? splice_shrink_spd+0xb0/0xb0 [ 503.643026][T22258] ? splice_from_pipe+0x210/0x210 [ 503.648038][T22258] direct_splice_actor+0xe6/0x1c0 [ 503.653074][T22258] splice_direct_to_actor+0x529/0xd00 [ 503.658444][T22258] ? do_splice_direct+0x3e0/0x3e0 [ 503.663460][T22258] ? pipe_to_sendpage+0x340/0x340 [ 503.668541][T22258] ? rcu_lock_release+0x9/0x20 [ 503.673295][T22258] ? bpf_lsm_file_permission+0x5/0x10 [ 503.678653][T22258] ? security_file_permission+0xe0/0x5d0 [ 503.684288][T22258] do_splice_direct+0x291/0x3e0 [ 503.689133][T22258] ? splice_direct_to_actor+0xd00/0xd00 [ 503.694675][T22258] ? bpf_lsm_file_permission+0x5/0x10 [ 503.700034][T22258] ? security_file_permission+0xe0/0x5d0 [ 503.705664][T22258] ? do_sendfile+0x6a9/0x1040 [ 503.710328][T22258] do_sendfile+0x6fe/0x1040 [ 503.714829][T22258] ? do_pwritev+0x370/0x370 [ 503.719325][T22258] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 503.725294][T22258] __se_sys_sendfile64+0x171/0x1d0 [ 503.730398][T22258] ? __x64_sys_sendfile64+0xa0/0xa0 [ 503.735587][T22258] ? lockdep_hardirqs_on+0x95/0x140 [ 503.740776][T22258] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 503.746744][T22258] do_syscall_64+0x44/0xd0 [ 503.751150][T22258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.757029][T22258] RIP: 0033:0x7f4e83dcaa39 [ 503.761438][T22258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.781029][T22258] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 503.789431][T22258] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 503.797396][T22258] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 503.805352][T22258] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.813308][T22258] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 03:41:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) getrlimit(0xe, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x9000000}) [ 503.821263][T22258] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:54 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32=r2], 0x58}}, 0x0) [ 503.990525][T22262] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 66) 03:41:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 03:41:54 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xa000000}) 03:41:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r1, 0x0, 0x20000102000003) [ 504.164796][T22276] FAULT_INJECTION: forcing a failure. [ 504.164796][T22276] name failslab, interval 1, probability 0, space 0, times 0 [ 504.178781][T22276] CPU: 0 PID: 22276 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 504.187561][T22276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.197722][T22276] Call Trace: [ 504.201016][T22276] dump_stack_lvl+0x201/0x2d8 [ 504.205723][T22276] ? show_regs_print_info+0x12/0x12 [ 504.210941][T22276] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 504.216698][T22276] should_fail+0x384/0x4b0 [ 504.221135][T22276] ? mempool_alloc_slab+0x49/0x60 [ 504.226168][T22276] should_failslab+0x5/0x20 [ 504.230693][T22276] kmem_cache_alloc+0x74/0x300 [ 504.235480][T22276] ? mempool_free+0x360/0x360 [ 504.240177][T22276] mempool_alloc_slab+0x49/0x60 [ 504.245041][T22276] mempool_alloc+0x179/0x6d0 [ 504.249649][T22276] ? __lock_acquire+0x2b00/0x2b00 [ 504.254695][T22276] ? mempool_resize+0x8f0/0x8f0 [ 504.259552][T22276] ? unlock_page_memcg+0x181/0x1c0 [ 504.264693][T22276] ? __test_set_page_writeback+0xc72/0xe80 [ 504.270525][T22276] bio_alloc_bioset+0x12e/0x8a0 [ 504.275399][T22276] ? __might_sleep+0x110/0x110 [ 504.280178][T22276] submit_bh_wbc+0x1c6/0x680 [ 504.284797][T22276] __block_write_full_page+0x8fb/0x10a0 [ 504.290367][T22276] ? mark_buffer_write_io_error+0x340/0x340 [ 504.296277][T22276] ? blkdev_fallocate+0x3d0/0x3d0 [ 504.301330][T22276] __writepage+0x60/0x120 [ 504.305681][T22276] write_cache_pages+0xa02/0xf80 [ 504.310647][T22276] ? generic_writepages+0x160/0x160 [ 504.315871][T22276] ? tag_pages_for_writeback+0x690/0x690 [ 504.320567][T22283] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.321552][T22276] ? __lock_acquire+0x1382/0x2b00 [ 504.321587][T22276] generic_writepages+0xfb/0x160 [ 504.321617][T22276] ? trace_wbc_writepage+0x270/0x270 [ 504.321642][T22276] ? rcu_read_lock_sched_held+0x89/0x130 [ 504.351818][T22276] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 504.357822][T22276] ? blkdev_readpage+0x20/0x20 [ 504.362606][T22276] do_writepages+0x49d/0x760 [ 504.367223][T22276] ? __writepage+0x120/0x120 [ 504.371835][T22276] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 504.377402][T22276] ? __lock_acquire+0x2b00/0x2b00 [ 504.382442][T22276] ? do_raw_spin_lock+0x151/0x8e0 [ 504.387484][T22276] ? do_raw_spin_unlock+0x134/0x8a0 [ 504.392696][T22276] ? I_BDEV+0x9/0x20 [ 504.396601][T22276] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 504.402604][T22276] filemap_fdatawrite_wbc+0x1d3/0x230 [ 504.407992][T22276] file_write_and_wait_range+0x1d6/0x2d0 [ 504.413673][T22276] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 504.420384][T22276] blkdev_fsync+0x6f/0xc0 [ 504.424726][T22276] blkdev_write_iter+0x442/0x530 [ 504.429687][T22276] ? blkdev_read_iter+0x180/0x180 [ 504.434719][T22276] ? iter_file_splice_write+0x23c/0xfa0 [ 504.440284][T22276] ? do_syscall_64+0x44/0xd0 [ 504.444879][T22276] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.451063][T22276] do_iter_readv_writev+0x54f/0x740 [ 504.456284][T22276] ? generic_file_rw_checks+0x260/0x260 03:41:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xb000000}) [ 504.461849][T22276] ? iov_iter_bvec+0xf0/0x1f0 [ 504.466660][T22276] ? bpf_lsm_file_permission+0x5/0x10 [ 504.472042][T22276] ? security_file_permission+0xe0/0x5d0 [ 504.477688][T22276] ? do_iter_write+0x174/0x7b0 [ 504.482475][T22276] do_iter_write+0x21e/0x7b0 [ 504.487085][T22276] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 504.493074][T22276] ? vfs_iter_write+0x69/0xa0 [ 504.497772][T22276] iter_file_splice_write+0x7eb/0xfa0 [ 504.503182][T22276] ? splice_from_pipe+0x210/0x210 [ 504.508214][T22276] ? generic_file_splice_read+0x529/0x760 [ 504.513972][T22276] ? splice_shrink_spd+0xb0/0xb0 [ 504.518936][T22276] ? splice_from_pipe+0x210/0x210 [ 504.523978][T22276] direct_splice_actor+0xe6/0x1c0 [ 504.529022][T22276] splice_direct_to_actor+0x529/0xd00 [ 504.534417][T22276] ? do_splice_direct+0x3e0/0x3e0 [ 504.539459][T22276] ? pipe_to_sendpage+0x340/0x340 [ 504.544498][T22276] ? rcu_lock_release+0x9/0x20 [ 504.548315][T22271] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.549270][T22276] ? bpf_lsm_file_permission+0x5/0x10 03:41:55 executing program 3: r0 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x1}, 0x58) prlimit64(r0, 0x0, &(0x7f0000000000)={0xffffffff, 0x5}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) [ 504.549296][T22276] ? security_file_permission+0xe0/0x5d0 [ 504.549321][T22276] do_splice_direct+0x291/0x3e0 [ 504.549350][T22276] ? splice_direct_to_actor+0xd00/0xd00 [ 504.549383][T22276] ? bpf_lsm_file_permission+0x5/0x10 [ 504.549401][T22276] ? security_file_permission+0xe0/0x5d0 [ 504.549418][T22276] ? do_sendfile+0x6a9/0x1040 [ 504.549440][T22276] do_sendfile+0x6fe/0x1040 [ 504.549475][T22276] ? do_pwritev+0x370/0x370 [ 504.549501][T22276] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 504.549526][T22276] __se_sys_sendfile64+0x171/0x1d0 [ 504.549552][T22276] ? __x64_sys_sendfile64+0xa0/0xa0 [ 504.620990][T22276] ? lockdep_hardirqs_on+0x95/0x140 [ 504.626212][T22276] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 504.632215][T22276] do_syscall_64+0x44/0xd0 [ 504.636652][T22276] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.642556][T22276] RIP: 0033:0x7f4e83dcaa39 [ 504.646982][T22276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 03:41:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 504.666597][T22276] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 504.675037][T22276] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 504.683024][T22276] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 504.691015][T22276] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.699006][T22276] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 504.706991][T22276] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:55 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32=r2], 0x58}}, 0x0) 03:41:55 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @remote, @null}, &(0x7f0000000180)=0x1c, 0x80800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x80, 0x80, 0x80, 0x2}]}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r2 = syz_mount_image$gfs2(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x5, 0x1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xfb, 0x5af}], 0x80, &(0x7f0000000400)={[{@meta}, {@noquota}], [{@obj_type}, {@subj_user={'subj_user', 0x3d, '!'}}, {@seclabel}]}) sendfile(r0, r2, 0x0, 0x1) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 03:41:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xc000000}) [ 504.883203][T22291] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 03:41:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 67) [ 505.038894][ T25] audit: type=1800 audit(1635046915.634:261): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14355 res=0 errno=0 [ 505.106854][T22307] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.130005][ T25] audit: type=1804 audit(1635046915.654:262): pid=22305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/627/file0" dev="sda1" ino=14355 res=1 errno=0 [ 505.161878][T22314] FAULT_INJECTION: forcing a failure. [ 505.161878][T22314] name failslab, interval 1, probability 0, space 0, times 0 [ 505.174690][T22314] CPU: 0 PID: 22314 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 505.183500][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.193566][T22314] Call Trace: [ 505.196856][T22314] dump_stack_lvl+0x201/0x2d8 [ 505.201556][T22314] ? show_regs_print_info+0x12/0x12 [ 505.206768][T22314] ? log_buf_vmcoreinfo_setup+0x498/0x498 03:41:55 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xd000000}) [ 505.212522][T22314] should_fail+0x384/0x4b0 [ 505.216980][T22314] ? mempool_alloc_slab+0x49/0x60 [ 505.222012][T22314] should_failslab+0x5/0x20 [ 505.226516][T22314] kmem_cache_alloc+0x74/0x300 [ 505.231298][T22314] ? mempool_free+0x360/0x360 [ 505.235992][T22314] mempool_alloc_slab+0x49/0x60 [ 505.242338][T22314] mempool_alloc+0x179/0x6d0 [ 505.246955][T22314] ? submit_bio_noacct+0xa13/0xa90 [ 505.252088][T22314] ? mempool_resize+0x8f0/0x8f0 [ 505.256960][T22314] ? blk_put_request+0x20/0x20 [ 505.261747][T22314] bio_alloc_bioset+0x12e/0x8a0 [ 505.266615][T22314] submit_bh_wbc+0x1c6/0x680 [ 505.271219][T22314] ? submit_bio_noacct+0xa90/0xa90 [ 505.276357][T22314] __block_write_full_page+0x8fb/0x10a0 [ 505.281925][T22314] ? mark_buffer_write_io_error+0x340/0x340 [ 505.287832][T22314] ? blkdev_fallocate+0x3d0/0x3d0 [ 505.292866][T22314] __writepage+0x60/0x120 [ 505.297210][T22314] write_cache_pages+0xa02/0xf80 [ 505.302182][T22314] ? generic_writepages+0x160/0x160 [ 505.307395][T22314] ? tag_pages_for_writeback+0x690/0x690 [ 505.313053][T22314] ? __lock_acquire+0x1382/0x2b00 [ 505.318099][T22314] generic_writepages+0xfb/0x160 [ 505.323052][T22314] ? trace_wbc_writepage+0x270/0x270 [ 505.328354][T22314] ? rcu_read_lock_sched_held+0x89/0x130 [ 505.334002][T22314] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 505.339998][T22314] ? blkdev_readpage+0x20/0x20 [ 505.344781][T22314] do_writepages+0x49d/0x760 [ 505.349393][T22314] ? __writepage+0x120/0x120 [ 505.354009][T22314] ? filemap_fdatawrite_wbc+0x1c8/0x230 03:41:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xe000000}) [ 505.359581][T22314] ? __lock_acquire+0x2b00/0x2b00 [ 505.364627][T22314] ? do_raw_spin_lock+0x151/0x8e0 [ 505.369676][T22314] ? do_raw_spin_unlock+0x134/0x8a0 [ 505.374893][T22314] ? I_BDEV+0x9/0x20 [ 505.378797][T22314] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 505.384796][T22314] filemap_fdatawrite_wbc+0x1d3/0x230 [ 505.390187][T22314] file_write_and_wait_range+0x1d6/0x2d0 [ 505.395838][T22314] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 505.402544][T22314] blkdev_fsync+0x6f/0xc0 [ 505.406889][T22314] blkdev_write_iter+0x442/0x530 03:41:56 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff00070000000800", @ANYRES32=r2], 0x58}}, 0x0) [ 505.411849][T22314] ? blkdev_read_iter+0x180/0x180 [ 505.416879][T22314] ? iter_file_splice_write+0x23c/0xfa0 [ 505.422447][T22314] ? do_syscall_64+0x44/0xd0 [ 505.427050][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.433919][T22314] do_iter_readv_writev+0x54f/0x740 [ 505.439140][T22314] ? generic_file_rw_checks+0x260/0x260 [ 505.444706][T22314] ? iov_iter_bvec+0xf0/0x1f0 [ 505.449394][T22314] ? bpf_lsm_file_permission+0x5/0x10 [ 505.454790][T22314] ? security_file_permission+0xe0/0x5d0 [ 505.460443][T22314] ? do_iter_write+0x174/0x7b0 [ 505.465221][T22314] do_iter_write+0x21e/0x7b0 [ 505.469830][T22314] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 505.475822][T22314] ? vfs_iter_write+0x69/0xa0 [ 505.480514][T22314] iter_file_splice_write+0x7eb/0xfa0 [ 505.485918][T22314] ? splice_from_pipe+0x210/0x210 [ 505.490950][T22314] ? generic_file_splice_read+0x529/0x760 [ 505.496694][T22314] ? splice_shrink_spd+0xb0/0xb0 [ 505.501656][T22314] ? splice_from_pipe+0x210/0x210 [ 505.506694][T22314] direct_splice_actor+0xe6/0x1c0 [ 505.511734][T22314] splice_direct_to_actor+0x529/0xd00 [ 505.517130][T22314] ? do_splice_direct+0x3e0/0x3e0 [ 505.522171][T22314] ? pipe_to_sendpage+0x340/0x340 [ 505.527208][T22314] ? rcu_lock_release+0x9/0x20 [ 505.531981][T22314] ? bpf_lsm_file_permission+0x5/0x10 [ 505.537360][T22314] ? security_file_permission+0xe0/0x5d0 [ 505.542999][T22314] do_splice_direct+0x291/0x3e0 [ 505.547874][T22314] ? splice_direct_to_actor+0xd00/0xd00 [ 505.553451][T22314] ? bpf_lsm_file_permission+0x5/0x10 [ 505.558829][T22314] ? security_file_permission+0xe0/0x5d0 03:41:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 505.564466][T22314] ? do_sendfile+0x6a9/0x1040 [ 505.569153][T22314] do_sendfile+0x6fe/0x1040 [ 505.573685][T22314] ? do_pwritev+0x370/0x370 [ 505.578202][T22314] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 505.584199][T22314] __se_sys_sendfile64+0x171/0x1d0 [ 505.589332][T22314] ? __x64_sys_sendfile64+0xa0/0xa0 [ 505.594549][T22314] ? lockdep_hardirqs_on+0x95/0x140 [ 505.599764][T22314] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 505.605761][T22314] do_syscall_64+0x44/0xd0 03:41:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x10000000}) [ 505.610195][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.616096][T22314] RIP: 0033:0x7f4e83dcaa39 [ 505.620544][T22314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.640163][T22314] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 505.648597][T22314] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 505.656611][T22314] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 505.664587][T22314] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.672575][T22314] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 505.680561][T22314] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x803}, 0x40015) lseek(0xffffffffffffffff, 0xf33b, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {0x2}}) 03:41:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x48880) 03:41:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x52, 0x0, 0x4, 0x9, 0x101, 0x5, 0x9, 0xfffffffc}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x4, 0x5, 0x7, 0x9, 0x81, 0x3, 0xaf8, 0xf45}, 0x0) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 68) 03:41:56 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000080003", @ANYRES32=r2], 0x58}}, 0x0) 03:41:56 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x11000000}) [ 505.993958][T22336] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 506.028907][T22340] FAULT_INJECTION: forcing a failure. [ 506.028907][T22340] name failslab, interval 1, probability 0, space 0, times 0 03:41:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000640)="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", 0x1000, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x20}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000500)={0xa, 0x4e25, 0x1000000080000, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000"/32, @ANYRES32=0x0, @ANYBLOB="000000f8b70be70305f5f3c845e71f3cb2518a22c0ed366d2bfd9e271f8c261e1b58a3a22739cbaab0863d81be52767438980bce97608b0dc3075574dd037eaab922182dab74b0ae920b8b5d1c5a73a01333e7d97dcd7ccba81fa6924a3ca48b1ebe6ab826a7dec87db9505828d461f4084262b97139b0ebb9691a94973564415d01d470bcc05da4cb63a3b86593a9733dcd9a803ebbeb4383c1666becc32755e884aef27d88eb047d5d9f9ea34166721e264d409addcdc7777f621844107aa27bd6845b329b2a07f560ec"], 0x28}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'erspan0\x00', {}, 0x5}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) [ 506.041614][T22340] CPU: 0 PID: 22340 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 506.050392][T22340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.060461][T22340] Call Trace: [ 506.063761][T22340] dump_stack_lvl+0x201/0x2d8 [ 506.068456][T22340] ? show_regs_print_info+0x12/0x12 [ 506.073670][T22340] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 506.079422][T22340] should_fail+0x384/0x4b0 [ 506.083861][T22340] ? mempool_alloc_slab+0x49/0x60 [ 506.088895][T22340] should_failslab+0x5/0x20 [ 506.093416][T22340] kmem_cache_alloc+0x74/0x300 [ 506.098206][T22340] ? mempool_free+0x360/0x360 [ 506.102907][T22340] mempool_alloc_slab+0x49/0x60 [ 506.107768][T22340] mempool_alloc+0x179/0x6d0 [ 506.112382][T22340] ? submit_bio_noacct+0xa13/0xa90 [ 506.117508][T22340] ? mempool_resize+0x8f0/0x8f0 [ 506.122386][T22340] ? blk_put_request+0x20/0x20 [ 506.127170][T22340] bio_alloc_bioset+0x12e/0x8a0 [ 506.132039][T22340] submit_bh_wbc+0x1c6/0x680 [ 506.136641][T22340] ? submit_bio_noacct+0xa90/0xa90 03:41:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0xffffffff, 0x482) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1cd0c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x21) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x2a8b00, 0x100) write(r5, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r5, r6, 0x0, 0xef85) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4e6501, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x4020000102000003) prlimit64(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x9, 0xec}, &(0x7f0000000100)) [ 506.141779][T22340] __block_write_full_page+0x8fb/0x10a0 [ 506.147351][T22340] ? mark_buffer_write_io_error+0x340/0x340 [ 506.153268][T22340] ? blkdev_fallocate+0x3d0/0x3d0 [ 506.158306][T22340] __writepage+0x60/0x120 [ 506.162659][T22340] write_cache_pages+0xa02/0xf80 [ 506.167630][T22340] ? generic_writepages+0x160/0x160 [ 506.172851][T22340] ? tag_pages_for_writeback+0x690/0x690 [ 506.178516][T22340] ? __lock_acquire+0x1382/0x2b00 [ 506.183562][T22340] generic_writepages+0xfb/0x160 [ 506.188515][T22340] ? trace_wbc_writepage+0x270/0x270 [ 506.193929][T22340] ? rcu_read_lock_sched_held+0x89/0x130 [ 506.199578][T22340] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 506.205574][T22340] ? blkdev_readpage+0x20/0x20 [ 506.210358][T22340] do_writepages+0x49d/0x760 [ 506.214973][T22340] ? __writepage+0x120/0x120 [ 506.219585][T22340] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 506.225142][T22340] ? __lock_acquire+0x2b00/0x2b00 [ 506.230180][T22340] ? do_raw_spin_lock+0x151/0x8e0 [ 506.235228][T22340] ? do_raw_spin_unlock+0x134/0x8a0 [ 506.240437][T22340] ? I_BDEV+0x9/0x20 [ 506.244342][T22340] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 506.250343][T22340] filemap_fdatawrite_wbc+0x1d3/0x230 [ 506.255724][T22340] file_write_and_wait_range+0x1d6/0x2d0 [ 506.261365][T22340] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 506.268077][T22340] blkdev_fsync+0x6f/0xc0 [ 506.272421][T22340] blkdev_write_iter+0x442/0x530 [ 506.276890][T22351] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.277373][T22340] ? blkdev_read_iter+0x180/0x180 [ 506.277396][T22340] ? iter_file_splice_write+0x23c/0xfa0 [ 506.277423][T22340] ? do_syscall_64+0x44/0xd0 [ 506.277441][T22340] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.277472][T22340] do_iter_readv_writev+0x54f/0x740 [ 506.277499][T22340] ? generic_file_rw_checks+0x260/0x260 [ 506.309351][ T25] audit: type=1800 audit(1635046916.904:263): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=14433 res=0 errno=0 [ 506.313072][T22340] ? iov_iter_bvec+0xf0/0x1f0 [ 506.313101][T22340] ? bpf_lsm_file_permission+0x5/0x10 [ 506.313121][T22340] ? security_file_permission+0xe0/0x5d0 [ 506.354331][T22340] ? do_iter_write+0x174/0x7b0 [ 506.359123][T22340] do_iter_write+0x21e/0x7b0 [ 506.363738][T22340] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 506.369733][T22340] ? vfs_iter_write+0x69/0xa0 [ 506.374429][T22340] iter_file_splice_write+0x7eb/0xfa0 [ 506.379837][T22340] ? splice_from_pipe+0x210/0x210 [ 506.379860][ T25] audit: type=1800 audit(1635046916.944:264): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=13988 res=0 errno=0 [ 506.384868][T22340] ? generic_file_splice_read+0x529/0x760 [ 506.384900][T22340] ? splice_shrink_spd+0xb0/0xb0 [ 506.384940][T22340] ? splice_from_pipe+0x210/0x210 [ 506.384964][T22340] direct_splice_actor+0xe6/0x1c0 [ 506.384989][T22340] splice_direct_to_actor+0x529/0xd00 [ 506.431227][T22340] ? do_splice_direct+0x3e0/0x3e0 [ 506.436277][T22340] ? pipe_to_sendpage+0x340/0x340 [ 506.441317][T22340] ? rcu_lock_release+0x9/0x20 [ 506.446093][T22340] ? bpf_lsm_file_permission+0x5/0x10 [ 506.451477][T22340] ? security_file_permission+0xe0/0x5d0 [ 506.457131][T22340] do_splice_direct+0x291/0x3e0 [ 506.461992][T22340] ? splice_direct_to_actor+0xd00/0xd00 [ 506.467564][T22340] ? bpf_lsm_file_permission+0x5/0x10 [ 506.472942][T22340] ? security_file_permission+0xe0/0x5d0 [ 506.478580][T22340] ? do_sendfile+0x6a9/0x1040 [ 506.483274][T22340] do_sendfile+0x6fe/0x1040 [ 506.487808][T22340] ? do_pwritev+0x370/0x370 [ 506.492330][T22340] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 506.498322][T22340] __se_sys_sendfile64+0x171/0x1d0 [ 506.503455][T22340] ? __x64_sys_sendfile64+0xa0/0xa0 [ 506.508679][T22340] ? lockdep_hardirqs_on+0x95/0x140 [ 506.513893][T22340] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 506.519891][T22340] do_syscall_64+0x44/0xd0 [ 506.524325][T22340] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.530227][T22340] RIP: 0033:0x7f4e83dcaa39 [ 506.534651][T22340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.554267][T22340] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 506.562707][T22340] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 506.570693][T22340] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 506.578677][T22340] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.586663][T22340] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 03:41:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000080003", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000e8aba7a1aaf80d776059637fcfa1400d1d61ff572d6480aa21d21649f3d2589aba0f657f4c2a445d28d4488ffd1e4b375418fc5b19aa92654b9b426ba79862a5686eb2fb38aa62ff33ca3301800000c44673fe73d39e5a", @ANYBLOB="00022dbd7000fddbdf25dbd11583", @ANYRES32, @ANYBLOB="dd5fc7164623b628476707ed53691e55e4f5e7ffe1fdda8d680e53da4b5d6b9f12446d68ecb812e7f92e2ed49631c47113e590baf37296238736b5fd8af325707bf84da34ad198fe96574d9179d657c806e6"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48880) 03:41:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x12000000}) [ 506.594649][T22340] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x18000000}) 03:41:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) setrlimit(0xd, &(0x7f0000000000)={0x1ff, 0x3}) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:57 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x3}, 0x1}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x200142, 0x0) recvfrom$phonet(r3, &(0x7f0000000300)=""/133, 0x85, 0x40000042, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000000), &(0x7f0000000180), 0x2, 0x0) sendfile(r5, r6, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, r5, 0x0, 0xffffff38) lseek(r7, 0x9, 0x3) sendfile(r4, r1, 0x0, 0xffffff38) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'gretap0\x00', {0x2, 0x0, @multicast1}}) 03:41:57 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) umount2(&(0x7f0000000040)='./file0\x00', 0xa) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) socket$rds(0x15, 0x5, 0x0) syz_mount_image$romfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80000001, 0x6, &(0x7f0000000540)=[{&(0x7f00000002c0)="c6b50272ea4706dbf289e6364128d28442eb0211f4c6eb1c855541d1d717f9f611715b996e217f4b7fa9e3050a96d57849799e7e5b4c2288f58e36f51dacee03f7678754130224ff9c2432b7df8461d948d996fc0cf5d53096f8ed188b9170201b4f0147a9205c5996fae8c40a34308c3cdff8f4f7b5b18a93cc550c35da2b27bf6ac5d5e368704d6265900c06ea1e2fb7fd", 0x92, 0x8}, {&(0x7f0000000380)="32aa54432004de0e63ee29c09499923654ede494", 0x14, 0x1c}, {&(0x7f00000003c0)="4cadfe9a444fa116e20f62a1533ec69b5da5303cabffe18f2bfe5195a6d5dbf6af16856d62dd5ec836fe60e0fc143f2536b607ad4f2754fcf9f46c07c512b0845cb4c82689a82078b0a3911d91834af6b59b3f3d28c341a4030f387639777c42a6d58cdadbd05e501e6e2f577be552fc2f46b05979d73c302920adedf74f3c692bf457", 0x83, 0x3}, {&(0x7f0000000800)="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", 0x1000, 0x9}, {&(0x7f0000000480)="336949a284d44e34b94c379305f2e537f5dedcd01f1db2571cef8020880665f5d3e59e214fea51d745f8cc02c923badf3e712d0abba99240ce4405e9f697acd8f0ce2370112cdddb6e42108eac24ba3d92e2719bd90606aaf9fe723471cfadb899afcbe661e26f7bc271451119b651a75a8b816e3c6eb47ebfab49c3a6cb656df971f409d25218e24aff68bc6abd6115adf3b08a9606267a0ea70e9e09e748010c5bad75b383405b85", 0xa9}, {&(0x7f0000001800)="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", 0xff, 0xa793}], 0x162485, &(0x7f0000001900)={[{'/'}, {'$\'(([G'}, {}, {'/sys/kernel/debug/binder/failed_transaction_log\x00'}, {',,:]'}, {'.'}], [{@smackfsroot={'smackfsroot', 0x3d, 'bridge_slave_1\x00'}}, {@euid_gt={'euid>', r2}}]}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) 03:41:57 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000080003", @ANYRES32=r2], 0x58}}, 0x0) 03:41:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 69) 03:41:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x25000000}) [ 506.959989][ T25] audit: type=1800 audit(1635046917.554:265): pid=22368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=14433 res=0 errno=0 [ 507.016796][T22377] FAULT_INJECTION: forcing a failure. [ 507.016796][T22377] name failslab, interval 1, probability 0, space 0, times 0 [ 507.029528][T22377] CPU: 1 PID: 22377 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 507.038305][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.048372][T22377] Call Trace: [ 507.051660][T22377] dump_stack_lvl+0x201/0x2d8 [ 507.056355][T22377] ? show_regs_print_info+0x12/0x12 [ 507.061566][T22377] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 507.067319][T22377] should_fail+0x384/0x4b0 [ 507.071756][T22377] ? mempool_alloc_slab+0x49/0x60 [ 507.076792][T22377] should_failslab+0x5/0x20 [ 507.081309][T22377] kmem_cache_alloc+0x74/0x300 [ 507.086088][T22377] ? mempool_free+0x360/0x360 [ 507.090770][T22377] mempool_alloc_slab+0x49/0x60 [ 507.095625][T22377] mempool_alloc+0x179/0x6d0 [ 507.100224][T22377] ? submit_bio_noacct+0xa13/0xa90 [ 507.105352][T22377] ? mempool_resize+0x8f0/0x8f0 [ 507.110218][T22377] ? blk_put_request+0x20/0x20 [ 507.115006][T22377] bio_alloc_bioset+0x12e/0x8a0 [ 507.119877][T22377] submit_bh_wbc+0x1c6/0x680 [ 507.124008][ T25] audit: type=1804 audit(1635046917.584:266): pid=22368 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir463223623/syzkaller.jt553W/186/file0" dev="sda1" ino=14433 res=1 errno=0 [ 507.124472][T22377] ? submit_bio_noacct+0xa90/0xa90 [ 507.124513][T22377] __block_write_full_page+0x8fb/0x10a0 [ 507.124542][T22377] ? mark_buffer_write_io_error+0x340/0x340 [ 507.165528][T22377] ? blkdev_fallocate+0x3d0/0x3d0 [ 507.170577][T22377] __writepage+0x60/0x120 [ 507.174930][T22377] write_cache_pages+0xa02/0xf80 [ 507.179898][T22377] ? generic_writepages+0x160/0x160 [ 507.185114][T22377] ? tag_pages_for_writeback+0x690/0x690 [ 507.191820][T22377] ? __lock_acquire+0x1382/0x2b00 [ 507.196870][T22377] generic_writepages+0xfb/0x160 [ 507.201833][T22377] ? trace_wbc_writepage+0x270/0x270 [ 507.207141][T22377] ? rcu_read_lock_sched_held+0x89/0x130 [ 507.212791][T22377] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 507.218795][T22377] ? blkdev_readpage+0x20/0x20 [ 507.223587][T22377] do_writepages+0x49d/0x760 [ 507.228199][T22377] ? __writepage+0x120/0x120 [ 507.232805][T22377] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 507.238371][T22377] ? __lock_acquire+0x2b00/0x2b00 [ 507.243403][T22377] ? do_raw_spin_lock+0x151/0x8e0 [ 507.248445][T22377] ? do_raw_spin_unlock+0x134/0x8a0 [ 507.253650][T22377] ? I_BDEV+0x9/0x20 [ 507.257555][T22377] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 507.259052][ T25] audit: type=1800 audit(1635046917.584:267): pid=22376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14548 res=0 errno=0 [ 507.263545][T22377] filemap_fdatawrite_wbc+0x1d3/0x230 [ 507.263575][T22377] file_write_and_wait_range+0x1d6/0x2d0 [ 507.263599][T22377] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 507.263640][T22377] blkdev_fsync+0x6f/0xc0 [ 507.305883][T22377] blkdev_write_iter+0x442/0x530 [ 507.310852][T22377] ? blkdev_read_iter+0x180/0x180 [ 507.315883][T22377] ? iter_file_splice_write+0x23c/0xfa0 [ 507.321444][T22377] ? do_syscall_64+0x44/0xd0 [ 507.326050][T22377] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.332142][T22377] do_iter_readv_writev+0x54f/0x740 [ 507.337360][T22377] ? generic_file_rw_checks+0x260/0x260 [ 507.343034][T22377] ? iov_iter_bvec+0xf0/0x1f0 [ 507.347726][T22377] ? bpf_lsm_file_permission+0x5/0x10 [ 507.353111][T22377] ? security_file_permission+0xe0/0x5d0 [ 507.358755][T22377] ? do_iter_write+0x174/0x7b0 [ 507.363544][T22377] do_iter_write+0x21e/0x7b0 [ 507.368158][T22377] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 507.374150][T22377] ? vfs_iter_write+0x69/0xa0 [ 507.378845][T22377] iter_file_splice_write+0x7eb/0xfa0 [ 507.384253][T22377] ? splice_from_pipe+0x210/0x210 [ 507.389289][T22377] ? generic_file_splice_read+0x529/0x760 [ 507.395030][T22377] ? splice_shrink_spd+0xb0/0xb0 [ 507.399996][T22377] ? splice_from_pipe+0x210/0x210 [ 507.405036][T22377] direct_splice_actor+0xe6/0x1c0 [ 507.410076][T22377] splice_direct_to_actor+0x529/0xd00 [ 507.415469][T22377] ? do_splice_direct+0x3e0/0x3e0 [ 507.420511][T22377] ? pipe_to_sendpage+0x340/0x340 [ 507.425550][T22377] ? rcu_lock_release+0x9/0x20 [ 507.428764][ T25] audit: type=1804 audit(1635046917.584:268): pid=22376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/630/file0" dev="sda1" ino=14548 res=1 errno=0 [ 507.430320][T22377] ? bpf_lsm_file_permission+0x5/0x10 [ 507.430346][T22377] ? security_file_permission+0xe0/0x5d0 [ 507.430370][T22377] do_splice_direct+0x291/0x3e0 [ 507.430399][T22377] ? splice_direct_to_actor+0xd00/0xd00 [ 507.476218][T22377] ? bpf_lsm_file_permission+0x5/0x10 [ 507.481609][T22377] ? security_file_permission+0xe0/0x5d0 [ 507.487290][T22377] ? do_sendfile+0x6a9/0x1040 [ 507.491983][T22377] do_sendfile+0x6fe/0x1040 [ 507.496604][T22377] ? do_pwritev+0x370/0x370 [ 507.501127][T22377] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 507.507119][T22377] __se_sys_sendfile64+0x171/0x1d0 [ 507.512244][T22377] ? __x64_sys_sendfile64+0xa0/0xa0 [ 507.517458][T22377] ? lockdep_hardirqs_on+0x95/0x140 [ 507.522668][T22377] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 507.523584][ T25] audit: type=1804 audit(1635046917.624:269): pid=22380 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir463223623/syzkaller.jt553W/186/file0" dev="sda1" ino=14433 res=1 errno=0 [ 507.528830][T22377] do_syscall_64+0x44/0xd0 [ 507.528858][T22377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.528876][T22377] RIP: 0033:0x7f4e83dcaa39 [ 507.528896][T22377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.528910][T22377] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 507.528931][T22377] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 507.528950][T22377] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:41:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x40000000}) 03:41:57 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007000000080003", @ANYRES32=r2], 0x58}}, 0x0) 03:41:57 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x41000000}) 03:41:58 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) 03:41:58 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0x5c000000}) [ 507.612219][T22377] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 507.620208][T22377] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 507.628192][T22377] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:41:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x2, 0x1, 0x1f, 0xd, "22f5300669e9409c6cf80c13e5e6f6866f1c01b03af57b9476091dd176ecb84d9c957a753c49a740dfa09a74a08efb394bd742d51d7a55cd8dc779bdf80d43e6", "f8fac57e942695ca2a225ad2f8622fb780b65041818bd8dc00ba97f4b6688dbf", [0x1f, 0x1000]}) 03:41:58 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) [ 507.879382][ T25] audit: type=1804 audit(1635046918.464:270): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/630/file0" dev="sda1" ino=14548 res=1 errno=0 03:41:58 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) 03:41:58 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'bridge_slave_1\x00', {0x3fffffc}}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) sendmsg$rds(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/140, 0x8c}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/101, 0x65}], 0x8, 0x0, 0x0, 0x40000}, 0x24000051) 03:41:58 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xc8000000}) 03:41:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 70) 03:41:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)) sched_setattr(0x0, &(0x7f0000000040)={0x3a, 0x1, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8ed7, 0x0, 0x0, 0x3, 0x4, "9259f3eca3471a36bfc4e82a2449f9fda032325d6f74ccbcb6d44eb2c812378e1d136619540c52dc30dbb3655b34a13e89a75d6f37c9e27b4a199461c6df4326", "b95ade55e1a11931ab5478b921929457d23624644170d0b5acfcb2f37983b0be6e2b9bb9d9cfd64f26da37affa7944c2b9bc4ce91e23b902aa1dca4855cc971b", "4dc9a87e4719bba4d114139f460b816ff7bac8f7630cbccc0be5f073db8c6333", [0x1000, 0x9]}) sendfile(r0, r1, 0x0, 0x20000102000003) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000), &(0x7f0000000180), 0x4, 0x1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) fstat(r4, &(0x7f0000000080)) [ 508.086377][T22403] __nla_validate_parse: 3 callbacks suppressed [ 508.086417][T22403] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:58 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) [ 508.161522][T22411] FAULT_INJECTION: forcing a failure. [ 508.161522][T22411] name failslab, interval 1, probability 0, space 0, times 0 [ 508.174246][T22411] CPU: 0 PID: 22411 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 508.178554][T22413] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 508.183026][T22411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.183043][T22411] Call Trace: [ 508.183054][T22411] dump_stack_lvl+0x201/0x2d8 [ 508.183084][T22411] ? show_regs_print_info+0x12/0x12 [ 508.183103][T22411] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 508.223808][T22411] should_fail+0x384/0x4b0 [ 508.228260][T22411] ? mempool_alloc_slab+0x49/0x60 [ 508.233301][T22411] should_failslab+0x5/0x20 [ 508.237820][T22411] kmem_cache_alloc+0x74/0x300 [ 508.242727][T22411] ? mempool_free+0x360/0x360 [ 508.247426][T22411] mempool_alloc_slab+0x49/0x60 [ 508.252291][T22411] mempool_alloc+0x179/0x6d0 [ 508.256896][T22411] ? submit_bio_noacct+0xa13/0xa90 [ 508.262137][T22411] ? mempool_resize+0x8f0/0x8f0 [ 508.267005][T22411] ? blk_put_request+0x20/0x20 [ 508.271792][T22411] bio_alloc_bioset+0x12e/0x8a0 [ 508.276658][T22411] submit_bh_wbc+0x1c6/0x680 [ 508.281258][T22411] ? submit_bio_noacct+0xa90/0xa90 [ 508.282050][T22416] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 508.286384][T22411] __block_write_full_page+0x8fb/0x10a0 [ 508.286417][T22411] ? mark_buffer_write_io_error+0x340/0x340 [ 508.286437][T22411] ? blkdev_fallocate+0x3d0/0x3d0 [ 508.286458][T22411] __writepage+0x60/0x120 [ 508.286481][T22411] write_cache_pages+0xa02/0xf80 [ 508.322038][T22411] ? generic_writepages+0x160/0x160 [ 508.327268][T22411] ? tag_pages_for_writeback+0x690/0x690 [ 508.332941][T22411] ? __lock_acquire+0x1382/0x2b00 [ 508.337987][T22411] generic_writepages+0xfb/0x160 [ 508.342941][T22411] ? trace_wbc_writepage+0x270/0x270 [ 508.348255][T22411] ? rcu_read_lock_sched_held+0x89/0x130 [ 508.353900][T22411] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 508.359898][T22411] ? blkdev_readpage+0x20/0x20 [ 508.364679][T22411] do_writepages+0x49d/0x760 [ 508.369293][T22411] ? __writepage+0x120/0x120 [ 508.374075][T22411] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 508.379632][T22411] ? __lock_acquire+0x2b00/0x2b00 [ 508.384664][T22411] ? do_raw_spin_lock+0x151/0x8e0 [ 508.389712][T22411] ? do_raw_spin_unlock+0x134/0x8a0 [ 508.394922][T22411] ? I_BDEV+0x9/0x20 [ 508.398825][T22411] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 508.404825][T22411] filemap_fdatawrite_wbc+0x1d3/0x230 [ 508.410215][T22411] file_write_and_wait_range+0x1d6/0x2d0 [ 508.415874][T22411] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 508.422583][T22411] blkdev_fsync+0x6f/0xc0 [ 508.426929][T22411] blkdev_write_iter+0x442/0x530 [ 508.431892][T22411] ? blkdev_read_iter+0x180/0x180 [ 508.437463][T22411] ? iter_file_splice_write+0x23c/0xfa0 [ 508.443027][T22411] ? do_syscall_64+0x44/0xd0 [ 508.447744][T22411] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 508.454011][T22411] do_iter_readv_writev+0x54f/0x740 [ 508.459226][T22411] ? generic_file_rw_checks+0x260/0x260 [ 508.464787][T22411] ? iov_iter_bvec+0xf0/0x1f0 [ 508.469480][T22411] ? bpf_lsm_file_permission+0x5/0x10 [ 508.474868][T22411] ? security_file_permission+0xe0/0x5d0 [ 508.480512][T22411] ? do_iter_write+0x174/0x7b0 [ 508.485468][T22411] do_iter_write+0x21e/0x7b0 [ 508.490085][T22411] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 508.496083][T22411] ? vfs_iter_write+0x69/0xa0 [ 508.500777][T22411] iter_file_splice_write+0x7eb/0xfa0 [ 508.506187][T22411] ? splice_from_pipe+0x210/0x210 [ 508.511223][T22411] ? generic_file_splice_read+0x529/0x760 [ 508.516963][T22411] ? splice_shrink_spd+0xb0/0xb0 [ 508.521928][T22411] ? splice_from_pipe+0x210/0x210 [ 508.526966][T22411] direct_splice_actor+0xe6/0x1c0 [ 508.532013][T22411] splice_direct_to_actor+0x529/0xd00 [ 508.539405][T22411] ? do_splice_direct+0x3e0/0x3e0 [ 508.544451][T22411] ? pipe_to_sendpage+0x340/0x340 [ 508.549524][T22411] ? rcu_lock_release+0x9/0x20 [ 508.554302][T22411] ? bpf_lsm_file_permission+0x5/0x10 [ 508.559683][T22411] ? security_file_permission+0xe0/0x5d0 [ 508.565331][T22411] do_splice_direct+0x291/0x3e0 [ 508.570206][T22411] ? splice_direct_to_actor+0xd00/0xd00 [ 508.575776][T22411] ? bpf_lsm_file_permission+0x5/0x10 [ 508.581158][T22411] ? security_file_permission+0xe0/0x5d0 [ 508.586805][T22411] ? do_sendfile+0x6a9/0x1040 [ 508.591494][T22411] do_sendfile+0x6fe/0x1040 [ 508.596026][T22411] ? do_pwritev+0x370/0x370 [ 508.600548][T22411] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 508.606550][T22411] __se_sys_sendfile64+0x171/0x1d0 03:41:59 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan1\x00'}) 03:41:59 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) [ 508.611683][T22411] ? __x64_sys_sendfile64+0xa0/0xa0 [ 508.616894][T22411] ? lockdep_hardirqs_on+0x95/0x140 [ 508.622106][T22411] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 508.628101][T22411] do_syscall_64+0x44/0xd0 [ 508.632529][T22411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 508.638431][T22411] RIP: 0033:0x7f4e83dcaa39 [ 508.642854][T22411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 508.662469][T22411] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 508.670903][T22411] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 508.678893][T22411] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 508.686879][T22411] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 508.694862][T22411] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 508.702849][T22411] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 508.865562][T22426] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:59 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xfdfdffff}) [ 508.928320][T22430] 8021q: VLANs not supported on ipvlan1 03:41:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 71) 03:41:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000340)="18c69bd5c82f55f41cb44d297a0055c1e58c108d7eeef4a8d40e62c6bcb79fed8b383d9baa282ab6870582ce052c6c5bab9f2c42172514ea0a1dd23ef5f2dd090a49abc09578692144e119eeb09c216baf568924c83b924184e95b7264a2a37645e84bbbf8f7c59e669615a070c8af52551e0b4023c1a2e5ba733d67b9db12d5a7c84c0ae2ab6615fb73c07c9a2df346d03aa47eb7ef88aa6ff5b4e7fa6710453682d4363322ff3b7acbe9a9383fab21923864f70c527eebdd9159648f45d2274d511bf033239864f275", 0xca, 0x43e2}, {&(0x7f0000000800)="34c083f87e83cad87db98e5d87c0ebef1e02b69222a2c5a035d4c8a78a140104ae43599d6585a7e3a1f0b2e429e9452b187468083858203a808120ac171f4ef4722e6cd78c478e5c6de33025195c495feb0b0f60ee5531ad6d13328db48354ef710a620c3ef8adf2d22e88c1f02b7ed81aec6e00a8fb758c02e461fc2de27f99b305d058eab78f68db5bac63cd0e687562c103869d42add1edaa59c5b233e690509e244ecd5c0b2505d580214d31a95a0950b55f0ae305193162fc52867b3dda6e9d291ccbf4741131079e91f694bca97cd8ad9f0a8c471b0272c5c11f4aef2b26977c097229a4", 0xe7, 0x5}], 0x1000000, &(0x7f0000000980)={[{@fault_injection={'fault_injection', 0x3d, 0x4}}, {@nouser_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x5}}, {}, {@noacl}, {@acl}], [{@fowner_lt={'fowner<', r4}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x65, 0x63, 0x38, 0x61, 0x36, 0x31], 0x2d, [0x31, 0x38, 0x32, 0x65], 0x2d, [0x33, 0x39, 0x38, 0x1], 0x2d, [0x64, 0x33, 0x65, 0x1174aea5b4c5d06e], 0x2d, [0x65, 0x30, 0x64, 0x33, 0x38, 0x34, 0x64, 0x62]}}}, {@uid_eq}, {@context={'context', 0x3d, 'sysadm_u'}}]}) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x411d, 0x1, 0x17, 0x18, "df69e56d8588654eb6da7884d205cd12b0c1fb2d56e52d1b2f3a520f3ad05dce0cfa792d7f9283c1cfb217a240a90043cb090e5e6607cee1be05c6b5102b7a70", "c63b559c079449bd400241dc6df23e1f5e4affc7a444bc6c012f5cc5fe75975a", [0x8, 0x80000000]}) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="cde4a855926faaeb34829cc6bc3c21ddd32c0adcfab4b6e56eac92d1ad601ea2139799007b5ce74b8376636eb58d8c8a1250e047f204ebe3ca0300000052f65dc4", 0x41}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:41:59 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) [ 509.047222][T22430] 8021q: VLANs not supported on ipvlan1 03:41:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) fcntl$dupfd(r3, 0x0, r4) [ 509.145915][T22438] FAULT_INJECTION: forcing a failure. [ 509.145915][T22438] name failslab, interval 1, probability 0, space 0, times 0 [ 509.159074][T22438] CPU: 0 PID: 22438 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 509.167862][T22438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.178087][T22438] Call Trace: [ 509.181368][T22438] dump_stack_lvl+0x201/0x2d8 [ 509.186041][T22438] ? show_regs_print_info+0x12/0x12 [ 509.191230][T22438] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 509.196947][T22438] should_fail+0x384/0x4b0 [ 509.201355][T22438] ? mempool_alloc_slab+0x49/0x60 [ 509.206390][T22438] should_failslab+0x5/0x20 [ 509.210882][T22438] kmem_cache_alloc+0x74/0x300 [ 509.215639][T22438] ? mempool_free+0x360/0x360 [ 509.220304][T22438] mempool_alloc_slab+0x49/0x60 [ 509.225143][T22438] mempool_alloc+0x179/0x6d0 [ 509.229727][T22438] ? submit_bio_noacct+0xa13/0xa90 [ 509.234829][T22438] ? mempool_resize+0x8f0/0x8f0 [ 509.239669][T22438] ? blk_put_request+0x20/0x20 [ 509.244429][T22438] bio_alloc_bioset+0x12e/0x8a0 [ 509.249273][T22438] submit_bh_wbc+0x1c6/0x680 [ 509.253873][T22438] ? submit_bio_noacct+0xa90/0xa90 [ 509.259091][T22438] __block_write_full_page+0x8fb/0x10a0 [ 509.264633][T22438] ? mark_buffer_write_io_error+0x340/0x340 [ 509.270513][T22438] ? blkdev_fallocate+0x3d0/0x3d0 [ 509.275524][T22438] __writepage+0x60/0x120 [ 509.279865][T22438] write_cache_pages+0xa02/0xf80 [ 509.284815][T22438] ? generic_writepages+0x160/0x160 [ 509.290016][T22438] ? tag_pages_for_writeback+0x690/0x690 [ 509.295653][T22438] ? __lock_acquire+0x1382/0x2b00 [ 509.301292][T22438] generic_writepages+0xfb/0x160 [ 509.306221][T22438] ? trace_wbc_writepage+0x270/0x270 [ 509.311499][T22438] ? rcu_read_lock_sched_held+0x89/0x130 [ 509.317123][T22438] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 509.323104][T22438] ? blkdev_readpage+0x20/0x20 [ 509.327861][T22438] do_writepages+0x49d/0x760 [ 509.332440][T22438] ? __writepage+0x120/0x120 [ 509.337020][T22438] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 509.342562][T22438] ? __lock_acquire+0x2b00/0x2b00 [ 509.347570][T22438] ? do_raw_spin_lock+0x151/0x8e0 [ 509.352672][T22438] ? do_raw_spin_unlock+0x134/0x8a0 [ 509.357865][T22438] ? I_BDEV+0x9/0x20 [ 509.361742][T22438] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 509.367714][T22438] filemap_fdatawrite_wbc+0x1d3/0x230 [ 509.373075][T22438] file_write_and_wait_range+0x1d6/0x2d0 [ 509.378697][T22438] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 509.385387][T22438] blkdev_fsync+0x6f/0xc0 [ 509.389705][T22438] blkdev_write_iter+0x442/0x530 [ 509.394636][T22438] ? blkdev_read_iter+0x180/0x180 [ 509.399643][T22438] ? iter_file_splice_write+0x23c/0xfa0 [ 509.405174][T22438] ? do_syscall_64+0x44/0xd0 [ 509.409747][T22438] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 509.415806][T22438] do_iter_readv_writev+0x54f/0x740 [ 509.421011][T22438] ? generic_file_rw_checks+0x260/0x260 [ 509.426543][T22438] ? iov_iter_bvec+0xf0/0x1f0 [ 509.431204][T22438] ? bpf_lsm_file_permission+0x5/0x10 [ 509.436559][T22438] ? security_file_permission+0xe0/0x5d0 [ 509.442172][T22438] ? do_iter_write+0x174/0x7b0 [ 509.446925][T22438] do_iter_write+0x21e/0x7b0 [ 509.451509][T22438] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 509.457559][T22438] ? vfs_iter_write+0x69/0xa0 [ 509.462223][T22438] iter_file_splice_write+0x7eb/0xfa0 [ 509.467595][T22438] ? splice_from_pipe+0x210/0x210 [ 509.472603][T22438] ? generic_file_splice_read+0x529/0x760 [ 509.478311][T22438] ? splice_shrink_spd+0xb0/0xb0 [ 509.483243][T22438] ? splice_from_pipe+0x210/0x210 [ 509.488259][T22438] direct_splice_actor+0xe6/0x1c0 [ 509.493286][T22438] splice_direct_to_actor+0x529/0xd00 [ 509.498653][T22438] ? do_splice_direct+0x3e0/0x3e0 [ 509.503665][T22438] ? pipe_to_sendpage+0x340/0x340 [ 509.508674][T22438] ? rcu_lock_release+0x9/0x20 [ 509.513422][T22438] ? bpf_lsm_file_permission+0x5/0x10 [ 509.518780][T22438] ? security_file_permission+0xe0/0x5d0 [ 509.524400][T22438] do_splice_direct+0x291/0x3e0 [ 509.529240][T22438] ? splice_direct_to_actor+0xd00/0xd00 [ 509.534776][T22438] ? bpf_lsm_file_permission+0x5/0x10 [ 509.540130][T22438] ? security_file_permission+0xe0/0x5d0 [ 509.545754][T22438] ? do_sendfile+0x6a9/0x1040 [ 509.550415][T22438] do_sendfile+0x6fe/0x1040 [ 509.554915][T22438] ? do_pwritev+0x370/0x370 [ 509.559408][T22438] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 509.565376][T22438] __se_sys_sendfile64+0x171/0x1d0 [ 509.570478][T22438] ? __x64_sys_sendfile64+0xa0/0xa0 [ 509.575663][T22438] ? lockdep_hardirqs_on+0x95/0x140 [ 509.580849][T22438] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 509.586818][T22438] do_syscall_64+0x44/0xd0 [ 509.591224][T22438] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 509.597102][T22438] RIP: 0033:0x7f4e83dcaa39 [ 509.601503][T22438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.621093][T22438] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 509.629492][T22438] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 509.637446][T22438] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 509.645400][T22438] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 509.653355][T22438] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 509.661310][T22438] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:00 executing program 5: pipe(&(0x7f0000000080)) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xff000000}) 03:42:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 72) 03:42:00 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000040)={0x1018, r0}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r3 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x123400, 0x128) sendmsg$rds(r3, &(0x7f00000008c0)={&(0x7f0000000180)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f00000003c0)=""/209, 0xd1}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000800)=""/150, 0x96}], 0x6, 0x0, 0x0, 0x40}, 0x4000014) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000380)={0x2, "1bf9"}, 0x3) 03:42:00 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) 03:42:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8, 0x0, 0xfffffdfd}) [ 510.142185][T22459] FAULT_INJECTION: forcing a failure. [ 510.142185][T22459] name failslab, interval 1, probability 0, space 0, times 0 [ 510.155157][T22459] CPU: 1 PID: 22459 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 510.163938][T22459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.174003][T22459] Call Trace: [ 510.177294][T22459] dump_stack_lvl+0x201/0x2d8 [ 510.181994][T22459] ? show_regs_print_info+0x12/0x12 [ 510.187210][T22459] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 510.192965][T22459] should_fail+0x384/0x4b0 [ 510.197402][T22459] ? mempool_alloc_slab+0x49/0x60 [ 510.202436][T22459] should_failslab+0x5/0x20 [ 510.206949][T22459] kmem_cache_alloc+0x74/0x300 [ 510.211732][T22459] ? mempool_free+0x360/0x360 [ 510.216414][T22459] mempool_alloc_slab+0x49/0x60 [ 510.221274][T22459] mempool_alloc+0x179/0x6d0 [ 510.225881][T22459] ? submit_bio_noacct+0xa13/0xa90 [ 510.231012][T22459] ? mempool_resize+0x8f0/0x8f0 [ 510.235879][T22459] ? blk_put_request+0x20/0x20 [ 510.240667][T22459] bio_alloc_bioset+0x12e/0x8a0 [ 510.245555][T22459] submit_bh_wbc+0x1c6/0x680 [ 510.250155][T22459] ? submit_bio_noacct+0xa90/0xa90 [ 510.255299][T22459] __block_write_full_page+0x8fb/0x10a0 [ 510.260863][T22459] ? mark_buffer_write_io_error+0x340/0x340 [ 510.266768][T22459] ? blkdev_fallocate+0x3d0/0x3d0 [ 510.271804][T22459] __writepage+0x60/0x120 [ 510.276145][T22459] write_cache_pages+0xa02/0xf80 [ 510.281115][T22459] ? generic_writepages+0x160/0x160 [ 510.286336][T22459] ? tag_pages_for_writeback+0x690/0x690 [ 510.292088][T22459] ? __lock_acquire+0x1382/0x2b00 [ 510.297138][T22459] generic_writepages+0xfb/0x160 [ 510.302092][T22459] ? trace_wbc_writepage+0x270/0x270 [ 510.307400][T22459] ? rcu_read_lock_sched_held+0x89/0x130 [ 510.313043][T22459] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 510.319039][T22459] ? blkdev_readpage+0x20/0x20 [ 510.323817][T22459] do_writepages+0x49d/0x760 [ 510.328424][T22459] ? __writepage+0x120/0x120 [ 510.333030][T22459] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 510.338581][T22459] ? __lock_acquire+0x2b00/0x2b00 [ 510.343609][T22459] ? do_raw_spin_lock+0x151/0x8e0 [ 510.348689][T22459] ? do_raw_spin_unlock+0x134/0x8a0 [ 510.353907][T22459] ? I_BDEV+0x9/0x20 [ 510.357812][T22459] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 510.363808][T22459] filemap_fdatawrite_wbc+0x1d3/0x230 [ 510.369194][T22459] file_write_and_wait_range+0x1d6/0x2d0 [ 510.374839][T22459] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 510.381546][T22459] blkdev_fsync+0x6f/0xc0 [ 510.385901][T22459] blkdev_write_iter+0x442/0x530 [ 510.390858][T22459] ? blkdev_read_iter+0x180/0x180 [ 510.395890][T22459] ? iter_file_splice_write+0x23c/0xfa0 [ 510.401449][T22459] ? do_syscall_64+0x44/0xd0 [ 510.406045][T22459] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 510.412176][T22459] do_iter_readv_writev+0x54f/0x740 [ 510.417390][T22459] ? generic_file_rw_checks+0x260/0x260 [ 510.422987][T22459] ? iov_iter_bvec+0xf0/0x1f0 [ 510.427679][T22459] ? bpf_lsm_file_permission+0x5/0x10 [ 510.433059][T22459] ? security_file_permission+0xe0/0x5d0 [ 510.438701][T22459] ? do_iter_write+0x174/0x7b0 [ 510.443483][T22459] do_iter_write+0x21e/0x7b0 [ 510.448126][T22459] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 510.454481][T22459] ? vfs_iter_write+0x69/0xa0 [ 510.459204][T22459] iter_file_splice_write+0x7eb/0xfa0 [ 510.464612][T22459] ? splice_from_pipe+0x210/0x210 [ 510.469649][T22459] ? generic_file_splice_read+0x529/0x760 [ 510.475388][T22459] ? splice_shrink_spd+0xb0/0xb0 [ 510.480351][T22459] ? splice_from_pipe+0x210/0x210 [ 510.485388][T22459] direct_splice_actor+0xe6/0x1c0 [ 510.490432][T22459] splice_direct_to_actor+0x529/0xd00 [ 510.495918][T22459] ? do_splice_direct+0x3e0/0x3e0 [ 510.500969][T22459] ? pipe_to_sendpage+0x340/0x340 [ 510.506039][T22459] ? rcu_lock_release+0x9/0x20 [ 510.510819][T22459] ? bpf_lsm_file_permission+0x5/0x10 [ 510.516200][T22459] ? security_file_permission+0xe0/0x5d0 [ 510.521850][T22459] do_splice_direct+0x291/0x3e0 [ 510.526722][T22459] ? splice_direct_to_actor+0xd00/0xd00 [ 510.532292][T22459] ? bpf_lsm_file_permission+0x5/0x10 [ 510.537676][T22459] ? security_file_permission+0xe0/0x5d0 [ 510.543331][T22459] ? do_sendfile+0x6a9/0x1040 [ 510.548020][T22459] do_sendfile+0x6fe/0x1040 [ 510.552551][T22459] ? do_pwritev+0x370/0x370 [ 510.557070][T22459] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 510.563064][T22459] __se_sys_sendfile64+0x171/0x1d0 [ 510.568195][T22459] ? __x64_sys_sendfile64+0xa0/0xa0 [ 510.573406][T22459] ? lockdep_hardirqs_on+0x95/0x140 [ 510.578618][T22459] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 510.584614][T22459] do_syscall_64+0x44/0xd0 03:42:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x1, 0x0, 0x2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x5a, 0x3}}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_DELMDB={0x78, 0x55, 0x800, 0x70bd28, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@ip4=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x5, 0x1, {@ip4=@multicast1, 0x4b6e}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@empty}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, r5, 0x0, 0xffffff38) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r5}, 0x8) 03:42:00 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r1], 0x58}}, 0x0) [ 510.589039][T22459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 510.594937][T22459] RIP: 0033:0x7f4e83dcaa39 [ 510.599376][T22459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 510.618989][T22459] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 510.627419][T22459] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 510.635404][T22459] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 510.643380][T22459] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 510.651356][T22459] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 510.659335][T22459] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 510.669717][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 510.669730][ T25] audit: type=1800 audit(1635046920.745:278): pid=22460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14019 res=0 errno=0 03:42:01 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:01 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) 03:42:01 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) readv(r2, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000800)=""/220, 0xdc}, {&(0x7f0000000200)=""/53, 0x35}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000900)=""/193, 0xc1}], 0x9) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 510.945893][ T25] audit: type=1804 audit(1635046920.745:279): pid=22460 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/634/file0" dev="sda1" ino=14019 res=1 errno=0 03:42:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 73) 03:42:01 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:01 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x88, @multicast1, 0x4e22, 0x0, 'rr\x00', 0x20, 0x1, 0x35}, 0x2c) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) [ 511.207524][T22487] FAULT_INJECTION: forcing a failure. [ 511.207524][T22487] name failslab, interval 1, probability 0, space 0, times 0 [ 511.220266][T22487] CPU: 0 PID: 22487 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 511.229042][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.239109][T22487] Call Trace: [ 511.242399][T22487] dump_stack_lvl+0x201/0x2d8 [ 511.247100][T22487] ? show_regs_print_info+0x12/0x12 [ 511.252313][T22487] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 511.258068][T22487] should_fail+0x384/0x4b0 [ 511.262503][T22487] ? mempool_alloc_slab+0x49/0x60 [ 511.267542][T22487] should_failslab+0x5/0x20 [ 511.272060][T22487] kmem_cache_alloc+0x74/0x300 [ 511.276845][T22487] ? mempool_free+0x360/0x360 [ 511.281538][T22487] mempool_alloc_slab+0x49/0x60 [ 511.286409][T22487] mempool_alloc+0x179/0x6d0 [ 511.291028][T22487] ? submit_bio_noacct+0xa13/0xa90 [ 511.296158][T22487] ? mempool_resize+0x8f0/0x8f0 [ 511.301028][T22487] ? blk_put_request+0x20/0x20 [ 511.305818][T22487] bio_alloc_bioset+0x12e/0x8a0 [ 511.310692][T22487] submit_bh_wbc+0x1c6/0x680 [ 511.315298][T22487] ? submit_bio_noacct+0xa90/0xa90 [ 511.320438][T22487] __block_write_full_page+0x8fb/0x10a0 [ 511.326015][T22487] ? mark_buffer_write_io_error+0x340/0x340 [ 511.331924][T22487] ? blkdev_fallocate+0x3d0/0x3d0 [ 511.336964][T22487] __writepage+0x60/0x120 [ 511.341320][T22487] write_cache_pages+0xa02/0xf80 [ 511.346290][T22487] ? generic_writepages+0x160/0x160 [ 511.351506][T22487] ? tag_pages_for_writeback+0x690/0x690 [ 511.357172][T22487] ? __lock_acquire+0x1382/0x2b00 [ 511.362216][T22487] generic_writepages+0xfb/0x160 [ 511.367168][T22487] ? trace_wbc_writepage+0x270/0x270 [ 511.372487][T22487] ? rcu_read_lock_sched_held+0x89/0x130 [ 511.378133][T22487] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 511.384132][T22487] ? blkdev_readpage+0x20/0x20 [ 511.388914][T22487] do_writepages+0x49d/0x760 [ 511.393526][T22487] ? __writepage+0x120/0x120 [ 511.398131][T22487] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 511.403685][T22487] ? __lock_acquire+0x2b00/0x2b00 [ 511.408715][T22487] ? do_raw_spin_lock+0x151/0x8e0 [ 511.413760][T22487] ? do_raw_spin_unlock+0x134/0x8a0 [ 511.418964][T22487] ? I_BDEV+0x9/0x20 [ 511.422875][T22487] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 511.428872][T22487] filemap_fdatawrite_wbc+0x1d3/0x230 [ 511.434258][T22487] file_write_and_wait_range+0x1d6/0x2d0 [ 511.439903][T22487] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 511.446612][T22487] blkdev_fsync+0x6f/0xc0 [ 511.450961][T22487] blkdev_write_iter+0x442/0x530 03:42:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) r2 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2], 0x1}, 0x58) prlimit64(r2, 0xa, &(0x7f0000000000)={0x7b2, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 511.455915][T22487] ? blkdev_read_iter+0x180/0x180 [ 511.460945][T22487] ? iter_file_splice_write+0x23c/0xfa0 [ 511.466502][T22487] ? do_syscall_64+0x44/0xd0 [ 511.471100][T22487] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 511.477184][T22487] do_iter_readv_writev+0x54f/0x740 [ 511.482402][T22487] ? generic_file_rw_checks+0x260/0x260 [ 511.487961][T22487] ? iov_iter_bvec+0xf0/0x1f0 [ 511.492667][T22487] ? bpf_lsm_file_permission+0x5/0x10 [ 511.498051][T22487] ? security_file_permission+0xe0/0x5d0 [ 511.503690][T22487] ? do_iter_write+0x174/0x7b0 [ 511.508466][T22487] do_iter_write+0x21e/0x7b0 [ 511.513075][T22487] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 511.519065][T22487] ? vfs_iter_write+0x69/0xa0 [ 511.523756][T22487] iter_file_splice_write+0x7eb/0xfa0 [ 511.529175][T22487] ? splice_from_pipe+0x210/0x210 [ 511.534209][T22487] ? generic_file_splice_read+0x529/0x760 [ 511.539946][T22487] ? splice_shrink_spd+0xb0/0xb0 [ 511.544911][T22487] ? splice_from_pipe+0x210/0x210 [ 511.549948][T22487] direct_splice_actor+0xe6/0x1c0 03:42:02 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/35, 0x23}, {&(0x7f0000001100)=""/96, 0x60}, {&(0x7f0000001180)=""/88, 0x58}, {&(0x7f00000012c0)=""/40, 0x28}, {&(0x7f0000001240)=""/72, 0x48}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/96, 0x60}], 0xa, &(0x7f00000035c0)=[@fadd={0x58, 0x114, 0x6, {{0x3f, 0xfffffffd}, &(0x7f0000003740)=0x5, &(0x7f0000003480), 0x9, 0x100000007, 0xffffffffffff8001, 0x7, 0x3c, 0x80}}, @rdma_dest={0x18, 0x114, 0x2, {0x10001, 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x7}, &(0x7f00000034c0)=0x8001, &(0x7f0000003500), 0x6, 0xfe8, 0x7fffffff, 0x4, 0x30, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5f, 0x1000}, &(0x7f0000003540)=0xfff, &(0x7f0000003580)=0x2, 0x7e4, 0x8, 0x20, 0x3, 0x1, 0x6e}}], 0x120, 0xc010}, 0x0) write(r0, &(0x7f0000001200)="6f96", 0x2) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'netdevsim0\x00', {0xfffffffe}}) 03:42:02 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 511.554986][T22487] splice_direct_to_actor+0x529/0xd00 [ 511.560385][T22487] ? do_splice_direct+0x3e0/0x3e0 [ 511.565428][T22487] ? pipe_to_sendpage+0x340/0x340 [ 511.570462][T22487] ? rcu_lock_release+0x9/0x20 [ 511.575233][T22487] ? bpf_lsm_file_permission+0x5/0x10 [ 511.580612][T22487] ? security_file_permission+0xe0/0x5d0 [ 511.586255][T22487] do_splice_direct+0x291/0x3e0 [ 511.591129][T22487] ? splice_direct_to_actor+0xd00/0xd00 [ 511.596700][T22487] ? bpf_lsm_file_permission+0x5/0x10 [ 511.602082][T22487] ? security_file_permission+0xe0/0x5d0 [ 511.607721][T22487] ? do_sendfile+0x6a9/0x1040 [ 511.612400][T22487] do_sendfile+0x6fe/0x1040 [ 511.616931][T22487] ? do_pwritev+0x370/0x370 [ 511.621449][T22487] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 511.627440][T22487] __se_sys_sendfile64+0x171/0x1d0 [ 511.632569][T22487] ? __x64_sys_sendfile64+0xa0/0xa0 [ 511.637780][T22487] ? lockdep_hardirqs_on+0x95/0x140 [ 511.642988][T22487] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 511.648986][T22487] do_syscall_64+0x44/0xd0 [ 511.653418][T22487] entry_SYSCALL_64_after_hwframe+0x44/0xae 03:42:02 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) [ 511.659319][T22487] RIP: 0033:0x7f4e83dcaa39 [ 511.663745][T22487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.683357][T22487] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 511.691778][T22487] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 511.699760][T22487] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:42:02 executing program 1: syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x6}) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x3]}, 0x8, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000280)={0x0, 0x1, 0x5, '\x00', &(0x7f0000000240)=0x1}) r7 = socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000200)=0x2c) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000000)=0x1c4) [ 511.707738][T22487] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.715713][T22487] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 511.723689][T22487] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 511.752567][ T25] audit: type=1800 audit(1635046921.495:280): pid=22473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14691 res=0 errno=0 [ 511.807158][ T25] audit: type=1804 audit(1635046921.525:281): pid=22473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/649/file0" dev="sda1" ino=14691 res=1 errno=0 [ 511.900806][ T25] audit: type=1804 audit(1635046921.705:282): pid=22484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/649/file0" dev="sda1" ino=14691 res=1 errno=0 03:42:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 74) 03:42:02 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:02 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 512.099216][T22517] FAULT_INJECTION: forcing a failure. [ 512.099216][T22517] name failslab, interval 1, probability 0, space 0, times 0 [ 512.111951][T22517] CPU: 0 PID: 22517 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 512.117859][ T25] audit: type=1800 audit(1635046922.395:283): pid=22504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14019 res=0 errno=0 [ 512.120719][T22517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.120735][T22517] Call Trace: [ 512.120744][T22517] dump_stack_lvl+0x201/0x2d8 [ 512.120773][T22517] ? show_regs_print_info+0x12/0x12 [ 512.120794][T22517] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 512.120832][T22517] should_fail+0x384/0x4b0 [ 512.174303][T22517] ? mempool_alloc_slab+0x49/0x60 [ 512.179343][T22517] should_failslab+0x5/0x20 [ 512.183857][T22517] kmem_cache_alloc+0x74/0x300 [ 512.188637][T22517] ? mempool_free+0x360/0x360 [ 512.193319][T22517] mempool_alloc_slab+0x49/0x60 [ 512.198190][T22517] mempool_alloc+0x179/0x6d0 [ 512.202789][T22517] ? __lock_acquire+0x2b00/0x2b00 [ 512.207833][T22517] ? mempool_resize+0x8f0/0x8f0 [ 512.212699][T22517] ? unlock_page_memcg+0x181/0x1c0 [ 512.217822][T22517] ? __test_set_page_writeback+0xc72/0xe80 [ 512.223653][T22517] bio_alloc_bioset+0x12e/0x8a0 [ 512.228520][T22517] ? __might_sleep+0x110/0x110 [ 512.233298][T22517] submit_bh_wbc+0x1c6/0x680 [ 512.237911][T22517] __block_write_full_page+0x8fb/0x10a0 [ 512.243471][T22517] ? mark_buffer_write_io_error+0x340/0x340 [ 512.249374][T22517] ? blkdev_fallocate+0x3d0/0x3d0 [ 512.254409][T22517] __writepage+0x60/0x120 [ 512.258754][T22517] write_cache_pages+0xa02/0xf80 [ 512.263718][T22517] ? generic_writepages+0x160/0x160 [ 512.268933][T22517] ? tag_pages_for_writeback+0x690/0x690 [ 512.274596][T22517] ? __lock_acquire+0x1382/0x2b00 [ 512.279644][T22517] generic_writepages+0xfb/0x160 [ 512.284597][T22517] ? trace_wbc_writepage+0x270/0x270 [ 512.289897][T22517] ? rcu_read_lock_sched_held+0x89/0x130 [ 512.295543][T22517] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 512.301540][T22517] ? blkdev_readpage+0x20/0x20 [ 512.306320][T22517] do_writepages+0x49d/0x760 [ 512.310931][T22517] ? __writepage+0x120/0x120 [ 512.315535][T22517] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 512.321091][T22517] ? __lock_acquire+0x2b00/0x2b00 [ 512.326121][T22517] ? do_raw_spin_lock+0x151/0x8e0 [ 512.331160][T22517] ? do_raw_spin_unlock+0x134/0x8a0 [ 512.336368][T22517] ? I_BDEV+0x9/0x20 [ 512.340277][T22517] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 512.346276][T22517] filemap_fdatawrite_wbc+0x1d3/0x230 [ 512.351663][T22517] file_write_and_wait_range+0x1d6/0x2d0 [ 512.357314][T22517] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 512.362499][ T25] audit: type=1804 audit(1635046922.395:284): pid=22504 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/650/file0" dev="sda1" ino=14019 res=1 errno=0 [ 512.364042][T22517] blkdev_fsync+0x6f/0xc0 [ 512.364070][T22517] blkdev_write_iter+0x442/0x530 03:42:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000e8aba7a1aaf80d776059637fcfa1400d1d61ff572d6480aa21d21649f3d2589aba0f657f4c2a445d28d4488ffd1e4b375418fc5b19aa92654b9b426ba79862a5686eb2fb38aa62ff33ca3301800000c44673fe73d39e5a", @ANYBLOB="00022dbd7000fddbdf25dbd11583", @ANYRES32, @ANYBLOB="dd5fc7164623b628476707ed53691e55e4f5e7ffe1fdda8d680e53da4b5d6b9f12446d68ecb812e7f92e2ed49631c47113e590baf37296238736b5fd8af325707bf84da34ad198fe96574d9179d657c806e6"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48880) 03:42:03 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000018c0), 0x200200, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0xfffffffffffffff8, 0x7}) sendmsg$rds(r3, &(0x7f0000001880)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/202, 0xca}], 0x7, &(0x7f0000001740)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0xfffffffe}, &(0x7f00000015c0)=0x3, &(0x7f0000001600)=0x9, 0x7, 0x3, 0x1, 0x1f, 0x18, 0x52}}, @mask_fadd={0x58, 0x114, 0x8, {{0xffffffff, 0x2}, &(0x7f0000001640)=0x5, &(0x7f0000001680)=0x6, 0x3f, 0x1, 0x100000001, 0x0, 0x39, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0x2}, &(0x7f00000016c0)=0x3, &(0x7f0000001700)=0x3, 0x1, 0x1, 0x8, 0x80000001, 0x11, 0xffff}}], 0x108, 0x8002}, 0x4000) bind$rds(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001900)) 03:42:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7f, 0x3, &(0x7f0000000180)=[{&(0x7f0000000800)="b06cec83e2e3b9a564fc313f2b2bbde1705187a021d64d338b640cd2caac5d26ae5c874b798209994937320e2d895ca4d4c457549760c9b2f84ddc33015a1dc0e41d931fd899a64ad7b0283a447905d1a5bf90a4eeffe1a6a726a976570ec571394c964a2e57cfc29d8892830365e00e259dbffc3691f272c09b57c681e7897c853d9e7aa8d470154c171d45ad4c2607ad8c5faa5834c63324c4912e101705528d66e981f1759413417b0bab35f89e8e51ce66c3358c1c63839530eaa63bfa5ed54dbcb2b69bb30a340d136cf6e62eac7d8da8a3bdb060e01db9a8b4dcd00a181eacb7d452f482d7ceb7befe6417380f87289dd7ec6210fdfc2a3891712c72d8a2c73ad089d93b963d55d55e8d4bcd66a2647d81b63cce111ed254da9fc79b79414b4c1d431307c739248af5bb01036c2e708e741ca57ad1fea65cb533de13c20425a36b33329ebb88f515917c560cb1bf0bea5a02db7854d19992b20142ae7ac76786b4a05e21c9dbe9bbf4f8f36365f35b1fde6f5173ab9a4637b720de785b86753ffae9d6cdde25260168be811dd3cb98fa7a219ba4402f780bb07e0b2ca3bf82531322baab390c7e31ff05092e34238414af302c8b15ef9b4015cc07813330ded96e1d4aaaeabdfda9deab03e7e6679c87322bdafecbc76193b09651f20d84e4be5a722f274f321d1bf440fd4f56d9d1490b74b1276664c6fb46114cb7eb20ec07939c2a78bb3265df7f23f2ee8bab77c17453d9e7b55ea9a5ef073edbb78ad6b0ffaba8a76a2c1bfaec79bbae7b2929dca772ae2c9d3ff0e8f6f40ce39cc66cacc12f668984081f9c17ef3ce1065518d76a7dd4790c201fe812533aa7bd1dac8fcd3dbc81dd5103d9bedebe241fcb4e08a88aee92ad2ee8bb86a0551911c17aa6996079eabde3cc5464417d824d1fddcad75bb288c62c015a02c3dc4202f15fb8d313c8e57bf157b34f2983ddd162502642130361525fb6f5890eca7b6880bace4207ffee289e821f447bac16a6d0efda100010bc6a8614c32bc6347f6d24051730069bf04ae3e4a640fcbd58a099e48f168f38634c14c44c2b0c464fddbdc2523a8108c469e26f71313fafda09ba86b03c1fb98efb51625086ba1d50c4d96829780f07e31bc371159cd535eb5844337a6eaf0b88c424d4cfd6bd83d4cc27e1fd2f9cf586fa55fdef4c0d2d1b6ac5634398243f6485af40b10e44621584ce8fe86143b96ab662f67d755e21a149229b2d45090cce9fafa5dd79857a37656a176b4cbb92b6cbd1b9dd7787a4c2488150efc33edb4ae96340818742543f8772c348fd09f96d10bb4193d759d08e010edcb9bbae8c1db715840ab492d8fea439e904c7a035cd3d3c1baaee7d712f6fc3a0983e947aaa886fd5393f22f3089c1b0feac4e6cdefe191877d82ace4084b051f8038cbaadc1fc3ef95244b28611822edf7b1d13b716fcb46c451353b7a7361d17282670c1eb40523843e39c0e30ae793f5cd86c9a34cf9fa41fb8aa204b760609a54530ed2aa7c5622acedc8426f3d028eec9dd65abbe23fc910d40dd9ad9e70ed72e0c35beac151440198c5193b57ccf6e0c39cfb96eb8ec0d40032edc0fb90033c3a2b6fc95f07e585b43ad82c1fd39ad8edb076fabaa991563434f5618e47bfdefae72ff5bcbaafd2836a4188b42e111e2ac8605308005771c3245b949f4a2dc6d183068e30a454e711008dabad9da9f77730696ebaef42e873b6f7c9f241918fb533e2fc25f7a14b439783f1ea6a39f8b77f378d55c4397bbca440277ae6e645776f931be3eb8a405feee7f9abbef29301b026cd77763fbfa828fac468492f0bb5338ed125c0cfd21cb1a3fb2d301479815535bc362467ffea4f66b3f9c1a4f5de42332a60bd2508300a0f28bc7891a1f04359b68f23961e694668dc53cc191e2500236f7f2e6ad65624ea9670f0ab6e7aa52d3e5a328384b173ced3c20708169952974cf83b157af250f6c629250913431d46323a74a4bbba9f921d5f9a4149e376759acf8a804fd908011c428b765bd380e285f3ac06bcff9ed506ecf8c7355d8e4e0f94ba0e9cd3d8a92a2388ab71803c396885ad19b308b34aaf47dbe3b30345cf19149768c862ab1b62e15e8e4c226cfeb4b5036e29ef05df0442d92d78d402689bced74b7ccffc2cb3ebc3e3f03fe5804f5d77c2e310edf0f6d56479a1201e673c51812bd198a6cc34ae6d10cf408371caedd0ae4d434c20679bc66fa9f42cdea59170648af3f2eb82c3e4868bc2cd24c4b2dd3fd2ec385515483cb15c4ccd631ca52547e247cb5e8bc94b7eeb599770eeb54380a012d1974c68e273127b99593362de70bc44947db667b7d58fdf3d9e91473937a01df6075727c37a5c2116c8c2885c219283fd0fd020ed86df203e3157da999a545cb3b69f8d30fd571e2f6ba3d638ad9f8219da2cd3e2d98ad15824399e548f0ecfc199a4ba27c4e59cef0599706a32cdede1df6a82e1b4d1647a408ac2a6ed9cfc570caaaaa03c88345261bb6e64d5f294308e943353f757403456719b26480fa02b91cbfe188ab5734573b0f3b25ed4e49d999e937e5cf1d1898d212b94699e878f70bf763ffcc603227f96c28f1bf2e4c63d0ad1d5bf26282cba3369cbeb202f341a6669aa29fdfb56e908b03c1e9fc1d43101d43ad0b20d729ada93e4e4f00b418fc7d4f856341ee86896af85159c51b5ccc57d7d5cf568b1569057c9de5b0bab4877780badb3d21368fe4e6c4167aa2d1fc3cfb8656aa07bcd58e51f7b8ad8ebd9639d390cabdf43aeb0854470f178464a2690399e78fc4c6ec5d659bc5e1351ec9c33dcf872dc69a41d75b3cf815ec587c2cac43a0803e222400d1425ed6d80fe3e04c32b9847d9140f1443f5c7a5fd744f3621fb100917d755677521d59069377a8dfa8855e68e43ea2ca9c21be84a56b453a98a0af2acaef85d0d6667882f4ce07977315f37a1a2a1b9935ccc49a3f2511e048c1f3201d6349a31b80af8c4cb80e4ff4d932991c7880bb547bb1c5be705294d9a68e27ba6467f73202e8cb1ca07654ddcf0d175afec5bbfb67c96d8763d34e5c897b78fb356665ed259e8721d688cec2650214656e701bc54d14ef72e0b5bfe977080f7d81adc8e3f2e9f004367008015b1370398737d2d02c2553776a3ae1c246642503263f406e582c21093b309044c1a12557fd0a4471500f390075354086bd8b07bfbeb56ac53ec78651caf8644205b1fcba5ab9d2fa6a9ea7c501f2c8ba24bd67930eea9af97517b5c9c027f34781a4075baae8d1514a4ee6b950a5c66845aad0ac8e23ebbb791dc82ef10db188f26faf7451e6390da54486799cfc22d4895da782b6547a6305824564e9df15b8dc17194bd45996f234c3b8658fed3dc578ec87f0363ae53c4e8e7ad26e51eb3030dae552c99f9dd4805cb25505e86c23fad7a5f97da80c55d3d0c0698ed7d31abcbba372676e58151b720267dee3d4b134e7ddc7abfb3ecdc8305695d97b585fb92c669ff8857fa2d0002d10117a2d1322324d2dd2b58621e0d04e5fe4b9b0550434eabe6e2e90aa337378fd6103065f9b4cb68e6d79a83a221ac3b08805f02bc3eec187a49589814fe1a9729ec68ebafc0d7ec238bca19b97f94c4dfee593837828f8529b63319a01098c5832d3b1dad7467ae3b9107497427f5da08c9e755d961c452283e950d3d16576444b9d5162193091c385333897d47d447a69e93edc6906fee8840a83d6ed65598a584beed6b96d848e924baba44b4b57200e5f95c313d1d0c692f0d716fad323d627a8fa8bef5ba5c4e8aa65f44d0341806cad5b722774e1c00506edc91a7e0ff58b6f10950decd916bc0a79e8c497beba662ee8bdf3ce044648574faa8f9deed6f87e450eddd0e6cb07efc7729b9b2ccd967657ec20498d3bf38eb0edeb4e67b233330639d08d302024c41bb638caa54f762fc56b61bfb2150e793ee55f118da47647ef6723c35c43356d798c7b4fe5dff2a6c7e9de7c46f60a1b9ccdb0fb60b678e0a7d9f79d2c2e81ebc199b62212c798c318737bfcae77ee0d81d4a67b8fd2e5dd2532e89dcbf3e7febe9fab57b7414cbfdf572405eafc7d582da3268c42567d32936399c099fdd31ef408fe932f29a24b93707ab0c92f6763ace5e33204b7d5d4b7db7df48e6eea8ebc4024c2f214e3e931fcfb8ed007bb11a81b38d38cde8c8f81e4dfcef7a8248f79e35b5fd2e9c4a117ecac2728ad6052fcbeac7d0d3ea7a3e4519a8bce3a813d939e28fa705d38d3be75d9c333a06aa5b447cf5df022a5f29a52c3c6330ae3ffe494bebbb7e68a065dc2f573ff978e7ce937383b3274334ae10a533f776e103d470725b5a7672fde9798839a6344d8a510599c9850074a1fb9fa1c1b9a19bb803d7dae0f5b55703935ac1ed25b8a5d2285f50d3f1f73ca9f22b3c0327b1be19637b3ff6a3c07d8d5f8e911aa256099717ffe7144ca4607cb6adb6492d823a92ee3c59c72da313c00c60b8c9223355114a905027afb520d64266ac6e5a4724fec0aef6540d281564b324df7b32702483b628da5ab174db2355b4b2d8d52554ae3a98c988d5df6b7bb6beaebdea78ba2a8665748b4ea3b35b377c15a30a5caf90bf7480a03ad0b9e3d7708336b42612b58448e715cc0a806336f9dd17f881c4ad09a015b10ee5cc00174b1c7a5964801c1c8ff02cea133459aab6bbfce8abba1f865adcee6f5a8932bf8e4c85785cfc56fd7c6a5149c9fd574dd75796a556b249017bbf4b965e67d920bea33a9578da86c6e28cc05b18e98867316394ef2705e78e8becfa28e95a3900a846382577985207b96c58d1ea24fb83d1cac6dfd5ade12fdeb3e6724bcecdfb54947ab88d23f35fca4c10d395311d3eabda8b8c0b51112ae6f371532842515e7a267755d827fc1c0a16af513c85e7b7e2aebc3b71ef0f6db0dd56cec53fd919c7f511879dfbd7896d008dad3cb295b1ef5bb75cc8a9aa6b154fa77ee8c86d923f28223601d3e95f1ea8a0ecb82e04618e50cb1ca2cefd7a879417361a49138305b1ca187333de2fbd2e4d7ef6adc41e65470cf5dcad77ba5244ee5b875e45d875782e87beb0e9eb7122acc25ad4c877d93608682070d590e00b11561c57393faa738ad1ac000e8e7e709e4ec1be917e4cfb076b43b8d8cf11cd473ec4b84f649688a38e680fd37a010f9f226b1d0949a5db3daf077a6dc37914c7ce44e80e750c0a71fb2d5fffe6c8a839e6e6edca6c9d154e1c534526cb3aab42c62a98c578ff99ff4431dd79717bb9e56990d2347c9b7d4d2814f18b785c01b970cec9e47549fd50134409070e55c52afa2f42f686cf102394c12fe913e2342d31c1fcbff56ab97deab1daf43bbb3cfe5d9ebf0ad33ead82695aff93975672b5c8011ce129410a833c4126852655e2468b123d9ec836dd87ef6c226e77f846032cea716382cc223284b00733dd2fdd92920fe295c2ee18838a364f705e6b115d7d7b3dab39fb10ea2f7bd5f51e78f5d81cd77f8e321cc26b0c95590aafa32f7e841bc2d5dc9bc7556beb5fd567c03eb85b731e62062093714e4887952e56ef7ff9ac9edd97962b549aab5d78e92dca5d91cc9b35e5cca3b0c7ae76617aa5143f984ec00d8810d8aac7f6d90c0957fb065ab0b2fff6db94892749196b055e76e2cec3cad3dcc3d3a2c5c167f944e4b4d3a494c94db63f0fdc26c12538e6c23b3776c9fc3d4a1a4ac8b1b8b58fb460f307c363de3a6bcff545883cc305db2e2d90279ff01d85f9b5035b91571c9dad05c3f24ee8d4", 0x1000, 0x6}, {&(0x7f00000000c0)="933604abb00bcbeb5665be476524ea43abdb7786f440df802353dd847efb2e5b72482cd75b7b5a7c74d4ea114e845d20ae8f060cfe15ab809f3a89c62d8dfd784f7cb38f2cf365ea0393e4e6dadf3f74", 0x50, 0x2}, {&(0x7f0000000140)="dfe03a24a8bc3118631a27acaf993fb9b8f6d77e4e1a30ff3273065103b1d9cd7416b6ce9f94740a80ee58f53f217ae805da", 0x32, 0x1}], 0x1000, &(0x7f0000000340)={[{'\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'}, {}], [{@subj_type={'subj_type', 0x3d, '/dev/loop#\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}]}) sendfile(r0, r2, 0x0, 0x20000102000003) [ 512.397811][T22517] ? blkdev_read_iter+0x180/0x180 [ 512.402856][T22517] ? iter_file_splice_write+0x23c/0xfa0 [ 512.408418][T22517] ? do_syscall_64+0x44/0xd0 [ 512.413015][T22517] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.419096][T22517] do_iter_readv_writev+0x54f/0x740 [ 512.424316][T22517] ? generic_file_rw_checks+0x260/0x260 [ 512.429881][T22517] ? iov_iter_bvec+0xf0/0x1f0 [ 512.434571][T22517] ? bpf_lsm_file_permission+0x5/0x10 [ 512.439957][T22517] ? security_file_permission+0xe0/0x5d0 [ 512.445597][T22517] ? do_iter_write+0x174/0x7b0 [ 512.450381][T22517] do_iter_write+0x21e/0x7b0 [ 512.454992][T22517] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 512.461096][T22517] ? vfs_iter_write+0x69/0xa0 [ 512.465802][T22517] iter_file_splice_write+0x7eb/0xfa0 [ 512.471206][T22517] ? splice_from_pipe+0x210/0x210 [ 512.476236][T22517] ? generic_file_splice_read+0x529/0x760 [ 512.481972][T22517] ? splice_shrink_spd+0xb0/0xb0 [ 512.486933][T22517] ? splice_from_pipe+0x210/0x210 [ 512.491969][T22517] direct_splice_actor+0xe6/0x1c0 [ 512.497007][T22517] splice_direct_to_actor+0x529/0xd00 [ 512.502402][T22517] ? do_splice_direct+0x3e0/0x3e0 [ 512.507442][T22517] ? pipe_to_sendpage+0x340/0x340 [ 512.512481][T22517] ? rcu_lock_release+0x9/0x20 [ 512.517254][T22517] ? bpf_lsm_file_permission+0x5/0x10 [ 512.522630][T22517] ? security_file_permission+0xe0/0x5d0 [ 512.528274][T22517] do_splice_direct+0x291/0x3e0 [ 512.533144][T22517] ? splice_direct_to_actor+0xd00/0xd00 [ 512.538711][T22517] ? bpf_lsm_file_permission+0x5/0x10 [ 512.544090][T22517] ? security_file_permission+0xe0/0x5d0 [ 512.549725][T22517] ? do_sendfile+0x6a9/0x1040 [ 512.554423][T22517] do_sendfile+0x6fe/0x1040 [ 512.558961][T22517] ? do_pwritev+0x370/0x370 [ 512.563479][T22517] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 512.569473][T22517] __se_sys_sendfile64+0x171/0x1d0 [ 512.574606][T22517] ? __x64_sys_sendfile64+0xa0/0xa0 [ 512.579818][T22517] ? lockdep_hardirqs_on+0x95/0x140 [ 512.585031][T22517] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 512.591026][T22517] do_syscall_64+0x44/0xd0 [ 512.595462][T22517] entry_SYSCALL_64_after_hwframe+0x44/0xae 03:42:03 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x80000) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x17, 0xfff, 0x6, "f8ba2465b23a5bb3b18922086cd95b17d148145866a845"}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/22, 0x16}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/154, 0x9a}], 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) r5 = fanotify_init(0x8, 0x2) splice(r4, &(0x7f0000000840)=0x1, r5, &(0x7f0000000880)=0x3f, 0x0, 0x8) [ 512.601362][T22517] RIP: 0033:0x7f4e83dcaa39 [ 512.602142][ T25] audit: type=1804 audit(1635046922.515:285): pid=22507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/650/file0" dev="sda1" ino=14019 res=1 errno=0 [ 512.605791][T22517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.605809][T22517] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 512.605832][T22517] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 512.605847][T22517] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 512.605859][T22517] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.605872][T22517] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 512.605885][T22517] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 512.638139][T22528] loop3: detected capacity change from 0 to 8 [ 512.777252][T22528] loop3: detected capacity change from 0 to 8 03:42:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x35, 0x8000, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) fremovexattr(r4, &(0x7f0000000000)=@random={'system.', '--$\\]{\x0e#-\x00'}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 75) 03:42:03 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 512.891027][T22541] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:03 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'geneve1\x00', {}, 0x80}) 03:42:03 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d00ef660000001400060076657468115f746f5f7465000400000014000400"/45], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000e8aba7a1aaf80d776059637fcfa1400d1d61ff572d6480aa21d21649f3d2589aba0f657f4c2a445d28d4488ffd1e4b375418fc5b19aa92654b9b426ba79862a5686eb2fb38aa62ff33ca3301800000c44673fe73d39e5a", @ANYBLOB="00022dbd7000fddbdf25dbd11583", @ANYRES32, @ANYBLOB="dd5fc7164623b628476707ed53691e55e4f5e7ffe1fdda8d680e53da4b5d6b9f12446d68ecb812e7f92e2ed49631c47113e590baf37296238736b5fd8af325707bf84da34ad198fe96574d9179d657c806e6"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x48880) [ 513.080313][ T25] audit: type=1800 audit(1635046923.515:286): pid=22545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14866 res=0 errno=0 [ 513.117987][T22555] FAULT_INJECTION: forcing a failure. [ 513.117987][T22555] name failslab, interval 1, probability 0, space 0, times 0 [ 513.130680][T22555] CPU: 0 PID: 22555 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 513.139456][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.149521][T22555] Call Trace: [ 513.152813][T22555] dump_stack_lvl+0x201/0x2d8 [ 513.157511][T22555] ? show_regs_print_info+0x12/0x12 [ 513.162724][T22555] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 513.168488][T22555] should_fail+0x384/0x4b0 [ 513.172931][T22555] ? mempool_alloc_slab+0x49/0x60 [ 513.177971][T22555] should_failslab+0x5/0x20 [ 513.182490][T22555] kmem_cache_alloc+0x74/0x300 [ 513.187271][T22555] ? mempool_free+0x360/0x360 [ 513.191958][T22555] mempool_alloc_slab+0x49/0x60 [ 513.196825][T22555] mempool_alloc+0x179/0x6d0 [ 513.201435][T22555] ? submit_bio_noacct+0xa13/0xa90 [ 513.206564][T22555] ? mempool_resize+0x8f0/0x8f0 [ 513.211435][T22555] ? blk_put_request+0x20/0x20 [ 513.216224][T22555] bio_alloc_bioset+0x12e/0x8a0 [ 513.221096][T22555] submit_bh_wbc+0x1c6/0x680 [ 513.225712][T22555] ? submit_bio_noacct+0xa90/0xa90 [ 513.230857][T22555] __block_write_full_page+0x8fb/0x10a0 [ 513.236429][T22555] ? mark_buffer_write_io_error+0x340/0x340 [ 513.242346][T22555] ? blkdev_fallocate+0x3d0/0x3d0 [ 513.247386][T22555] __writepage+0x60/0x120 [ 513.251735][T22555] write_cache_pages+0xa02/0xf80 [ 513.256703][T22555] ? generic_writepages+0x160/0x160 [ 513.261922][T22555] ? tag_pages_for_writeback+0x690/0x690 [ 513.267587][T22555] ? __lock_acquire+0x1382/0x2b00 [ 513.272633][T22555] generic_writepages+0xfb/0x160 [ 513.277591][T22555] ? trace_wbc_writepage+0x270/0x270 [ 513.282900][T22555] ? rcu_read_lock_sched_held+0x89/0x130 [ 513.288546][T22555] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 513.294542][T22555] ? blkdev_readpage+0x20/0x20 [ 513.299328][T22555] do_writepages+0x49d/0x760 [ 513.303944][T22555] ? __writepage+0x120/0x120 [ 513.308552][T22555] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 513.314108][T22555] ? __lock_acquire+0x2b00/0x2b00 [ 513.319142][T22555] ? do_raw_spin_lock+0x151/0x8e0 [ 513.324187][T22555] ? do_raw_spin_unlock+0x134/0x8a0 [ 513.329397][T22555] ? I_BDEV+0x9/0x20 [ 513.333388][T22555] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 513.339385][T22555] filemap_fdatawrite_wbc+0x1d3/0x230 [ 513.341615][ T25] audit: type=1804 audit(1635046923.525:287): pid=22545 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/651/file0" dev="sda1" ino=14866 res=1 errno=0 [ 513.344763][T22555] file_write_and_wait_range+0x1d6/0x2d0 [ 513.344798][T22555] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 513.344843][T22555] blkdev_fsync+0x6f/0xc0 [ 513.344865][T22555] blkdev_write_iter+0x442/0x530 [ 513.344892][T22555] ? blkdev_read_iter+0x180/0x180 [ 513.344906][T22555] ? iter_file_splice_write+0x23c/0xfa0 [ 513.344931][T22555] ? do_syscall_64+0x44/0xd0 [ 513.344948][T22555] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.344976][T22555] do_iter_readv_writev+0x54f/0x740 [ 513.345005][T22555] ? generic_file_rw_checks+0x260/0x260 [ 513.423286][T22555] ? iov_iter_bvec+0xf0/0x1f0 [ 513.427977][T22555] ? bpf_lsm_file_permission+0x5/0x10 [ 513.433357][T22555] ? security_file_permission+0xe0/0x5d0 [ 513.439000][T22555] ? do_iter_write+0x174/0x7b0 [ 513.443776][T22555] do_iter_write+0x21e/0x7b0 [ 513.448387][T22555] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 513.454374][T22555] ? vfs_iter_write+0x69/0xa0 [ 513.459065][T22555] iter_file_splice_write+0x7eb/0xfa0 [ 513.464469][T22555] ? splice_from_pipe+0x210/0x210 [ 513.469498][T22555] ? generic_file_splice_read+0x529/0x760 [ 513.470695][T22563] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.475233][T22555] ? splice_shrink_spd+0xb0/0xb0 [ 513.475273][T22555] ? splice_from_pipe+0x210/0x210 [ 513.475297][T22555] direct_splice_actor+0xe6/0x1c0 [ 513.475323][T22555] splice_direct_to_actor+0x529/0xd00 [ 513.475357][T22555] ? do_splice_direct+0x3e0/0x3e0 [ 513.475383][T22555] ? pipe_to_sendpage+0x340/0x340 [ 513.475404][T22555] ? rcu_lock_release+0x9/0x20 [ 513.475425][T22555] ? bpf_lsm_file_permission+0x5/0x10 [ 513.475443][T22555] ? security_file_permission+0xe0/0x5d0 [ 513.475464][T22555] do_splice_direct+0x291/0x3e0 [ 513.475492][T22555] ? splice_direct_to_actor+0xd00/0xd00 [ 513.475523][T22555] ? bpf_lsm_file_permission+0x5/0x10 [ 513.475541][T22555] ? security_file_permission+0xe0/0x5d0 [ 513.475557][T22555] ? do_sendfile+0x6a9/0x1040 [ 513.475577][T22555] do_sendfile+0x6fe/0x1040 [ 513.475611][T22555] ? do_pwritev+0x370/0x370 [ 513.475638][T22555] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 513.475671][T22555] __se_sys_sendfile64+0x171/0x1d0 [ 513.475697][T22555] ? __x64_sys_sendfile64+0xa0/0xa0 03:42:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) (fail_nth: 1) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 513.582650][T22555] ? lockdep_hardirqs_on+0x95/0x140 [ 513.587865][T22555] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 513.593863][T22555] do_syscall_64+0x44/0xd0 [ 513.598292][T22555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.604194][T22555] RIP: 0033:0x7f4e83dcaa39 [ 513.608616][T22555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.628232][T22555] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 513.636660][T22555] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 513.644641][T22555] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 513.652615][T22555] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 513.660577][T22555] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 513.668533][T22555] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='net/icmp\x00') r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) sendfile(r3, r5, 0x0, 0x1000000000ef85) socket$packet(0x11, 0x4, 0x300) sendfile(r4, r2, 0x0, 0x20000102000001) 03:42:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 76) 03:42:04 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:04 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'wg2\x00'}) 03:42:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x52040, 0x0) [ 513.940544][T22568] FAULT_INJECTION: forcing a failure. [ 513.940544][T22568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.996121][T22577] FAULT_INJECTION: forcing a failure. [ 513.996121][T22577] name failslab, interval 1, probability 0, space 0, times 0 [ 514.009735][T22577] CPU: 0 PID: 22577 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 514.018510][T22577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.028669][T22577] Call Trace: [ 514.031956][T22577] dump_stack_lvl+0x201/0x2d8 [ 514.036648][T22577] ? show_regs_print_info+0x12/0x12 [ 514.041946][T22577] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 514.047683][T22577] should_fail+0x384/0x4b0 [ 514.052098][T22577] ? mempool_alloc_slab+0x49/0x60 [ 514.057110][T22577] should_failslab+0x5/0x20 [ 514.061622][T22577] kmem_cache_alloc+0x74/0x300 [ 514.066382][T22577] ? mempool_free+0x360/0x360 [ 514.071044][T22577] mempool_alloc_slab+0x49/0x60 [ 514.075883][T22577] mempool_alloc+0x179/0x6d0 [ 514.080466][T22577] ? submit_bio_noacct+0xa13/0xa90 [ 514.085567][T22577] ? mempool_resize+0x8f0/0x8f0 [ 514.090411][T22577] ? blk_put_request+0x20/0x20 [ 514.095169][T22577] bio_alloc_bioset+0x12e/0x8a0 [ 514.100010][T22577] submit_bh_wbc+0x1c6/0x680 [ 514.104588][T22577] ? submit_bio_noacct+0xa90/0xa90 [ 514.109699][T22577] __block_write_full_page+0x8fb/0x10a0 [ 514.115236][T22577] ? mark_buffer_write_io_error+0x340/0x340 [ 514.121113][T22577] ? blkdev_fallocate+0x3d0/0x3d0 [ 514.126126][T22577] __writepage+0x60/0x120 [ 514.130448][T22577] write_cache_pages+0xa02/0xf80 [ 514.135382][T22577] ? generic_writepages+0x160/0x160 [ 514.140572][T22577] ? tag_pages_for_writeback+0x690/0x690 [ 514.146219][T22577] ? __lock_acquire+0x1382/0x2b00 [ 514.151233][T22577] generic_writepages+0xfb/0x160 [ 514.156170][T22577] ? trace_wbc_writepage+0x270/0x270 [ 514.161444][T22577] ? rcu_read_lock_sched_held+0x89/0x130 [ 514.167077][T22577] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 514.173047][T22577] ? blkdev_readpage+0x20/0x20 [ 514.177801][T22577] do_writepages+0x49d/0x760 [ 514.182393][T22577] ? __writepage+0x120/0x120 [ 514.186969][T22577] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 514.192513][T22577] ? __lock_acquire+0x2b00/0x2b00 [ 514.197533][T22577] ? do_raw_spin_lock+0x151/0x8e0 [ 514.202560][T22577] ? do_raw_spin_unlock+0x134/0x8a0 [ 514.207750][T22577] ? I_BDEV+0x9/0x20 [ 514.211639][T22577] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 514.217617][T22577] filemap_fdatawrite_wbc+0x1d3/0x230 [ 514.222989][T22577] file_write_and_wait_range+0x1d6/0x2d0 [ 514.228612][T22577] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 514.235290][T22577] blkdev_fsync+0x6f/0xc0 [ 514.239604][T22577] blkdev_write_iter+0x442/0x530 [ 514.244531][T22577] ? blkdev_read_iter+0x180/0x180 [ 514.249539][T22577] ? iter_file_splice_write+0x23c/0xfa0 [ 514.255082][T22577] ? do_syscall_64+0x44/0xd0 [ 514.259666][T22577] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.265725][T22577] do_iter_readv_writev+0x54f/0x740 [ 514.270918][T22577] ? generic_file_rw_checks+0x260/0x260 [ 514.276452][T22577] ? iov_iter_bvec+0xf0/0x1f0 [ 514.281123][T22577] ? bpf_lsm_file_permission+0x5/0x10 [ 514.286480][T22577] ? security_file_permission+0xe0/0x5d0 [ 514.292094][T22577] ? do_iter_write+0x174/0x7b0 [ 514.296845][T22577] do_iter_write+0x21e/0x7b0 [ 514.301427][T22577] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 514.307394][T22577] ? vfs_iter_write+0x69/0xa0 [ 514.312061][T22577] iter_file_splice_write+0x7eb/0xfa0 [ 514.317438][T22577] ? splice_from_pipe+0x210/0x210 [ 514.322715][T22577] ? generic_file_splice_read+0x529/0x760 [ 514.328426][T22577] ? splice_shrink_spd+0xb0/0xb0 [ 514.333361][T22577] ? splice_from_pipe+0x210/0x210 [ 514.338463][T22577] direct_splice_actor+0xe6/0x1c0 [ 514.343476][T22577] splice_direct_to_actor+0x529/0xd00 [ 514.348843][T22577] ? do_splice_direct+0x3e0/0x3e0 [ 514.353965][T22577] ? pipe_to_sendpage+0x340/0x340 [ 514.358975][T22577] ? rcu_lock_release+0x9/0x20 [ 514.363722][T22577] ? bpf_lsm_file_permission+0x5/0x10 [ 514.369077][T22577] ? security_file_permission+0xe0/0x5d0 [ 514.374693][T22577] do_splice_direct+0x291/0x3e0 [ 514.379538][T22577] ? splice_direct_to_actor+0xd00/0xd00 [ 514.385077][T22577] ? bpf_lsm_file_permission+0x5/0x10 [ 514.390435][T22577] ? security_file_permission+0xe0/0x5d0 [ 514.396059][T22577] ? do_sendfile+0x6a9/0x1040 [ 514.400720][T22577] do_sendfile+0x6fe/0x1040 [ 514.405220][T22577] ? do_pwritev+0x370/0x370 [ 514.409715][T22577] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 514.415688][T22577] __se_sys_sendfile64+0x171/0x1d0 [ 514.420800][T22577] ? __x64_sys_sendfile64+0xa0/0xa0 [ 514.425984][T22577] ? lockdep_hardirqs_on+0x95/0x140 [ 514.431168][T22577] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 514.437135][T22577] do_syscall_64+0x44/0xd0 [ 514.441538][T22577] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.447416][T22577] RIP: 0033:0x7f4e83dcaa39 [ 514.451828][T22577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.471419][T22577] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 514.479815][T22577] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 514.487775][T22577] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 514.495729][T22577] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 514.503683][T22577] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 514.511649][T22577] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 514.523061][T22568] CPU: 0 PID: 22568 Comm: syz-executor.0 Not tainted 5.15.0-rc6-syzkaller #0 [ 514.531834][T22568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.541926][T22568] Call Trace: [ 514.545309][T22568] dump_stack_lvl+0x201/0x2d8 [ 514.550009][T22568] ? show_regs_print_info+0x12/0x12 [ 514.555222][T22568] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 514.560956][T22568] ? __might_fault+0xb8/0x110 [ 514.565664][T22568] should_fail+0x384/0x4b0 [ 514.570099][T22568] _copy_from_user+0x2d/0x170 [ 514.574793][T22568] __copy_msghdr_from_user+0xaf/0x730 [ 514.580306][T22568] ? __ia32_sys_shutdown+0x60/0x60 [ 514.585444][T22568] __sys_sendmsg+0x271/0x450 [ 514.590045][T22568] ? ____sys_sendmsg+0x910/0x910 [ 514.595023][T22568] ? __context_tracking_exit+0x7a/0xd0 [ 514.600509][T22568] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 514.606506][T22568] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 514.612505][T22568] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 514.618497][T22568] ? lockdep_hardirqs_on+0x95/0x140 [ 514.623711][T22568] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 514.629707][T22568] do_syscall_64+0x44/0xd0 [ 514.634140][T22568] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.640046][T22568] RIP: 0033:0x7f68449eaa39 [ 514.644464][T22568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 514.664060][T22568] RSP: 002b:00007f6841f60188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.672467][T22568] RAX: ffffffffffffffda RBX: 00007f6844aedf60 RCX: 00007f68449eaa39 [ 514.680425][T22568] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 514.688384][T22568] RBP: 00007f6841f601d0 R08: 0000000000000000 R09: 0000000000000000 [ 514.696345][T22568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.704304][T22568] R13: 00007ffd21d4792f R14: 00007f6841f60300 R15: 0000000000022000 03:42:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) sendfile(r1, r2, 0x0, 0xef85) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r3, 0x0, 0x20000102000003) 03:42:05 executing program 1: syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000040)=0x1) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0xc8}) 03:42:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 77) 03:42:05 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:05 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@buf={0x36, &(0x7f00000001c0)="7eceb8f6e200e45435987b22e42c003dcaedeec1d1b804dbcb31b8d9bddb52acfc1b5589ecb5880c5cc04de8cb72b3c3591206b0eeed"}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x600001, 0x100) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) writev(r4, &(0x7f0000000280)=[{&(0x7f00000008c0)="110eaa1a9896d57019effc8c79961d0f73ccf3afca3754e2e7a31f536bcb7204bed59311e29c96e1c2b663d61e5b0c0a76ea50cbddaa69f578b8600f77cf1a538ac900673696245b6de4283c979a2eccd71f9583dacf650575d1398678895da32663735b4d0cabfe7e972e59c2b4b4c9c89d0b82ca2267ad5062303e8abcb79600010506702eb912e3957e507aec4e2180699a738f6753509a12282a1d7181887f6c2e03de1da0dfe3b4efbb10e9b59301b4ef8a1d", 0xb5}, {&(0x7f0000000980)="34c30d95766fefbb7bdc40a3242505587bbc8584c2bc2003185f5ce116eea020efa91e2aae1eae2b8e848ac13c3dcedbbbc82adb1e70be8eecedba37be82545f2abda4f0a0e0fd0edd6bd03bb8e9bb91c39a2c828511aef3e684ad4c21ec0c146b9570139e31cd", 0x67}], 0x2) r7 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x44, r6}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x138, 0x10, 0x401, 0x98, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10001, 0x42a0a}, [@IFLA_LINKINFO={0x108, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xf8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_INGRESS_QOS={0x88, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x209500, 0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3fc, 0x39e4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2be5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5000000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2ed9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xad4c, 0x4}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x138}}, 0x0) bind(r1, &(0x7f0000000040)=@xdp={0x2c, 0x1, r8, 0x29}, 0x80) [ 515.088677][T22600] FAULT_INJECTION: forcing a failure. [ 515.088677][T22600] name failslab, interval 1, probability 0, space 0, times 0 [ 515.101544][T22600] CPU: 0 PID: 22600 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 515.110319][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.120385][T22600] Call Trace: [ 515.123673][T22600] dump_stack_lvl+0x201/0x2d8 [ 515.128369][T22600] ? show_regs_print_info+0x12/0x12 [ 515.133579][T22600] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 515.139329][T22600] should_fail+0x384/0x4b0 [ 515.143763][T22600] ? mempool_alloc_slab+0x49/0x60 [ 515.148811][T22600] should_failslab+0x5/0x20 [ 515.153326][T22600] kmem_cache_alloc+0x74/0x300 [ 515.158108][T22600] ? mempool_free+0x360/0x360 [ 515.162803][T22600] mempool_alloc_slab+0x49/0x60 [ 515.167667][T22600] mempool_alloc+0x179/0x6d0 [ 515.172276][T22600] ? submit_bio_noacct+0xa13/0xa90 [ 515.177404][T22600] ? mempool_resize+0x8f0/0x8f0 [ 515.182277][T22600] ? blk_put_request+0x20/0x20 [ 515.187062][T22600] bio_alloc_bioset+0x12e/0x8a0 [ 515.191944][T22600] submit_bh_wbc+0x1c6/0x680 [ 515.196549][T22600] ? submit_bio_noacct+0xa90/0xa90 [ 515.201688][T22600] __block_write_full_page+0x8fb/0x10a0 [ 515.207254][T22600] ? mark_buffer_write_io_error+0x340/0x340 [ 515.213166][T22600] ? blkdev_fallocate+0x3d0/0x3d0 [ 515.218205][T22600] __writepage+0x60/0x120 [ 515.222554][T22600] write_cache_pages+0xa02/0xf80 [ 515.227520][T22600] ? generic_writepages+0x160/0x160 [ 515.232742][T22600] ? tag_pages_for_writeback+0x690/0x690 03:42:05 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 515.238495][T22600] ? __lock_acquire+0x1382/0x2b00 [ 515.243536][T22600] generic_writepages+0xfb/0x160 [ 515.248493][T22600] ? trace_wbc_writepage+0x270/0x270 [ 515.253799][T22600] ? rcu_read_lock_sched_held+0x89/0x130 [ 515.259450][T22600] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 515.265447][T22600] ? blkdev_readpage+0x20/0x20 [ 515.270226][T22600] do_writepages+0x49d/0x760 [ 515.274834][T22600] ? __writepage+0x120/0x120 [ 515.279447][T22600] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 515.285005][T22600] ? __lock_acquire+0x2b00/0x2b00 [ 515.290042][T22600] ? do_raw_spin_lock+0x151/0x8e0 [ 515.295088][T22600] ? do_raw_spin_unlock+0x134/0x8a0 [ 515.300297][T22600] ? I_BDEV+0x9/0x20 [ 515.304207][T22600] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 515.310206][T22600] filemap_fdatawrite_wbc+0x1d3/0x230 [ 515.315591][T22600] file_write_and_wait_range+0x1d6/0x2d0 [ 515.321242][T22600] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 515.327949][T22600] blkdev_fsync+0x6f/0xc0 [ 515.332291][T22600] blkdev_write_iter+0x442/0x530 [ 515.337246][T22600] ? blkdev_read_iter+0x180/0x180 [ 515.342277][T22600] ? iter_file_splice_write+0x23c/0xfa0 [ 515.347839][T22600] ? do_syscall_64+0x44/0xd0 [ 515.352437][T22600] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.358523][T22600] do_iter_readv_writev+0x54f/0x740 [ 515.363744][T22600] ? generic_file_rw_checks+0x260/0x260 [ 515.369304][T22600] ? iov_iter_bvec+0xf0/0x1f0 [ 515.373989][T22600] ? bpf_lsm_file_permission+0x5/0x10 [ 515.379370][T22600] ? security_file_permission+0xe0/0x5d0 [ 515.385008][T22600] ? do_iter_write+0x174/0x7b0 03:42:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 515.389790][T22600] do_iter_write+0x21e/0x7b0 [ 515.394396][T22600] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 515.400386][T22600] ? vfs_iter_write+0x69/0xa0 [ 515.405074][T22600] iter_file_splice_write+0x7eb/0xfa0 [ 515.410480][T22600] ? splice_from_pipe+0x210/0x210 [ 515.415514][T22600] ? generic_file_splice_read+0x529/0x760 [ 515.421250][T22600] ? splice_shrink_spd+0xb0/0xb0 [ 515.426209][T22600] ? splice_from_pipe+0x210/0x210 [ 515.431249][T22600] direct_splice_actor+0xe6/0x1c0 [ 515.436288][T22600] splice_direct_to_actor+0x529/0xd00 [ 515.441683][T22600] ? do_splice_direct+0x3e0/0x3e0 [ 515.446720][T22600] ? pipe_to_sendpage+0x340/0x340 [ 515.451758][T22600] ? rcu_lock_release+0x9/0x20 [ 515.456532][T22600] ? bpf_lsm_file_permission+0x5/0x10 [ 515.461907][T22600] ? security_file_permission+0xe0/0x5d0 [ 515.467556][T22600] do_splice_direct+0x291/0x3e0 [ 515.472430][T22600] ? splice_direct_to_actor+0xd00/0xd00 [ 515.478002][T22600] ? bpf_lsm_file_permission+0x5/0x10 [ 515.483394][T22600] ? security_file_permission+0xe0/0x5d0 03:42:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000b40)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x06\x00\x00\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\x97\\\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2OY\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbLj[}Yb0\x91\xdf\xd3\xb2\x9c\xea\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00gwR\x8f\xc6\x85^\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f$\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xc8\xea\x837\xe3\"d\x01-\xe7;\x95\xf4\x00G\xbc\x98\x88G\xf7\x93\x0e\xd2J\x99r\xf9D\x05\xc1j\x96c\xcel+`\x16E\x87\ahX+\xad1D\xf6Ay6\x89d\xae?g\x04\x99\xd3hy\x0f\xc9\xa8\x97\x01\x00(\v\b+\x1b*i\xefE\xf1\x9cV\xb1\x11\"\xdfc\xa5E\xfc\xda\x00\x9c%\xce\x7f\xbf\x84\x98NJ\xea\xf9\x03i-\xc3p\xd5\xcf[,Y~2z\xfa\xf2N\xa6\xf4E\xfc\xfa\xfec\xb2\xcc\x8c\x9e\xc6\x01:\xd7b\xfdxX\xd5CH\xad\r\x87\xddU\x1e\x04\xaa\xca\xcci\x17O\x8eY~\xabu\x80gF\xa0^|\xef$\xa1\x19H\xa7@\x7f\b\x1a\x8c\xdbg\xe4<\x91\xf3\x0f\xdf\xf8\xe4\xea\x8c0\a\'\xe9k>\xbbe\xb5\x96\x16*\x17\xd0\xdauT1j\xe4\xe3/\xe0\b0\xd2\xfb\x05.\xea\xa1\x86\xf8j~\x11\xc2pc\xa1O\xd1\xa6\xc0\xd2\xde\x92\xc6\x82\xd5\xe4\xe5\xb1\xf9\xfd>\xb9\xb42\xee\x19+\x10\x00P\x0e \x87-\xb1\xc3\x8f\xb4>\xc6\x86\xb4\xb3\xd4}C\x93\xf0\x8amWK(o\xbbt26\xc5#*d\t\xee\xe12\xe5\x17+\x19{\xdf\xa6Y\xf8\x8esiJ\xf0I|\x9e\xf1\xa7\xa8\xea\foks\x83}\x80\xcdN*\xf6\xdf\xbf\xe3 \x95\x1c\xe9A\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\xfe\xbe\x17\xef\x82R\x85\v{~}lD\x95\xf9\xf9\xdc*\xe5%V\x95y\xbf\\\xa9\x03\xa4\x0e&\xc9\x8dj\x9458\xbf\xbf\xce\x80\x98\x1b \xfd&7\xc2Y,\xb1=g\xafp\xbb\xc4\xe1\xbb\x05\x9al_u\x9b\x12\xf4\"\x15\xe2r1\xea\x03\xa2\f\x8c!69\xb8\xb9\xd6\xf8\xf0\x89\x03\xfc5?\xd0\x11m\xa2!\xdd\xca\xb6\xc3\xfef\xad\xc4\xdb\xbd\xee\xeeDC\xcb\xd0\xf9\x9e\xc6\xf1\xd0\x88*\xbcj\xf9;<\xad\x92\xf0\xdc\xa7bS\t\xa1\x8eK\xc5c\x80\xdf\x91}n\xf8\xf1\x91M\x8c\xfe\xcca\x12p\x16\xe1\xbb\xa4\x83U\x9a\xdd$\xa6\xfa\xc6\xce\xef\f\xdf\x81\xaf\x88\x8a2\x04\xa3\xe0\xb0\xd7\xae#x\xcc\n-\f\xd2\xc8k\xc6R\x93#\xa3\x14\xb8\xf0\xf0HC\xc0 XT\xbbH\xaa\x01PX\x96D\x03\x10\xcf%\xfdb\xd0\x90!\xed~\xa9\xcex\x1a\x8e6\xa1^f\x13\xf0~\xbe\xf0\xea\x80G\xea-\xe1\xefR\xda\xeb\x10\xd1\xa4\xe9\xd9\xea\x9e\xf8*A\xdc\x12\xdcFtK\x05 \x19\x8a\xc4\x9a\xc5\x8f\x8e\xa4l\x97;\xee\x8a\r\x03\a{\x8d\x1f\xf9v\x1c*\xe2\x8d&\x95\xc9\x8d-\xa2D@%\x7fV\x8d\xbfl\v#\x92\xf6\xc1%\xb54&W\xf1d\x86Y\xb0\xb0&Ap\xe07\xfb\xb6\x9e\x99\xd9\xf7/\xb6\x12\xbaO\x0f\x86v\x0f\x83\xb8\xbb\xec\xa3\x95\xd5S\xbc\xc1;B\xb3kZ\xec\xbd\x85\x17\x83:\x16o\xbb\xa4\xf33NX\x96\x86\xf4#\xe96\x8cDl\x9blm', 0x2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 515.489033][T22600] ? do_sendfile+0x6a9/0x1040 [ 515.493720][T22600] do_sendfile+0x6fe/0x1040 [ 515.498242][T22600] ? do_pwritev+0x370/0x370 [ 515.502769][T22600] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 515.508764][T22600] __se_sys_sendfile64+0x171/0x1d0 [ 515.513886][T22600] ? __x64_sys_sendfile64+0xa0/0xa0 [ 515.519098][T22600] ? lockdep_hardirqs_on+0x95/0x140 [ 515.524306][T22600] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 515.530298][T22600] do_syscall_64+0x44/0xd0 [ 515.534728][T22600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.540630][T22600] RIP: 0033:0x7f4e83dcaa39 [ 515.545050][T22600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.564664][T22600] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 515.573100][T22600] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 515.581083][T22600] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 515.589093][T22600] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 515.597068][T22600] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 515.605045][T22600] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:06 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 515.716446][T22609] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:06 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000100)="781522d8e2db3fa5a41cc004b448df289ff529c0140b773ad5f24f6260f783666e7c964640082b3f8f3f98f807c9af3a661f3892d5cbfcc2455f934f25b6281495d8e924fda8f830b639e37ae9138dd0a5212bd544ca9bc484b6277ee722e71887e98586f16b67e9a48e66704e8ccb30cc8b7d84faa6e47bcda134b2939c875e8035da954c98055af7585fa13de71ef8437c4e854dfca847", &(0x7f00000001c0)=""/138, 0x4}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="3f672efcb9f7da9b64b5f7996cc66727", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r3 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r3, 0x0, 0x20000102000003) 03:42:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x10000, 0x7, 0x4, 0xe000, 0x2, {r2, r3/1000+60000}, {0x5, 0x0, 0x6, 0x7, 0x93, 0x3f, "24fa300e"}, 0x3, 0x3, @offset=0x66, 0x0, 0x0, r0}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, r5, 0x0, 0xffffff38) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000300)={{r7}, 0x0, 0x1c, @inherit={0x90, &(0x7f0000000240)={0x1, 0x9, 0x725b, 0x8000, {0x9, 0xd8e4, 0x7acaee78, 0xfffffffffffffff8, 0x8}, [0x0, 0x9ef, 0xc72b, 0x0, 0x77, 0xfff, 0xa498, 0x0, 0x6]}}, @devid}) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="400000000209050000000000000030000000000900010073797a310000000009150c7f943b7a1b4ae78000010073797a0100f70bcea53c8eea5e80c39ad97be22ea8ac14f7e01ae214cd10f48720016266b881e3e8ef102dad2655cbbf93507593d347ad64755da4ff9e60e160b4b8e7d12388d6c129de1c54e7340fe7e6ccd2448a5ddf76eeb8156b0ff560a5c5ea8d8a8ff3d9d28368803dcfae8b8d378e2e7babc328a7995111d2"], 0x40}, 0x1, 0x0, 0x0, 0x40890}, 0x4000000) 03:42:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 78) 03:42:06 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 515.973013][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 515.973029][ T25] audit: type=1804 audit(1635046926.556:301): pid=22608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/642/file0" dev="sda1" ino=15089 res=1 errno=0 03:42:06 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000000c0)={0xfffffffffffff800, 0x48, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x81, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r2 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2], 0x1}, 0x58) statx(0xffffffffffffff9c, &(0x7f0000001f40)='./file0\x00', 0x800, 0x10, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="8c0000003c0000022dbd7000ffdbdfbcbec6d9adbfed46dd69e38826fd8b1d49a77af7b4bfc232da979bcad51d92885d503992ecb076ca5c1440fffe68611728b6eb341622fd67001bb0abc7725afe1d416de5b321f36614e67afc20be38fe4d1010279282a49a3e0b710fe99409cacbdd8c13736ae250f12c905303369c227346a1079c8a850af833eb1fcb"], 0x8c}, {&(0x7f0000000780)=ANY=[@ANYBLOB="280000002b00000129bd7000fedbdf2508006d00", @ANYRES32=r0, @ANYBLOB="0e000b0600000000000000454e440000"], 0x28}, {&(0x7f0000001bc0)={0xec, 0x17, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="1d8c38683e457bf8abc62ed22deab198c97e428b2de8269d7f8b87dc058adffb412ba1508aafe74429988eae1398df4e23bf1124b3a01f22c0cf1fdd629d8e687fac7bf5f59cba788e123c09cbe5ca34a1ec7d1cb013c4bc1a1b474a9b6de9b23362b0a9c98fe08385c23b639862c184307c34adf7e2bad87d353d5556d027781913196ace61a526ef77efddfd60e403b94649ebde5ceba0b230623355857a6ad487ad80acc88f083bd4ee70eb1003fb3f598ddbadc0bbb210fd7714a801e0c72e47eda8a8d21bec868400b65d8d", @nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @fd=r0}, @generic]}]}, 0xec}], 0x3, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}], 0x20, 0x40000}, 0x4000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) sendfile(r0, r4, &(0x7f00000001c0)=0x1, 0x7) sendfile(r0, r1, 0x0, 0x20000102000003) r7 = syz_mount_image$ubifs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x800126a, 0x0, &(0x7f0000001880), 0x8b008, &(0x7f0000000200)={[], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'T\x10%\xb8>\xff\xfe$\xba\x9cQg\xeb\xfa\xa0'}}, {@seclabel}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) [ 516.148280][T22627] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 516.151265][ T25] audit: type=1800 audit(1635046926.636:302): pid=22624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15009 res=0 errno=0 [ 516.204511][T22633] FAULT_INJECTION: forcing a failure. [ 516.204511][T22633] name failslab, interval 1, probability 0, space 0, times 0 [ 516.217179][T22633] CPU: 1 PID: 22633 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 516.225954][T22633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.236018][T22633] Call Trace: [ 516.239303][T22633] dump_stack_lvl+0x201/0x2d8 [ 516.244004][T22633] ? show_regs_print_info+0x12/0x12 [ 516.249215][T22633] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 516.254971][T22633] should_fail+0x384/0x4b0 [ 516.259405][T22633] ? mempool_alloc_slab+0x49/0x60 [ 516.264452][T22633] should_failslab+0x5/0x20 [ 516.268967][T22633] kmem_cache_alloc+0x74/0x300 [ 516.273748][T22633] ? mempool_free+0x360/0x360 [ 516.278436][T22633] mempool_alloc_slab+0x49/0x60 [ 516.283299][T22633] mempool_alloc+0x179/0x6d0 [ 516.287896][T22633] ? __lock_acquire+0x2b00/0x2b00 [ 516.292951][T22633] ? mempool_resize+0x8f0/0x8f0 [ 516.297812][T22633] ? unlock_page_memcg+0x181/0x1c0 [ 516.302941][T22633] ? __test_set_page_writeback+0xc72/0xe80 [ 516.308774][T22633] bio_alloc_bioset+0x12e/0x8a0 [ 516.313638][T22633] ? __might_sleep+0x110/0x110 [ 516.318421][T22633] submit_bh_wbc+0x1c6/0x680 [ 516.319046][ T25] audit: type=1804 audit(1635046926.646:303): pid=22624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/654/file0" dev="sda1" ino=15009 res=1 errno=0 [ 516.323038][T22633] __block_write_full_page+0x8fb/0x10a0 [ 516.323073][T22633] ? mark_buffer_write_io_error+0x340/0x340 [ 516.323094][T22633] ? blkdev_fallocate+0x3d0/0x3d0 [ 516.323115][T22633] __writepage+0x60/0x120 [ 516.368580][T22633] write_cache_pages+0xa02/0xf80 [ 516.373552][T22633] ? generic_writepages+0x160/0x160 [ 516.378771][T22633] ? tag_pages_for_writeback+0x690/0x690 [ 516.384458][T22633] ? __lock_acquire+0x1382/0x2b00 [ 516.389498][T22633] generic_writepages+0xfb/0x160 [ 516.394451][T22633] ? trace_wbc_writepage+0x270/0x270 [ 516.399753][T22633] ? rcu_read_lock_sched_held+0x89/0x130 [ 516.405396][T22633] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 516.411389][T22633] ? blkdev_readpage+0x20/0x20 [ 516.416171][T22633] do_writepages+0x49d/0x760 [ 516.420782][T22633] ? __writepage+0x120/0x120 [ 516.425387][T22633] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 516.431027][T22633] ? __lock_acquire+0x2b00/0x2b00 [ 516.436062][T22633] ? do_raw_spin_lock+0x151/0x8e0 [ 516.437691][ T25] audit: type=1800 audit(1635046926.816:304): pid=22636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14898 res=0 errno=0 [ 516.441099][T22633] ? do_raw_spin_unlock+0x134/0x8a0 [ 516.441123][T22633] ? I_BDEV+0x9/0x20 [ 516.441142][T22633] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 516.441172][T22633] filemap_fdatawrite_wbc+0x1d3/0x230 [ 516.441196][T22633] file_write_and_wait_range+0x1d6/0x2d0 [ 516.487382][T22633] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 516.494095][T22633] blkdev_fsync+0x6f/0xc0 [ 516.498439][T22633] blkdev_write_iter+0x442/0x530 [ 516.499701][ T25] audit: type=1804 audit(1635046926.816:305): pid=22636 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/643/file0" dev="sda1" ino=14898 res=1 errno=0 [ 516.503385][T22633] ? blkdev_read_iter+0x180/0x180 [ 516.503407][T22633] ? iter_file_splice_write+0x23c/0xfa0 [ 516.503433][T22633] ? do_syscall_64+0x44/0xd0 [ 516.503452][T22633] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.503482][T22633] do_iter_readv_writev+0x54f/0x740 [ 516.547952][T22645] loop3: detected capacity change from 0 to 262153 [ 516.549075][T22633] ? generic_file_rw_checks+0x260/0x260 [ 516.549109][T22633] ? iov_iter_bvec+0xf0/0x1f0 [ 516.549131][T22633] ? bpf_lsm_file_permission+0x5/0x10 [ 516.549150][T22633] ? security_file_permission+0xe0/0x5d0 [ 516.549167][T22633] ? do_iter_write+0x174/0x7b0 [ 516.586733][T22633] do_iter_write+0x21e/0x7b0 [ 516.591347][T22633] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 516.595981][ T25] audit: type=1800 audit(1635046926.816:306): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=15186 res=0 errno=0 [ 516.597333][T22633] ? vfs_iter_write+0x69/0xa0 [ 516.597363][T22633] iter_file_splice_write+0x7eb/0xfa0 [ 516.597412][T22633] ? splice_from_pipe+0x210/0x210 [ 516.597431][T22633] ? generic_file_splice_read+0x529/0x760 [ 516.597459][T22633] ? splice_shrink_spd+0xb0/0xb0 [ 516.643304][T22633] ? splice_from_pipe+0x210/0x210 [ 516.648347][T22633] direct_splice_actor+0xe6/0x1c0 [ 516.653379][T22633] splice_direct_to_actor+0x529/0xd00 [ 516.658766][T22633] ? do_splice_direct+0x3e0/0x3e0 [ 516.663807][T22633] ? pipe_to_sendpage+0x340/0x340 [ 516.668844][T22633] ? rcu_lock_release+0x9/0x20 [ 516.673617][T22633] ? bpf_lsm_file_permission+0x5/0x10 [ 516.678999][T22633] ? security_file_permission+0xe0/0x5d0 [ 516.684643][T22633] do_splice_direct+0x291/0x3e0 [ 516.689513][T22633] ? splice_direct_to_actor+0xd00/0xd00 [ 516.695081][T22633] ? bpf_lsm_file_permission+0x5/0x10 [ 516.700461][T22633] ? security_file_permission+0xe0/0x5d0 [ 516.706101][T22633] ? do_sendfile+0x6a9/0x1040 [ 516.710785][T22633] do_sendfile+0x6fe/0x1040 [ 516.715312][T22633] ? do_pwritev+0x370/0x370 [ 516.719833][T22633] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 516.719887][ T25] audit: type=1804 audit(1635046926.816:307): pid=22639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/516/file0" dev="sda1" ino=15186 res=1 errno=0 [ 516.725819][T22633] __se_sys_sendfile64+0x171/0x1d0 [ 516.725849][T22633] ? __x64_sys_sendfile64+0xa0/0xa0 [ 516.725872][T22633] ? lockdep_hardirqs_on+0x95/0x140 [ 516.725896][T22633] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 516.725921][T22633] do_syscall_64+0x44/0xd0 [ 516.725941][T22633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.725965][T22633] RIP: 0033:0x7f4e83dcaa39 [ 516.725986][T22633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 516.806093][T22633] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 516.814520][T22633] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 516.822501][T22633] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 516.830478][T22633] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.838455][T22633] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 516.846433][T22633] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 516.918115][ T25] audit: type=1804 audit(1635046927.506:308): pid=22629 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/654/file0" dev="sda1" ino=15009 res=1 errno=0 [ 516.962802][T22631] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.006643][T22645] loop3: detected capacity change from 0 to 262153 03:42:07 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00', {}, 0x8}) 03:42:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f00000002c0)=""/83, 0x53}], 0x2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000180)=""/144, &(0x7f0000000080)=0x90) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) sendfile(r0, r5, &(0x7f0000000000)=0x10000, 0x3d) 03:42:07 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getrlimit(0xc, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 79) 03:42:07 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 517.280749][T22669] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.292710][ T25] audit: type=1800 audit(1635046927.886:309): pid=22670 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14019 res=0 errno=0 [ 517.312615][T22672] FAULT_INJECTION: forcing a failure. [ 517.312615][T22672] name failslab, interval 1, probability 0, space 0, times 0 [ 517.325805][T22672] CPU: 0 PID: 22672 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 517.334583][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.344633][T22672] Call Trace: [ 517.347925][T22672] dump_stack_lvl+0x201/0x2d8 [ 517.352599][T22672] ? show_regs_print_info+0x12/0x12 [ 517.357784][T22672] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 517.363503][T22672] should_fail+0x384/0x4b0 [ 517.367912][T22672] ? mempool_alloc_slab+0x49/0x60 [ 517.372924][T22672] should_failslab+0x5/0x20 [ 517.377418][T22672] kmem_cache_alloc+0x74/0x300 [ 517.382184][T22672] ? mempool_free+0x360/0x360 [ 517.386848][T22672] mempool_alloc_slab+0x49/0x60 [ 517.391688][T22672] mempool_alloc+0x179/0x6d0 [ 517.396267][T22672] ? submit_bio_noacct+0xa13/0xa90 [ 517.401368][T22672] ? mempool_resize+0x8f0/0x8f0 [ 517.406207][T22672] ? blk_put_request+0x20/0x20 [ 517.410961][T22672] bio_alloc_bioset+0x12e/0x8a0 [ 517.415803][T22672] submit_bh_wbc+0x1c6/0x680 [ 517.420379][T22672] ? submit_bio_noacct+0xa90/0xa90 [ 517.425487][T22672] __block_write_full_page+0x8fb/0x10a0 [ 517.431027][T22672] ? mark_buffer_write_io_error+0x340/0x340 [ 517.436906][T22672] ? blkdev_fallocate+0x3d0/0x3d0 [ 517.441919][T22672] __writepage+0x60/0x120 [ 517.446237][T22672] write_cache_pages+0xa02/0xf80 [ 517.451172][T22672] ? generic_writepages+0x160/0x160 [ 517.456373][T22672] ? tag_pages_for_writeback+0x690/0x690 [ 517.462028][T22672] ? __lock_acquire+0x1382/0x2b00 [ 517.467059][T22672] generic_writepages+0xfb/0x160 [ 517.471999][T22672] ? trace_wbc_writepage+0x270/0x270 [ 517.477285][T22672] ? rcu_read_lock_sched_held+0x89/0x130 [ 517.482910][T22672] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 517.488880][T22672] ? blkdev_readpage+0x20/0x20 [ 517.493635][T22672] do_writepages+0x49d/0x760 [ 517.498216][T22672] ? __writepage+0x120/0x120 [ 517.502796][T22672] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 517.508324][T22672] ? __lock_acquire+0x2b00/0x2b00 [ 517.513333][T22672] ? do_raw_spin_lock+0x151/0x8e0 [ 517.518346][T22672] ? do_raw_spin_unlock+0x134/0x8a0 [ 517.523529][T22672] ? I_BDEV+0x9/0x20 [ 517.527769][T22672] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 517.533736][T22672] filemap_fdatawrite_wbc+0x1d3/0x230 [ 517.539096][T22672] file_write_and_wait_range+0x1d6/0x2d0 [ 517.544728][T22672] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 517.551401][T22672] blkdev_fsync+0x6f/0xc0 [ 517.555715][T22672] blkdev_write_iter+0x442/0x530 [ 517.560644][T22672] ? blkdev_read_iter+0x180/0x180 [ 517.565653][T22672] ? iter_file_splice_write+0x23c/0xfa0 [ 517.571196][T22672] ? do_syscall_64+0x44/0xd0 [ 517.575773][T22672] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.581848][T22672] do_iter_readv_writev+0x54f/0x740 [ 517.587039][T22672] ? generic_file_rw_checks+0x260/0x260 [ 517.592571][T22672] ? iov_iter_bvec+0xf0/0x1f0 [ 517.597232][T22672] ? bpf_lsm_file_permission+0x5/0x10 [ 517.602591][T22672] ? security_file_permission+0xe0/0x5d0 [ 517.608206][T22672] ? do_iter_write+0x174/0x7b0 [ 517.612958][T22672] do_iter_write+0x21e/0x7b0 [ 517.617538][T22672] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 517.623504][T22672] ? vfs_iter_write+0x69/0xa0 [ 517.628170][T22672] iter_file_splice_write+0x7eb/0xfa0 [ 517.633545][T22672] ? splice_from_pipe+0x210/0x210 [ 517.638560][T22672] ? generic_file_splice_read+0x529/0x760 [ 517.644270][T22672] ? splice_shrink_spd+0xb0/0xb0 [ 517.649205][T22672] ? splice_from_pipe+0x210/0x210 [ 517.654215][T22672] direct_splice_actor+0xe6/0x1c0 [ 517.659231][T22672] splice_direct_to_actor+0x529/0xd00 [ 517.664598][T22672] ? do_splice_direct+0x3e0/0x3e0 [ 517.669624][T22672] ? pipe_to_sendpage+0x340/0x340 [ 517.674633][T22672] ? rcu_lock_release+0x9/0x20 [ 517.679382][T22672] ? bpf_lsm_file_permission+0x5/0x10 [ 517.684736][T22672] ? security_file_permission+0xe0/0x5d0 [ 517.690352][T22672] do_splice_direct+0x291/0x3e0 [ 517.695191][T22672] ? splice_direct_to_actor+0xd00/0xd00 [ 517.700728][T22672] ? bpf_lsm_file_permission+0x5/0x10 [ 517.706100][T22672] ? security_file_permission+0xe0/0x5d0 [ 517.711712][T22672] ? do_sendfile+0x6a9/0x1040 [ 517.716373][T22672] do_sendfile+0x6fe/0x1040 [ 517.720870][T22672] ? do_pwritev+0x370/0x370 [ 517.725359][T22672] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 517.731326][T22672] __se_sys_sendfile64+0x171/0x1d0 [ 517.736424][T22672] ? __x64_sys_sendfile64+0xa0/0xa0 [ 517.741608][T22672] ? lockdep_hardirqs_on+0x95/0x140 [ 517.746796][T22672] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 517.752762][T22672] do_syscall_64+0x44/0xd0 [ 517.757165][T22672] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.763040][T22672] RIP: 0033:0x7f4e83dcaa39 [ 517.767442][T22672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 517.787035][T22672] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 517.795430][T22672] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 517.803389][T22672] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 517.811342][T22672] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 517.819297][T22672] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 517.827341][T22672] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:08 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8000008, 0x0, 0x0, 0x80, 0x7fb552ee, 0x8, 0x6, 0x7f}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 517.893622][ T25] audit: type=1804 audit(1635046928.446:310): pid=22670 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/655/file0" dev="sda1" ino=14019 res=1 errno=0 [ 517.909675][T22676] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x4, &(0x7f0000000080)={[0x1]}, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) 03:42:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 80) 03:42:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendfile(r2, r3, 0x0, 0x39) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xfe, 0x2, 0x81, 0x8, 0x2, 0x3e, 0xffff, 0x187, 0x40, 0x214, 0x0, 0x31b, 0x38, 0x2, 0x3, 0x0, 0x4}, [{0x3, 0x7ff, 0x1, 0xa9e1, 0xffffffffffffffa9, 0x745c, 0x7, 0x35a2}, {0x7, 0x7fff, 0x100000001, 0x1, 0x100000001, 0x2, 0x1, 0x6}], "348b169d180e88992f627987d711d0969b540739677a3cdc5174e1e4ff30b871c9c6453cc81cc7e1be0ffbe31ed87781a4a1bfbc33e9d0c23685a969", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6ec) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r4 = accept4$inet(r3, 0x0, &(0x7f0000000080), 0x80000) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(0xffffffffffffffff, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000f00)={0x1, 0x200, @start={0x0, 0x1, "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", "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"}, [0x1000, 0x6, 0x0, 0xffffffff00000001, 0x3f, 0x7, 0xce, 0x5, 0x1fb700, 0x1, 0x9, 0x1ff, 0x8000, 0x1, 0x4, 0x735f, 0x3, 0x2, 0x5, 0x1, 0x4000000000000000, 0x0, 0x8, 0x4, 0x0, 0x20, 0x2, 0x40, 0x8, 0x5e, 0x6, 0x3, 0x0, 0x9, 0x1000, 0x0, 0x9, 0x8, 0x0, 0x0, 0x81, 0x1, 0x9, 0xfffffffffffffffd, 0x9, 0x2, 0x3, 0xecf, 0x7f, 0x9, 0x9, 0xe16b, 0x8, 0x100000001, 0x4, 0x400, 0xc1, 0x7, 0x106, 0x81, 0x9, 0x718, 0x764a91e0, 0xfffffffffffffffc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000001940)={{r6}, 0x0, 0x38, @inherit={0x58, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x81, {0x2, 0x7b, 0x2, 0x9, 0x7}, [0xb4, 0xf63a]}}, @devid=r7}) flock(r4, 0x5) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 518.263254][T22688] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 518.267340][T22692] FAULT_INJECTION: forcing a failure. [ 518.267340][T22692] name failslab, interval 1, probability 0, space 0, times 0 [ 518.286528][T22692] CPU: 1 PID: 22692 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 518.295296][T22692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.305360][T22692] Call Trace: [ 518.308647][T22692] dump_stack_lvl+0x201/0x2d8 03:42:08 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000004640)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/157, 0x9d}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f0000000740)=""/95, 0x5f}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x7, &(0x7f0000004480)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xffffffff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @rdma_args={0x48, 0x114, 0x1, {{0x10000, 0xfffffffa}, {&(0x7f0000000900)=""/188, 0xbc}, &(0x7f0000001e00)=[{&(0x7f00000009c0)=""/129, 0x81}, {&(0x7f0000000a80)=""/15, 0xf}, {&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000b00)=""/22, 0x16}, {&(0x7f0000001b80)=""/239, 0xef}, {&(0x7f0000001c80)=""/195, 0xc3}, {&(0x7f0000001d80)=""/36, 0x24}, {&(0x7f0000001dc0)=""/4, 0x4}], 0x8, 0x24, 0xfff}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6f0}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff9, 0xf8}, {&(0x7f0000001e80)=""/91, 0x5b}, &(0x7f00000042c0)=[{&(0x7f0000001f00)=""/211, 0xd3}, {&(0x7f0000002000)=""/3, 0x3}, {&(0x7f0000002040)=""/10, 0xa}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/151, 0x97}, {&(0x7f0000004140)=""/16, 0x10}, {&(0x7f0000004180)=""/143, 0x8f}, {&(0x7f0000004240)=""/30, 0x1e}, {&(0x7f0000004280)=""/41, 0x29}], 0xa, 0x1, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x353, 0x4}, &(0x7f0000004380)=0xfffffffffffffffe, &(0x7f00000043c0)=0x8000, 0x2, 0xe62, 0xffffffffffffffe1, 0x2, 0x8, 0x2038000000000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x40}, @mask_fadd={0x58, 0x114, 0x8, {{0x401, 0xd2}, &(0x7f0000004400)=0x101, &(0x7f0000004440)=0x639, 0xee0f, 0x3ff, 0x62ff, 0x0, 0x6a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x1b8, 0x852}, 0x2000c084) sendmsg$rds(r0, &(0x7f0000000b40)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/159, 0x9f}], 0x4, &(0x7f0000004980)=[@cswp={0x58, 0x114, 0x7, {{0x2, 0x7}, &(0x7f0000000080)=0x7f, &(0x7f0000000100)=0x6, 0x2, 0xfffffffffffffffc, 0xf61, 0x1, 0x1, 0x3}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x100}, &(0x7f0000004780)=0x6, &(0x7f00000047c0)=0x1, 0x432b, 0x8, 0x3, 0x8, 0x14, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0xc8, 0x1}, 0x24000804) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000046c0), 0x101, 0x4008c2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000004700)={{0x1, 0x1, 0x18, r5, @in_args={0x1}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r7, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x1008800}, 0xc, &(0x7f0000004800)={&(0x7f0000004880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080029bd7000fcdbdf25011900000000000007410000004c0000000008b465746800171b000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000a6fdf15c29a416a132d38755d869bb6a6fd9b7cd4830fc257ca27203be9cd8816848de62b671e8318b8ede36bd85430160042d2461f47a4d68d229ceb83ffeddfdd276e543ded4e683e21cefd1f02a9455cdd957ac94846a43b774de78beb71abf69076acf61facaa42990f0a2a2f1defbf8c8842053fb1ab72d8576877aac287a59fe3c7cd523fad6d0ce6357ca7acc396720"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0xef412e532833d5d4) sendfile(r3, r1, 0x0, 0xffffff38) bind$rds(r3, &(0x7f0000004680)={0x2, 0x4e23, @local}, 0x10) [ 518.313342][T22692] ? show_regs_print_info+0x12/0x12 [ 518.318549][T22692] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 518.324303][T22692] should_fail+0x384/0x4b0 [ 518.328732][T22692] ? mempool_alloc_slab+0x49/0x60 [ 518.333767][T22692] should_failslab+0x5/0x20 [ 518.338256][T22692] kmem_cache_alloc+0x74/0x300 [ 518.343011][T22692] ? mempool_free+0x360/0x360 [ 518.347676][T22692] mempool_alloc_slab+0x49/0x60 [ 518.352532][T22692] mempool_alloc+0x179/0x6d0 [ 518.357132][T22692] ? submit_bio_noacct+0xa13/0xa90 [ 518.362247][T22692] ? mempool_resize+0x8f0/0x8f0 [ 518.367191][T22692] ? blk_put_request+0x20/0x20 [ 518.371974][T22692] bio_alloc_bioset+0x12e/0x8a0 [ 518.376820][T22692] submit_bh_wbc+0x1c6/0x680 [ 518.381399][T22692] ? submit_bio_noacct+0xa90/0xa90 [ 518.386509][T22692] __block_write_full_page+0x8fb/0x10a0 [ 518.392046][T22692] ? mark_buffer_write_io_error+0x340/0x340 [ 518.397924][T22692] ? blkdev_fallocate+0x3d0/0x3d0 [ 518.402939][T22692] __writepage+0x60/0x120 [ 518.407258][T22692] write_cache_pages+0xa02/0xf80 [ 518.412193][T22692] ? generic_writepages+0x160/0x160 [ 518.417431][T22692] ? tag_pages_for_writeback+0x690/0x690 [ 518.423084][T22692] ? __lock_acquire+0x1382/0x2b00 [ 518.428101][T22692] generic_writepages+0xfb/0x160 [ 518.433036][T22692] ? trace_wbc_writepage+0x270/0x270 [ 518.438316][T22692] ? rcu_read_lock_sched_held+0x89/0x130 [ 518.443938][T22692] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 518.449914][T22692] ? blkdev_readpage+0x20/0x20 [ 518.454675][T22692] do_writepages+0x49d/0x760 [ 518.459281][T22692] ? __writepage+0x120/0x120 [ 518.463872][T22692] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 518.469402][T22692] ? __lock_acquire+0x2b00/0x2b00 [ 518.474408][T22692] ? do_raw_spin_lock+0x151/0x8e0 [ 518.479436][T22692] ? do_raw_spin_unlock+0x134/0x8a0 [ 518.484617][T22692] ? I_BDEV+0x9/0x20 [ 518.488501][T22692] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 518.494471][T22692] filemap_fdatawrite_wbc+0x1d3/0x230 [ 518.499828][T22692] file_write_and_wait_range+0x1d6/0x2d0 [ 518.505447][T22692] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 518.512122][T22692] blkdev_fsync+0x6f/0xc0 [ 518.516440][T22692] blkdev_write_iter+0x442/0x530 [ 518.521367][T22692] ? blkdev_read_iter+0x180/0x180 [ 518.526379][T22692] ? iter_file_splice_write+0x23c/0xfa0 [ 518.531924][T22692] ? do_syscall_64+0x44/0xd0 [ 518.536496][T22692] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.542553][T22692] do_iter_readv_writev+0x54f/0x740 [ 518.547745][T22692] ? generic_file_rw_checks+0x260/0x260 [ 518.553277][T22692] ? iov_iter_bvec+0xf0/0x1f0 [ 518.557939][T22692] ? bpf_lsm_file_permission+0x5/0x10 [ 518.563296][T22692] ? security_file_permission+0xe0/0x5d0 [ 518.568913][T22692] ? do_iter_write+0x174/0x7b0 [ 518.573677][T22692] do_iter_write+0x21e/0x7b0 [ 518.578260][T22692] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 518.584227][T22692] ? vfs_iter_write+0x69/0xa0 [ 518.588893][T22692] iter_file_splice_write+0x7eb/0xfa0 [ 518.594267][T22692] ? splice_from_pipe+0x210/0x210 [ 518.599277][T22692] ? generic_file_splice_read+0x529/0x760 [ 518.604987][T22692] ? splice_shrink_spd+0xb0/0xb0 [ 518.609931][T22692] ? splice_from_pipe+0x210/0x210 [ 518.614953][T22692] direct_splice_actor+0xe6/0x1c0 [ 518.619969][T22692] splice_direct_to_actor+0x529/0xd00 [ 518.625336][T22692] ? do_splice_direct+0x3e0/0x3e0 [ 518.630350][T22692] ? pipe_to_sendpage+0x340/0x340 [ 518.635361][T22692] ? rcu_lock_release+0x9/0x20 [ 518.640108][T22692] ? bpf_lsm_file_permission+0x5/0x10 [ 518.645465][T22692] ? security_file_permission+0xe0/0x5d0 [ 518.651086][T22692] do_splice_direct+0x291/0x3e0 [ 518.655938][T22692] ? splice_direct_to_actor+0xd00/0xd00 [ 518.661475][T22692] ? bpf_lsm_file_permission+0x5/0x10 [ 518.666830][T22692] ? security_file_permission+0xe0/0x5d0 [ 518.672442][T22692] ? do_sendfile+0x6a9/0x1040 [ 518.677103][T22692] do_sendfile+0x6fe/0x1040 [ 518.681605][T22692] ? do_pwritev+0x370/0x370 [ 518.686099][T22692] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 518.692068][T22692] __se_sys_sendfile64+0x171/0x1d0 [ 518.697167][T22692] ? __x64_sys_sendfile64+0xa0/0xa0 [ 518.702352][T22692] ? lockdep_hardirqs_on+0x95/0x140 [ 518.707535][T22692] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 518.713501][T22692] do_syscall_64+0x44/0xd0 [ 518.717902][T22692] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.723779][T22692] RIP: 0033:0x7f4e83dcaa39 [ 518.728181][T22692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.747770][T22692] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 518.756602][T22692] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 03:42:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r3 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x40000, 0x40) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@bridge_getlink={0x9c, 0x12, 0x100, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x48200, 0x6a4}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf868}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd900}, @IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20040051) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x8000000) syz_io_uring_complete(r7) [ 518.764562][T22692] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 518.772515][T22692] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.780468][T22692] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 518.788422][T22692] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:09 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) (fail_nth: 1) 03:42:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 81) [ 519.006677][T22697] FAULT_INJECTION: forcing a failure. [ 519.006677][T22697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.034062][T22697] CPU: 1 PID: 22697 Comm: syz-executor.2 Not tainted 5.15.0-rc6-syzkaller #0 [ 519.042860][T22697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.052922][T22697] Call Trace: [ 519.056212][T22697] dump_stack_lvl+0x201/0x2d8 [ 519.060912][T22697] ? show_regs_print_info+0x12/0x12 [ 519.066123][T22697] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 519.071853][T22697] ? __might_fault+0xb8/0x110 [ 519.076546][T22697] ? lock_release+0x592/0x810 [ 519.081241][T22697] should_fail+0x384/0x4b0 [ 519.085679][T22697] _copy_from_user+0x2d/0x170 [ 519.090371][T22697] __copy_msghdr_from_user+0xaf/0x730 [ 519.095763][T22697] ? __ia32_sys_shutdown+0x60/0x60 [ 519.100903][T22697] __sys_sendmsg+0x271/0x450 [ 519.105507][T22697] ? ____sys_sendmsg+0x910/0x910 [ 519.110480][T22697] ? __context_tracking_exit+0x7a/0xd0 [ 519.115967][T22697] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 519.121958][T22697] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 519.127963][T22697] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 519.133950][T22697] ? lockdep_hardirqs_on+0x95/0x140 [ 519.139162][T22697] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 519.145256][T22697] do_syscall_64+0x44/0xd0 [ 519.149687][T22697] entry_SYSCALL_64_after_hwframe+0x44/0xae 03:42:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480d1ba2e1f49560005c7a3211a08b9f9f2820f670c848ab4370f1fcce60", 0x1e}, {&(0x7f0000000080)="10d5c56f60098de3d83502825aead87a9d3b300fe1dbe2de98e89e5db015d6d4b0c9d6fe0933fa", 0x27}, {&(0x7f00000000c0)="db9d4be91a8da331517c84d1162c7fd6112bfdab9f1819d6a53831c236b1e0162cec8a125bbf4828b2b74a4897f0667faf5f2ff2a67f582f0c98cd67ab8f250176186a511dfc4d16cbbc03eb898a6a09005d9872daac1c00e77074a6f860cae4e1d57f469f5fde364224d149302b581d66c8a0f1bd4ca3815c0b2fb17768fc24cf9c2eae010511248d41155d06a46bf2eafed8ef6036f6b318fbb0c2cc6335f603cb9f38ece6f7d007fa2c718af4cbaacb9870cbefd96293e816e1f27b46f96bcc07e3286816de4f6f4978c2312dbe941423554ac56c25204b9c26edc5", 0xdd}], 0x3, 0x7fffffff, 0xffff8000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 519.155587][T22697] RIP: 0033:0x7f9c005f9a39 [ 519.160010][T22697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.179625][T22697] RSP: 002b:00007f9bfdb6f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.188057][T22697] RAX: ffffffffffffffda RBX: 00007f9c006fcf60 RCX: 00007f9c005f9a39 [ 519.196040][T22697] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 519.204019][T22697] RBP: 00007f9bfdb6f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.211998][T22697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.212889][T22708] FAULT_INJECTION: forcing a failure. [ 519.212889][T22708] name failslab, interval 1, probability 0, space 0, times 0 [ 519.219970][T22697] R13: 00007ffc08e3084f R14: 00007f9bfdb6f300 R15: 0000000000022000 [ 519.242108][T22708] CPU: 0 PID: 22708 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 519.250874][T22708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.260931][T22708] Call Trace: [ 519.264216][T22708] dump_stack_lvl+0x201/0x2d8 [ 519.268910][T22708] ? show_regs_print_info+0x12/0x12 [ 519.274119][T22708] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 519.279876][T22708] should_fail+0x384/0x4b0 [ 519.284311][T22708] ? mempool_alloc_slab+0x49/0x60 [ 519.289343][T22708] should_failslab+0x5/0x20 [ 519.293859][T22708] kmem_cache_alloc+0x74/0x300 [ 519.298642][T22708] ? mempool_free+0x360/0x360 [ 519.303330][T22708] mempool_alloc_slab+0x49/0x60 [ 519.308194][T22708] mempool_alloc+0x179/0x6d0 [ 519.312799][T22708] ? __lock_acquire+0x2b00/0x2b00 [ 519.317843][T22708] ? mempool_resize+0x8f0/0x8f0 [ 519.322688][T22708] ? unlock_page_memcg+0x181/0x1c0 [ 519.327791][T22708] ? __test_set_page_writeback+0xc72/0xe80 [ 519.333594][T22708] bio_alloc_bioset+0x12e/0x8a0 [ 519.338438][T22708] ? __might_sleep+0x110/0x110 [ 519.343196][T22708] submit_bh_wbc+0x1c6/0x680 [ 519.347792][T22708] __block_write_full_page+0x8fb/0x10a0 [ 519.353334][T22708] ? mark_buffer_write_io_error+0x340/0x340 [ 519.359214][T22708] ? blkdev_fallocate+0x3d0/0x3d0 [ 519.364227][T22708] __writepage+0x60/0x120 [ 519.368547][T22708] write_cache_pages+0xa02/0xf80 [ 519.373485][T22708] ? generic_writepages+0x160/0x160 [ 519.378672][T22708] ? tag_pages_for_writeback+0x690/0x690 [ 519.384303][T22708] ? __lock_acquire+0x1382/0x2b00 [ 519.389316][T22708] generic_writepages+0xfb/0x160 [ 519.394244][T22708] ? trace_wbc_writepage+0x270/0x270 [ 519.399518][T22708] ? rcu_read_lock_sched_held+0x89/0x130 [ 519.405134][T22708] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 519.411099][T22708] ? blkdev_readpage+0x20/0x20 [ 519.415850][T22708] do_writepages+0x49d/0x760 [ 519.420433][T22708] ? __writepage+0x120/0x120 [ 519.425013][T22708] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 519.430542][T22708] ? __lock_acquire+0x2b00/0x2b00 [ 519.435546][T22708] ? do_raw_spin_lock+0x151/0x8e0 [ 519.440575][T22708] ? do_raw_spin_unlock+0x134/0x8a0 [ 519.445779][T22708] ? I_BDEV+0x9/0x20 [ 519.449678][T22708] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 519.455853][T22708] filemap_fdatawrite_wbc+0x1d3/0x230 [ 519.461225][T22708] file_write_and_wait_range+0x1d6/0x2d0 [ 519.466851][T22708] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 519.473528][T22708] blkdev_fsync+0x6f/0xc0 [ 519.477848][T22708] blkdev_write_iter+0x442/0x530 [ 519.482777][T22708] ? blkdev_read_iter+0x180/0x180 [ 519.487783][T22708] ? iter_file_splice_write+0x23c/0xfa0 [ 519.493321][T22708] ? do_syscall_64+0x44/0xd0 [ 519.497897][T22708] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.503957][T22708] do_iter_readv_writev+0x54f/0x740 [ 519.509148][T22708] ? generic_file_rw_checks+0x260/0x260 [ 519.514693][T22708] ? iov_iter_bvec+0xf0/0x1f0 [ 519.519353][T22708] ? bpf_lsm_file_permission+0x5/0x10 [ 519.524720][T22708] ? security_file_permission+0xe0/0x5d0 [ 519.530334][T22708] ? do_iter_write+0x174/0x7b0 [ 519.535083][T22708] do_iter_write+0x21e/0x7b0 [ 519.539675][T22708] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 519.545639][T22708] ? vfs_iter_write+0x69/0xa0 [ 519.550307][T22708] iter_file_splice_write+0x7eb/0xfa0 [ 519.555679][T22708] ? splice_from_pipe+0x210/0x210 [ 519.560688][T22708] ? generic_file_splice_read+0x529/0x760 [ 519.566395][T22708] ? splice_shrink_spd+0xb0/0xb0 [ 519.571326][T22708] ? splice_from_pipe+0x210/0x210 [ 519.576337][T22708] direct_splice_actor+0xe6/0x1c0 [ 519.581349][T22708] splice_direct_to_actor+0x529/0xd00 [ 519.586716][T22708] ? do_splice_direct+0x3e0/0x3e0 [ 519.591905][T22708] ? pipe_to_sendpage+0x340/0x340 [ 519.596926][T22708] ? rcu_lock_release+0x9/0x20 [ 519.601688][T22708] ? bpf_lsm_file_permission+0x5/0x10 [ 519.607050][T22708] ? security_file_permission+0xe0/0x5d0 [ 519.612672][T22708] do_splice_direct+0x291/0x3e0 [ 519.617511][T22708] ? splice_direct_to_actor+0xd00/0xd00 [ 519.623053][T22708] ? bpf_lsm_file_permission+0x5/0x10 [ 519.628409][T22708] ? security_file_permission+0xe0/0x5d0 [ 519.634023][T22708] ? do_sendfile+0x6a9/0x1040 [ 519.638694][T22708] do_sendfile+0x6fe/0x1040 [ 519.643194][T22708] ? do_pwritev+0x370/0x370 [ 519.647689][T22708] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 519.653654][T22708] __se_sys_sendfile64+0x171/0x1d0 [ 519.658753][T22708] ? __x64_sys_sendfile64+0xa0/0xa0 [ 519.663938][T22708] ? lockdep_hardirqs_on+0x95/0x140 [ 519.669124][T22708] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 519.675176][T22708] do_syscall_64+0x44/0xd0 [ 519.679581][T22708] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.685459][T22708] RIP: 0033:0x7f4e83dcaa39 [ 519.689862][T22708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.709451][T22708] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 519.717849][T22708] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 519.725808][T22708] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 519.733762][T22708] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.741715][T22708] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 519.749668][T22708] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 519.886035][T22709] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:10 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x25, 0x2, 0x7f) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r2 = syz_mount_image$cramfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="ff4a361cfee23b1eb9", 0x9, 0x401}, {&(0x7f0000000140)="4a87f67d5f7f53b563fb57e1b57af28f6c13109981a1249927a7c5e0dc8c0cfe2be42a73ce27477f023866faa66c24390741dbf03aceb744bdcd6a2156ac28217d05f5511510a570d437868a255e8dc2c81c7762f5e6714b30a310814df6f176ff1541c58b6d9bbe03262f473e6b8c99068294e945cc7f4f47432b447e8a1dda40f78e2ad0bf288b8d40", 0x8a, 0x7}, {&(0x7f0000000200)="b4b9ff68df601ba26abe17f342617e3b55974b956d31dbf9a6c859371d71011247e28418ed8e9fc5cd903b781b17d54c967ab36cebfc9a8e0030047448210f6bf7af6854b55e95780f95d90355b841468a0db394a70b1dd7c69390a51e42f06c86c5ddf7aa6875b9fd702baf41ab29723ddf83a3b2cf5d316fe14ad662f5053048", 0x81}, {&(0x7f00000002c0)="1e569f553473201ba2c026b7c6cbfa2e1ab84547766e049cf8bbff246cfca5ab6ab884a3e1bf4b423bf468fb1839381ad2f37f7be1617be3f2238bf6e94ea81d096d414e5fb2f3b0cc", 0x49}], 0x4000, &(0x7f00000003c0)={[{}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x7795}}, {@smackfshat={'smackfshat', 0x3d, '+.,\xa5+(-/)(^,'}}, {@measure}, {@fowner_eq}, {@pcr={'pcr', 0x3d, 0x23}}]}) r3 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$hpfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x1, 0x6, &(0x7f00000017c0)=[{&(0x7f0000000540)="243dbc402bf6d85d20b89389afe647548623018a190d3237a2fa24ec4ab5e0c0406c515c6a103ebb89899784c010dc4a077d1e5c45784ec2ac8d51b9a0e11f0f20cfd41e3447360a1cf2e0a9b925eba9dcc0560fe47e12498374b7cfd9fdbe2d7e5aae1e6825e58c1e02e709c66957f94272774159e5a68ad28460d1ba72c28c316d556865c5a596eadf45c0ff4e602afe297612dba386f897409508636f17e79b5e98530e6d0e64b38f9a267eaa4a3e3518293fd0dce63b60ac333b019cfd5e76", 0xc1, 0x10000}, {&(0x7f0000000640)="11bfae8f5bd9626d3033d40d7c2916bf7413a0df7eebc5f344b30b590f36c2", 0x1f, 0x40}, {&(0x7f0000000680)="5156c76463a4cbcc9c609ad27ae03f5e76424d87fcbd4e44d448e95e37e257926e983ad1bf32953e2a", 0x29, 0x1}, {&(0x7f00000006c0)="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", 0x1000, 0xf734}, {&(0x7f00000016c0)="9e71aab46fd567ab83091b28b054fd3ba9d2ca6cfb9c736a46229bd207e73f54bdcea349a411cd18", 0x28, 0x10000}, {&(0x7f0000001700)="a04515d595b7f92d4e519d32847dec3edaea63d77b28a58b101dcb7636823b5a35c8d936248db044680572cd9ae952f35fb0491ed736dfe1608e66de47187a671a975d722298eba76d8841fe84cdb07c4b22ea7d34490bac6a2f1cbcce273cafe86f9e44ea6c7dea39ed4c4715006b1fdcb735a9d91e8f34a881a7719051192d910d39", 0x83, 0x7}], 0x1000, &(0x7f0000001a40)=ANY=[@ANYBLOB="5e2f5c262c6372616d66ff002c27232c6d6561737572652c407d5b7d5e267d2d2b3a5d2a2c7063722c275b5c2c66736e616d653d736d61636b66736861742c7063723d30303030303030303030303030303030303030362c00a924b79fb8f83bbf30c77df1171421ae19b31686fe9ac231"]) bind$rds(r3, &(0x7f0000000480)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) openat(r5, &(0x7f0000001880)='./file0\x00', 0x10000, 0x84) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000440)) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000001900)={0xa5, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) [ 519.973054][T22718] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:10 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 82) 03:42:10 executing program 1: syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x80) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) ftruncate(r1, 0xfffffffffffff001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffffffffffb}) 03:42:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xa, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x10) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x1, 0x30, 0x2, 0x204, 0x8, 0x0, 0x3, 0x17d, 0x5}, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) 03:42:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x5, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 520.158902][T22723] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 520.269690][T22727] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.274999][T22733] FAULT_INJECTION: forcing a failure. [ 520.274999][T22733] name failslab, interval 1, probability 0, space 0, times 0 [ 520.292524][T22733] CPU: 1 PID: 22733 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 520.301304][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.311369][T22733] Call Trace: [ 520.314657][T22733] dump_stack_lvl+0x201/0x2d8 [ 520.319359][T22733] ? show_regs_print_info+0x12/0x12 [ 520.324568][T22733] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 520.330322][T22733] should_fail+0x384/0x4b0 [ 520.334757][T22733] ? mempool_alloc_slab+0x49/0x60 [ 520.339794][T22733] should_failslab+0x5/0x20 [ 520.344306][T22733] kmem_cache_alloc+0x74/0x300 [ 520.349090][T22733] ? mempool_free+0x360/0x360 [ 520.353867][T22733] mempool_alloc_slab+0x49/0x60 [ 520.358728][T22733] mempool_alloc+0x179/0x6d0 [ 520.363331][T22733] ? __lock_acquire+0x2b00/0x2b00 [ 520.368376][T22733] ? mempool_resize+0x8f0/0x8f0 [ 520.373233][T22733] ? unlock_page_memcg+0x181/0x1c0 [ 520.378356][T22733] ? __test_set_page_writeback+0xc72/0xe80 [ 520.384271][T22733] bio_alloc_bioset+0x12e/0x8a0 [ 520.389136][T22733] ? __might_sleep+0x110/0x110 [ 520.393916][T22733] submit_bh_wbc+0x1c6/0x680 [ 520.398534][T22733] __block_write_full_page+0x8fb/0x10a0 [ 520.404101][T22733] ? mark_buffer_write_io_error+0x340/0x340 [ 520.410182][T22733] ? blkdev_fallocate+0x3d0/0x3d0 [ 520.415220][T22733] __writepage+0x60/0x120 [ 520.419565][T22733] write_cache_pages+0xa02/0xf80 [ 520.424527][T22733] ? generic_writepages+0x160/0x160 [ 520.429742][T22733] ? tag_pages_for_writeback+0x690/0x690 [ 520.435400][T22733] ? __lock_acquire+0x1382/0x2b00 [ 520.440445][T22733] generic_writepages+0xfb/0x160 [ 520.445393][T22733] ? trace_wbc_writepage+0x270/0x270 [ 520.450698][T22733] ? rcu_read_lock_sched_held+0x89/0x130 [ 520.456340][T22733] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 520.462336][T22733] ? blkdev_readpage+0x20/0x20 [ 520.467117][T22733] do_writepages+0x49d/0x760 [ 520.471735][T22733] ? __writepage+0x120/0x120 [ 520.476340][T22733] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 520.481897][T22733] ? __lock_acquire+0x2b00/0x2b00 [ 520.486931][T22733] ? do_raw_spin_lock+0x151/0x8e0 [ 520.491991][T22733] ? do_raw_spin_unlock+0x134/0x8a0 [ 520.497206][T22733] ? I_BDEV+0x9/0x20 [ 520.501108][T22733] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 520.507107][T22733] filemap_fdatawrite_wbc+0x1d3/0x230 [ 520.512494][T22733] file_write_and_wait_range+0x1d6/0x2d0 [ 520.518141][T22733] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 520.524853][T22733] blkdev_fsync+0x6f/0xc0 [ 520.529200][T22733] blkdev_write_iter+0x442/0x530 [ 520.534156][T22733] ? blkdev_read_iter+0x180/0x180 [ 520.539188][T22733] ? iter_file_splice_write+0x23c/0xfa0 [ 520.544775][T22733] ? do_syscall_64+0x44/0xd0 [ 520.549356][T22733] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.555425][T22733] do_iter_readv_writev+0x54f/0x740 [ 520.560625][T22733] ? generic_file_rw_checks+0x260/0x260 [ 520.566167][T22733] ? iov_iter_bvec+0xf0/0x1f0 [ 520.570837][T22733] ? bpf_lsm_file_permission+0x5/0x10 [ 520.576199][T22733] ? security_file_permission+0xe0/0x5d0 [ 520.581819][T22733] ? do_iter_write+0x174/0x7b0 [ 520.586574][T22733] do_iter_write+0x21e/0x7b0 [ 520.591160][T22733] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 520.597126][T22733] ? vfs_iter_write+0x69/0xa0 [ 520.601793][T22733] iter_file_splice_write+0x7eb/0xfa0 [ 520.607170][T22733] ? splice_from_pipe+0x210/0x210 [ 520.612184][T22733] ? generic_file_splice_read+0x529/0x760 [ 520.617894][T22733] ? splice_shrink_spd+0xb0/0xb0 [ 520.622834][T22733] ? splice_from_pipe+0x210/0x210 [ 520.627842][T22733] direct_splice_actor+0xe6/0x1c0 [ 520.632853][T22733] splice_direct_to_actor+0x529/0xd00 [ 520.638217][T22733] ? do_splice_direct+0x3e0/0x3e0 [ 520.643232][T22733] ? pipe_to_sendpage+0x340/0x340 [ 520.648242][T22733] ? rcu_lock_release+0x9/0x20 [ 520.653000][T22733] ? bpf_lsm_file_permission+0x5/0x10 [ 520.658358][T22733] ? security_file_permission+0xe0/0x5d0 [ 520.663979][T22733] do_splice_direct+0x291/0x3e0 [ 520.668825][T22733] ? splice_direct_to_actor+0xd00/0xd00 [ 520.674364][T22733] ? bpf_lsm_file_permission+0x5/0x10 [ 520.679721][T22733] ? security_file_permission+0xe0/0x5d0 [ 520.685335][T22733] ? do_sendfile+0x6a9/0x1040 [ 520.690002][T22733] do_sendfile+0x6fe/0x1040 [ 520.694503][T22733] ? do_pwritev+0x370/0x370 [ 520.698999][T22733] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 520.704985][T22733] __se_sys_sendfile64+0x171/0x1d0 [ 520.710103][T22733] ? __x64_sys_sendfile64+0xa0/0xa0 [ 520.715288][T22733] ? lockdep_hardirqs_on+0x95/0x140 [ 520.720471][T22733] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 520.726455][T22733] do_syscall_64+0x44/0xd0 [ 520.730860][T22733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.736737][T22733] RIP: 0033:0x7f4e83dcaa39 [ 520.741155][T22733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.760745][T22733] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 03:42:11 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 520.769157][T22733] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 520.777115][T22733] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 520.785071][T22733] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 520.793036][T22733] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 520.800999][T22733] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 520.894894][T22740] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.972130][T22743] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 521.005585][T22730] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 521.025723][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 521.025737][ T25] audit: type=1804 audit(1635046931.617:324): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/647/file0" dev="sda1" ino=15378 res=1 errno=0 03:42:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 83) 03:42:11 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x110) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_batadv\x00', @remote}) 03:42:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prlimit64(r0, 0x2, &(0x7f0000000080)={0xfff, 0xab}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x3, 0x190880) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xf7, 0x81, 0x1, 0x0, 0x0, 0x8000, 0x40022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8, 0xbde, 0x2, 0x0, 0x2, 0xdc73, 0x7ff, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r3, 0xb) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0x2000, 0x90) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) [ 521.331696][ T25] audit: type=1804 audit(1635046931.717:325): pid=22745 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/521/file0" dev="sda1" ino=14024 res=1 errno=0 [ 521.334956][T22757] FAULT_INJECTION: forcing a failure. [ 521.334956][T22757] name failslab, interval 1, probability 0, space 0, times 0 [ 521.369860][T22756] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 521.379220][T22757] CPU: 0 PID: 22757 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 521.387987][T22757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.388292][T22759] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 521.398045][T22757] Call Trace: [ 521.398061][T22757] dump_stack_lvl+0x201/0x2d8 [ 521.398091][T22757] ? show_regs_print_info+0x12/0x12 [ 521.398111][T22757] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 521.398146][T22757] should_fail+0x384/0x4b0 [ 521.398169][T22757] ? mempool_alloc_slab+0x49/0x60 [ 521.398187][T22757] should_failslab+0x5/0x20 [ 521.398203][T22757] kmem_cache_alloc+0x74/0x300 [ 521.398227][T22757] ? mempool_free+0x360/0x360 [ 521.398244][T22757] mempool_alloc_slab+0x49/0x60 [ 521.454540][T22757] mempool_alloc+0x179/0x6d0 [ 521.459159][T22757] ? submit_bio_noacct+0xa13/0xa90 [ 521.464289][T22757] ? mempool_resize+0x8f0/0x8f0 [ 521.469157][T22757] ? blk_put_request+0x20/0x20 [ 521.473943][T22757] bio_alloc_bioset+0x12e/0x8a0 [ 521.478815][T22757] submit_bh_wbc+0x1c6/0x680 [ 521.483414][T22757] ? submit_bio_noacct+0xa90/0xa90 [ 521.488554][T22757] __block_write_full_page+0x8fb/0x10a0 [ 521.494117][T22757] ? mark_buffer_write_io_error+0x340/0x340 [ 521.500023][T22757] ? blkdev_fallocate+0x3d0/0x3d0 [ 521.505061][T22757] __writepage+0x60/0x120 [ 521.509404][T22757] write_cache_pages+0xa02/0xf80 [ 521.514367][T22757] ? generic_writepages+0x160/0x160 [ 521.519576][T22757] ? tag_pages_for_writeback+0x690/0x690 [ 521.525262][T22757] ? __lock_acquire+0x1382/0x2b00 [ 521.530302][T22757] generic_writepages+0xfb/0x160 [ 521.535344][T22757] ? trace_wbc_writepage+0x270/0x270 [ 521.540650][T22757] ? rcu_read_lock_sched_held+0x89/0x130 [ 521.546388][T22757] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 521.552383][T22757] ? blkdev_readpage+0x20/0x20 [ 521.557159][T22757] do_writepages+0x49d/0x760 [ 521.561769][T22757] ? __writepage+0x120/0x120 [ 521.566374][T22757] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 521.571922][T22757] ? __lock_acquire+0x2b00/0x2b00 [ 521.576951][T22757] ? do_raw_spin_lock+0x151/0x8e0 03:42:12 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 521.581993][T22757] ? do_raw_spin_unlock+0x134/0x8a0 [ 521.587200][T22757] ? I_BDEV+0x9/0x20 [ 521.591101][T22757] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 521.597090][T22757] filemap_fdatawrite_wbc+0x1d3/0x230 [ 521.602472][T22757] file_write_and_wait_range+0x1d6/0x2d0 [ 521.608115][T22757] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 521.614823][T22757] blkdev_fsync+0x6f/0xc0 [ 521.619169][T22757] blkdev_write_iter+0x442/0x530 [ 521.624140][T22757] ? blkdev_read_iter+0x180/0x180 [ 521.629167][T22757] ? iter_file_splice_write+0x23c/0xfa0 [ 521.634725][T22757] ? do_syscall_64+0x44/0xd0 [ 521.639320][T22757] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.645406][T22757] do_iter_readv_writev+0x54f/0x740 [ 521.650616][T22757] ? generic_file_rw_checks+0x260/0x260 [ 521.656177][T22757] ? iov_iter_bvec+0xf0/0x1f0 [ 521.660866][T22757] ? bpf_lsm_file_permission+0x5/0x10 [ 521.666245][T22757] ? security_file_permission+0xe0/0x5d0 [ 521.671883][T22757] ? do_iter_write+0x174/0x7b0 [ 521.676657][T22757] do_iter_write+0x21e/0x7b0 [ 521.681265][T22757] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 521.687252][T22757] ? vfs_iter_write+0x69/0xa0 [ 521.691943][T22757] iter_file_splice_write+0x7eb/0xfa0 [ 521.697353][T22757] ? splice_from_pipe+0x210/0x210 [ 521.702388][T22757] ? generic_file_splice_read+0x529/0x760 [ 521.708123][T22757] ? splice_shrink_spd+0xb0/0xb0 [ 521.713081][T22757] ? splice_from_pipe+0x210/0x210 [ 521.718119][T22757] direct_splice_actor+0xe6/0x1c0 [ 521.723161][T22757] splice_direct_to_actor+0x529/0xd00 [ 521.728556][T22757] ? do_splice_direct+0x3e0/0x3e0 [ 521.733599][T22757] ? pipe_to_sendpage+0x340/0x340 [ 521.738638][T22757] ? rcu_lock_release+0x9/0x20 [ 521.743412][T22757] ? bpf_lsm_file_permission+0x5/0x10 [ 521.748795][T22757] ? security_file_permission+0xe0/0x5d0 [ 521.754438][T22757] do_splice_direct+0x291/0x3e0 [ 521.759304][T22757] ? splice_direct_to_actor+0xd00/0xd00 [ 521.764873][T22757] ? bpf_lsm_file_permission+0x5/0x10 [ 521.770253][T22757] ? security_file_permission+0xe0/0x5d0 [ 521.775889][T22757] ? do_sendfile+0x6a9/0x1040 [ 521.780579][T22757] do_sendfile+0x6fe/0x1040 [ 521.785112][T22757] ? do_pwritev+0x370/0x370 [ 521.789638][T22757] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 521.795633][T22757] __se_sys_sendfile64+0x171/0x1d0 [ 521.800759][T22757] ? __x64_sys_sendfile64+0xa0/0xa0 [ 521.805970][T22757] ? lockdep_hardirqs_on+0x95/0x140 [ 521.811180][T22757] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 521.817174][T22757] do_syscall_64+0x44/0xd0 [ 521.821602][T22757] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.828053][T22757] RIP: 0033:0x7f4e83dcaa39 [ 521.832482][T22757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.852100][T22757] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 521.860529][T22757] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 521.868511][T22757] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 521.876494][T22757] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 03:42:12 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88c41) r1 = getgid() r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) r5 = socket$inet6(0xa, 0x80000, 0xfffeffff) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000003a40)={0x7ff, 0x0, 0x4, 0x2024, 0x1f, {0x77359400}, {0x2, 0x2, 0x11, 0x49, 0x7, 0x3, "a8654cb9"}, 0x1, 0x1, @offset=0x1, 0x9, 0x0, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000001180)="9bdc7d1983208a2e440fe3c7fb79810c9eb1ac192422040c57f4f55c82c705b43a76230f43cee3a7a00af926996bd0a42312560f7b99a86ef07f0f7624a25375c4ebd641ed99257e9a29ff52dda31fc1653ec4ed19fbef6bd0f8cb3d26b1a57049cee6f535ac93e7c7eb6f4fb33874c6fae2f64f7bb7d59d64869ce3e87c62c4fe6b", 0x82}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="2f4668eb69aa84ed7f6da7493f7424d3a2e7bb462d2dd6406978400580ad2b963d847cdf23cffe6734520f6594af64b8530fb762d930834d4a30bd1c36d99f4d7b1de4d372d89fb93dd93c03fcce0e607a558024779b92d48a2cdeee9da074ab2675a980d82340bddc8d7e90b8a20bcd73b1ecae179d05256b264cd184a8411e59df090aa06350cecbb57eefb0772599c61ae5aadedee423dfcb4cb4963a4c217ecbad949174c40c5405c0b99f62a00db4bb7472068fc94ff63dd6b6414c539cb4e17025107e9a35b4a4e2a165c9cb934531931a465df8e48bb1a28c39c2664bb46f84866cd66bf753", 0xe9}, {&(0x7f0000002340)="6348385e04f558073549142e7770cc1adc0f1286eb670fbc30e8f7d181d4cea1f35fdff45db4a7834a690c61d8e5b616c8a85e08e71b0d12f1af8a449ea0f0140d496adad7c0dfb2f3d9c07c55b3b4d2fc64f296dc119a67e0ac1713b1ef7f1a6765e78ca904f259716db00a2d718ca98540abce9a44f07cc9022a315dc16a88d9cefd9b0e3704a4ba20668fbeae8276e52b3a2ca4bed2c431f6de0ddc70c6eb78e0761e1a9551d5fbe6dc1abe4a8f08ddc616f0248042dc06522bfeda01071bf5d11f64fc836fb3e53fc988136da4cfeb86aa6cbbf777dacad07c2b8b804e5708cc173655c28baede6b933575a31249b3b0def1cfcedb5ae52cad00ee7548c1d2ed887143e0ec3fb3195097be2d77c0beedfe341a1ac2e40b2d0b96cb67d4ac9b30b4b37880ea2c82005a8c5e2446cf9ff0d826fdb55d012626e4383b0377c5000487a808a4a6f251240b6f533422824c958c8430c431bb7a6e77fac2b38f2c3bb03f578a1c0d70f9aaecf9303e6fae4dda4e17d311ef5c03f65a3077d4bacb1daa134db5558b1eaa9f4393aa9dc7ea3605643a1f8a172873b9889be1ce1316264ae38d3b5c20acf4b544283d9a8cfcc5182ef23cff68c4ae9b9f19f3fb4e8cd6eb279146a4a5b9779927b52ab8efa4bc697d45d9a60448d725fca61591fd5d71f7531d1ea7a58e78cff5e752d852d2ff4aeb71165fcc2c112e395eeaf392c3c0d849a50cb579ba39c9508dcb3a2adefc1f0e063cf0757eb47825a49c7ee617235ffab3f08e8cc974d57d02d4a21e16f9eecc6894e9a6faaa1c350f3040c6ac986b841d5891d0a35f1f0b70e9de8fb08766503c188d2b12c9bd1c5f2ac0da86cb85f4907a88cc67048e9cee6a8ecd6b3b4e362abe99d83e59f07b6dcdffdf630d2dcfaccb7b943ac5105732152eeb82747cb3fb69c3687ccd35e3e1339ab1d434a0df3bfaff3d0a013336dd4e96a0107b19e1c09fd6c400580bc9f618bdb4f362aca5d7f62e58da315ea5cc8a80a4d4cc81bac2d537216ebca2cb84779540c972b9048c7cde4abf683eb4bb549708e389ac23f7dbf16cd68557ddd15818c4cab3756905066834c712ed48f8a97afb708ad7c96e254e92800c64c72a8ed3561fb01b830a8aaca45abd7e003812414ed29dcdcbb6aa67695699f001098322f926e21024222a209885663e52abb2438a795c775c54ec34ecb5d00d20f9e5329f629d10d8931c04cdde2c1955db8ca1819874c9b90eaa3c6dd894102568563f3b689cef01afaba8c55b3eb37dda9213cf7f54e653cd61297cbb60aa4893368cf4ec87fb24bc9f0fb6baa1d9a43615561dfe69c0250f002cbbb779782ef891ddc2dcc0ba706bdcad46bdaa4504fa34886b01ceb0c378e8e68b5cd08c8e1da1454cc27fe0cf6f176055cc0dff3575213e8077ced7f424179406bd78f1d9968a68ae2e2d6d3a5f53fb9d618cca7f1a6be41589e3e167a5046f2ce363b1073cf3f806d25cb2680f13ca070a19331af2e27d7712892e605db18ef47b80ba2415ca109fc0c9f0ebea5e4ff6e1268ed853e2d5f5f871ce823a82f74caab49f9d3d9f45074b52a61d680965ee267f209bec340f109b81ab1615849283815651bef25973b8a4f86e7ca99c3605e2ae1213f90b745634576958959851a3707874c2ae1b59bf68ead803ab5e32cddcdb6c1a3271c63c7c52d8373c49cb227f77bd39cef6efdde8835d509f98cc93c046166798865e49fe2af7e52f04b4ec9fae26b2d2f914ec792f9d5c8ff37d20516c27bfa44c8dc7c03e32db383380dd2301f1e06910d312b417ae12ef23549f07f1aece272d2a7829470e2dd93517fcf66c55c098d820d8773588b85dd45d495e41087e92bc98ccd35316743e473539c3ace4b891872346eacc8ebadd3bfb4d5dba357679acd3f3286cede8c6dbca267b380360306ba6a0a86edad388a2b7bf5f98fd9847b79bb592221b1442b79be5fa8b464a29bf8a2fc1b605b6a0c228ed4000568ad134a8465572c3252711058c9fd2af1c961b059b39457c8b83b631d709afca1f75f1a5d21cdf472cf0df4be89deafc6600641128da8c2b6b544116a94e98cd98c66f778851b23d6cfadb06a528d06b7ebdd8c2c7e6ee2ba790d7c90f2a532c0145e5c894405f826abeb9703981fbb5bbf53040794fbc63ee7b48e93a7efda627f6bf2dd27c743cbe131bde0c18801fa65f05f00639e4b87909877cd5a73b714ff5214421a627f900a0435fb91aead02620d7085a4bb323868c9f9c0246c2e15ad9d0089a15c1c1b2d17142b9c54e93cc00e25b022195a64c3cc2782cb246b81ecc15802f8389d580d8f7cf9a22119f398b3fbe6d11448b2b280dbfa5ff2ea5392da6379db9ef1762672fb6a46dfb256c55e1d36910465dae847607e7b32dab03fe6b11fe0d07c7b70e7a02db8ba94c07bfbaf9f125c2fdb03555ce7167be85e89a0f75ada986a341f0e6c49800a056bff23a271c80c02fe70831e1e8533be3648a322ef61e4f47c140e27b39889f16da1c9ea5307f18632ec9f0864d15ed16e72cbb6dbdcc27f39f37466b68b23b36751ee59d1656dac5dc57e0af9e522ee8b82dbe4fee3131c9e77ebe731c84ceee44490a0dbe51448489f41e64b12541aa7472ad9fc9997e8f5bb90c7dc00337a34a6aade3bcb2c4d3b0d625114aab741dbbf92b5b844930c3808254be6e98080751f7eceef8650b41335436412ddc2b8f31f6230c91c127b8ca735d468252e4e637c150ed216a48a9f49e637c145ea2729f1928d5fcd5fd2e24894f9d8320b68edc6ea40cb96ce7db505ac53a6273884193bf5a708b1441d74068d13bc9fcad09aea8253f3664ae3d440318d40599572b27f39b807d8f44e656f80ebe80bb035779808fce673c9adbca7871ba84e852bf8bccc271c210c645530e14d824381153164b3de34749f89348e14ef0ba017fd4fce4966eeec89346c0b75e85d76fbeada591ef8635dc5dd95abe47ce9e6fb0cf3329129e4e1dd3ae43426557e5addafd9fa5b327ee85fc6c0aa3a346fbbdaa5f990a977f6031ef82e7ccb53229cbcb1b7dc1e932946901aacc08fe2a66a90a58fc733b0e941f5f0ce277b4ef5b18ad51af09ff7e5845e4ad446a0f5f8d45333ec008c9eb03e22bfa7a66e01c4263f26e7281742af7927c4a6be6027b50c9d9d55af1efd48f434268b348295f5c7312c2cdd37dc782cf9f6cff4d27773bf7a2e73655dfc2f9267b11a473babd4101bec38009c70490c3ecf26acd00f671ae670656e5918ddb6f0451e9457b4c452d35597e46c5b396850d777ba9dc863fe2bdfaed26c0eb8dceed39832fa5e6f05b583fc7370cb3efaff87a4ff19947d912532338d8c0e6a485231f193d3a81563e858bebd2cf431d6681027833c9b26cd2c3c2295b1370f316799ca4510f0cf837f41f7e7fa7aed53bf6cbdac77b548558b384493c10d763c633e8288b7c1aae34974fa10680f95fd8a4e80100db65159dc222c45da8c817d6d4406751e7d063c4e97ea86eeb869dc7b6dbd1a0772bc8b780ad689edcf9742755fdccbfa5701458d12bcc46dfe7399b8476bce989563c870244b9f0df0f88aa886adf5d94aac91fdedaa88743012d41d070af08f0cf1ce4735edda9dfc3da8df2117cb96a8317283c4375fbf14bfac34a54abae80ddbfce6ec918d8b651c7d75d4edf4ce5a683edeb6ca31366f74f3c0b313d9c03aa7f4786803262b78a4234954e725eb01a03dc6acda3c7a628233f60ee978bf8be6aa8fd1157ad449253e4acd5118d0cedea7e26da0e673f5bbaeba9c17df241c90d780bf10414ee96766982b683384c53c34306591539c246b4c09f8ea770591a895f03cb78b3a5ce173387e72b6658c012f09a62c77784974e1443dfe40a97e28e0d23828840ee4cb88d4a9da887d3a1f793d2fe6e51d0716376d22205cae90b1a1eb0cd9e0854740798a867ed71d9e56fe9d9b24db96f38556d58cdd4efbc21effc5d9fe2727247e3583c4ad7902532320e53e6e051d4d65656d75df77e34ba4df1fe963565cf818e3d2bfd9dd50edc50d2913c9d969f392167445c9b06c3209d26d522c282d65f1eca4db0a4f75945ab3e0b078afa66474d2f27ff1c735521c86ae3c1b23555829727914a3412d73eeba0027b571d60db17615b277fee134ccfa8791401ce52cd29a8252cf122d9312466b7d22810c8de456ee3d1a81d80256617673e31d61f66ccd7dfb9cce1f2b0580feaef9e48f6c2359935ff1bf419c593d6b2c4bedbe878adc7b0e730f3179019822ca10230eec487ae59256423db58faaa171c3a7f293338965ffaad81e4983fb26d52d41f02b34dac81a968c9d6ee83310b9d10f582870e29adbf1ebcc01fe6d97b060dcef9100e9a340deb4fbbede9b3bbbb84bc4b48feac54a41d9def48131e1ccbdd144c081c13b3e8e7272b4a6453164a2d7da528e3a9d124ba30b18c3f7c007ea9068303a0ee3afcb894c676291f9ce8b069bd40d53f40a4b886f76c4a05ae58bca4805046e17c3df9b4ef970c5a6a1a530e6e28b275b03b736494973abb151c2767c6a10934d962c8f4cd5979aae7ea35df9b0a13dabd563058378302d1e40b06d8fe43a62cc67644c4a05c595620429ce2db4aa6e16e478c28e10443b9b1c02cfd36a36356882eda71bc2509257330b6f0c6652d0965dc5eb1779f9c00032d55fcc6ddf4d724076b079c6ef7437ee60579ee19e6d493ac10c08ae9de1d94d315958dd09b520891cab69e4e2d0a5b0446fc1bb19e5937dc94bef0b281bcb12a0d542eaebfd0ce596e07a80967c4ecbad3318954a1c57aa159c10c9a343d0563039cb5fa963b77a6147652a0899c1be3f01c4d675bdd39128cddc7f8847d057d3a853f1497ad9d3822ed41455d489ce3bd8b250f8d72de1a1207903f699d9607b0f3478f8ff7d24b42378532bd0fddd79ffdc6e46c57e57e59223a799784b271e49b27e83a3adad9c9857a00eee59297405c5b956a3777fa891b028cfd5bd1785ffdbdf3ac0208ed35a075b1adbccdb28f7fcb604c89827a51b3a3e18bc0f89b417ecf0cd410db0ef9ded6ddb6033e3503756392b5d390f1e95db8f57de2321c2ffc3c23b21cd4afa12a861ec090e252aefe0d3a974c393985e247b8d05aac5e3435c0a25ff77e9c007017ea5d98d8eca9368866441ecb7cdb539fe8bcd516c1d9d6e5d600226ee36b30af8fcc3fdb16598623c42444fb9662d496387905a229b2e92c5c0190ea246148cbb1ac4038893985cd3ec0eb51bad511355564791479f80a944222405ac6413e52f5927fe8c484561c2b39601c8c7cf3c4c4aebe8d87de220067d3a7539d1320986398346d62daa2dcfc287bde9360c0f1c5069c3e4e3bc1aca176e77570af78b30fe767752587ce2570685c3e7c52c938af6cc2d9f4195620d49425eb4b6f1e0c1d8c72aa2d7bdc89e2e791670b673161d8ae9a0e440e01b80abf7b4ad4b589ba114b9e24cffe0a47e205216361d7822ecad771510e50e5a27190207a14ab420750de448b624efb9aedacc5d3dd4d770fb3eb61c62ee96f147c3e6926368477c1972b3abc1c3ac7efccab93cf7fa3f5198dad6113f0abe656bf162dd6c64d0022c442d509e925cd9acab5396c7fe352fb4c6e5d6b46de68338d0e8f45bfc17e1a9c195034e8ab815e35079ce2b4874ed9873298e3ec603951b267b0063002ce944e61caa17ea32b8a5c440cb9e07bdb191de19db1a7e71ab674a9c6b40180a1064f0da27ffbd961d03a135501877840b81cac7d6e2618ce5db4673a", 0x1000}, {&(0x7f0000003340)="d7fbf5bf4a9a78f2e03b8d2b79a4446da997a4a13ee38ec9a2c5c41cc26a3191e1324fbe40314fa0699723423675d4f0b815b76c1c1684ccbbfdf3e50e0e98024d33db87a524e08d1b45eefa139acbc74e239311d7dfcce11d086efe88d4cdbb2354c5b72996caa34d01c950ce5a0f943c6d3f795e56ec1876eba2e97f4370a92a14da1e8fb3c1efb820ee0b50665ba895b9f21eee333e1ee570fac234d56ceffa3d59e5474a147d66ce78acd90c20126166d7", 0xb3}], 0x5, &(0x7f0000003480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xa8}}, {{&(0x7f0000003540)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000035c0)="6b6ab8fe6838873b45c0b810c473dd6d7e166fc3e0801d49e1fdffeb97c5f88c9e7010bff2a22bdae819509033089627dbfd0c3b9338bef91409586faf78066777e8c714fe3283eec75e5522377c857cb600a8a5f5baadb24de0cbcf051be1a2e4cd1990b55a21a8e61e09911f0e", 0x6e}, {&(0x7f0000003640)="c780c8ff98f72e89daf12092c881cef07a0e83c409a0d1a8c03cf76b60786b850360d250ddfd5827baa4e3114f82cc245e5dd41bbaaa520721c74e0f854678ea295efd4007db37120ae50a882e93564ebf54cd1f00688b34c836997a418c201cf86f907f9c29a7d009ace8b288764f69d17d4aad17ecdccfb2d1d1a61ec1913d1935a365afa3196259e669f2cd19da275dfb5c4aa051717dbde2126aadcb65bdf0c805b0d9cea891994fe28f6861f270b2550852", 0xb4}, {&(0x7f0000003700)="a01d728da89b795323d5ec54968d968829e88013834bf4a131612a6eca4f082c53cc26da0a116402c3817b6d82ac7a7c92f5117ed2cdd2b591d1cf89577d554e845128681f52cc7ac7713339c448e7f57cb132d3d1d9994a1b740bc71f5822c49c67298eefddb431600c2682710c8c230d073f51e93541e1f360c25b414842f40112fd", 0x83}, {&(0x7f0000000080)="771bd614978bacf948ffc00b568145690dfcc75f3199f777a321333fcd898b501d5e473c155d271bca3791519c048f05bb", 0x31}, {&(0x7f00000037c0)="87ad", 0x2}, {&(0x7f0000003800)="ea5793becc2c2e43cea6012af40c6ec2594013cb0bb11f1f60884b21af975a1214487398d9e358f5d74a93969c2f50e3a04047764c19b8255a10d59595bfb06966a54baa42ef696034c9f15c3df5bc2531", 0x51}, {&(0x7f0000003880)="9fc39fe66d223c93e76d0ed0247a10b50ae9242a8b450eb810c513ad429aa9538ff8b27fcf6d7c80", 0x28}, {&(0x7f00000038c0)="e8c03c4b06d5f1af3a", 0x9}, {&(0x7f0000003900)}, {&(0x7f0000003940)="74c6364c843cc02d17de", 0xa}], 0xa, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r1}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r0, r5, r6]}}], 0x88}}, {{&(0x7f0000003b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c00)="6107d359d0b9c60f00051c709501cea8823b3a03e5f5ff4b428f24d88837999d6336d6aab9a52826497321c60f30d3ec11729b3578e6191b9189e9ef764fd8b76fd2910f41d0e0947336576b3d982861585fe96228d9a82769845d2af6659676a48475668aa6671ded28cfc537554094482cbf24dfd7790d7650230f7a6dc640ca6a6f68ddc4917054c16eae5f2303af0b501ee326f6e8b463ba583e182c5f6456117e26af", 0xa5}, {&(0x7f0000003cc0)="9843e6e39f423031062385f0ed6c40bca11810d8cc469dbf248279cd0f2bbef3312759a0a3bf6a873aa24bfe87cbdcd417eed86d84", 0x35}], 0x2, 0x0, 0x0, 0x10}}], 0x3, 0x800) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r0}, "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"}) socket$inet_udp(0x2, 0x2, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x200) sendfile(r7, r8, 0x0, 0xef85) r9 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r9, r7, 0x0, 0xffffff38) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff9}) 03:42:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 521.884476][T22757] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 521.892462][T22757] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:12 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @nl=@unspec, @qipcrtr={0x2a, 0x3}, @sco={0x1f, @none}, 0xfff8, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)='geneve0\x00', 0x5, 0x2f2, 0xa1c}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28158}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="68010000", @ANYRES16=r1, @ANYBLOB="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"/434], 0x168}, 0x1, 0x0, 0x0, 0x20008000}, 0xa669f9434769aafe) listen(r0, 0x3) [ 522.006680][T22772] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 84) [ 522.043220][ T25] audit: type=1800 audit(1635046932.637:326): pid=22773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14024 res=0 errno=0 [ 522.089810][T22774] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:12 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 522.166319][ T25] audit: type=1804 audit(1635046932.637:327): pid=22773 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/522/file0" dev="sda1" ino=14024 res=1 errno=0 [ 522.208921][T22779] FAULT_INJECTION: forcing a failure. [ 522.208921][T22779] name failslab, interval 1, probability 0, space 0, times 0 [ 522.221670][T22779] CPU: 0 PID: 22779 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 522.230448][T22779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.240521][T22779] Call Trace: [ 522.243819][T22779] dump_stack_lvl+0x201/0x2d8 [ 522.248529][T22779] ? show_regs_print_info+0x12/0x12 [ 522.253745][T22779] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 522.259504][T22779] should_fail+0x384/0x4b0 [ 522.263976][T22779] ? mempool_alloc_slab+0x49/0x60 [ 522.269015][T22779] should_failslab+0x5/0x20 [ 522.273600][T22779] kmem_cache_alloc+0x74/0x300 [ 522.278388][T22779] ? mempool_free+0x360/0x360 [ 522.283079][T22779] mempool_alloc_slab+0x49/0x60 [ 522.287946][T22779] mempool_alloc+0x179/0x6d0 [ 522.292561][T22779] ? submit_bio_noacct+0xa13/0xa90 [ 522.297694][T22779] ? mempool_resize+0x8f0/0x8f0 [ 522.302573][T22779] ? blk_put_request+0x20/0x20 [ 522.307360][T22779] bio_alloc_bioset+0x12e/0x8a0 [ 522.312235][T22779] submit_bh_wbc+0x1c6/0x680 [ 522.316843][T22779] ? submit_bio_noacct+0xa90/0xa90 [ 522.321983][T22779] __block_write_full_page+0x8fb/0x10a0 [ 522.327555][T22779] ? mark_buffer_write_io_error+0x340/0x340 [ 522.333466][T22779] ? blkdev_fallocate+0x3d0/0x3d0 [ 522.338508][T22779] __writepage+0x60/0x120 [ 522.342854][T22779] write_cache_pages+0xa02/0xf80 [ 522.347827][T22779] ? generic_writepages+0x160/0x160 [ 522.353043][T22779] ? tag_pages_for_writeback+0x690/0x690 [ 522.358711][T22779] ? __lock_acquire+0x1382/0x2b00 [ 522.363759][T22779] generic_writepages+0xfb/0x160 [ 522.368722][T22779] ? trace_wbc_writepage+0x270/0x270 [ 522.374029][T22779] ? rcu_read_lock_sched_held+0x89/0x130 [ 522.379678][T22779] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 522.385681][T22779] ? blkdev_readpage+0x20/0x20 [ 522.390473][T22779] do_writepages+0x49d/0x760 [ 522.395090][T22779] ? __writepage+0x120/0x120 [ 522.399700][T22779] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 522.405257][T22779] ? __lock_acquire+0x2b00/0x2b00 [ 522.410299][T22779] ? do_raw_spin_lock+0x151/0x8e0 [ 522.415343][T22779] ? do_raw_spin_unlock+0x134/0x8a0 [ 522.420553][T22779] ? I_BDEV+0x9/0x20 [ 522.424462][T22779] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 522.430462][T22779] filemap_fdatawrite_wbc+0x1d3/0x230 [ 522.435850][T22779] file_write_and_wait_range+0x1d6/0x2d0 [ 522.441501][T22779] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 522.448217][T22779] blkdev_fsync+0x6f/0xc0 [ 522.452560][T22779] blkdev_write_iter+0x442/0x530 [ 522.457502][T22779] ? blkdev_read_iter+0x180/0x180 [ 522.462522][T22779] ? iter_file_splice_write+0x23c/0xfa0 [ 522.468089][T22779] ? do_syscall_64+0x44/0xd0 [ 522.472683][T22779] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 522.478759][T22779] do_iter_readv_writev+0x54f/0x740 [ 522.483994][T22779] ? generic_file_rw_checks+0x260/0x260 [ 522.489550][T22779] ? iov_iter_bvec+0xf0/0x1f0 [ 522.494228][T22779] ? bpf_lsm_file_permission+0x5/0x10 [ 522.499600][T22779] ? security_file_permission+0xe0/0x5d0 [ 522.505226][T22779] ? do_iter_write+0x174/0x7b0 [ 522.510104][T22779] do_iter_write+0x21e/0x7b0 [ 522.514820][T22779] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 522.520806][T22779] ? vfs_iter_write+0x69/0xa0 [ 522.525480][T22779] iter_file_splice_write+0x7eb/0xfa0 [ 522.530871][T22779] ? splice_from_pipe+0x210/0x210 [ 522.535889][T22779] ? generic_file_splice_read+0x529/0x760 [ 522.541603][T22779] ? splice_shrink_spd+0xb0/0xb0 [ 522.546563][T22779] ? splice_from_pipe+0x210/0x210 [ 522.551752][T22779] direct_splice_actor+0xe6/0x1c0 [ 522.556767][T22779] splice_direct_to_actor+0x529/0xd00 [ 522.562186][T22779] ? do_splice_direct+0x3e0/0x3e0 [ 522.567377][T22779] ? pipe_to_sendpage+0x340/0x340 [ 522.572394][T22779] ? rcu_lock_release+0x9/0x20 [ 522.577145][T22779] ? bpf_lsm_file_permission+0x5/0x10 [ 522.582502][T22779] ? security_file_permission+0xe0/0x5d0 [ 522.588131][T22779] do_splice_direct+0x291/0x3e0 [ 522.592977][T22779] ? splice_direct_to_actor+0xd00/0xd00 [ 522.598522][T22779] ? bpf_lsm_file_permission+0x5/0x10 [ 522.603881][T22779] ? security_file_permission+0xe0/0x5d0 [ 522.609499][T22779] ? do_sendfile+0x6a9/0x1040 [ 522.614165][T22779] do_sendfile+0x6fe/0x1040 [ 522.618787][T22779] ? do_pwritev+0x370/0x370 [ 522.623282][T22779] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 522.629256][T22779] __se_sys_sendfile64+0x171/0x1d0 [ 522.634357][T22779] ? __x64_sys_sendfile64+0xa0/0xa0 [ 522.639546][T22779] ? lockdep_hardirqs_on+0x95/0x140 [ 522.644732][T22779] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 522.650703][T22779] do_syscall_64+0x44/0xd0 [ 522.655107][T22779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 522.660986][T22779] RIP: 0033:0x7f4e83dcaa39 [ 522.665392][T22779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.684984][T22779] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 522.693386][T22779] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 522.701345][T22779] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 522.709299][T22779] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.717260][T22779] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 522.725219][T22779] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 522.737249][T22784] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 85) 03:42:13 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 522.948029][ T25] audit: type=1800 audit(1635046932.717:328): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14866 res=0 errno=0 03:42:13 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x2c80, 0x55) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'netpci0\x00'}) 03:42:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getnetconf={0x14, 0x52, 0xb00, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4040885) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x1, @null, @rose={'rose', 0x0}, 0x7fffffff, 'syz0\x00', @bcast, 0xfff, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 03:42:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r4 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r4, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) sendfile(r0, r4, 0x0, 0x20000102000003) [ 523.143372][ T25] audit: type=1804 audit(1635046932.737:329): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/659/file0" dev="sda1" ino=14866 res=1 errno=0 [ 523.181072][T22798] FAULT_INJECTION: forcing a failure. [ 523.181072][T22798] name failslab, interval 1, probability 0, space 0, times 0 [ 523.193848][T22798] CPU: 0 PID: 22798 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 523.202625][T22798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.212830][T22798] Call Trace: [ 523.216122][T22798] dump_stack_lvl+0x201/0x2d8 [ 523.220824][T22798] ? show_regs_print_info+0x12/0x12 [ 523.226038][T22798] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 523.231793][T22798] should_fail+0x384/0x4b0 [ 523.236231][T22798] ? mempool_alloc_slab+0x49/0x60 [ 523.241264][T22798] should_failslab+0x5/0x20 [ 523.245777][T22798] kmem_cache_alloc+0x74/0x300 [ 523.250560][T22798] ? mempool_free+0x360/0x360 [ 523.255249][T22798] mempool_alloc_slab+0x49/0x60 [ 523.260115][T22798] mempool_alloc+0x179/0x6d0 [ 523.264739][T22798] ? submit_bio_noacct+0xa13/0xa90 [ 523.269877][T22798] ? mempool_resize+0x8f0/0x8f0 [ 523.274868][T22798] ? blk_put_request+0x20/0x20 [ 523.279659][T22798] bio_alloc_bioset+0x12e/0x8a0 [ 523.284525][T22798] submit_bh_wbc+0x1c6/0x680 [ 523.289136][T22798] ? submit_bio_noacct+0xa90/0xa90 [ 523.294278][T22798] __block_write_full_page+0x8fb/0x10a0 [ 523.299850][T22798] ? mark_buffer_write_io_error+0x340/0x340 [ 523.305755][T22798] ? blkdev_fallocate+0x3d0/0x3d0 [ 523.310794][T22798] __writepage+0x60/0x120 [ 523.315139][T22798] write_cache_pages+0xa02/0xf80 [ 523.320110][T22798] ? generic_writepages+0x160/0x160 [ 523.325328][T22798] ? tag_pages_for_writeback+0x690/0x690 [ 523.330998][T22798] ? __lock_acquire+0x1382/0x2b00 [ 523.336044][T22798] generic_writepages+0xfb/0x160 [ 523.341005][T22798] ? trace_wbc_writepage+0x270/0x270 [ 523.346312][T22798] ? rcu_read_lock_sched_held+0x89/0x130 [ 523.351953][T22798] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 523.357942][T22798] ? blkdev_readpage+0x20/0x20 [ 523.362718][T22798] do_writepages+0x49d/0x760 [ 523.367330][T22798] ? __writepage+0x120/0x120 [ 523.371937][T22798] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 523.377487][T22798] ? __lock_acquire+0x2b00/0x2b00 [ 523.382523][T22798] ? do_raw_spin_lock+0x151/0x8e0 [ 523.387566][T22798] ? do_raw_spin_unlock+0x134/0x8a0 [ 523.392769][T22798] ? I_BDEV+0x9/0x20 [ 523.396674][T22798] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 523.402672][T22798] filemap_fdatawrite_wbc+0x1d3/0x230 [ 523.408056][T22798] file_write_and_wait_range+0x1d6/0x2d0 [ 523.413701][T22798] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 523.420410][T22798] blkdev_fsync+0x6f/0xc0 [ 523.424755][T22798] blkdev_write_iter+0x442/0x530 [ 523.429709][T22798] ? blkdev_read_iter+0x180/0x180 [ 523.434739][T22798] ? iter_file_splice_write+0x23c/0xfa0 [ 523.440302][T22798] ? do_syscall_64+0x44/0xd0 [ 523.444900][T22798] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 523.450989][T22798] do_iter_readv_writev+0x54f/0x740 [ 523.456216][T22798] ? generic_file_rw_checks+0x260/0x260 [ 523.461779][T22798] ? iov_iter_bvec+0xf0/0x1f0 [ 523.466477][T22798] ? bpf_lsm_file_permission+0x5/0x10 [ 523.471860][T22798] ? security_file_permission+0xe0/0x5d0 [ 523.477507][T22798] ? do_iter_write+0x174/0x7b0 [ 523.482291][T22798] do_iter_write+0x21e/0x7b0 [ 523.486904][T22798] ? page_cache_pipe_buf_confirm+0x139/0x240 03:42:14 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setstatus(r0, 0x4, 0x400) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r2 = open(&(0x7f0000000100)='./file0\x00', 0x567a46, 0x101) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef89) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xffffff38) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x5}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r7, 0x7, 0x2}, &(0x7f0000000440)=0xc) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="60ab4fb73097a2afbaa231f4a684964ea754108f1652032b8e1dd884303fea617aef0cdf6bbe80ee41585007636f93044437282a7fca3662e8f83ca35b1d6093", 0x40}, {&(0x7f0000000180)="59de507b95dfe1acedde5501cfbd5d3ec54929a3b517438303af7c6d21458ee9d9e33efd01f8300fcf81170e1b09cb9f3542019298a1da1ff6c106448939cc8d5eddef1a039493962df9359f65631090847e0535a4ebd021f9595c85b1760a1e59a404105f51d749c1eb8585c24ee008a4551e042e2b55a4c9c34718ec9a1bf0bc8b8b05d0ce7d66a92f9b579136d56cf16a1280aeaa2fb82b8246e928a7dc018faaa487c37401631796da2741b644b00c5b688c3b241561a1c0de188e5527d9e5cafb9054e5474cf16b3a10cc053403bd9e8e", 0xd3}, {&(0x7f0000000280)="ada47530313ddf1bff1defa505c7683d4645f3022c692c539232ffb3e66482076249c37548a4", 0x26}, {&(0x7f00000002c0)="646f90e1db6cf826530e966b8ae3f7390f3ff5311cf98f9f39992200af070ff8cbc2d70cf7a9c2d05b22bcbaf7bd4e8e6291c8ea34fb9960872f8db56200cc1005bbc7210a4dfa317c996ead9696721ef53d94d73a8a566ffe095ef2e58cce3ab17a06bc611e798345820dc31de2a4bfe4f60a6c6b1a68", 0x77}], 0x4, 0x0, 0x3) [ 523.492901][T22798] ? vfs_iter_write+0x69/0xa0 [ 523.497617][T22798] iter_file_splice_write+0x7eb/0xfa0 [ 523.503026][T22798] ? splice_from_pipe+0x210/0x210 [ 523.508061][T22798] ? generic_file_splice_read+0x529/0x760 [ 523.513796][T22798] ? splice_shrink_spd+0xb0/0xb0 [ 523.518758][T22798] ? splice_from_pipe+0x210/0x210 [ 523.523795][T22798] direct_splice_actor+0xe6/0x1c0 [ 523.528835][T22798] splice_direct_to_actor+0x529/0xd00 [ 523.534230][T22798] ? do_splice_direct+0x3e0/0x3e0 [ 523.539273][T22798] ? pipe_to_sendpage+0x340/0x340 [ 523.544308][T22798] ? rcu_lock_release+0x9/0x20 [ 523.549082][T22798] ? bpf_lsm_file_permission+0x5/0x10 [ 523.554468][T22798] ? security_file_permission+0xe0/0x5d0 [ 523.560116][T22798] do_splice_direct+0x291/0x3e0 [ 523.564987][T22798] ? splice_direct_to_actor+0xd00/0xd00 [ 523.570558][T22798] ? bpf_lsm_file_permission+0x5/0x10 [ 523.575941][T22798] ? security_file_permission+0xe0/0x5d0 [ 523.581583][T22798] ? do_sendfile+0x6a9/0x1040 [ 523.586273][T22798] do_sendfile+0x6fe/0x1040 [ 523.590810][T22798] ? do_pwritev+0x370/0x370 [ 523.595335][T22798] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 523.601330][T22798] __se_sys_sendfile64+0x171/0x1d0 [ 523.606466][T22798] ? __x64_sys_sendfile64+0xa0/0xa0 [ 523.611680][T22798] ? lockdep_hardirqs_on+0x95/0x140 [ 523.616894][T22798] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 523.622896][T22798] do_syscall_64+0x44/0xd0 [ 523.627327][T22798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 523.633226][T22798] RIP: 0033:0x7f4e83dcaa39 03:42:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 523.637653][T22798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.657271][T22798] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 523.665704][T22798] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 523.673691][T22798] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 523.681680][T22798] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.689671][T22798] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 523.697658][T22798] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:14 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x5, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 523.827012][ T25] audit: type=1804 audit(1635046932.877:330): pid=22781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/659/file0" dev="sda1" ino=14866 res=1 errno=0 [ 523.866466][ T25] audit: type=1804 audit(1635046933.527:331): pid=22781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/659/file0" dev="sda1" ino=14866 res=1 errno=0 03:42:14 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00'}) 03:42:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 86) 03:42:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xa, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:14 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xe8}) [ 524.030254][T22825] FAULT_INJECTION: forcing a failure. [ 524.030254][T22825] name failslab, interval 1, probability 0, space 0, times 0 [ 524.043067][T22825] CPU: 0 PID: 22825 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 524.051842][T22825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.061911][T22825] Call Trace: [ 524.065218][T22825] dump_stack_lvl+0x201/0x2d8 [ 524.069910][T22825] ? show_regs_print_info+0x12/0x12 [ 524.075100][T22825] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 524.080820][T22825] should_fail+0x384/0x4b0 [ 524.085229][T22825] ? mempool_alloc_slab+0x49/0x60 [ 524.090244][T22825] should_failslab+0x5/0x20 [ 524.094735][T22825] kmem_cache_alloc+0x74/0x300 [ 524.099493][T22825] ? mempool_free+0x360/0x360 [ 524.104158][T22825] mempool_alloc_slab+0x49/0x60 [ 524.109002][T22825] mempool_alloc+0x179/0x6d0 [ 524.113594][T22825] ? submit_bio_noacct+0xa13/0xa90 [ 524.118696][T22825] ? mempool_resize+0x8f0/0x8f0 [ 524.123539][T22825] ? blk_put_request+0x20/0x20 [ 524.128301][T22825] bio_alloc_bioset+0x12e/0x8a0 [ 524.133145][T22825] submit_bh_wbc+0x1c6/0x680 [ 524.137728][T22825] ? submit_bio_noacct+0xa90/0xa90 [ 524.142839][T22825] __block_write_full_page+0x8fb/0x10a0 [ 524.148382][T22825] ? mark_buffer_write_io_error+0x340/0x340 [ 524.154782][T22825] ? blkdev_fallocate+0x3d0/0x3d0 [ 524.159819][T22825] __writepage+0x60/0x120 [ 524.164151][T22825] write_cache_pages+0xa02/0xf80 [ 524.169123][T22825] ? generic_writepages+0x160/0x160 [ 524.174339][T22825] ? tag_pages_for_writeback+0x690/0x690 [ 524.179980][T22825] ? __lock_acquire+0x1382/0x2b00 [ 524.184997][T22825] generic_writepages+0xfb/0x160 [ 524.189927][T22825] ? trace_wbc_writepage+0x270/0x270 [ 524.195207][T22825] ? rcu_read_lock_sched_held+0x89/0x130 [ 524.200826][T22825] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 524.206795][T22825] ? blkdev_readpage+0x20/0x20 [ 524.211553][T22825] do_writepages+0x49d/0x760 [ 524.216136][T22825] ? __writepage+0x120/0x120 [ 524.220715][T22825] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 524.226244][T22825] ? __lock_acquire+0x2b00/0x2b00 [ 524.231251][T22825] ? do_raw_spin_lock+0x151/0x8e0 [ 524.236267][T22825] ? do_raw_spin_unlock+0x134/0x8a0 [ 524.241450][T22825] ? I_BDEV+0x9/0x20 [ 524.245338][T22825] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 524.251308][T22825] filemap_fdatawrite_wbc+0x1d3/0x230 [ 524.256669][T22825] file_write_and_wait_range+0x1d6/0x2d0 [ 524.262291][T22825] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 524.268966][T22825] blkdev_fsync+0x6f/0xc0 [ 524.273282][T22825] blkdev_write_iter+0x442/0x530 [ 524.278212][T22825] ? blkdev_read_iter+0x180/0x180 [ 524.283221][T22825] ? iter_file_splice_write+0x23c/0xfa0 [ 524.288756][T22825] ? do_syscall_64+0x44/0xd0 [ 524.293353][T22825] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 524.299447][T22825] do_iter_readv_writev+0x54f/0x740 [ 524.304667][T22825] ? generic_file_rw_checks+0x260/0x260 [ 524.310219][T22825] ? iov_iter_bvec+0xf0/0x1f0 [ 524.314887][T22825] ? bpf_lsm_file_permission+0x5/0x10 [ 524.320271][T22825] ? security_file_permission+0xe0/0x5d0 [ 524.325910][T22825] ? do_iter_write+0x174/0x7b0 [ 524.330682][T22825] do_iter_write+0x21e/0x7b0 [ 524.335265][T22825] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 524.341234][T22825] ? vfs_iter_write+0x69/0xa0 [ 524.345901][T22825] iter_file_splice_write+0x7eb/0xfa0 [ 524.351279][T22825] ? splice_from_pipe+0x210/0x210 [ 524.356289][T22825] ? generic_file_splice_read+0x529/0x760 [ 524.361999][T22825] ? splice_shrink_spd+0xb0/0xb0 [ 524.366934][T22825] ? splice_from_pipe+0x210/0x210 [ 524.371947][T22825] direct_splice_actor+0xe6/0x1c0 [ 524.376962][T22825] splice_direct_to_actor+0x529/0xd00 [ 524.382338][T22825] ? do_splice_direct+0x3e0/0x3e0 [ 524.387398][T22825] ? pipe_to_sendpage+0x340/0x340 [ 524.392428][T22825] ? rcu_lock_release+0x9/0x20 [ 524.397192][T22825] ? bpf_lsm_file_permission+0x5/0x10 [ 524.402557][T22825] ? security_file_permission+0xe0/0x5d0 [ 524.408182][T22825] do_splice_direct+0x291/0x3e0 [ 524.413028][T22825] ? splice_direct_to_actor+0xd00/0xd00 [ 524.418571][T22825] ? bpf_lsm_file_permission+0x5/0x10 [ 524.423928][T22825] ? security_file_permission+0xe0/0x5d0 [ 524.429557][T22825] ? do_sendfile+0x6a9/0x1040 [ 524.434237][T22825] do_sendfile+0x6fe/0x1040 [ 524.438748][T22825] ? do_pwritev+0x370/0x370 [ 524.443254][T22825] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 524.449234][T22825] __se_sys_sendfile64+0x171/0x1d0 [ 524.454347][T22825] ? __x64_sys_sendfile64+0xa0/0xa0 [ 524.459538][T22825] ? lockdep_hardirqs_on+0x95/0x140 [ 524.464727][T22825] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 524.470698][T22825] do_syscall_64+0x44/0xd0 [ 524.475105][T22825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 524.480985][T22825] RIP: 0033:0x7f4e83dcaa39 [ 524.485392][T22825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.504980][T22825] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 524.513381][T22825] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 524.521341][T22825] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 524.529297][T22825] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.537254][T22825] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 524.545210][T22825] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:15 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 524.619208][ T25] audit: type=1804 audit(1635046933.527:332): pid=22783 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/659/file0" dev="sda1" ino=14866 res=1 errno=0 03:42:15 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_setattr(r2, &(0x7f00000000c0)={0x38, 0x2, 0x1a, 0x2, 0x8, 0x4, 0x2, 0x7, 0x2, 0x100}, 0x0) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 87) 03:42:15 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/227, 0xe3, 0x400021c1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x3c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x10, 0xe7dc, 0x3c}, 0x2c) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000180)={{0x8, 0x1}, 0x100, './file0\x00'}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x2) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, r5, 0x0, 0xffffff38) write$P9_RUNLINKAT(r5, &(0x7f0000000300)={0x7, 0x4d, 0x4}, 0x7) [ 524.840105][ T25] audit: type=1800 audit(1635046933.848:333): pid=22802 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15737 res=0 errno=0 03:42:15 executing program 1: syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xc5}) 03:42:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xb, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 524.967957][T22839] __nla_validate_parse: 8 callbacks suppressed [ 524.968037][T22839] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 525.079257][T22847] FAULT_INJECTION: forcing a failure. [ 525.079257][T22847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.092822][T22847] CPU: 1 PID: 22847 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 525.101608][T22847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.111677][T22847] Call Trace: [ 525.114968][T22847] dump_stack_lvl+0x201/0x2d8 [ 525.119674][T22847] ? show_regs_print_info+0x12/0x12 [ 525.124888][T22847] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 525.130644][T22847] should_fail+0x384/0x4b0 [ 525.135080][T22847] prepare_alloc_pages+0x1dd/0x5a0 [ 525.140217][T22847] __alloc_pages+0x161/0x580 [ 525.144834][T22847] ? __rmqueue_pcplist+0x2090/0x2090 [ 525.150128][T22847] ? __lock_acquire+0x1382/0x2b00 [ 525.155176][T22847] ? __lock_acquire+0x1382/0x2b00 [ 525.160222][T22847] alloc_pages_vma+0x668/0x1030 [ 525.165104][T22847] ? mempolicy_in_oom_domain+0x120/0x120 [ 525.170760][T22847] ? mpol_shared_policy_lookup+0x15e/0x200 [ 525.176590][T22847] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 525.182253][T22847] ? shmem_replace_page+0x10e0/0x10e0 [ 525.187671][T22847] ? mapping_get_entry+0x5bf/0x670 [ 525.192801][T22847] ? pagecache_get_page+0xe80/0xe80 [ 525.198021][T22847] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 525.204020][T22847] ? print_irqtrace_events+0x220/0x220 [ 525.209495][T22847] ? pagecache_get_page+0xbcd/0xe80 [ 525.214721][T22847] shmem_getpage_gfp+0x1583/0x3320 [ 525.219875][T22847] ? shmem_getpage+0xa0/0xa0 [ 525.224489][T22847] shmem_file_read_iter+0x2ac/0xc30 [ 525.229717][T22847] ? shmem_file_llseek+0x180/0x180 [ 525.234849][T22847] generic_file_splice_read+0x482/0x760 [ 525.240416][T22847] ? splice_shrink_spd+0xb0/0xb0 [ 525.245383][T22847] ? splice_from_pipe+0x210/0x210 [ 525.250423][T22847] ? security_file_permission+0x46b/0x5d0 [ 525.256152][T22847] ? splice_shrink_spd+0xb0/0xb0 [ 525.261089][T22847] splice_direct_to_actor+0x45f/0xd00 [ 525.266465][T22847] ? do_splice_direct+0x3e0/0x3e0 [ 525.271485][T22847] ? pipe_to_sendpage+0x340/0x340 [ 525.276501][T22847] ? rcu_lock_release+0x9/0x20 [ 525.281259][T22847] ? bpf_lsm_file_permission+0x5/0x10 [ 525.286623][T22847] ? security_file_permission+0xe0/0x5d0 [ 525.292246][T22847] do_splice_direct+0x291/0x3e0 [ 525.297092][T22847] ? splice_direct_to_actor+0xd00/0xd00 [ 525.302630][T22847] ? bpf_lsm_file_permission+0x5/0x10 [ 525.307985][T22847] ? security_file_permission+0xe0/0x5d0 [ 525.313599][T22847] ? do_sendfile+0x6a9/0x1040 [ 525.318266][T22847] do_sendfile+0x6fe/0x1040 [ 525.322764][T22847] ? do_pwritev+0x370/0x370 [ 525.327271][T22847] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 525.333254][T22847] __se_sys_sendfile64+0x171/0x1d0 [ 525.338360][T22847] ? __x64_sys_sendfile64+0xa0/0xa0 [ 525.343558][T22847] ? lockdep_hardirqs_on+0x95/0x140 [ 525.348756][T22847] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 525.354734][T22847] do_syscall_64+0x44/0xd0 [ 525.359143][T22847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 525.365022][T22847] RIP: 0033:0x7f4e83dcaa39 [ 525.369428][T22847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.389016][T22847] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 525.397419][T22847] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 525.405376][T22847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 525.413336][T22847] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.421299][T22847] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 03:42:16 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 525.429275][T22847] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:16 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) prlimit64(r0, 0xe, &(0x7f0000000280)={0xd, 0x1f7}, 0x0) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc02, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x3, 0x5e, [0x7fffffff, 0x49a2, 0x7, 0x4, 0x9, 0x8], 0x6, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/94}, &(0x7f0000000240)=0x78) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000102000003) 03:42:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 88) [ 525.525927][T22854] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.559635][T22856] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:16 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {}, 0x2}) 03:42:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 525.731439][T22859] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 525.820301][T22868] FAULT_INJECTION: forcing a failure. [ 525.820301][T22868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 525.833732][T22868] CPU: 0 PID: 22868 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 525.842512][T22868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.852582][T22868] Call Trace: [ 525.855882][T22868] dump_stack_lvl+0x201/0x2d8 [ 525.860591][T22868] ? show_regs_print_info+0x12/0x12 [ 525.865805][T22868] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 525.871554][T22868] should_fail+0x384/0x4b0 [ 525.875999][T22868] prepare_alloc_pages+0x1dd/0x5a0 [ 525.881138][T22868] __alloc_pages+0x161/0x580 [ 525.885750][T22868] ? __rmqueue_pcplist+0x2090/0x2090 [ 525.891044][T22868] ? __lock_acquire+0x1382/0x2b00 [ 525.896089][T22868] ? __lock_acquire+0x1382/0x2b00 [ 525.901135][T22868] alloc_pages_vma+0x668/0x1030 [ 525.906019][T22868] ? mempolicy_in_oom_domain+0x120/0x120 [ 525.911675][T22868] ? mpol_shared_policy_lookup+0x15e/0x200 [ 525.917933][T22868] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 525.923590][T22868] ? shmem_replace_page+0x10e0/0x10e0 [ 525.923757][T22870] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.929023][T22868] ? mapping_get_entry+0x5bf/0x670 [ 525.929053][T22868] ? pagecache_get_page+0xe80/0xe80 [ 525.929081][T22868] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 525.954608][T22868] ? print_irqtrace_events+0x220/0x220 [ 525.960086][T22868] ? pagecache_get_page+0xbcd/0xe80 [ 525.965310][T22868] shmem_getpage_gfp+0x1583/0x3320 [ 525.970463][T22868] ? shmem_getpage+0xa0/0xa0 [ 525.975073][T22868] shmem_file_read_iter+0x2ac/0xc30 [ 525.980301][T22868] ? shmem_file_llseek+0x180/0x180 [ 525.985437][T22868] generic_file_splice_read+0x482/0x760 [ 525.991010][T22868] ? splice_shrink_spd+0xb0/0xb0 [ 525.995983][T22868] ? splice_from_pipe+0x210/0x210 [ 526.001018][T22868] ? security_file_permission+0x46b/0x5d0 [ 526.006745][T22868] ? splice_shrink_spd+0xb0/0xb0 [ 526.011691][T22868] splice_direct_to_actor+0x45f/0xd00 [ 526.017090][T22868] ? do_splice_direct+0x3e0/0x3e0 [ 526.022127][T22868] ? pipe_to_sendpage+0x340/0x340 [ 526.027159][T22868] ? rcu_lock_release+0x9/0x20 [ 526.031934][T22868] ? bpf_lsm_file_permission+0x5/0x10 [ 526.037320][T22868] ? security_file_permission+0xe0/0x5d0 [ 526.038486][T22874] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.042958][T22868] do_splice_direct+0x291/0x3e0 [ 526.042999][T22868] ? splice_direct_to_actor+0xd00/0xd00 [ 526.043032][T22868] ? bpf_lsm_file_permission+0x5/0x10 03:42:16 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wlan0\x00', {}, 0x9}) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="036405d5"], 0x4) 03:42:16 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 526.043051][T22868] ? security_file_permission+0xe0/0x5d0 [ 526.043067][T22868] ? do_sendfile+0x6a9/0x1040 [ 526.043087][T22868] do_sendfile+0x6fe/0x1040 [ 526.043119][T22868] ? do_pwritev+0x370/0x370 [ 526.043143][T22868] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 526.093308][T22868] __se_sys_sendfile64+0x171/0x1d0 [ 526.098447][T22868] ? __x64_sys_sendfile64+0xa0/0xa0 [ 526.103657][T22868] ? lockdep_hardirqs_on+0x95/0x140 [ 526.108855][T22868] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 526.114833][T22868] do_syscall_64+0x44/0xd0 [ 526.119258][T22868] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 526.125136][T22868] RIP: 0033:0x7f4e83dcaa39 [ 526.129541][T22868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.149130][T22868] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 526.157551][T22868] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 03:42:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xd, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:16 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x288641) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e) socket$inet6_udp(0xa, 0x2, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) r7 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x200) sendfile(r7, r8, 0x0, 0xef85) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x4010, r9, 0x20af7000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) [ 526.165521][T22868] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 526.173485][T22868] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.181449][T22868] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 526.189431][T22868] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x100000000, 0x3288}, &(0x7f0000000080)) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x5, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x5, 0x0, 0x6, 0x1ff, 0x0, 0xfffffffe}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:16 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) sendmsg$rds(r3, &(0x7f0000003540)={&(0x7f00000002c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002980)=[{&(0x7f0000000740)=""/67, 0x43}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/57, 0x39}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000001880)=""/107, 0x6b}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/94, 0x5e}], 0x7, &(0x7f0000003340)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x3ff}, {&(0x7f0000002a00)=""/205, 0xcd}, &(0x7f0000002f80)=[{&(0x7f0000002b00)=""/9, 0x9}, {&(0x7f0000002b40)=""/138, 0x8a}, {&(0x7f0000002c00)=""/223, 0xdf}, {&(0x7f0000002d00)=""/77, 0x4d}, {&(0x7f0000002d80)=""/73, 0x49}, {&(0x7f0000002e00)=""/222, 0xde}, {&(0x7f0000002f00)=""/102, 0x66}], 0x7, 0x4c, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x2}, &(0x7f0000003000)=0x5, &(0x7f0000003040)=0x3, 0x1, 0x4, 0x8, 0x401, 0x40, 0x615}}, @rdma_args={0x48, 0x114, 0x1, {{0x4b, 0x4}, {&(0x7f0000003080)}, &(0x7f0000003180)=[{&(0x7f00000030c0)=""/129, 0x81}], 0x1, 0x54, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x10001, 0x1ff}, &(0x7f00000031c0)=0x3, &(0x7f0000003200)=0x1ea42324, 0x6, 0x2, 0x1, 0x1f, 0x2, 0x3f}}, @mask_cswp={0x58, 0x114, 0x9, {{0xa7a, 0xffffffff}, &(0x7f0000003240)=0xff, &(0x7f0000003280)=0x10001, 0x101, 0x7549, 0x5, 0x8, 0x0, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x200, 0x8000}, &(0x7f00000032c0)=0x1, &(0x7f0000003300)=0x7ff, 0x8, 0xc4, 0x7, 0x2, 0x8, 0x8}}], 0x1f0, 0x20000000}, 0x800) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x4ea1, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f00000000c0)=""/230, 0xe6}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/90, 0x5a}, {&(0x7f0000000500)=""/61, 0x3d}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000700)=""/43, 0x2b}, {&(0x7f0000000540)=""/36, 0x24}, {&(0x7f0000000580)=""/36, 0x24}], 0xa, 0x0, 0x0, 0x880}, 0x24040080) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setlease(r4, 0x400, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000006c0)=0xd7) socket$nl_generic(0x10, 0x3, 0x10) [ 526.501019][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 526.501035][ T25] audit: type=1800 audit(1635046937.088:343): pid=22890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=15767 res=0 errno=0 [ 526.504426][T22892] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 89) [ 526.514595][ T25] audit: type=1804 audit(1635046937.098:344): pid=22890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 03:42:17 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 526.644575][T22894] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.739596][T22902] FAULT_INJECTION: forcing a failure. [ 526.739596][T22902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 526.753227][T22902] CPU: 1 PID: 22902 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 526.762006][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.772072][T22902] Call Trace: [ 526.775365][T22902] dump_stack_lvl+0x201/0x2d8 [ 526.780065][T22902] ? show_regs_print_info+0x12/0x12 [ 526.785279][T22902] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 526.791115][T22902] should_fail+0x384/0x4b0 [ 526.795552][T22902] prepare_alloc_pages+0x1dd/0x5a0 [ 526.800679][T22902] __alloc_pages+0x161/0x580 [ 526.805289][T22902] ? __rmqueue_pcplist+0x2090/0x2090 [ 526.810578][T22902] ? __lock_acquire+0x1382/0x2b00 [ 526.815623][T22902] ? __lock_acquire+0x1382/0x2b00 [ 526.820671][T22902] alloc_pages_vma+0x668/0x1030 [ 526.825544][T22902] ? mempolicy_in_oom_domain+0x120/0x120 [ 526.831197][T22902] ? mpol_shared_policy_lookup+0x15e/0x200 [ 526.837022][T22902] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 526.842688][T22902] ? shmem_replace_page+0x10e0/0x10e0 [ 526.848108][T22902] ? mapping_get_entry+0x5bf/0x670 [ 526.853236][T22902] ? pagecache_get_page+0xe80/0xe80 [ 526.853584][ T25] audit: type=1800 audit(1635046937.168:345): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15738 res=0 errno=0 [ 526.858443][T22902] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 526.858472][T22902] ? print_irqtrace_events+0x220/0x220 [ 526.858495][T22902] ? pagecache_get_page+0xbcd/0xe80 [ 526.858524][T22902] shmem_getpage_gfp+0x1583/0x3320 [ 526.858569][T22902] ? shmem_getpage+0xa0/0xa0 [ 526.890296][T22905] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 526.895464][T22902] shmem_file_read_iter+0x2ac/0xc30 [ 526.895514][T22902] ? shmem_file_llseek+0x180/0x180 [ 526.895544][T22902] generic_file_splice_read+0x482/0x760 [ 526.895574][T22902] ? splice_shrink_spd+0xb0/0xb0 [ 526.895608][T22902] ? splice_from_pipe+0x210/0x210 [ 526.895630][T22902] ? security_file_permission+0x46b/0x5d0 [ 526.895651][T22902] ? splice_shrink_spd+0xb0/0xb0 [ 526.895672][T22902] splice_direct_to_actor+0x45f/0xd00 [ 526.895705][T22902] ? do_splice_direct+0x3e0/0x3e0 [ 526.895732][T22902] ? pipe_to_sendpage+0x340/0x340 [ 526.895754][T22902] ? rcu_lock_release+0x9/0x20 [ 526.895776][T22902] ? bpf_lsm_file_permission+0x5/0x10 [ 526.895795][T22902] ? security_file_permission+0xe0/0x5d0 [ 526.895824][T22902] do_splice_direct+0x291/0x3e0 [ 526.895853][T22902] ? splice_direct_to_actor+0xd00/0xd00 [ 526.895885][T22902] ? bpf_lsm_file_permission+0x5/0x10 [ 526.895902][T22902] ? security_file_permission+0xe0/0x5d0 [ 526.895920][T22902] ? do_sendfile+0x6a9/0x1040 [ 526.895941][T22902] do_sendfile+0x6fe/0x1040 [ 526.895977][T22902] ? do_pwritev+0x370/0x370 [ 526.896003][T22902] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 526.896028][T22902] __se_sys_sendfile64+0x171/0x1d0 [ 526.896053][T22902] ? __x64_sys_sendfile64+0xa0/0xa0 [ 526.896075][T22902] ? lockdep_hardirqs_on+0x95/0x140 [ 526.896099][T22902] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 526.896124][T22902] do_syscall_64+0x44/0xd0 [ 526.896146][T22902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 526.896165][T22902] RIP: 0033:0x7f4e83dcaa39 [ 526.896185][T22902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 526.896202][T22902] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 526.896224][T22902] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 526.896238][T22902] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 526.896250][T22902] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.896262][T22902] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 526.896275][T22902] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 526.923412][ T25] audit: type=1804 audit(1635046937.168:346): pid=22895 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/656/file0" dev="sda1" ino=15738 res=1 errno=0 [ 526.923482][ T25] audit: type=1804 audit(1635046937.188:347): pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 03:42:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 90) 03:42:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xe, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 526.923550][ T25] audit: type=1804 audit(1635046937.218:348): pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 [ 527.188752][T22906] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.291151][ T25] audit: type=1804 audit(1635046937.878:349): pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 03:42:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {}, 0x4be2}) [ 527.446065][ T25] audit: type=1804 audit(1635046937.878:350): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 03:42:18 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) r1 = signalfd4(r0, &(0x7f00000003c0)={[0x6725]}, 0x8, 0x800) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x80) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000380), 0x2, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x7ff, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="ea06e2804867acf7b908b37a66eceafc647f2913f5f10be35802b97b98f1fce57b2124b98363b3ce5667906e2cd6f94f82ed0178998de3568b33e571c87742dd827fd3a2d3b343e09e3a417ee3f7e22346a30283b469016fa19484ca6425f2fb85bff5ca7141345b6837c4e99f03e6ce1348cfcc1b", 0x75, 0x7}, {&(0x7f0000000280)="a713a1a1ccd76781f08302303379e6e2790e31af92458dae6bdcccfaffd4fc8bc9c21dd6aa6c8606aab821f54bf0fe9a7bfa39945fcf9c1281c22972068c85b15d25e4d0183491e5a5cfb1e2eeace15a10c95ce223c6bc1abbe0418059693d70d076e9eecacf8220ec70cd34f40c28529c5c5eeb40e6bebef7ca6932a84de5a5d0d8c4f1061a54cb0865c7f89a30de1620987583287abfe21e757381f4a3f74b82", 0xa1, 0x1}], 0x2001, &(0x7f0000000440)={[{@nodelalloc}, {@grpquota}, {@noblock_validity}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xd3}}, {@stripe={'stripe', 0x3d, 0xfbe}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@data_ordered}, {@barrier_val={'barrier', 0x3d, 0x3}}], [{@euid_lt={'euid<', r7}}, {@dont_appraise}]}) [ 527.544924][T22917] FAULT_INJECTION: forcing a failure. [ 527.544924][T22917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 527.558569][T22917] CPU: 0 PID: 22917 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 527.567350][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.577417][T22917] Call Trace: [ 527.580706][T22917] dump_stack_lvl+0x201/0x2d8 [ 527.585393][T22917] ? show_regs_print_info+0x12/0x12 [ 527.590583][T22917] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 527.596296][T22917] ? __lock_acquire+0x1382/0x2b00 [ 527.601311][T22917] should_fail+0x384/0x4b0 [ 527.605720][T22917] prepare_alloc_pages+0x1dd/0x5a0 [ 527.610826][T22917] __alloc_pages+0x161/0x580 [ 527.615424][T22917] ? __rmqueue_pcplist+0x2090/0x2090 [ 527.620701][T22917] ? __lock_acquire+0x1382/0x2b00 [ 527.625717][T22917] alloc_pages_vma+0x668/0x1030 [ 527.630563][T22917] ? mempolicy_in_oom_domain+0x120/0x120 [ 527.636185][T22917] ? mpol_shared_policy_lookup+0x15e/0x200 [ 527.641980][T22917] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 527.647605][T22917] ? shmem_replace_page+0x10e0/0x10e0 [ 527.652984][T22917] ? mapping_get_entry+0x5bf/0x670 [ 527.658086][T22917] ? pagecache_get_page+0xe80/0xe80 [ 527.663279][T22917] ? kasan_set_track+0x4c/0x80 [ 527.668044][T22917] ? kasan_set_free_info+0x1f/0x40 [ 527.673139][T22917] ? ____kasan_slab_free+0x10d/0x150 [ 527.678408][T22917] ? slab_free_freelist_hook+0x12e/0x1a0 [ 527.684030][T22917] ? kfree+0xe1/0x310 [ 527.687995][T22917] ? iter_file_splice_write+0xd3f/0xfa0 [ 527.693527][T22917] ? splice_direct_to_actor+0x529/0xd00 [ 527.699058][T22917] ? do_splice_direct+0x291/0x3e0 [ 527.704069][T22917] ? do_sendfile+0x6fe/0x1040 [ 527.708731][T22917] ? __se_sys_sendfile64+0x171/0x1d0 [ 527.714005][T22917] ? do_syscall_64+0x44/0xd0 [ 527.718581][T22917] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.724637][T22917] ? pagecache_get_page+0xbcd/0xe80 [ 527.729828][T22917] shmem_getpage_gfp+0x1583/0x3320 [ 527.734955][T22917] ? lockdep_hardirqs_on+0x95/0x140 [ 527.740153][T22917] ? shmem_getpage+0xa0/0xa0 [ 527.744740][T22917] ? slab_free_freelist_hook+0x12e/0x1a0 [ 527.750361][T22917] ? do_iter_write+0x682/0x7b0 [ 527.755113][T22917] shmem_file_read_iter+0x2ac/0xc30 [ 527.760319][T22917] ? shmem_file_llseek+0x180/0x180 [ 527.765426][T22917] generic_file_splice_read+0x482/0x760 [ 527.770963][T22917] ? splice_shrink_spd+0xb0/0xb0 [ 527.775899][T22917] ? splice_from_pipe+0x210/0x210 [ 527.780926][T22917] ? security_file_permission+0x46b/0x5d0 [ 527.786631][T22917] ? splice_shrink_spd+0xb0/0xb0 [ 527.791552][T22917] splice_direct_to_actor+0x45f/0xd00 [ 527.796919][T22917] ? do_splice_direct+0x3e0/0x3e0 [ 527.801931][T22917] ? pipe_to_sendpage+0x340/0x340 [ 527.806941][T22917] ? rcu_lock_release+0x9/0x20 [ 527.811692][T22917] ? bpf_lsm_file_permission+0x5/0x10 [ 527.817078][T22917] ? security_file_permission+0xe0/0x5d0 [ 527.822693][T22917] do_splice_direct+0x291/0x3e0 [ 527.827550][T22917] ? splice_direct_to_actor+0xd00/0xd00 [ 527.833092][T22917] ? bpf_lsm_file_permission+0x5/0x10 [ 527.838447][T22917] ? security_file_permission+0xe0/0x5d0 [ 527.844075][T22917] ? do_sendfile+0x6a9/0x1040 [ 527.848738][T22917] do_sendfile+0x6fe/0x1040 [ 527.853239][T22917] ? do_pwritev+0x370/0x370 [ 527.857734][T22917] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 527.863703][T22917] __se_sys_sendfile64+0x171/0x1d0 [ 527.868807][T22917] ? __x64_sys_sendfile64+0xa0/0xa0 [ 527.873995][T22917] ? lockdep_hardirqs_on+0x95/0x140 [ 527.879182][T22917] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 527.885152][T22917] do_syscall_64+0x44/0xd0 [ 527.889564][T22917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.895567][T22917] RIP: 0033:0x7f4e83dcaa39 [ 527.899972][T22917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.919834][T22917] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 527.928236][T22917] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 527.936199][T22917] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:42:18 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xa, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:18 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 527.944587][T22917] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.952545][T22917] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 527.960516][T22917] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 91) [ 528.098710][ T25] audit: type=1804 audit(1635046937.878:351): pid=22910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/664/file0" dev="sda1" ino=15767 res=1 errno=0 03:42:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:18 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xb, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 528.217559][T22927] FAULT_INJECTION: forcing a failure. [ 528.217559][T22927] name failslab, interval 1, probability 0, space 0, times 0 [ 528.231633][T22927] CPU: 0 PID: 22927 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 528.240417][T22927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.250484][T22927] Call Trace: [ 528.253774][T22927] dump_stack_lvl+0x201/0x2d8 [ 528.258474][T22927] ? show_regs_print_info+0x12/0x12 [ 528.263684][T22927] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 528.269427][T22927] should_fail+0x384/0x4b0 [ 528.273952][T22927] ? mempool_alloc_slab+0x49/0x60 [ 528.279096][T22927] should_failslab+0x5/0x20 [ 528.283628][T22927] kmem_cache_alloc+0x74/0x300 03:42:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 92) [ 528.283661][T22927] ? mempool_free+0x360/0x360 [ 528.283681][T22927] mempool_alloc_slab+0x49/0x60 [ 528.283702][T22927] mempool_alloc+0x179/0x6d0 [ 528.283728][T22927] ? submit_bio_noacct+0xa13/0xa90 [ 528.283754][T22927] ? mempool_resize+0x8f0/0x8f0 03:42:19 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'vcan0\x00', {0x1}}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0x164, 0x3, &(0x7f0000000080)="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"}) [ 528.283780][T22927] ? blk_put_request+0x20/0x20 [ 528.283809][T22927] bio_alloc_bioset+0x12e/0x8a0 [ 528.283835][T22927] submit_bh_wbc+0x1c6/0x680 [ 528.283855][T22927] ? submit_bio_noacct+0xa90/0xa90 [ 528.283884][T22927] __block_write_full_page+0x8fb/0x10a0 03:42:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:19 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) r1 = getpgid(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1f}, 0x501, 0x0, 0x2c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c, &(0x7f0000000140)}, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x2728, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x288, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CT={0x68, 0xb, 0x0, 0x1, [@CTA_ID={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe0}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x6b}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xcd}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe7}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3402}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3, 0x1, 0xcb]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x5a1, 0x8]}]}, @NFQA_EXP={0x190, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT={0x114, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x47}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, @NFQA_PAYLOAD={0x48, 0xa, "9ddf53b7c5ce25cc479376e796b45f5138618e66218c809940380d83b3552bcf33bf1b2e1ff3138db07a328c3dcc8e50a64eb51396872db15f2c6ba5bae81940ed105dfb"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8f53}]}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xa8}}]}, 0x288}, 0x1, 0x0, 0x0, 0x4000010}, 0x40002) 03:42:19 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 528.283908][T22927] ? mark_buffer_write_io_error+0x340/0x340 [ 528.283928][T22927] ? blkdev_fallocate+0x3d0/0x3d0 [ 528.283948][T22927] __writepage+0x60/0x120 [ 528.283969][T22927] write_cache_pages+0xa02/0xf80 03:42:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 93) [ 528.284003][T22927] ? generic_writepages+0x160/0x160 [ 528.284026][T22927] ? tag_pages_for_writeback+0x690/0x690 [ 528.284064][T22927] ? __lock_acquire+0x1382/0x2b00 [ 528.284091][T22927] generic_writepages+0xfb/0x160 [ 528.284115][T22927] ? trace_wbc_writepage+0x270/0x270 [ 528.284140][T22927] ? rcu_read_lock_sched_held+0x89/0x130 [ 528.284160][T22927] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 528.284178][T22927] ? blkdev_readpage+0x20/0x20 [ 528.284194][T22927] do_writepages+0x49d/0x760 [ 528.284229][T22927] ? __writepage+0x120/0x120 [ 528.284255][T22927] ? filemap_fdatawrite_wbc+0x1c8/0x230 [ 528.284272][T22927] ? __lock_acquire+0x2b00/0x2b00 [ 528.284289][T22927] ? do_raw_spin_lock+0x151/0x8e0 [ 528.284316][T22927] ? do_raw_spin_unlock+0x134/0x8a0 [ 528.284333][T22927] ? I_BDEV+0x9/0x20 [ 528.284349][T22927] ? wbc_attach_and_unlock_inode+0x16c/0x5f0 [ 528.284374][T22927] filemap_fdatawrite_wbc+0x1d3/0x230 [ 528.284396][T22927] file_write_and_wait_range+0x1d6/0x2d0 [ 528.284418][T22927] ? trace_file_check_and_advance_wb_err+0x220/0x220 [ 528.284459][T22927] blkdev_fsync+0x6f/0xc0 [ 528.284481][T22927] blkdev_write_iter+0x442/0x530 [ 528.284509][T22927] ? blkdev_read_iter+0x180/0x180 [ 528.284525][T22927] ? iter_file_splice_write+0x23c/0xfa0 [ 528.284549][T22927] ? do_syscall_64+0x44/0xd0 [ 528.284568][T22927] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.284598][T22927] do_iter_readv_writev+0x54f/0x740 [ 528.284628][T22927] ? generic_file_rw_checks+0x260/0x260 [ 528.284654][T22927] ? iov_iter_bvec+0xf0/0x1f0 [ 528.284674][T22927] ? bpf_lsm_file_permission+0x5/0x10 [ 528.284694][T22927] ? security_file_permission+0xe0/0x5d0 [ 528.284712][T22927] ? do_iter_write+0x174/0x7b0 [ 528.284734][T22927] do_iter_write+0x21e/0x7b0 [ 528.284761][T22927] ? page_cache_pipe_buf_confirm+0x139/0x240 [ 528.284780][T22927] ? vfs_iter_write+0x69/0xa0 [ 528.284803][T22927] iter_file_splice_write+0x7eb/0xfa0 [ 528.284846][T22927] ? splice_from_pipe+0x210/0x210 [ 528.284863][T22927] ? generic_file_splice_read+0x529/0x760 [ 528.284888][T22927] ? splice_shrink_spd+0xb0/0xb0 [ 528.284917][T22927] ? splice_from_pipe+0x210/0x210 [ 528.284940][T22927] direct_splice_actor+0xe6/0x1c0 [ 528.284964][T22927] splice_direct_to_actor+0x529/0xd00 [ 528.284994][T22927] ? do_splice_direct+0x3e0/0x3e0 [ 528.285021][T22927] ? pipe_to_sendpage+0x340/0x340 [ 528.285042][T22927] ? rcu_lock_release+0x9/0x20 [ 528.285063][T22927] ? bpf_lsm_file_permission+0x5/0x10 [ 528.285080][T22927] ? security_file_permission+0xe0/0x5d0 [ 528.285103][T22927] do_splice_direct+0x291/0x3e0 [ 528.285129][T22927] ? splice_direct_to_actor+0xd00/0xd00 [ 528.285159][T22927] ? bpf_lsm_file_permission+0x5/0x10 [ 528.285177][T22927] ? security_file_permission+0xe0/0x5d0 [ 528.285193][T22927] ? do_sendfile+0x6a9/0x1040 [ 528.285220][T22927] do_sendfile+0x6fe/0x1040 [ 528.285253][T22927] ? do_pwritev+0x370/0x370 [ 528.285278][T22927] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 528.285301][T22927] __se_sys_sendfile64+0x171/0x1d0 [ 528.285324][T22927] ? __x64_sys_sendfile64+0xa0/0xa0 [ 528.285344][T22927] ? lockdep_hardirqs_on+0x95/0x140 [ 528.285366][T22927] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 528.285390][T22927] do_syscall_64+0x44/0xd0 [ 528.285411][T22927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.285429][T22927] RIP: 0033:0x7f4e83dcaa39 [ 528.285448][T22927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.285464][T22927] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 528.285485][T22927] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 528.285498][T22927] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 528.285510][T22927] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.285522][T22927] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 528.285534][T22927] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 528.329928][ T25] audit: type=1804 audit(1635046937.998:352): pid=22903 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/656/file0" dev="sda1" ino=15738 res=1 errno=0 [ 528.629662][T22942] FAULT_INJECTION: forcing a failure. [ 528.629662][T22942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.629695][T22942] CPU: 0 PID: 22942 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 528.629717][T22942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.629728][T22942] Call Trace: [ 528.629737][T22942] dump_stack_lvl+0x201/0x2d8 [ 528.629765][T22942] ? show_regs_print_info+0x12/0x12 [ 528.629786][T22942] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 528.629824][T22942] should_fail+0x384/0x4b0 [ 528.629851][T22942] prepare_alloc_pages+0x1dd/0x5a0 [ 528.629880][T22942] __alloc_pages+0x161/0x580 [ 528.629903][T22942] ? __rmqueue_pcplist+0x2090/0x2090 [ 528.629919][T22942] ? __lock_acquire+0x1382/0x2b00 [ 528.629947][T22942] ? __lock_acquire+0x1382/0x2b00 [ 528.629976][T22942] alloc_pages_vma+0x668/0x1030 [ 528.630008][T22942] ? mempolicy_in_oom_domain+0x120/0x120 [ 528.630036][T22942] ? mpol_shared_policy_lookup+0x15e/0x200 [ 528.630062][T22942] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 528.630089][T22942] ? shmem_replace_page+0x10e0/0x10e0 [ 528.630135][T22942] ? mapping_get_entry+0x5bf/0x670 [ 528.630158][T22942] ? pagecache_get_page+0xe80/0xe80 [ 528.630192][T22942] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 528.630215][T22942] ? print_irqtrace_events+0x220/0x220 [ 528.630238][T22942] ? pagecache_get_page+0xbcd/0xe80 [ 528.630267][T22942] shmem_getpage_gfp+0x1583/0x3320 [ 528.630317][T22942] ? shmem_getpage+0xa0/0xa0 [ 528.630347][T22942] shmem_file_read_iter+0x2ac/0xc30 [ 528.630384][T22942] ? shmem_file_llseek+0x180/0x180 [ 528.630415][T22942] generic_file_splice_read+0x482/0x760 [ 528.630445][T22942] ? splice_shrink_spd+0xb0/0xb0 [ 528.630479][T22942] ? splice_from_pipe+0x210/0x210 [ 528.630502][T22942] ? security_file_permission+0x46b/0x5d0 [ 528.630524][T22942] ? splice_shrink_spd+0xb0/0xb0 [ 528.630544][T22942] splice_direct_to_actor+0x45f/0xd00 [ 528.630578][T22942] ? do_splice_direct+0x3e0/0x3e0 [ 528.630604][T22942] ? pipe_to_sendpage+0x340/0x340 [ 528.630626][T22942] ? rcu_lock_release+0x9/0x20 [ 528.630647][T22942] ? bpf_lsm_file_permission+0x5/0x10 [ 528.630665][T22942] ? security_file_permission+0xe0/0x5d0 [ 528.630688][T22942] do_splice_direct+0x291/0x3e0 [ 528.630714][T22942] ? splice_direct_to_actor+0xd00/0xd00 [ 528.630746][T22942] ? bpf_lsm_file_permission+0x5/0x10 [ 528.630764][T22942] ? security_file_permission+0xe0/0x5d0 [ 528.630780][T22942] ? do_sendfile+0x6a9/0x1040 [ 528.630801][T22942] do_sendfile+0x6fe/0x1040 [ 528.630836][T22942] ? do_pwritev+0x370/0x370 [ 528.630862][T22942] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 528.630886][T22942] __se_sys_sendfile64+0x171/0x1d0 [ 528.630911][T22942] ? __x64_sys_sendfile64+0xa0/0xa0 [ 528.630933][T22942] ? lockdep_hardirqs_on+0x95/0x140 [ 528.630956][T22942] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 528.630979][T22942] do_syscall_64+0x44/0xd0 [ 528.631006][T22942] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.631025][T22942] RIP: 0033:0x7f4e83dcaa39 [ 528.631045][T22942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.631061][T22942] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 528.631085][T22942] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 528.631100][T22942] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 528.631112][T22942] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.631125][T22942] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 528.631138][T22942] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 529.000004][T22959] FAULT_INJECTION: forcing a failure. [ 529.000004][T22959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 529.000039][T22959] CPU: 0 PID: 22959 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 529.000060][T22959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.000071][T22959] Call Trace: [ 529.000081][T22959] dump_stack_lvl+0x201/0x2d8 [ 529.000110][T22959] ? show_regs_print_info+0x12/0x12 [ 529.000139][T22959] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 529.000178][T22959] should_fail+0x384/0x4b0 [ 529.000202][T22959] prepare_alloc_pages+0x1dd/0x5a0 [ 529.000231][T22959] __alloc_pages+0x161/0x580 [ 529.000252][T22959] ? __rmqueue_pcplist+0x2090/0x2090 [ 529.000268][T22959] ? __lock_acquire+0x1382/0x2b00 [ 529.000293][T22959] ? __lock_acquire+0x1382/0x2b00 [ 529.000320][T22959] alloc_pages_vma+0x668/0x1030 [ 529.000349][T22959] ? mempolicy_in_oom_domain+0x120/0x120 [ 529.000376][T22959] ? mpol_shared_policy_lookup+0x15e/0x200 [ 529.000401][T22959] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 529.000427][T22959] ? shmem_replace_page+0x10e0/0x10e0 [ 529.000474][T22959] ? mapping_get_entry+0x5bf/0x670 [ 529.000498][T22959] ? pagecache_get_page+0xe80/0xe80 [ 529.000531][T22959] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 529.000555][T22959] ? print_irqtrace_events+0x220/0x220 [ 529.000579][T22959] ? pagecache_get_page+0xbcd/0xe80 [ 529.000608][T22959] shmem_getpage_gfp+0x1583/0x3320 [ 529.000658][T22959] ? shmem_getpage+0xa0/0xa0 [ 529.000689][T22959] shmem_file_read_iter+0x2ac/0xc30 [ 529.000726][T22959] ? shmem_file_llseek+0x180/0x180 [ 529.000757][T22959] generic_file_splice_read+0x482/0x760 [ 529.000785][T22959] ? splice_shrink_spd+0xb0/0xb0 [ 529.000819][T22959] ? splice_from_pipe+0x210/0x210 [ 529.000842][T22959] ? security_file_permission+0x46b/0x5d0 [ 529.000864][T22959] ? splice_shrink_spd+0xb0/0xb0 [ 529.000883][T22959] splice_direct_to_actor+0x45f/0xd00 [ 529.000916][T22959] ? do_splice_direct+0x3e0/0x3e0 [ 529.000943][T22959] ? pipe_to_sendpage+0x340/0x340 [ 529.000964][T22959] ? rcu_lock_release+0x9/0x20 [ 529.000984][T22959] ? bpf_lsm_file_permission+0x5/0x10 [ 529.001007][T22959] ? security_file_permission+0xe0/0x5d0 [ 529.001029][T22959] do_splice_direct+0x291/0x3e0 [ 529.001057][T22959] ? splice_direct_to_actor+0xd00/0xd00 [ 529.001089][T22959] ? bpf_lsm_file_permission+0x5/0x10 [ 529.001107][T22959] ? security_file_permission+0xe0/0x5d0 [ 529.001130][T22959] ? do_sendfile+0x6a9/0x1040 [ 529.001151][T22959] do_sendfile+0x6fe/0x1040 [ 529.001185][T22959] ? do_pwritev+0x370/0x370 [ 529.001210][T22959] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 529.001233][T22959] __se_sys_sendfile64+0x171/0x1d0 [ 529.001256][T22959] ? __x64_sys_sendfile64+0xa0/0xa0 [ 529.001277][T22959] ? lockdep_hardirqs_on+0x95/0x140 [ 529.001298][T22959] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 529.001321][T22959] do_syscall_64+0x44/0xd0 [ 529.001342][T22959] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 529.001360][T22959] RIP: 0033:0x7f4e83dcaa39 [ 529.001379][T22959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 529.001394][T22959] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 529.001417][T22959] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 529.001432][T22959] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 529.001443][T22959] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 529.001455][T22959] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 03:42:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 94) 03:42:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x11, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:21 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) getdents64(r5, &(0x7f0000003200), 0x0) 03:42:21 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xd, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) socket$netlink(0x10, 0x3, 0x5) [ 529.001468][T22959] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:21 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000000)=""/55, 0x37, 0x8}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x193600, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x3, 0x2, 0x10001}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="8fe50952852a"}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000008c0)="110eaa1a9896d57019effc8c79961d0f73ccf3afca3754e2e7a31f536bcb7204bed59311e29c96e1c2b663d61e5b0c0a76ea50cbddaa69f578b8600f77cf1a538ac900673696245b6de4283c979a2eccd71f9583dacf650575d1398678895da32663735b4d0cabfe7e972e59c2b4b4c9c89d0b82ca2267ad5062303e8abcb79600010506702eb912e3957e507aec4e2180699a738f6753509a12282a1d7181887f6c2e03de1da0dfe3b4efbb10e9b59301b4ef8a1d", 0xb5}, {&(0x7f0000000980)="34c30d95766fefbb7bdc40a3242505587bbc8584c2bc2003185f5ce116eea020efa91e2aae1eae2b8e848ac13c3dcedbbbc82adb1e70be8eecedba37be82545f2abda4f0a0e0fd0edd6bd03bb8e9bb91c39a2c828511aef3e684ad4c21ec0c146b9570139e31cd", 0x67}], 0x2) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x44, r5}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_deladdr={0x18, 0x15, 0x200, 0x70bd2c, 0x25dfdbff, {0x2, 0x8, 0x24, 0xfd, r5}}, 0x18}}, 0x4004084) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@empty, @loopback, @private1, 0x7, 0x1, 0x7cfe, 0x500, 0x7, 0x40200301, r5}) [ 530.465986][T22973] FAULT_INJECTION: forcing a failure. [ 530.465986][T22973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 530.479703][T22973] CPU: 1 PID: 22973 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 530.488479][T22973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.498542][T22973] Call Trace: [ 530.501833][T22973] dump_stack_lvl+0x201/0x2d8 [ 530.506532][T22973] ? show_regs_print_info+0x12/0x12 [ 530.511750][T22973] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 530.517500][T22973] should_fail+0x384/0x4b0 [ 530.521936][T22973] prepare_alloc_pages+0x1dd/0x5a0 [ 530.527063][T22973] __alloc_pages+0x161/0x580 [ 530.531664][T22973] ? __rmqueue_pcplist+0x2090/0x2090 [ 530.536958][T22973] ? __lock_acquire+0x1382/0x2b00 [ 530.542004][T22973] ? __lock_acquire+0x1382/0x2b00 [ 530.547057][T22973] alloc_pages_vma+0x668/0x1030 [ 530.551932][T22973] ? mempolicy_in_oom_domain+0x120/0x120 [ 530.557586][T22973] ? mpol_shared_policy_lookup+0x15e/0x200 [ 530.563411][T22973] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 530.569061][T22973] ? shmem_replace_page+0x10e0/0x10e0 [ 530.574473][T22973] ? mapping_get_entry+0x5bf/0x670 [ 530.579599][T22973] ? pagecache_get_page+0xe80/0xe80 [ 530.584816][T22973] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 530.590812][T22973] ? print_irqtrace_events+0x220/0x220 [ 530.596284][T22973] ? pagecache_get_page+0xbcd/0xe80 [ 530.601505][T22973] shmem_getpage_gfp+0x1583/0x3320 [ 530.606661][T22973] ? shmem_getpage+0xa0/0xa0 [ 530.611275][T22973] shmem_file_read_iter+0x2ac/0xc30 03:42:21 executing program 5: ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x108}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x8]}, 0x8) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 530.616504][T22973] ? shmem_file_llseek+0x180/0x180 [ 530.621643][T22973] generic_file_splice_read+0x482/0x760 [ 530.627212][T22973] ? splice_shrink_spd+0xb0/0xb0 [ 530.632180][T22973] ? splice_from_pipe+0x210/0x210 [ 530.637224][T22973] ? security_file_permission+0x46b/0x5d0 [ 530.642957][T22973] ? splice_shrink_spd+0xb0/0xb0 [ 530.647903][T22973] splice_direct_to_actor+0x45f/0xd00 [ 530.653296][T22973] ? do_splice_direct+0x3e0/0x3e0 [ 530.658340][T22973] ? pipe_to_sendpage+0x340/0x340 [ 530.663376][T22973] ? rcu_lock_release+0x9/0x20 [ 530.668152][T22973] ? bpf_lsm_file_permission+0x5/0x10 [ 530.673531][T22973] ? security_file_permission+0xe0/0x5d0 [ 530.679177][T22973] do_splice_direct+0x291/0x3e0 [ 530.684048][T22973] ? splice_direct_to_actor+0xd00/0xd00 [ 530.689619][T22973] ? bpf_lsm_file_permission+0x5/0x10 [ 530.695004][T22973] ? security_file_permission+0xe0/0x5d0 [ 530.700647][T22973] ? do_sendfile+0x6a9/0x1040 [ 530.705336][T22973] do_sendfile+0x6fe/0x1040 [ 530.709867][T22973] ? do_pwritev+0x370/0x370 [ 530.714387][T22973] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 530.720378][T22973] __se_sys_sendfile64+0x171/0x1d0 [ 530.725505][T22973] ? __x64_sys_sendfile64+0xa0/0xa0 [ 530.730752][T22973] ? lockdep_hardirqs_on+0x95/0x140 [ 530.735962][T22973] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 530.741939][T22973] do_syscall_64+0x44/0xd0 [ 530.746347][T22973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 530.752224][T22973] RIP: 0033:0x7f4e83dcaa39 [ 530.756628][T22973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.776220][T22973] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 530.784627][T22973] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 530.792587][T22973] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 530.800547][T22973] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.808505][T22973] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 530.816462][T22973] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 530.923604][T22974] __nla_validate_parse: 8 callbacks suppressed [ 530.923642][T22974] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 530.927518][T22990] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 530.982628][T22998] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 95) 03:42:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:21 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xe, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:21 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="dc34795725dc1ba6967e9865af2cc28c83ec8324d1d62236efc508b072fc7445a799595ff278aa946ea9235205a873d9b1c7cdb1e98a5cf827fa263df011b7aa01171545be0a1378941819b0872d971fb7cd20a28b914500e3d15bf81282abf73ae8d841b2f8d4539d70017bde3e897b15e4b0f47b50d01a84ef4aeda7d149f14b68c8a207520275c274a66c69ca775e1dc8c91945dc83b3a98e6869afd995f8cec13c3318950496b77225d4a1d009b0913d69c0e9d9090bcc1daed70f89ce3c798872adf3b61397e45c857a83381b42cbfd7061a12916fa9363bb2d074a751cbaaf5891b8ee34e2e28e93fadb9152d454bdd2867874ba1d1549ec518fad9f8f654382f749e05d9e0e65bf6fe6a51997abeae5d38f7e72db55a4250a839b6f6db27c8b382fb6947c35fecb86066702fb1832e21ac6aba739ae9da2edac7f61ad59e89026c13bdc915f2b11038458c3c8d97c851ae47ed702c9ed7ec4362372afddaed8ae736c46cf0fea6d47e6c5dea36b0407487c02d5f4f090d132e30a24d0aa0c50e27eb5e77e6afe2095d8b52268324e31f15868397213a8e4268138feed27c9bd1de839bcfc50dab24f6e3c40c68cf39953882bda0c2e59b937609378c5f3f43a83759ab49d50cf01ecbf98ab6cf1dda3eec5a2e8ebbda856dc69aab7bbea581843bd0ff09709a2e664474714a4dc6d8990eab894c6c29061d87603ed70fd1b1c97f36241157b657cecd0f5e30668bd54d680af725185ab491a07d009778e67c628f4787e0ad6ee2cccf7f471f6a9818bbd4feb2e2f74082b641af1bc82201b636d094e13ad2f1c408c3b4dc4b92c6c19ea895645731f42e115aad8889ffc53d4aaf700246d8062522ef1f8aff59c61d3a98595a23594189bdf435a0a863dc563fac02796439d14e2d7db56e3d59777be396cdaae0f79903c11a6905f24804893effb6ce0cd8b2c586b531957b5ba476b49af2e3aa0cdacd3c4d119337bae64354b4b5c7e777d30d59876e90f8daaa4e9b5d346b5398c9bbda8be0889f7d5b980ab40c718ab5f6314c0a6e109d483b3725d1f40c29926710b953ddd3fe36618a0a225ee4f4b38e86403a880b37ead67db0571fd6d0e332a3d8b759f325d8fdb6b478d944757ae0b26cc532312d575ffc867510b73126d911c33166d102ca6021244ac84cd11bd080207f66dc6103ff2a2dce2c36c29f71c6ed039dadc2afdaf6362cae6f553d9dfb1c7bbc470348ae22763296adc7a11a66cd6c960656272279902601912d834609fa147465623b81fe02aa5686044e03f018f573c033dbe289e8074486b0e3a8a94c16a695839a00562786ed26faabb0af18e8fc6c8346493f6dfb6f5fd498b3af3b98ab0bd9f7fb6adb14d21506f084f63b8a29ab9b99afa86676bbbc42038ad30965ee171bb4506aad913793a2b53438a95f8a4ce309d41d15a97dc3d1374d8c17ad27ea4ccd6006b29cd00fb7da5f220c5972146a773e8ea51a0269abede3517fc23210c233a32c930e9767f05ff04e790770adefd2e8d42867642a27cb453f5647a2b12ec9a2f92fdfd404b8fa11fe0790ae4ddc32c5b89963e24d9e78e73083fc51de145e75185e4123c377bff23f9b898c53cfe9b500b1bdca774b2683d7264ca3b570fe3fee5e9ed8f4886e060c5b99203c8763f1c8de978b916906121cb3ddc1bf530a9d71327d6babc8b501b9f3f9af209548c75af59789340f00c0d38e2873fbc6596373d7b75592b9162261a36149436fb65e3b06ed8e464ed83ea273e0e857051315933f2411aca3db174bed626bd05f203d8f6a545f347c558acafdeae4f5a8877098a8089d17c0bbf489d939405f952310b4bb7854c7879ad7a8a96aea6aff04b5c9dbe97555f27599bddd505ac18e1dcbbdd09f80221de6913c48e7180de62b0a0eb61c739dcc9eec0e93341ba0e78053bd2b8eb4c8c8478062289f9be628a2b0761fb93ab320d12cbfe7edff77a7020529813785a93e58625ef4cdcab9ab1fe64b75c264fb9e244847189d1db68fd11f642926ebaa0068fe368bb2659140768e1f870ade5e20dadd0f10418b845f3df0d3add0ecb0e966a01e35a040a269337b3d8d8c3540d519678e30243eca12e8d2f399d9487315ff202c7627d6ab8ef1a450d56d63929452d847a7e7a11c32e7ad0d9a83bad2804c7453628407ff7a6f765516578b59d02d04a3b3ea47784bf1c6de84076861b0746b202274352a57809debd99d8d5bb80c810322d31686049ead1c409795c7698d58a313bb677685ee88794f083322e7522f3a9bd323fb17ba381fb823e044c50a2af3abbb1e686e57871649fb8e6c9327698cbbaaa3f65d672155901212e6a104229c7229feb1bb5a3e9838289f85f92ea6eb66756bba8c83f41eb2d9fc9cc6e363ae8ebb5e3c8022da3f33fd3b94a41256f5d729f031d4063f277379486cd7181b50fb622f9fd2d4465f24c1a46470eb963ba7c1f4009c2e442cfb4803806768f08dcae3d9afb842d7318272ddd0e12c0b7bb5a6545e0f70ca82e8610ecc98a66f8c2569970426d068df7b063f83878206785d01b4ad3841ba7bfc9f8b8a5a90f082dc27d60dd1af659e95e9aa1177d2d60e916bc7a4d0a5bba4c967e3dc33e6bef4f40b2a1ba92a31ec40523439a270d946157f9bc696b37df2dd9e4caf88722d2d2580d8dc829852d028453ba0f0b993f42cec1ab39b7f1c428e9eb305f77ac012f79615930b13210d3f1578155c4ac1ffecdceb7cdf87081f27b85abd7c9a6affc27e8351d59692aa3b2677b93ba2e1f6d2aa6c35ccd3dff5bde8c5f3ec34848f95731028e4848c4ed0ae3c793df3c8034eeae9d6a1e7fdd786aa6ae2ccd33a9b09727b9f207279b9ff6043a1a4afa0092ae89a5980d7a700587e2cee49df62872e2b37a4d49d90518db6bf3fa765b57fdda0ede63217a406b057c728ea27904c189da42de0b38f480821d060a3b22f30a70af1e8f6a4a30f77de6cb010980f5c26681756a674f691122cfa782f0c3e56dc95276d034627dc700b24b48626c43bca2d7f16260d18844a68e82cdc9d15d1176d0924ce4976e6e780b6ec255bd9b67862066234296ae5e00bfa6b02888df2e60e2c1a31a82f6194c4dcd192b4edd5bb5443715b67f047176aeb320f9bd4f6c2f679ab1c0da65ade1b7b3cc356969db1f102da8d53fa19e14c55691b55b1303a39796d8005da1c60e384dd7d50804a2d3dac9520e07026002630641163cea110652cf82314813c93ec0d0a85084e3ec479151a7c5b16db0d8402d100a0d549b12e6d0bab03b503cac6239647b2c6a0e1fd30c0ca7876c8c864bc38048053480e1cae305c24d07a900ba247c9a44ffa1480baba3bcdd6358245bf4dec1c13b4f28ab626c76107ef0210f9932e9e8853b073a95e3d6c2592e2bf8ebc368c9f213d8ecaa757d0890513d5e342cddd1fe208fd7adac433e80cc081a23ecefb6a7b223016d717ffde245dc3e82e51c17d71fe1029c53473947fc3d8fe7f426bfaf355571ada24c95adde5641a63a43cc8fa77abd30c336eedde9019bc7bf6575ac379dca4ae59a99678b894425cd3eb68b8d64fdc7470b1131921d908e1184f507d1718ba7c1c38ffa7ee5ad3ad0e8c63911fa3c6f28eb5cebc530b9538ad770f20e930aee1fe5c50d4c3c387ff0585306abcc1574180275285a1f73f518a0fb6058bcbc3e2a8b85ffd733357791b4f1b6cba79bbcea2c5decfead3bd56f779bd6ae2aeea4b81d2de3ea3af23f92d5ea331e03a2f9ab457c285a5c14090f8d41e6604ae69db65d162e5faa9d868d3d6c8b7bed1acbb6ad7188136f43696f4fd0dc6fd0ad6718f77335feb2d41b2d6ce5790d33986bd5c1e80e041484c172a90185a17257d2d0b5c40047af89d84a61697c520c46d30e74d4da536dd80e700ca1dd06770c09155aa45d56f56f5e1d7d00dc335804ee8c7b48f8684a30f54d551de4ec6f25a0e1ca022b7ee0eaa9b9606150bc15a8a15d41c801702c99ce348d3733687994ed3003500acd7de38588f4404b121ec0b3c35e8764211292ca344c6b56aa4263ed7576a43b37936d4bcb20a59d3433860f4c328ee5023a3a778ece9e03bc1d771dee3340272abe7de425f45a881d407c96696a8bddbb2b67024aa029864604d35daae696b8d5bc9578843cf84f063457f2453ecaa3b5ab6e1dcf9372ed6c46d11f8e03b51a89ce93c003b34e72257a7b5024f55acc5a5aa7b3ddeea834a2b99605e2e63fd93013adb7aa5b2f3c8cdb073aa9930ff32b3f9a4d4013537d543eb7bb5116042617b2a104eb410ac16cdd25b94c53da716570185c4dd324b30034c6756d8a5d8dd5a7cc1611652d3dc6ee0b79e71b12fe680ec7dfcf781097a62ec34beef3eea657b1d3d411001ddfad26a957241ee13a0b6944a3ebfea078e9dc69a64d5cc613ed66375f08ead7f9baa709abf986a83658c7217ecfc128770ebfda47d2db2c0ccbaf750a5f5407b0fdf98da0084b1f0657e41108bb95e6681b282e9b7b2f77d719f4aa585b9da6d5535b79ec601f0ff1d848b2ad197f9d500cc372827dcb3da2d7ea2300d2c0493e950702bc4cecefb3c7c4a302379f8afd9d131f346e51d944064c9a3a89c821c63845b2414b5e0e9935441dbd44ec418f877379be98c0c16e9ec8c6288aad9fcf6a6e0a6d69c29e17955b1b1153bc1e79911a453db0c088d9233a8b45c9334d31e799a09c36569862a259683fbf13ebceaf1dc1dc2fac1b5aaef1e6124039f462a3ec01d1bfc2cd41142fc043e0b2dd2357b92fbeb1c87c372f7bc76120ecdad4d1edcbf62196552f5d1e5b85b526cfc468e047eb76fbb126164371dbdf3111e48db76038899bdc9d39657ea9989687702991e7bda45955ec833b6a9afdfce1f987dcdcf1fa039398eaabbedea4c7f35117b649ee63055b468446947ecebf1dd18392d2bfb40cb03fdd1261b1ce70c4065b0c25f1ef8c131a7145a8c9f69127a73d19a9899ef92e94706e4fe4dab34e68cb0ca35c27e117e356cabda1f93c3c47c3de65bffc6364761a0ce695bbfd9b0b153b8e98711edd28e6281b1fc4a22e44f40d6b69330b8ce233cbee69337267f0ea7d9e8382762fc8764f10129aef4f78aab7586a6f3fa04699483e262694b649a05ba852e8c3e9e5f3b534ab85eb744a017c727c128c3ae1a747d71435449fda08976338807f242ad62a346debe36395b2745a2f0689fa1a34de234054efc9b81250024e2b7741344f0d3990aab5763596d3e80bdc85936055c7de55989e74cbd5f082294ec01681ff210bc7c97cc0aef8216242750b3cb30ea6c4643ff6362c915edaa59be1197cef521cc006d520c1ffe9ad2e3d0f926afe834e645eddfa42cf6bb525b815d148881ac7aa818188a1c344f9037c36d2f02c0977d721968d480a3660e38a3a053b613d0db856043b301318f7db8460d2a5ec892b52be4e9fcb571341d9bb0c50932fcd0577315539a0359cbeeae29110650d930d55ffdb7ed6eb2376f12b31ae3e0f6070c9d4c56321b8abc9111587db7e410fc68868a465066446ba223c9a665e1c338ca14882758674a934998f18e1c6833e69f480d6b113b374508adc22e3a80c1af1637a49516ca41422c111f9b956640f501a4387d9cdeec5919ad458bcc2db1c29fe41737245b8a0e6a4c0a3f0749f5aa7c1ed9840298f400cd93e263253f77f81a49651dac3e3f1976340787e52e16dfcb5578e464952e6a7518792fc15a5691d4b6040d6811eab5caf294baebbf347f96c7175d2a0580d335c09d7", 0x1000, 0x8811, &(0x7f0000001040)={0xa, 0x4e22, 0x6, @remote, 0x5}, 0x1c) [ 531.253858][T23006] FAULT_INJECTION: forcing a failure. [ 531.253858][T23006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.267275][T23006] CPU: 1 PID: 23006 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 531.276056][T23006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.286121][T23006] Call Trace: [ 531.289411][T23006] dump_stack_lvl+0x201/0x2d8 [ 531.294121][T23006] ? show_regs_print_info+0x12/0x12 [ 531.299333][T23006] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 531.305085][T23006] should_fail+0x384/0x4b0 [ 531.309523][T23006] prepare_alloc_pages+0x1dd/0x5a0 [ 531.314659][T23006] __alloc_pages+0x161/0x580 [ 531.319265][T23006] ? __rmqueue_pcplist+0x2090/0x2090 [ 531.324555][T23006] ? __lock_acquire+0x1382/0x2b00 [ 531.329594][T23006] ? __lock_acquire+0x1382/0x2b00 [ 531.334619][T23006] alloc_pages_vma+0x668/0x1030 [ 531.339487][T23006] ? mempolicy_in_oom_domain+0x120/0x120 [ 531.345136][T23006] ? mpol_shared_policy_lookup+0x15e/0x200 [ 531.350947][T23006] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 531.356584][T23006] ? shmem_replace_page+0x10e0/0x10e0 [ 531.361976][T23006] ? mapping_get_entry+0x5bf/0x670 [ 531.367078][T23006] ? pagecache_get_page+0xe80/0xe80 [ 531.372268][T23006] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 531.378236][T23006] ? print_irqtrace_events+0x220/0x220 [ 531.383683][T23006] ? pagecache_get_page+0xbcd/0xe80 [ 531.388871][T23006] shmem_getpage_gfp+0x1583/0x3320 [ 531.393992][T23006] ? shmem_getpage+0xa0/0xa0 [ 531.398573][T23006] shmem_file_read_iter+0x2ac/0xc30 [ 531.403781][T23006] ? shmem_file_llseek+0x180/0x180 [ 531.408892][T23006] generic_file_splice_read+0x482/0x760 [ 531.414453][T23006] ? splice_shrink_spd+0xb0/0xb0 [ 531.419389][T23006] ? splice_from_pipe+0x210/0x210 [ 531.424408][T23006] ? security_file_permission+0x46b/0x5d0 [ 531.430115][T23006] ? splice_shrink_spd+0xb0/0xb0 [ 531.435039][T23006] splice_direct_to_actor+0x45f/0xd00 [ 531.440420][T23006] ? do_splice_direct+0x3e0/0x3e0 [ 531.445439][T23006] ? pipe_to_sendpage+0x340/0x340 [ 531.450452][T23006] ? rcu_lock_release+0x9/0x20 [ 531.455204][T23006] ? bpf_lsm_file_permission+0x5/0x10 [ 531.460561][T23006] ? security_file_permission+0xe0/0x5d0 [ 531.466182][T23006] do_splice_direct+0x291/0x3e0 [ 531.471027][T23006] ? splice_direct_to_actor+0xd00/0xd00 [ 531.476565][T23006] ? bpf_lsm_file_permission+0x5/0x10 [ 531.481922][T23006] ? security_file_permission+0xe0/0x5d0 [ 531.487539][T23006] ? do_sendfile+0x6a9/0x1040 [ 531.492204][T23006] do_sendfile+0x6fe/0x1040 [ 531.496707][T23006] ? do_pwritev+0x370/0x370 [ 531.501209][T23006] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 531.507177][T23006] __se_sys_sendfile64+0x171/0x1d0 [ 531.512290][T23006] ? __x64_sys_sendfile64+0xa0/0xa0 [ 531.517475][T23006] ? lockdep_hardirqs_on+0x95/0x140 [ 531.522664][T23006] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 531.528632][T23006] do_syscall_64+0x44/0xd0 [ 531.533036][T23006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 531.538912][T23006] RIP: 0033:0x7f4e83dcaa39 [ 531.543315][T23006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 531.562905][T23006] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 531.571304][T23006] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 531.579258][T23006] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 531.587210][T23006] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 531.595167][T23006] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 531.603126][T23006] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 531.628131][T22978] loop3: detected capacity change from 0 to 6 [ 531.703635][T22978] FAT-fs (loop3): Directory bread(block 6) failed [ 531.744274][T23010] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.774633][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 531.774647][ T25] audit: type=1804 audit(1635046942.369:361): pid=23014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/530/file0" dev="sda1" ino=15783 res=1 errno=0 03:42:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x18, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 96) [ 531.931395][T23020] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:22 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000380), 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000180)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x4}}) open$dir(&(0x7f0000000040)='./file1\x00', 0x101080, 0x90) [ 531.974788][T23024] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.998249][T23023] FAULT_INJECTION: forcing a failure. [ 531.998249][T23023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 532.011825][T23023] CPU: 1 PID: 23023 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 532.020612][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.030676][T23023] Call Trace: [ 532.034050][T23023] dump_stack_lvl+0x201/0x2d8 [ 532.038746][T23023] ? show_regs_print_info+0x12/0x12 [ 532.043952][T23023] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 532.049697][T23023] should_fail+0x384/0x4b0 [ 532.054134][T23023] prepare_alloc_pages+0x1dd/0x5a0 [ 532.059260][T23023] __alloc_pages+0x161/0x580 [ 532.063864][T23023] ? __rmqueue_pcplist+0x2090/0x2090 [ 532.069152][T23023] ? __lock_acquire+0x1382/0x2b00 [ 532.074191][T23023] ? __lock_acquire+0x1382/0x2b00 [ 532.074782][ T25] audit: type=1800 audit(1635046942.609:362): pid=23028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15795 res=0 errno=0 [ 532.079228][T23023] alloc_pages_vma+0x668/0x1030 [ 532.079267][T23023] ? mempolicy_in_oom_domain+0x120/0x120 [ 532.105069][ T25] audit: type=1804 audit(1635046942.609:363): pid=23030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/662/file0" dev="sda1" ino=15795 res=1 errno=0 [ 532.109944][T23023] ? mpol_shared_policy_lookup+0x15e/0x200 [ 532.109979][T23023] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 532.110006][T23023] ? shmem_replace_page+0x10e0/0x10e0 [ 532.151245][T23023] ? mapping_get_entry+0x5bf/0x670 [ 532.156384][T23023] ? pagecache_get_page+0xe80/0xe80 [ 532.161583][T23023] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 532.167553][T23023] ? print_irqtrace_events+0x220/0x220 [ 532.173271][T23023] ? pagecache_get_page+0xbcd/0xe80 [ 532.178478][T23023] shmem_getpage_gfp+0x1583/0x3320 [ 532.183614][T23023] ? shmem_getpage+0xa0/0xa0 [ 532.188204][T23023] shmem_file_read_iter+0x2ac/0xc30 [ 532.193411][T23023] ? shmem_file_llseek+0x180/0x180 [ 532.198540][T23023] generic_file_splice_read+0x482/0x760 [ 532.204098][T23023] ? splice_shrink_spd+0xb0/0xb0 [ 532.209036][T23023] ? splice_from_pipe+0x210/0x210 [ 532.214049][T23023] ? security_file_permission+0x46b/0x5d0 [ 532.219758][T23023] ? splice_shrink_spd+0xb0/0xb0 [ 532.224688][T23023] splice_direct_to_actor+0x45f/0xd00 [ 532.230072][T23023] ? do_splice_direct+0x3e0/0x3e0 [ 532.235089][T23023] ? pipe_to_sendpage+0x340/0x340 [ 532.240101][T23023] ? rcu_lock_release+0x9/0x20 [ 532.244853][T23023] ? bpf_lsm_file_permission+0x5/0x10 [ 532.250225][T23023] ? security_file_permission+0xe0/0x5d0 [ 532.255858][T23023] do_splice_direct+0x291/0x3e0 [ 532.260701][T23023] ? splice_direct_to_actor+0xd00/0xd00 [ 532.266242][T23023] ? bpf_lsm_file_permission+0x5/0x10 [ 532.271599][T23023] ? security_file_permission+0xe0/0x5d0 [ 532.277213][T23023] ? do_sendfile+0x6a9/0x1040 [ 532.281878][T23023] do_sendfile+0x6fe/0x1040 [ 532.286376][T23023] ? do_pwritev+0x370/0x370 [ 532.290871][T23023] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 532.296839][T23023] __se_sys_sendfile64+0x171/0x1d0 [ 532.301951][T23023] ? __x64_sys_sendfile64+0xa0/0xa0 [ 532.307158][T23023] ? lockdep_hardirqs_on+0x95/0x140 [ 532.312366][T23023] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 532.318349][T23023] do_syscall_64+0x44/0xd0 [ 532.322759][T23023] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 532.328638][T23023] RIP: 0033:0x7f4e83dcaa39 [ 532.333043][T23023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.352630][T23023] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 532.361033][T23023] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 03:42:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) getdents64(r5, &(0x7f0000003200), 0x0) [ 532.368992][T23023] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 532.376949][T23023] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.384919][T23023] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 532.392879][T23023] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:23 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 532.492069][T23032] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x21, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 532.597022][T23038] loop3: detected capacity change from 0 to 6 [ 532.734726][T23046] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 532.799176][T23049] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:23 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x10, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 97) 03:42:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x25, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) getdents64(r5, &(0x7f0000003200), 0x0) 03:42:23 executing program 5: prctl$PR_SET_TSC(0x1a, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'macvlan1\x00'}) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00', {0x2}, 0x3b}) 03:42:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) write$P9_RRENAME(r3, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1a10c0, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000100)) [ 533.068681][T23061] FAULT_INJECTION: forcing a failure. [ 533.068681][T23061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.070221][T23062] loop3: detected capacity change from 0 to 6 [ 533.082190][T23061] CPU: 0 PID: 23061 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 533.096968][T23061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.107026][T23061] Call Trace: [ 533.110302][T23061] dump_stack_lvl+0x201/0x2d8 [ 533.114976][T23061] ? show_regs_print_info+0x12/0x12 [ 533.120163][T23061] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 533.125886][T23061] should_fail+0x384/0x4b0 [ 533.130295][T23061] prepare_alloc_pages+0x1dd/0x5a0 [ 533.135414][T23061] __alloc_pages+0x161/0x580 [ 533.140016][T23061] ? __rmqueue_pcplist+0x2090/0x2090 [ 533.145310][T23061] ? __lock_acquire+0x1382/0x2b00 [ 533.150345][T23061] ? __lock_acquire+0x1382/0x2b00 [ 533.155371][T23061] alloc_pages_vma+0x668/0x1030 [ 533.161357][T23061] ? mempolicy_in_oom_domain+0x120/0x120 [ 533.166984][T23061] ? mpol_shared_policy_lookup+0x15e/0x200 [ 533.172793][T23061] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 533.178419][T23061] ? shmem_replace_page+0x10e0/0x10e0 [ 533.183825][T23061] ? mapping_get_entry+0x5bf/0x670 [ 533.188942][T23061] ? pagecache_get_page+0xe80/0xe80 [ 533.194136][T23061] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 533.200117][T23061] ? print_irqtrace_events+0x220/0x220 [ 533.205569][T23061] ? pagecache_get_page+0xbcd/0xe80 [ 533.210761][T23061] shmem_getpage_gfp+0x1583/0x3320 [ 533.215883][T23061] ? shmem_getpage+0xa0/0xa0 [ 533.220466][T23061] shmem_file_read_iter+0x2ac/0xc30 [ 533.225663][T23061] ? shmem_file_llseek+0x180/0x180 [ 533.231040][T23061] generic_file_splice_read+0x482/0x760 [ 533.236578][T23061] ? splice_shrink_spd+0xb0/0xb0 [ 533.241599][T23061] ? splice_from_pipe+0x210/0x210 [ 533.246610][T23061] ? security_file_permission+0x46b/0x5d0 [ 533.252340][T23061] ? splice_shrink_spd+0xb0/0xb0 [ 533.257267][T23061] splice_direct_to_actor+0x45f/0xd00 [ 533.262635][T23061] ? do_splice_direct+0x3e0/0x3e0 [ 533.267650][T23061] ? pipe_to_sendpage+0x340/0x340 [ 533.272663][T23061] ? rcu_lock_release+0x9/0x20 [ 533.277415][T23061] ? bpf_lsm_file_permission+0x5/0x10 [ 533.282769][T23061] ? security_file_permission+0xe0/0x5d0 [ 533.288390][T23061] do_splice_direct+0x291/0x3e0 [ 533.293234][T23061] ? splice_direct_to_actor+0xd00/0xd00 [ 533.298773][T23061] ? bpf_lsm_file_permission+0x5/0x10 [ 533.304141][T23061] ? security_file_permission+0xe0/0x5d0 [ 533.309758][T23061] ? do_sendfile+0x6a9/0x1040 [ 533.314528][T23061] do_sendfile+0x6fe/0x1040 [ 533.319149][T23061] ? do_pwritev+0x370/0x370 [ 533.323676][T23061] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 533.329664][T23061] __se_sys_sendfile64+0x171/0x1d0 [ 533.334773][T23061] ? __x64_sys_sendfile64+0xa0/0xa0 [ 533.339966][T23061] ? lockdep_hardirqs_on+0x95/0x140 [ 533.345160][T23061] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 533.351134][T23061] do_syscall_64+0x44/0xd0 [ 533.355554][T23061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 533.361455][T23061] RIP: 0033:0x7f4e83dcaa39 [ 533.365862][T23061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.385462][T23061] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 533.393863][T23061] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 533.401821][T23061] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 533.409777][T23061] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.417739][T23061] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 533.425695][T23061] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 533.460143][T23062] FAT-fs (loop3): Directory bread(block 6) failed 03:42:24 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000940), 0x2, 0x2) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x0, "5d07b5d4b802154906a2afdbec1f22c0"}, 0x12, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 533.482427][T23069] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 533.574175][ T25] audit: type=1800 audit(1635046944.170:364): pid=23073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=13964 res=0 errno=0 03:42:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 98) 03:42:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) getdents64(r5, &(0x7f0000003200), 0x0) 03:42:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:24 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x11, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 533.734869][ T25] audit: type=1804 audit(1635046944.220:365): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/667/file0" dev="sda1" ino=13964 res=1 errno=0 [ 533.815163][T23088] FAULT_INJECTION: forcing a failure. [ 533.815163][T23088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.828658][T23088] CPU: 1 PID: 23088 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 533.837437][T23088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.847942][T23088] Call Trace: [ 533.851253][T23088] dump_stack_lvl+0x201/0x2d8 [ 533.855949][T23088] ? show_regs_print_info+0x12/0x12 [ 533.861160][T23088] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 533.866906][T23088] should_fail+0x384/0x4b0 [ 533.871332][T23088] prepare_alloc_pages+0x1dd/0x5a0 [ 533.876461][T23088] __alloc_pages+0x161/0x580 [ 533.877290][T23092] loop3: detected capacity change from 0 to 6 [ 533.881063][T23088] ? __rmqueue_pcplist+0x2090/0x2090 [ 533.881088][T23088] ? __lock_acquire+0x1382/0x2b00 [ 533.881115][T23088] ? __lock_acquire+0x1382/0x2b00 [ 533.881144][T23088] alloc_pages_vma+0x668/0x1030 [ 533.907342][T23088] ? mempolicy_in_oom_domain+0x120/0x120 [ 533.913002][T23088] ? mpol_shared_policy_lookup+0x15e/0x200 [ 533.918828][T23088] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 533.924483][T23088] ? shmem_replace_page+0x10e0/0x10e0 [ 533.929897][T23088] ? mapping_get_entry+0x5bf/0x670 [ 533.933101][T23092] FAT-fs (loop3): Directory bread(block 6) failed [ 533.935017][T23088] ? pagecache_get_page+0xe80/0xe80 [ 533.935052][T23088] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 533.935075][T23088] ? print_irqtrace_events+0x220/0x220 [ 533.958163][T23088] ? pagecache_get_page+0xbcd/0xe80 03:42:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x48, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 533.963387][T23088] shmem_getpage_gfp+0x1583/0x3320 [ 533.968542][T23088] ? shmem_getpage+0xa0/0xa0 [ 533.973158][T23088] shmem_file_read_iter+0x2ac/0xc30 [ 533.978395][T23088] ? shmem_file_llseek+0x180/0x180 [ 533.983526][T23088] generic_file_splice_read+0x482/0x760 [ 533.989096][T23088] ? splice_shrink_spd+0xb0/0xb0 [ 533.994059][T23088] ? splice_from_pipe+0x210/0x210 [ 533.999099][T23088] ? security_file_permission+0x46b/0x5d0 [ 534.004827][T23088] ? splice_shrink_spd+0xb0/0xb0 [ 534.009776][T23088] splice_direct_to_actor+0x45f/0xd00 [ 534.015167][T23088] ? do_splice_direct+0x3e0/0x3e0 [ 534.020205][T23088] ? pipe_to_sendpage+0x340/0x340 [ 534.025242][T23088] ? rcu_lock_release+0x9/0x20 [ 534.030019][T23088] ? bpf_lsm_file_permission+0x5/0x10 [ 534.035399][T23088] ? security_file_permission+0xe0/0x5d0 [ 534.041047][T23088] do_splice_direct+0x291/0x3e0 [ 534.045913][T23088] ? splice_direct_to_actor+0xd00/0xd00 [ 534.051476][T23088] ? bpf_lsm_file_permission+0x5/0x10 [ 534.056857][T23088] ? security_file_permission+0xe0/0x5d0 [ 534.063191][T23088] ? do_sendfile+0x6a9/0x1040 [ 534.067879][T23088] do_sendfile+0x6fe/0x1040 [ 534.072408][T23088] ? do_pwritev+0x370/0x370 [ 534.076925][T23088] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 534.082917][T23088] __se_sys_sendfile64+0x171/0x1d0 [ 534.088041][T23088] ? __x64_sys_sendfile64+0xa0/0xa0 [ 534.093253][T23088] ? lockdep_hardirqs_on+0x95/0x140 [ 534.098460][T23088] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 534.104451][T23088] do_syscall_64+0x44/0xd0 [ 534.108879][T23088] entry_SYSCALL_64_after_hwframe+0x44/0xae 03:42:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 534.114780][T23088] RIP: 0033:0x7f4e83dcaa39 [ 534.119200][T23088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.138814][T23088] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 534.147239][T23088] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 534.155222][T23088] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 03:42:24 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) [ 534.163200][T23088] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.171179][T23088] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 534.179160][T23088] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 534.249863][ T25] audit: type=1800 audit(1635046944.840:366): pid=23078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz-executor.5" name="/video5" dev="devtmpfs" ino=848 res=0 errno=0 03:42:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'gre0\x00', {0x9d2}, 0x3}) [ 534.366503][ T25] audit: type=1800 audit(1635046944.840:367): pid=23078 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz-executor.5" name="/video5" dev="devtmpfs" ino=848 res=0 errno=0 03:42:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 99) 03:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x60, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 534.518548][T23117] loop3: detected capacity change from 0 to 6 [ 534.522196][ T25] audit: type=1804 audit(1635046944.990:368): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/667/file0" dev="sda1" ino=13964 res=1 errno=0 [ 534.565919][T23120] FAULT_INJECTION: forcing a failure. [ 534.565919][T23120] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.579770][T23120] CPU: 1 PID: 23120 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 534.588583][T23120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.598651][T23120] Call Trace: [ 534.601941][T23120] dump_stack_lvl+0x201/0x2d8 [ 534.606640][T23120] ? show_regs_print_info+0x12/0x12 [ 534.611854][T23120] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 534.617606][T23120] should_fail+0x384/0x4b0 [ 534.622043][T23120] prepare_alloc_pages+0x1dd/0x5a0 [ 534.627176][T23120] __alloc_pages+0x161/0x580 [ 534.631781][T23120] ? __rmqueue_pcplist+0x2090/0x2090 [ 534.637077][T23120] ? __lock_acquire+0x1382/0x2b00 [ 534.642127][T23120] ? __lock_acquire+0x1382/0x2b00 [ 534.647169][T23120] alloc_pages_vma+0x668/0x1030 [ 534.652043][T23120] ? mempolicy_in_oom_domain+0x120/0x120 [ 534.657694][T23120] ? mpol_shared_policy_lookup+0x15e/0x200 [ 534.663541][T23120] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 534.669190][T23120] ? shmem_replace_page+0x10e0/0x10e0 [ 534.674601][T23120] ? mapping_get_entry+0x5bf/0x670 [ 534.679723][T23120] ? pagecache_get_page+0xe80/0xe80 [ 534.684940][T23120] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 534.690932][T23120] ? print_irqtrace_events+0x220/0x220 [ 534.696402][T23120] ? pagecache_get_page+0xbcd/0xe80 [ 534.701623][T23120] shmem_getpage_gfp+0x1583/0x3320 [ 534.706777][T23120] ? shmem_getpage+0xa0/0xa0 [ 534.711388][T23120] shmem_file_read_iter+0x2ac/0xc30 [ 534.716615][T23120] ? shmem_file_llseek+0x180/0x180 [ 534.721751][T23120] generic_file_splice_read+0x482/0x760 [ 534.727488][T23120] ? splice_shrink_spd+0xb0/0xb0 [ 534.732451][T23120] ? splice_from_pipe+0x210/0x210 [ 534.737491][T23120] ? security_file_permission+0x46b/0x5d0 [ 534.743230][T23120] ? splice_shrink_spd+0xb0/0xb0 [ 534.748179][T23120] splice_direct_to_actor+0x45f/0xd00 [ 534.753574][T23120] ? do_splice_direct+0x3e0/0x3e0 [ 534.758610][T23120] ? pipe_to_sendpage+0x340/0x340 [ 534.763657][T23120] ? rcu_lock_release+0x9/0x20 [ 534.768432][T23120] ? bpf_lsm_file_permission+0x5/0x10 [ 534.773814][T23120] ? security_file_permission+0xe0/0x5d0 [ 534.779458][T23120] do_splice_direct+0x291/0x3e0 [ 534.784331][T23120] ? splice_direct_to_actor+0xd00/0xd00 [ 534.789898][T23120] ? bpf_lsm_file_permission+0x5/0x10 [ 534.795288][T23120] ? security_file_permission+0xe0/0x5d0 [ 534.800927][T23120] ? do_sendfile+0x6a9/0x1040 [ 534.805615][T23120] do_sendfile+0x6fe/0x1040 [ 534.810141][T23120] ? do_pwritev+0x370/0x370 03:42:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x9, &(0x7f0000001580)=[{&(0x7f0000000140)="6f667147b1a768f29ca0e062427c053b9ddaa2e9e918373d979ac1021c0c538a6d5a52dd2888b0f32cad03674952e366007761066354219d60ce88e3d779f2859789924c36a8d9106a0e08d800014c069331ee8cf76fd856b3e7bd44a8f90b5d67a5572ea2030827e7218138c1d6f58bed2a6174df2e60af7f12f5fc73e74e716f48ca4dbdc20064936246d2c2ea73048e0ae372083e96d0eaf624118298290e2cd33a23fbe0858d88cdedd459d13b5e525ce74580", 0xb5, 0x8}, {&(0x7f0000000200)="417ed1dff0eec7b28d349f4067e848ee12b47c02c2a7d3ccc54b9c68996ea9f0eb3ee37a7e68f1bf2356c43776c2dc7b00d14f6c557b8f6350fa96f20dffd59e60cfb2e9329b3909fae5e0714494aba6341ad473884f959f404366cf4bd95937ef9a21990a830da2bda3de531f17fb7ac3357cfd52e615fe93a16ca00527be8be036aadad72c18c7dbeb4264f873ccd70bd7b3", 0x93, 0xf8}, {&(0x7f00000002c0)="df0ccf088cc88c241cc85980aa", 0xd, 0x4}, {&(0x7f0000000300)="b85992caa661548ef65017c8ed4cbebdf927b89e42160dfd62df4b8f0e74acb06a825df9949dcc588e36b3cea84db4c36e24979187d7947b1ffaf0612eea50e7e1e22905ea694a", 0x47, 0xffffffff}, {&(0x7f0000000380)="994ae36f6d585d4c9d0de2aaa8f643a78bfd7539f90bd9217f162dd8992b868ef530145758c21cec359baa84199fdf25db5a802f76e9ceda0428c94d0464988ce6b689ff7925c1fe0998d1dc7c3a0c834458176803abd231310eb0005d1e7e7e30038eed83041a00868dce28801cf9427174c7155f61d4ba8884fe75a4e38cef08ed4b4185002043c9c4e667cbe8c4135ecc98d54f0f36c590ffa4d2541c4ad459948c", 0xa3, 0x9}, {&(0x7f0000000440)="145eadbf6f1184910329febfb14399e1cc02972a9302540be30024f93e7d17a7444475f0b30810dd8eb8", 0x2a, 0xff}, {&(0x7f0000000480)="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", 0x1000, 0x5}, {&(0x7f0000001480)="7cec031b840e2b4dcbdbf1f94873e7b61d562d44948c34803952940e2b4a1bf792c72363a5652cfaaedf36bf28464411cd", 0x31, 0x4d}, {&(0x7f00000014c0)="5a2a4a3aea9deb8a39295d8d1a6b4713298adbae5bc45af8f99f8f0ed4f84fad437f12660044bc0108b5cfa75d93d1c5e9e55cedbe27fdcade5c4151cddf04794c365c3682104dca85f9a4a61826f2643aaa7fcc3033e93f2946440fe6f168868ed12be6643e466431120bcf04c8582b2fee60d54b000861926b3156c2030bd40e6fc3466d831af15bfa9583d45c38b6ecc8d3d978b515adc4f34fa70bc5943ae4e6d0a91cac8f87bdfd3f4fe4f35e", 0xaf, 0x401}], 0x200080, &(0x7f0000001680)={[{@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@noacl}, {@user_xattr}, {@data_writeback}, {@min_batch_time={'min_batch_time', 0x3d, 0x857}}, {@resuid}], [{@measure}, {@pcr={'pcr', 0x3d, 0x3c}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@obj_type}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7, 0x7fff, 0x82, 0x9, 0x289}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x0, 0xc8}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 03:42:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:25 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$sock_proto_private(r0, 0x89e4, &(0x7f0000000040)="95c4f205b3281b3626e5576bee5fcbf57387034b9d7fd73888bb806f1db73034866e93a444ada08c89b1cd42282158a5e34bfc4b34a76ebffee56f0a2025acbe6501296eb2ce08f9e1fc07706006c5cb2e6deb5dfa95b6763616b8a2307bf275104d1eb2495417fcd96e975dc1d74be8faf674b1d457f4d7845b2ab0a20d23ee7f23c0537f6697d40d3f9017de47e167722afabf89a4c688439027d3caaa2cf56c8b89d762298036c5f82baaaa7d0ff09893b3df7027832245c301cca3c34a98498b40a4149a39") socket$rds(0x15, 0x5, 0x0) 03:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x68, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 534.814654][T23120] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 534.820652][T23120] __se_sys_sendfile64+0x171/0x1d0 [ 534.825780][T23120] ? __x64_sys_sendfile64+0xa0/0xa0 [ 534.831000][T23120] ? lockdep_hardirqs_on+0x95/0x140 [ 534.836240][T23120] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 534.842231][T23120] do_syscall_64+0x44/0xd0 [ 534.846660][T23120] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 534.852563][T23120] RIP: 0033:0x7f4e83dcaa39 [ 534.856992][T23120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.876601][T23120] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 534.885032][T23120] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 534.887278][T23117] FAT-fs (loop3): Directory bread(block 6) failed [ 534.893008][T23120] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 534.893025][T23120] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.893038][T23120] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000002 [ 534.893051][T23120] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 03:42:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1000000, 0xe8441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8d) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000000140)={0x15e8, r2, 0xa06, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3440, 0x80}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7b, 0x3, "203ff33f448acf086f4b9e6931cffc9c7c0c4c1d66fb9e5fc92587707f8ea14d5f7feddad1c2d69547e9f3070814fea4fcfec8b6695bf2fdacb41548f68e152e8008984926e9f6bfec612ac8b6ce59e64d5c9dd741e99fdfe2882479f5ca57ddee7b884a0bac4f7f6aa21f1ab40d1e2d1f5cf71434aae3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "b3"}]}, @NL80211_ATTR_FTM_RESPONDER={0xf4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x32, 0x2, "a9926209015d889475f56060297cc7eb455b016e2117d55cef42d7d9bc426ce7bfe08f0512628692c0612f2f31fd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xaf, 0x3, "cf3fa5dd9e1c37be02b26fcf6ed2751f682a3654a529a386f9175e44ba9d96a674abbd17c4b8303807d156101e018455ec1e5954337c011ff3e6d6c67c1fc524813126312bfeae101f25a9c8156ca05eaa38359855c8acfbacf2b1fca6c05c90b8c74191ac226eeeb0203e46f187a2e4888add70365be9c69c8fe11107aa71a765ef0253aa6965ef68f343968546a95e69189bc2b8041550516cf647f911d7c235dce9d42ae211e5d91231"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x57, 0x91, "79f165f158424be550314fd92e0301c81e275f0d9e66490c5aa6e90490533e95bbd8344c882310644b2e7253930857df73bc042e355371395da654cd47e1e5791ebba6a371e2daf012e494bbf0c40cbd6416b8"}, @NL80211_ATTR_IE_PROBE_RESP={0x79, 0x7f, [@preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x0, 0x1d, 0x401, @device_b, 0x4, "", 0x8fca, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_a, 0x99}, {{0x1, 0x0, 0x1}, @device_b, 0xd14}, {{0x1}, @device_b, 0x40}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_a, 0x1ff}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x3, [{0x2}, {0x1b}, {0x5}]}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @device_b}}, @chsw_timing={0x68, 0x4, {0xf, 0xba}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1158, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x56, 0x3, "c6b6bd5f4057d64a16dc1fe342729e59b99d6902f2c517ad421c88a4244ba3e7ff4b5df63340e3ec0da81a2c7809167c347ab2adf503af7e38c130ec349c2710fd6bb010bb6c247aa75292dd8056a8323e5c"}, @NL80211_FTM_RESP_ATTR_LCI={0x63, 0x2, "38c630aee5adc46d13d2a1f78efe1db316332e349b431db25c28f0adee79474daa9f6d4f6ec0b1c4f57c5eeefa0e6921499567613d074b38a5e8d4db18bf0f76c8a2bc397f0a007138cbc2e943f59ee1720969c30ed5de7722f97ccaddbcd8"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "7696917e07baf579475f3f57f7f8aab34ebdb2190e24877bb38884b4bec8d16d2d02964a3a3aa32df05cf95263363a09204aa56062426b9af2bd2532b4aa0222f046eada620502ec65b66b91da8584bb96e272b7681c63379cc8a937074ce0a2f02dfde494e7542048dc7ec0d2d15bbabf5ff7024e04bd1f6e999b840e70ca01dd"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x74, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x6e, 0x3, "068d218db419749a5935ec8470e4bdfce18d3fefe36adf6cb63e68bc8d8847fecb85c153b28ac06147780b714867f7af668888fc6f41ebfd2b88c319719a7ddeed20c26f1d6aa1e807bb344e5014bb12551f9d5d796570dc14000aa6708fd0e59719b523f01ef293904b"}]}, @NL80211_ATTR_BEACON_HEAD={0x19d, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_b, @random="7ffa7e03d071", {0x4}}, @ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x6, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0xb95}, @val={0x5, 0xf, {0x1, 0x7c, 0x7, "c2bf99024b907a59054d989f"}}, @val={0x25, 0x3, {0x0, 0x2, 0xff}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0xc, 0x1, 0x2, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x7, 0x9}}, @void, @void, @val={0x76, 0x6, {0x1, 0x0, 0x19, 0x7}}, [{0xdd, 0x4f, "bb6490ef497329961f6ee6a85ed328e0f76ffac3686312694167b42baf73a86a501abd286c9287de54ec54079e6e85e421b710ba2cdcfc8ced6da7e473b1bd37e7ef2fe1f5cd4424e9d6c4b66a21ec"}, {0xdd, 0x30, "3ecd05019415a4e38083f35fa3651650d21cc2bb044d750aa98d39321db786c8e22e300b4a2246f76899f13e03c176b3"}, {0xdd, 0x81, "ad957d456a0303308267be10426a0fe95495ba51c26b5f013db87b28b5403e24e3c21e38ed85771182e960727d00ccd686c03b8c32fbde789233aeaedd37dd8f904a55217e85872722675646dd302a9a1d4346981998cf970bb9d89fe3edfd4a6a66c68a7034a5e2ae4177b75942dd658cf7a3fa8b5f0a5daa0e3de4cd7be34fc4"}, {0xdd, 0x1d, "9eb936ec057a610e55e26fdc6a3598b3890fcfb01a0877310b2a0d1887"}]}}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x20000001}, 0x50881) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000080), 0x0) 03:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:25 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x18, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xdc, 0x1, 0x9, 0xa5, 0x0, 0x8, 0x10004, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3ff, 0x7fffffff}, 0x8, 0x0, 0x4, 0x9, 0xe6ef, 0x7, 0x6, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_mount_image$gfs2meta(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1ff, 0x6, &(0x7f0000000340)=[{&(0x7f0000000140)="a568dea540735133f7fedadefdac5f773782", 0x12, 0x3f}, {&(0x7f0000000180)="a9542191e49b96d5698af418317acee48b41a5f590a6429a579fddf640ba8f7e90aeb1ffcfb696095b7d61c2af7faa1afe", 0x31, 0x1}, {&(0x7f00000001c0)="e5878b571487a0e1a3d69af37b015d1d8e0ac2c291f5a46eb6e04cf4253f913365d9a617f6c40d", 0x27, 0xf6}, {&(0x7f0000000200)="957551b58a319b6ca61c6b32264b0817a273bd5faa620cecba58d4906f1555931a4db71cf8f86e29ffb4c2ecf28be8991563e7b9bd8602932eef66cbfbee56613ea1816adacaa69345223274921a4ade7baff20ca81fbb39802f754d5d7c323da876cfa5209fea43a9364badba18ef01f8b5417317befed8b1681626643a3be430be0f1ccf", 0x85, 0x3ff}, {&(0x7f00000002c0)="846e10f60c0f8c4a8015f27fd77746cd8254a863d3a16ff13cce2d", 0x1b, 0x8}, {&(0x7f0000000300)="3294be94e40fc92e59935d5388648691944b81caa3f69f5224ff7ba463e9dc008e8b837ec4418713e5", 0x29, 0x8}], 0x31001b, &(0x7f0000000400)={[{':'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'bridge_slave_1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bridge_slave_1\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'bridge_slave_1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x95-@])['}}]}) sendfile(0xffffffffffffffff, r1, &(0x7f00000004c0)=0x7, 0xfffffffffffffffe) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) perf_event_open$cgroup(&(0x7f0000000540)={0x5, 0x80, 0x9, 0x81, 0x0, 0x81, 0x0, 0x5, 0x120c, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000500), 0x8}, 0x10a82, 0x4, 0x3, 0x4, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r4, 0x9) 03:42:25 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 03:42:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) (fail_nth: 100) 03:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x74, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 535.279565][ T25] audit: type=1800 audit(1635046945.870:369): pid=23154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=13927 res=0 errno=0 [ 535.369861][T23161] FAULT_INJECTION: forcing a failure. [ 535.369861][T23161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.383383][T23161] CPU: 0 PID: 23161 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 535.392155][T23161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.402204][T23161] Call Trace: [ 535.405473][T23161] dump_stack_lvl+0x201/0x2d8 [ 535.410149][T23161] ? show_regs_print_info+0x12/0x12 [ 535.415339][T23161] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 535.421058][T23161] should_fail+0x384/0x4b0 [ 535.425479][T23161] prepare_alloc_pages+0x1dd/0x5a0 [ 535.430611][T23161] __alloc_pages+0x161/0x580 [ 535.435212][T23161] ? __rmqueue_pcplist+0x2090/0x2090 [ 535.440495][T23161] ? __lock_acquire+0x1382/0x2b00 [ 535.445522][T23161] ? __lock_acquire+0x1382/0x2b00 [ 535.450556][T23161] alloc_pages_vma+0x668/0x1030 [ 535.455427][T23161] ? mempolicy_in_oom_domain+0x120/0x120 [ 535.461056][T23161] ? mpol_shared_policy_lookup+0x15e/0x200 [ 535.466855][T23161] shmem_alloc_and_acct_page+0x4aa/0xc80 [ 535.472572][T23161] ? shmem_replace_page+0x10e0/0x10e0 [ 535.477949][T23161] ? mapping_get_entry+0x5bf/0x670 [ 535.483051][T23161] ? pagecache_get_page+0xe80/0xe80 [ 535.488243][T23161] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 535.494219][T23161] ? print_irqtrace_events+0x220/0x220 [ 535.499688][T23161] ? pagecache_get_page+0xbcd/0xe80 [ 535.504879][T23161] shmem_getpage_gfp+0x1583/0x3320 [ 535.510011][T23161] ? shmem_getpage+0xa0/0xa0 [ 535.514596][T23161] shmem_file_read_iter+0x2ac/0xc30 [ 535.519796][T23161] ? shmem_file_llseek+0x180/0x180 [ 535.524903][T23161] generic_file_splice_read+0x482/0x760 [ 535.530445][T23161] ? splice_shrink_spd+0xb0/0xb0 [ 535.535398][T23161] ? splice_from_pipe+0x210/0x210 [ 535.540413][T23161] ? security_file_permission+0x46b/0x5d0 [ 535.546118][T23161] ? splice_shrink_spd+0xb0/0xb0 [ 535.551044][T23161] splice_direct_to_actor+0x45f/0xd00 [ 535.556412][T23161] ? do_splice_direct+0x3e0/0x3e0 [ 535.561429][T23161] ? pipe_to_sendpage+0x340/0x340 [ 535.566441][T23161] ? rcu_lock_release+0x9/0x20 [ 535.571194][T23161] ? bpf_lsm_file_permission+0x5/0x10 [ 535.576549][T23161] ? security_file_permission+0xe0/0x5d0 [ 535.582175][T23161] do_splice_direct+0x291/0x3e0 [ 535.587017][T23161] ? splice_direct_to_actor+0xd00/0xd00 [ 535.592574][T23161] ? bpf_lsm_file_permission+0x5/0x10 [ 535.597945][T23161] ? security_file_permission+0xe0/0x5d0 [ 535.603566][T23161] ? do_sendfile+0x6a9/0x1040 [ 535.608232][T23161] do_sendfile+0x6fe/0x1040 [ 535.612732][T23161] ? do_pwritev+0x370/0x370 [ 535.617227][T23161] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 535.623203][T23161] __se_sys_sendfile64+0x171/0x1d0 [ 535.628303][T23161] ? __x64_sys_sendfile64+0xa0/0xa0 [ 535.633490][T23161] ? lockdep_hardirqs_on+0x95/0x140 [ 535.638692][T23161] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 535.644660][T23161] do_syscall_64+0x44/0xd0 [ 535.649066][T23161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 535.654963][T23161] RIP: 0033:0x7f4e83dcaa39 [ 535.659365][T23161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.678957][T23161] RSP: 002b:00007f4e81340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 535.687358][T23161] RAX: ffffffffffffffda RBX: 00007f4e83ecdf60 RCX: 00007f4e83dcaa39 [ 535.695316][T23161] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 535.703272][T23161] RBP: 00007f4e813401d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.711244][T23161] R10: 0020000102000003 R11: 0000000000000246 R12: 0000000000000003 [ 535.719201][T23161] R13: 00007ffe8ed94bcf R14: 00007f4e81340300 R15: 0000000000022000 [ 535.771385][T23162] loop3: detected capacity change from 0 to 6 [ 535.774292][ T25] audit: type=1804 audit(1635046945.900:370): pid=23154 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/667/file0" dev="sda1" ino=13927 res=1 errno=0 03:42:26 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x21, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:26 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x20141) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) write$P9_RREADDIR(r6, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x7, [{{0x80, 0x4, 0x3}, 0x4, 0x8, 0x7, './file0'}]}}, 0x2a) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000000)="1abe8f04cf97a74c5df08547d8b73be6af4c7579ae55308c4402") ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) 03:42:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7a, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 536.009970][T23175] __nla_validate_parse: 14 callbacks suppressed [ 536.009988][T23175] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:26 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x25, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 536.237176][T23183] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 536.330264][T23186] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x22d, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) 03:42:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000001480)=0x1, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001940)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/223, 0xdf}], 0x1, &(0x7f0000002280)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x1}, {&(0x7f0000001ac0)=""/114, 0x72}, &(0x7f0000001d00)=[{&(0x7f0000001b40)=""/36, 0x24}, {&(0x7f0000001b80)=""/238, 0xee}, {&(0x7f0000001c80)=""/80, 0x50}], 0x3, 0x10, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x50c}, {&(0x7f0000001d40)=""/117, 0x75}, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/215, 0xd7}], 0x1, 0x40, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x8000}, {&(0x7f0000001f00)=""/32, 0x20}, &(0x7f0000002180)=[{&(0x7f0000001f40)=""/25, 0x19}, {&(0x7f0000001f80)=""/73, 0x49}, {&(0x7f0000002000)=""/10, 0xa}, {&(0x7f0000002040)=""/131, 0x83}, {&(0x7f0000002100)=""/115, 0x73}], 0x5, 0x6, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x800}, &(0x7f0000002200)=0x2, &(0x7f0000002240), 0xc4, 0x6, 0x7, 0x9, 0x26, 0x20}}], 0x130, 0x48000}, 0x8001) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/149, 0x95}], 0x1, &(0x7f00000003c0)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x1}, &(0x7f0000000340)=0xd3, &(0x7f0000000380)=0x4, 0xaf8b, 0x3, 0x5500b6d8, 0xffffffffffff8001, 0x40, 0x8}}], 0x58, 0x80000}, 0x10) sendmsg$rds(r0, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000001840)=""/19, 0x13}, {&(0x7f0000000440)=""/4086, 0xff6}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000002440)=""/121, 0x79}, {&(0x7f0000001440)=""/57, 0x39}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000001540)=""/100, 0x64}, {&(0x7f00000015c0)=""/251, 0xfb}, {&(0x7f00000016c0)=""/101, 0x65}], 0xa, &(0x7f0000001880)=[@cswp={0x58, 0x114, 0x7, {{0xfffffff7, 0x3}, &(0x7f0000001800)=0x3085, &(0x7f0000002400)=0x4156, 0x9c, 0x341a, 0xfffffffeffffffff, 0xffff, 0x0, 0xffff}}], 0x58}, 0x840) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000024c0)={0x0, @reserved}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) dup(0xffffffffffffffff) 03:42:27 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 536.673614][T23200] loop3: detected capacity change from 0 to 6 [ 536.704579][T23199] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 536.732625][T23200] FAT-fs (loop3): Directory bread(block 6) failed 03:42:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x7ffff000) [ 536.812751][T23210] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd28, 0x25dfdbfc, {0x2, 0x10, 0x14, 0x1, 0x80, 0x0, 0x0, 0x7, 0x5}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1ff}, @FRA_FLOW={0x8, 0xb, 0x568a}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc840}, 0x44) 03:42:27 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000140), 0x4) write(r2, &(0x7f0000000600)="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", 0x200) 03:42:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x300, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:27 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x48, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000002) [ 537.177075][T23223] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 537.179120][T23227] loop3: detected capacity change from 0 to 6 03:42:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, r2, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x4c}}, 0x4800) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6a}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x53b}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10000}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) [ 537.304765][T23227] FAT-fs (loop3): Directory bread(block 6) failed 03:42:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000004) 03:42:27 executing program 5: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2) socket$rds(0x15, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {}, 0xfffc}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x1f, &(0x7f0000000100)=0x2) 03:42:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x500, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:28 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 537.605655][T23255] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000005) 03:42:28 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0xcb2}, 0x2e}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 537.707814][T23256] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 537.781178][T23264] loop3: detected capacity change from 0 to 6 03:42:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:28 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x60, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 537.868624][T23264] FAT-fs (loop3): Directory bread(block 6) failed 03:42:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x2000010200000f) 03:42:28 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 538.044245][T23274] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x800, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) r6 = getgid() mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200), 0xe5400, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'system_u'}}]}}) fchownat(r5, &(0x7f0000000080)='./bus\x00', 0xee00, r6, 0x400) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) sendfile(r7, r1, 0x0, 0xffffff38) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) fallocate(r0, 0x1, 0x3f, 0x6c6) [ 538.129783][T23277] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:28 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 538.214838][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 538.214853][ T25] audit: type=1800 audit(1635046948.810:379): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=13979 res=0 errno=0 03:42:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x700, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000010) [ 538.346607][T23291] loop3: detected capacity change from 0 to 6 03:42:29 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x68, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 538.488910][T23291] FAT-fs (loop3): Directory bread(block 6) failed [ 538.504116][ T25] audit: type=1804 audit(1635046948.810:380): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/673/file0" dev="sda1" ino=13979 res=1 errno=0 03:42:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000041) 03:42:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x900, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 538.762920][ T25] audit: type=1804 audit(1635046948.860:381): pid=23285 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/673/file0" dev="sda1" ino=13979 res=1 errno=0 03:42:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:29 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6c, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 538.985003][ T25] audit: type=1800 audit(1635046948.940:382): pid=23290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=13977 res=0 errno=0 [ 539.079725][T23318] loop3: detected capacity change from 0 to 6 [ 539.148754][T23318] FAT-fs (loop3): Directory bread(block 6) failed 03:42:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000060) [ 539.189194][ T25] audit: type=1804 audit(1635046948.960:383): pid=23290 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/671/file0" dev="sda1" ino=13977 res=1 errno=0 03:42:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xa00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', {0x1}, 0x9}) 03:42:29 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:29 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x1000, 0xffff, {}, {0x3, 0x2, 0x6, 0x40, 0x8, 0x3f, "33d04d30"}, 0xc89, 0x2, @offset=0xab, 0x6b4ab92, 0x0, r3}) r6 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0xffffff38) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) 03:42:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0xffffffffffffffff) 03:42:30 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x74, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 539.403801][ T25] audit: type=1804 audit(1635046949.621:384): pid=23293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/673/file0" dev="sda1" ino=13979 res=1 errno=0 [ 539.429120][ T25] audit: type=1804 audit(1635046949.621:385): pid=23293 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/673/file0" dev="sda1" ino=13979 res=1 errno=0 [ 539.526445][ T25] audit: type=1800 audit(1635046950.121:386): pid=23340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=14289 res=0 errno=0 03:42:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xb00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) pwritev(r3, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) fallocate(r5, 0x22, 0x1, 0xff) open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x89100) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x7, 0xfff9, 0x19, "9141e8c4544c5876"}) 03:42:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller1\x00'}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) [ 539.623809][T23345] loop3: detected capacity change from 0 to 6 [ 539.677704][ T25] audit: type=1804 audit(1635046950.131:387): pid=23340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/674/file0" dev="sda1" ino=14289 res=1 errno=0 [ 539.727663][T23345] FAT-fs (loop3): Directory bread(block 6) failed 03:42:30 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7a, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 539.784755][T23356] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 539.896968][T23361] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? 03:42:30 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 539.941500][ T25] audit: type=1804 audit(1635046950.281:388): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir205263340/syzkaller.ib3IuD/674/file0" dev="sda1" ino=14289 res=1 errno=0 03:42:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xc00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 540.152082][T23368] loop3: detected capacity change from 0 to 6 03:42:30 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x300, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:30 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fd8068b6725e2de}, 0x240040c0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000080) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1d090007cb4d184c536bfba9e60d", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004085) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0c0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, @perf_config_ext={0x8}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000380)='./file0\x00') r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) truncate(&(0x7f0000000480)='./file0\x00', 0x59c) bind$packet(r2, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) 03:42:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) sendfile(r0, r1, 0x0, 0x3) 03:42:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000080)) sendfile(r3, r1, 0x0, 0xffffff38) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 540.222569][T23368] FAT-fs (loop3): Directory bread(block 6) failed 03:42:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xd00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:31 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x500, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 540.783979][T23397] loop3: detected capacity change from 0 to 6 [ 540.807869][T23381] bridge0: port 2(bridge_slave_1) entered disabled state 03:42:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() getrlimit(0x0, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xe00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 540.844629][T23397] FAT-fs (loop3): Directory bread(block 6) failed 03:42:31 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 541.157786][T23381] device bridge_slave_1 left promiscuous mode [ 541.191179][T23409] __nla_validate_parse: 12 callbacks suppressed [ 541.191196][T23409] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:31 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x584, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0x20, 0x2, 0x0, 0x0, 0xfffffffffffffffa, 0x18020, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa41, 0x1, @perf_bp={&(0x7f0000000000), 0xd}, 0x10, 0x4, 0x1, 0x5, 0x2, 0xfff, 0xe53, 0x0, 0x6, 0x0, 0x81}, r0, 0x3, 0xffffffffffffffff, 0x1) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) [ 541.212698][T23381] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.324080][T23426] loop3: detected capacity change from 0 to 6 [ 541.361139][T23430] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.457181][T23426] FAT-fs (loop3): Directory bread(block 6) failed 03:42:32 executing program 1: times(&(0x7f0000000080)) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x24000, 0x21) 03:42:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xf00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:32 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x56041, 0x97a664998e5cf742) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, r5, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x4c}}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x1064, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TESTDATA={0x42, 0x45, "56c6babf6ebdf6ddd2127a01f9e81d79286165cdb23cdf21b42955d3f7eb6560c7370ca3564cf4749636023523c7cf5d3f6a1f0ab88f6357d8074ff22766"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1064}, 0x1, 0x0, 0x0, 0x40000}, 0x24000004) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) r8 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x1, 0x9, 0x9, 0x54, 0x0, 0x1000, 0x44400, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x6}, 0x6, 0x2, 0x7, 0x3, 0x4, 0x6, 0x2, 0x0, 0xffe00000, 0x0, 0x6}, r0, 0x10, r8, 0x3) 03:42:32 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:32 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0x200) sendfile(r3, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r3, 0xd177d000) sendfile(r5, r3, 0x0, 0xffffff38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000040)={0x0, 'bridge_slave_1\x00'}) [ 541.625513][T23438] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1100, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 541.922331][T23462] loop3: detected capacity change from 0 to 6 [ 541.981965][T23462] FAT-fs (loop3): Directory bread(block 6) failed 03:42:32 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x700, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 542.044847][ T1211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:42:32 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xc381, 0x101001) dup3(r1, 0xffffffffffffffff, 0x80000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f0000000080)=0x3) [ 542.140789][T23473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7fff, 0x5, &(0x7f0000000640)=[{&(0x7f00000000c0)="9e682f0f819e7305e8acdf22daa1d99b4509c6a4affec670cb4e368a77380e5ef1119fb5962cbaa03051a79cc33fbe71a0f72c230efb06800a195fdfe301d60b0d264a18ebff8c1d7f0b12a3073206298f040b096a161b0b88df4e348701f0a36647a8d6a1ce6e08c11e26167bb049cb2b7e9f77d5a1020bc576abaf8df7a2f0c9099f85", 0x84, 0x5}, {&(0x7f0000000180)="d45d9d968d26c1cf94751641b97a5a553288cd12a5f6cb4936d29154c1ab44e5c6382b2772b1f51457f17cbb55f54b1c1b87c3e8152c7077ada740d0f730267865b1d651d7faa5b9cdfd576fb0c13b9fb43b9e511df87b58b6607bb520576f9f046bbb8355e780ecfa821dfa82c574669a8a49f5c2c9fd5149351d58f7f0f0eb65fdebe852b62da15f87402fd58dfbbfdae06414b4d61bbbef9794456a0f5415d24dc4d9543b4004eb818a8b8b752ef57ec639d3a54b358a71037184", 0xbc, 0x2}, {&(0x7f0000000340)="0d909a082e6b5237ec63273f9791401543ca6313e79323348e8ff9d9b8bce380a71dae38f569bd9455d08df89ff138f35ccdb9bb9a7dda59206e926262577284180ed8346c02411526174cce1853a506caabc6e134a6b314866642d6b9971a1d0f9a62ca4218dd7cd633a2b4c8d340901ab38c22363aeda4e79139fedda782167bfa03beb65b0207c6345693d1a34711e094a9c8aa3feade5f2e69365a09a71044", 0xa1, 0x6}, {&(0x7f0000000400)="78db2e01cdd155d9296c4892147eb43133e387524e3479bb7de3a9bf192927b4c853383d1240abfddb00581eff525db405e131907f66d7160a20ab91322994906d8c8168504758916c62c2989a30cbfbd098951f5abf2ecd6c74eaaa9c386f7ef558d7b2", 0x64, 0x3d}, {&(0x7f0000000240)="af09c63dd510076272331ab089d329b79691e9a459dd3064", 0x18, 0x7}], 0x8, &(0x7f0000000800)={[{'^'}, {'/dev/loop#\x00'}, {'\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'}, {':+^{'}, {}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x1) [ 542.253984][T23477] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.264378][ T1211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.334333][T23482] loop4: detected capacity change from 0 to 63 [ 542.342044][T23482] nfs: Unknown parameter '^' [ 542.448118][ T1211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.469434][T23489] loop3: detected capacity change from 0 to 6 [ 542.491717][T23482] loop4: detected capacity change from 0 to 63 [ 542.498525][T23482] nfs: Unknown parameter '^' 03:42:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1200, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:33 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x900, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf5, 0x0, 0x1, 0xaf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0xffffff38) sendmsg$rds(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1, &(0x7f0000000280)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7}, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x8, 0x1, 0xfffffffffffffffc, 0x7f, 0x4, 0x10, 0x78}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0xffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=0x1, 0x3, 0x8, 0xfff, 0x2, 0x0, 0x3fff80000}}, @fadd={0x58, 0x114, 0x6, {{0x400, 0x40}, &(0x7f0000000200)=0x81, &(0x7f0000000240)=0x2, 0x7c0e, 0x100000000, 0x7f, 0x1, 0x2, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0xffffffff}}], 0x120, 0x64000000}, 0x20000000) [ 542.565545][T23489] FAT-fs (loop3): Directory bread(block 6) failed 03:42:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:33 executing program 5: getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r0, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 542.739177][T23505] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.802582][T23503] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 542.812947][ T1211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:42:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x2, 0x10000008, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x200}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffffff38) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040), 0x6e, &(0x7f0000002000)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000340)=""/148, 0x94}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000c80)=""/168, 0xa8}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/209, 0xd1}, {&(0x7f0000001f00)=""/196, 0xc4}, {&(0x7f0000000400)=""/47, 0x2f}], 0x9, &(0x7f00000020c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x1060) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xffffff38) write$binfmt_elf32(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4601810201090000000000000002000300050000009701000038000000a80000000001000001002000010008000800a3d5b6000000070000007f000000050000000500000033e8000012fa0000f5f5000008000000a0061bd49b9c5dd77b9a8dc28c8b06ae6206ccb09500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000858bc237318fe2610000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000"/1133], 0x46d) [ 542.846567][T23508] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:33 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xa00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 542.965774][T23519] loop3: detected capacity change from 0 to 6 03:42:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc3}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 543.047369][T23519] FAT-fs (loop3): Directory bread(block 6) failed [ 543.077539][T23527] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:33 executing program 1: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) 03:42:33 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:34 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xb00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 543.581285][T23557] loop3: detected capacity change from 0 to 6 [ 543.665430][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 543.665446][ T25] audit: type=1800 audit(1635046954.261:402): pid=23561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14434 res=0 errno=0 [ 543.695582][T23557] FAT-fs (loop3): Directory bread(block 6) failed [ 543.707036][T23563] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip6_vti0\x00', {}, 0x3f}) 03:42:34 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xc00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 543.795300][ T25] audit: type=1804 audit(1635046954.271:403): pid=23561 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/548/file0" dev="sda1" ino=14434 res=1 errno=0 03:42:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffff38) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0xef85) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r6, r4, 0x0, 0xffffff38) io_submit(0x0, 0x2, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xc647, 0xffffffffffffffff, &(0x7f0000000080)="d1de4aee86eb69ab4f63e164367092e45589570e485800114649cc4d9bfc226dd559178716b287743c516d7a77a3a91e950c239153a328b196b53990df2c7d221d0a520ab8a5eb29f18ec4465ee497cb5e6e5722cfb1a0a503a2bb4d1143682f8b38d37c9b974fdddc2b139e", 0x6c, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f0000000140)="c28b7f1fb8860b6290a891cf41395038125854fef0a0e7c1a94c1817e026d73b769926861dde4ba47ac9e7a24f8145ff44478ebdb3c94154fddd6904346aaf007335deccd2c2b99a82c2045fb3989d169bc5577d2d2683ce37707bb3ae077ddf32e03f749df5347112fa", 0x6a, 0x4, 0x0, 0x0, r6}]) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x5, 0x10000000, 0x8, 0x2, 0xfff, 0xb0, 0xfffffffffffffff8, 0x7, 0x5}, 0x0) 03:42:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2100, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:34 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 543.997252][ T25] audit: type=1800 audit(1635046954.592:404): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=14011 res=0 errno=0 [ 544.061422][T23579] loop3: detected capacity change from 0 to 6 03:42:34 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xd00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 544.107527][ T25] audit: type=1804 audit(1635046954.622:405): pid=23576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir688924945/syzkaller.FD3XmW/234/file0" dev="sda1" ino=14011 res=1 errno=0 [ 544.151521][T23579] FAT-fs (loop3): Directory bread(block 6) failed 03:42:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2500, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 544.645871][ T1211] device hsr_slave_0 left promiscuous mode [ 544.670694][ T1211] device hsr_slave_1 left promiscuous mode [ 544.730351][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.742450][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.777172][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.795046][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.818123][ T1211] device bridge_slave_0 left promiscuous mode [ 544.833230][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.861954][ T1211] device veth1_macvtap left promiscuous mode [ 544.877395][ T1211] device veth0_macvtap left promiscuous mode [ 544.891534][ T1211] device veth1_vlan left promiscuous mode [ 544.929069][ T1211] device veth0_vlan left promiscuous mode [ 545.876319][ T1211] team0 (unregistering): Port device team_slave_1 removed [ 545.936947][ T1211] team0 (unregistering): Port device team_slave_0 removed [ 545.971875][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.025619][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.261726][ T1211] bond0 (unregistering): Released all slaves [ 550.083160][T23635] chnl_net:caif_netlink_parms(): no params data found [ 550.173224][T23635] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.182916][T23635] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.194022][T23635] device bridge_slave_0 entered promiscuous mode [ 550.203580][T23635] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.211352][T23635] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.220009][T23635] device bridge_slave_1 entered promiscuous mode [ 550.252194][T23635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.263189][T23635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.304800][T23635] team0: Port device team_slave_0 added [ 550.313931][T23635] team0: Port device team_slave_1 added [ 550.347942][T23635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.354929][T23635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.381493][T23635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.394837][T23635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.402690][T23635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.430960][T23635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.473213][T23635] device hsr_slave_0 entered promiscuous mode [ 550.481005][T23635] device hsr_slave_1 entered promiscuous mode [ 550.488017][T23635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.495581][T23635] Cannot create hsr debugfs directory [ 550.603442][T23635] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.610564][T23635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.617968][T23635] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.625056][T23635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.674035][T23635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.691999][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.701389][T13791] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.709696][T13791] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.718506][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 550.734438][T23635] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.745712][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.756445][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.763562][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.777601][T15312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.785934][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.793031][T15312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.822127][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.831102][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.844022][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.857923][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.872266][T23635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.886216][T23635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.896549][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.914954][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 550.922581][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 550.935777][T23635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.011108][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.034388][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.043057][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.052466][ T7250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.063062][T23635] device veth0_vlan entered promiscuous mode [ 551.075350][T23635] device veth1_vlan entered promiscuous mode [ 551.101134][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.109946][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.125307][T23635] device veth0_macvtap entered promiscuous mode [ 551.136213][T23635] device veth1_macvtap entered promiscuous mode [ 551.151891][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 551.163353][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.174397][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 551.185812][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.196378][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 551.207989][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.218414][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 551.229690][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.240820][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 551.252320][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.264295][T23635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.273024][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.282430][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.291107][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.305902][ T7956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.319332][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 551.331296][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.342720][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 551.353564][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.364508][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 551.375042][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.385000][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 551.395949][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.405971][T23635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 551.417274][T23635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.428942][T23635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.437105][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.445884][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.537666][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.545765][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.576517][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.585319][T15312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 551.595821][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.608933][T15312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 03:42:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x469, 0xc8}) 03:42:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:42 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth1_macvtap\x00', {}, 0x1000}) 03:42:42 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xe00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2d02, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 551.706263][T23986] loop3: detected capacity change from 0 to 6 [ 551.713099][ T25] audit: type=1800 audit(1635046962.313:406): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14451 res=0 errno=0 [ 551.767008][T23986] FAT-fs (loop3): Directory bread(block 6) failed [ 551.869969][T23999] __nla_validate_parse: 5 callbacks suppressed [ 551.869984][T23999] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.873883][ T25] audit: type=1804 audit(1635046962.313:407): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/681/file0" dev="sda1" ino=14451 res=1 errno=0 03:42:42 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0xf00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 551.920061][ T2986] Bluetooth: hci1: command 0x0409 tx timeout 03:42:42 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:42 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"ee3356f9cb5a1f0a23c36f9fafddd202", 0x0, 0x0, {0x7, 0x1}, {0x401, 0x400000}, 0x6, [0x8, 0x7947, 0x4, 0x103, 0x9, 0x6, 0x73, 0x0, 0xffff, 0x0, 0x5fd, 0xa2f7, 0x7, 0x33, 0x1000, 0x400000000000000]}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0xff, 0x7f, 0x101, 0x80, 0x3}) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x3, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x88441) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc8}) 03:42:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3c00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 552.156842][T24002] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x3, 0x5e, 0x1, 0x16cc, 0xb8, 0x100000001, 0x7f, 0x7, 0x26c}, 0x0) [ 552.216653][T24002] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 552.263089][T24015] loop3: detected capacity change from 0 to 6 [ 552.272398][T24012] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:42 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1100, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 552.351753][T24020] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = accept(r0, 0x0, &(0x7f0000002800)) bind$rds(r2, &(0x7f0000002840)={0x2, 0x4e23, @multicast1}, 0x10) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffff38) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x0, @remote}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) r5 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x200) sendfile(r5, r6, 0x0, 0xef85) r7 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r7, r5, 0x0, 0xffffff38) sendmsg$rds(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/69, 0x45}], 0x6, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0xc77b}, &(0x7f00000004c0)=0x800, &(0x7f0000000500)=0xe0000000000000, 0x7f, 0x80, 0x0, 0x7fffffff, 0x30, 0x4}}], 0x58, 0x8004}, 0x4844) open(&(0x7f0000000080)='./file0\x00', 0x204040, 0xec) socket$nl_generic(0x10, 0x3, 0x10) 03:42:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) [ 552.503847][T24025] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 552.611862][ T25] audit: type=1800 audit(1635046963.213:408): pid=24037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14059 res=0 errno=0 03:42:43 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1200, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 552.683030][T24040] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.751039][T24044] loop3: detected capacity change from 0 to 6 [ 552.751587][ T25] audit: type=1804 audit(1635046963.213:409): pid=24037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/682/file0" dev="sda1" ino=14059 res=1 errno=0 [ 552.803855][T24044] FAT-fs (loop3): Directory bread(block 6) failed [ 552.811493][T24043] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 552.942104][ T25] audit: type=1804 audit(1635046963.403:410): pid=24048 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir676707725/syzkaller.sqmZ07/682/file0" dev="sda1" ino=14059 res=1 errno=0 03:42:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:43 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x0, 0xb, 0x5, 0x7fff, 0x2, 0x7, 0x9, 0x7fffffff, 0x3f}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xb) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x3, 0x12, 0x10, 0x1, "3c5a7389a6c042e3d3b89c2ff7b4dfc7cd0725bf44b1b61a30ad3ff6dc16ac37b3e072c13332f69d1d2e7cf55222cc7b44a14874fda2d196aca1025e011bd203", "af00b01e38e3d2f0618e80077cdb9b1128716439cc3ea3c13db458483a896851", [0xffff, 0x3b33]}) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 553.011087][T24051] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 03:42:43 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 553.184448][T24058] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.271418][T24066] loop3: detected capacity change from 0 to 6 03:42:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) sendfile(r0, r1, 0x0, 0x20000102000003) [ 553.357479][ T25] audit: type=1800 audit(1635046963.953:411): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14466 res=0 errno=0 03:42:44 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000080)}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x8, &(0x7f00000004c0)=[@fadd={0x58, 0x114, 0x6, {{0x2, 0x729aaa36}, &(0x7f0000000440)=0x1f, &(0x7f0000000480), 0x7ff, 0x9, 0xb5d, 0x0, 0x0, 0x2}}], 0x58, 0x20004081}, 0xc001) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffff38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x3}, 0x1}) 03:42:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4c00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 553.445193][ T25] audit: type=1804 audit(1635046963.993:412): pid=24071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir494125586/syzkaller.jVH1IU/553/file0" dev="sda1" ino=14466 res=1 errno=0 [ 553.474324][ T25] audit: type=1800 audit(1635046964.033:413): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=14072 res=0 errno=0 03:42:44 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 553.510764][ T25] audit: type=1804 audit(1635046964.033:414): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir688924945/syzkaller.FD3XmW/239/file0" dev="sda1" ino=14072 res=1 errno=0 03:42:44 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 553.739025][ T25] audit: type=1800 audit(1635046964.193:415): pid=24082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14063 res=0 errno=0 [ 553.851127][T24093] loop3: detected capacity change from 0 to 6 03:42:44 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2100, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 553.958125][T24093] FAT-fs (loop3): Directory bread(block 6) failed [ 554.007202][ T2986] Bluetooth: hci1: command 0x041b tx timeout 03:42:44 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x9) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) 03:42:44 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2500, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0xcbc, 0x4) syz_io_uring_setup(0x768d, &(0x7f0000000040)={0x0, 0x174a, 0x20, 0x2, 0x1f6}, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000823000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) bind$rds(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000180)=[r0, r2], 0x2, 0x0, 0x0, {0x0, r3}}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 554.403827][T24113] loop3: detected capacity change from 0 to 6 03:42:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r3, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r3, 0x0, 0x20000102000003) 03:42:45 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3c00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 554.508295][T24113] FAT-fs (loop3): Directory bread(block 6) failed 03:42:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:42:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6c00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 554.771113][T24137] loop3: detected capacity change from 0 to 6 [ 554.785294][T24137] FAT-fs (loop3): Directory bread(block 6) failed 03:42:45 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:45 executing program 5: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000080)=0x100000000, 0x101, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) 03:42:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x201}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000240), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef85) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xffffff38) open(&(0x7f00000001c0)='./file0\x00', 0x400400, 0x9) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x8, 0x5, 0x1a, 0x11, "57ac8e48d367ba23ba7e70e893a9a05affb40ab1ddb7599622a4340436208d16194e7ee9d1691878075fdb796ff053b34e8a199dbb45aa53842e081a1c0d7bc2", "eb233ef6c368c6dff3a639e81201fa1a0064e3ebff4c3b1ca49fb713c50925a8", [0x3, 0x1f]}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x4, 0x8, 0x100, 0x0, 0xfdc, 0x6, 0x2, 0x35}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) getrlimit(0x6, &(0x7f0000000000)) 03:42:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7400, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:45 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 555.060343][T24157] loop3: detected capacity change from 0 to 6 03:42:45 executing program 5: socket$rds(0x15, 0x5, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef85) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'virt_wifi0\x00', {0x8000000}, 0xc}) [ 555.138146][T24157] FAT-fs (loop3): Directory bread(block 6) failed 03:42:45 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x7a00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:46 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4c00, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) [ 555.534557][T24184] loop3: detected capacity change from 0 to 6 [ 555.594860][T24184] FAT-fs (loop3): Directory bread(block 6) failed 03:42:46 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:46 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x34000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:46 executing program 4: prlimit64(0x0, 0x5, &(0x7f0000000280)={0xd, 0x2}, 0x0) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) r3 = fork() perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x57, 0x80, 0x7, 0xf7, 0x0, 0x762b, 0x4d110, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x8, 0x1, 0x2, 0x8, 0x9, 0x6, 0xff, 0x0, 0x3ca2, 0x0, 0xf8a}, r3, 0x2, 0xffffffffffffffff, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="d80d2e534e5b3b495991cde3d9d90a27a0b07a5caafd15b92de9853a98e06c0e11597b4d8b22da0fb8f8fcbcff7f975799271325753ffcd6ca81f498ec8c2e9ef74108f56bb0e8f5b32e709702fba0f4cf46026989e6a0e2d6ca3a00d761fc48369d760022dcb11d63bb0b8fdbe734763c82241a2cb059dd0bf2d033218fcc7fd2b207463018276ed3d1534746115243c5ac285551f30617f479790cf5e154d96f85f5", 0xa3}], 0x0, 0x8180a, 0x0) r4 = getpgrp(r0) sched_setattr(r4, &(0x7f00000001c0)={0x38, 0x5, 0x2, 0x3f, 0x2, 0x0, 0x2, 0x3, 0xfffffc01, 0x2}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="02003b93116f05e94a00"]) sendfile(r1, r2, 0x0, 0x20000102000003) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) 03:42:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x400300, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 556.037048][T24208] loop3: detected capacity change from 0 to 6 [ 556.077155][ T8430] Bluetooth: hci1: command 0x040f tx timeout 03:42:46 executing program 5: setsockopt(0xffffffffffffffff, 0x4b6, 0x80000000, &(0x7f0000000080), 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x3) [ 556.089181][T24208] FAT-fs (loop3): Directory bread(block 6) failed 03:42:46 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:46 executing program 2: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x6800, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2], 0x58}}, 0x0) 03:42:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x1000000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 556.379617][T24227] loop3: detected capacity change from 0 to 6 03:42:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) sendfile(0xffffffffffffffff, r4, 0x0, 0xef85) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffff38) r6 = syz_open_dev$hiddev(&(0x7f0000000340), 0xc7, 0x6a4800) sendfile(0xffffffffffffffff, r6, &(0x7f00000003c0)=0x8, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000013000100000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="000000000000002e000100"/24], 0x30}}, 0x0) r8 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x7f, 0x0, 0x21, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x7800, 0x9, 0x8000}}) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc2048099}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000006800160e2dbd7000fddbdf250a000300000400040008000500"/40, @ANYRES32=r9, @ANYBLOB="a3c4264f82427ef0aa3ae604cdc5ca36c652ca64210f8c63e8abd7a778cfa06be1a94e4fc7e73c466ddc83efa54eab85f4cf39dc88b66f0e37d462d2650d22f02a609d2662a0dd5fbe7be998660e64cfec8fcbad69d64f54744b126e59439c9b5fa7a712818f78d13aefdab7c912ae07303554b6ca08aff2c351e485ca0ed03511e911ee584438b889db71220c72530000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000850}, 0x10) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) [ 556.423877][T24227] FAT-fs (loop3): Directory bread(block 6) failed 03:42:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x2000000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) 03:42:47 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) getdents(r0, &(0x7f0000000080)=""/146, 0x92) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140), 0x4) 03:42:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) getpid() r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80200, 0xa) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001980)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000480)={r3, 0x4, 0x0, [0x100, 0x5, 0xfffffffffffffffd, 0xe0c, 0x2], [0x10001, 0x4, 0x1, 0xfff, 0x8, 0xffffffff00000002, 0x0, 0x1000, 0x3ff, 0x2, 0x0, 0x8, 0x1, 0x0, 0x7, 0x1, 0x1, 0xfffffffffffffe00, 0xffffffffffffffa3, 0x1, 0x6, 0x3898, 0x0, 0x0, 0x10001, 0x3, 0x7, 0x1, 0x0, 0x0, 0x20, 0x7, 0x30000000000000, 0x7b, 0x80, 0xfffffffffffffff8, 0x4, 0x0, 0x6, 0x0, 0x1, 0x200, 0x3, 0x0, 0x101, 0x10000, 0x100000000, 0x1, 0x0, 0x2, 0x4, 0xffe6, 0x6, 0xd9d3, 0x5, 0x1f, 0x5, 0x5b92f2e2, 0x5, 0x5, 0x1, 0x0, 0x6, 0x4, 0x6, 0x97, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x423c, 0x616, 0x0, 0x9, 0x0, 0x0, 0x1, 0xa1, 0x1f, 0x4, 0x1, 0x7ff, 0x0, 0x7, 0x477, 0xffffffffffffff00, 0x0, 0x0, 0x3, 0x0, 0xb7b, 0xba, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x80, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0xa5, 0x20, 0xfffffffffffffff8, 0x1000, 0x0, 0x0, 0x0, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000800)={r3, "90f6b982d9dca1e290cb81dd4db2e9e9"}) getrlimit(0x0, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000003) [ 556.785257][T24243] ------------[ cut here ]------------ [ 556.886934][T24243] refcount_t: addition on 0; use-after-free. 03:42:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x3000000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 556.950758][T24249] loop3: detected capacity change from 0 to 6 [ 556.977390][T24243] WARNING: CPU: 0 PID: 24243 at lib/refcount.c:25 refcount_warn_saturate+0x13d/0x1a0 [ 557.058298][T24249] FAT-fs (loop3): Directory bread(block 6) failed [ 557.101978][T24243] Modules linked in: [ 557.142822][T24243] CPU: 0 PID: 24243 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 03:42:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xb3e0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getpid() r3 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r4, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000000)={0x38, 0x3, 0xb, 0xe6, 0x3ff, 0x8, 0x401, 0xc178, 0x8, 0xfff}, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) setresuid(0x0, 0x0, 0x0) r6 = getuid() syz_mount_image$qnx6(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x7, &(0x7f0000001980)=[{&(0x7f0000000200)="e2780974b11043b2da9588a6c298e26a0c517b06c78b6a6959be2814777b04f9b26bfd13ad4c23684770319754641f75921ae41900433814b4bdf247e1b4ec5965434c828ddfe3d4cddd4a3aad5a1fb411db21461d1e48483a3f40c5", 0x5c, 0x8}, {&(0x7f0000000340)="af0a1286be73f3a68e0d6ea8663f26134a61eba91a6ed6f46d0b3db78b86469fcc4e18e22329ec0e864745117c343256277d738d375eb2581ae3a6d1a58a5720bd3c41b8060016c13ab39d3e6ddc1c52198966b447637f4708e5b22d13403a72f103bf052afb8c0024dca0780e2a9b6d708541f123fa8612364038cd26e69b895ff91422f79b9ea228cf04ce101cc3a930b5eea76409813b89fba0e10797940e3616a81fb98f42df378255f11d0d98064a33482feef4800e229d355eccb9b4ffee5938a0dbd04ab742e3b6e10abea406d81755dd2e913a49875b9c42", 0xdc, 0x9}, {&(0x7f0000000800)="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", 0x1000, 0x7f}, {&(0x7f00000002c0)="47684dd7bba57d366c", 0x9, 0x1}, {&(0x7f0000001800)="8975c9ffc22acf3f38bd1cc5e27cbda462e35d2b743ad852ca2f7a4dd3801dd0d63843ac8c91aefd9e7c4b689435fec2d582a7fde092e2db5d8b624054e280536f4118951e49d74ca731ab74cb5f6f2c620f9b6c3d89b7730a19becfde67545dabaaadd62748fc90360dc57b7b9c81c293c11bf03b0c", 0x76, 0x7}, {&(0x7f0000001880)="96294779e12896116633cebe5940edf125cf08174facdce85322e9838c7cf74244622e1d6046f141d0cfcd1873881822fa33b4cbb2fc80d0bcaae02de77983eabfe3cb678d3eca1238f8d8243ecf3d48794876558329b6fa361c0df97e9467f3e007d9610f6d2dba1e4fb5973b62c5e21c901d27942b8053ec4d", 0x7a, 0x3}, {&(0x7f0000001900)="d94bcf3b228e99cd8af016f93357a014e1ed4acb60f0975e027673ee34dbba89e2177f58b9f263132cd980efb7b077bfc8f481cb5f4b9c3e04e2db05886ebb262f8a4063641c0ed038f69460e1a9936bace9c375b666075df4deef6f7ac223750f1669e65d36fdc20a55da2ca3874275385718df9771c9a78f570855", 0x7c, 0x7fffffff}], 0x218400, &(0x7f0000001a40)={[{'\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'}, {'\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'}, {'+(%*%\x9d#'}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xa0.+\xb2^\'{&:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x61, 0x32, 0x64, 0x35, 0x6a, 0x63, 0x39], 0x2d, [0x61, 0x30, 0x34, 0x38], 0x2d, [0x62, 0x63, 0x33, 0x35], 0x2d, [0x36, 0x63, 0x50, 0x33], 0x2d, [0x35, 0x33, 0x66, 0x39, 0x39, 0x61, 0x38, 0x39]}}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r6}}, {@audit}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@permit_directio}]}) sendfile(r3, r4, 0x0, 0x20000102000003) [ 557.231024][T24254] __nla_validate_parse: 25 callbacks suppressed [ 557.231093][T24254] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.261269][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:42:47 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000008140)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/4, 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000003200)=""/76, 0x4c}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f0000000740)=""/77, 0x4d}], 0x7, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000001a00)=""/225, 0xe1}, {&(0x7f0000001b00)=""/116, 0x74}, {&(0x7f0000001b80)=""/132, 0x84}, {&(0x7f0000001c40)=""/126, 0x7e}], 0x4, &(0x7f0000001cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/152, 0x98}, {&(0x7f0000002e80)=""/130, 0x82}], 0x4, &(0x7f0000002f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003280)=""/236, 0xec}], 0x1}}, {{&(0x7f0000003380), 0x6e, &(0x7f0000005700)=[{&(0x7f0000003080)=""/22, 0x16}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/100, 0x64}, {&(0x7f0000004480)=""/120, 0x78}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/227, 0xe3}, {&(0x7f0000005640)=""/19, 0x13}, {&(0x7f0000005680)=""/69, 0x45}], 0x9}}, {{0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f00000057c0)=""/183, 0xb7}, {&(0x7f0000005880)=""/237, 0xed}, {&(0x7f0000005980)=""/28, 0x1c}, {&(0x7f00000059c0)=""/199, 0xc7}, {&(0x7f0000005ac0)=""/40, 0x28}, {&(0x7f0000005b00)=""/207, 0xcf}], 0x6, &(0x7f0000005c80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000005e40)=[{&(0x7f0000005dc0)=""/76, 0x4c}], 0x1, &(0x7f0000005e80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000005f80)}}, {{&(0x7f0000005fc0)=@abs, 0x6e, &(0x7f0000008080)=[{&(0x7f0000006040)=""/33, 0x21}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000007080)=""/4096, 0x1000}], 0x3, &(0x7f00000080c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0xa, 0x2000, &(0x7f00000031c0)={0x77359400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 557.284670][T24243] RIP: 0010:refcount_warn_saturate+0x13d/0x1a0 [ 557.318464][T24258] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.332499][T24234] ------------[ cut here ]------------ [ 557.333723][T24243] Code: c7 80 e1 b3 8a 31 c0 e8 31 8e 3b fd 0f 0b eb a3 e8 b8 79 71 fd c6 05 43 86 b6 09 01 48 c7 c7 e0 e1 b3 8a 31 c0 e8 13 8e 3b fd <0f> 0b eb 85 e8 9a 79 71 fd c6 05 26 86 b6 09 01 48 c7 c7 40 e2 b3 [ 557.349204][T24234] refcount_t: decrement hit 0; leaking memory. [ 557.366617][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 557.366630][ T25] audit: type=1800 audit(1635046967.964:424): pid=24259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=13909 res=0 errno=0 03:42:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x4000000, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB], 0x58}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48880) [ 557.446347][T24243] RSP: 0018:ffffc9000bea7ed0 EFLAGS: 00010246 [ 557.469713][T24234] WARNING: CPU: 0 PID: 24234 at lib/refcount.c:31 refcount_warn_saturate+0x17c/0x1a0 [ 557.532632][T24268] loop4: detected capacity change from 0 to 264192 [ 557.541947][T24243] RAX: e1fa409fea2d4d00 RBX: 0000000000000002 RCX: 0000000000040000 [ 557.541958][T24268] qnx6: invalid mount options. [ 557.583380][T24273] loop3: detected capacity change from 0 to 6 [ 557.611426][T24234] Modules linked in: [ 557.625514][T24243] RDX: ffffc90014825000 RSI: 0000000000003b76 RDI: 0000000000003b77 [ 557.635927][ T25] audit: type=1804 audit(1635046968.004:425): pid=24261 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir688924945/syzkaller.FD3XmW/245/file0" dev="sda1" ino=13909 res=1 errno=0 [ 557.659877][T24273] FAT-fs (loop3): Directory bread(block 6) failed [ 557.680933][T24234] CPU: 1 PID: 24234 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 557.748577][T24243] RBP: 0000000000000002 R08: ffffffff81695fe2 R09: ffffed10173857a8 [ 557.756619][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.756635][T24234] RIP: 0010:refcount_warn_saturate+0x17c/0x1a0 [ 557.781864][T24277] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 557.827281][T24234] Code: b3 8a 31 c0 e8 f5 8d 3b fd 0f 0b e9 64 ff ff ff e8 79 79 71 fd c6 05 06 86 b6 09 01 48 c7 c7 a0 e2 b3 8a 31 c0 e8 d4 8d 3b fd <0f> 0b e9 43 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 fe ff [ 557.847457][T24243] R10: ffffed10173857a8 R11: 0000000000000000 R12: ffff88807920e780 [ 557.869095][T24259] loop4: detected capacity change from 0 to 264192 [ 557.876578][T24259] qnx6: invalid mount options. [ 557.880065][T24243] R13: ffff88806ef9b7e0 R14: 000000000000000a R15: dffffc0000000000 [ 557.891092][T24285] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:42:48 executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b614c4c4549b42f", 0xb, 0x600}], 0x0, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/7, 0x7, 0x0, 0x0}, &(0x7f0000000100)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000140), 0x4) [ 557.932137][T24243] FS: 00007f9a86816700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 557.951115][ T1211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.976906][T24243] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 557.992721][T24234] RSP: 0018:ffffc9000bc87de8 EFLAGS: 00010246 [ 558.013011][T24243] CR2: 0000560b7b250080 CR3: 000000007303b000 CR4: 00000000003506f0 03:42:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0x1ff}, 0x0) r0 = fork() clone3(&(0x7f00000003c0)={0x20040000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x1}, 0x58) prlimit64(r0, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xa5e}, 0x0) getpid() r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000480)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xecmZ\x84~\x9e\xf6\xb7\xaczc\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vnr\xea\xb8w\xf6@\xfd\xaa\x97C\x13\x02\xb5\xac-e\xe0\x8d\x8a\xf2g\xeb\xaaq\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xabloF\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4k\xdd~\xe5\xbf\xc0]l\xf7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00gwRf`\xd7\xb1\"\'\xa2l\xfc\x16:u 80g\xe4io3\x14\xf6(Yh\xa5\xcbw\xf9\x1f\x9a?\xe7\xbd>\xf0\x8f2f\xe9\xe3agZ\x05`\x9bv\xa7\x89S\x8dx\x01\x05\xd5\x85>\xf0J\x1er\x1f\xd2\xaa\x8b\x9b\x8b\x86\xa9\xaa\xf4\xe0\x8b\xd0\x00'/260, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pwritev(r2, &(0x7f0000000600)=[{&(0x7f00000007c0)="cd", 0x1}], 0x1, 0x8180a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000003) [ 558.024183][ T1211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34620 - 0 [ 558.033015][T24234] RAX: a2195c4c8b67ab00 RBX: 0000000000000004 RCX: ffff88808c039c80 [ 558.074813][T24243] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.085101][T24295] loop3: detected capacity change from 0 to 6 [ 558.090025][T24234] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 558.110052][T24243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 558.134742][T24234] RBP: 0000000000000004 R08: ffffffff81695fe2 R09: ffffed10173857a8 [ 558.137754][T24295] FAT-fs (loop3): Directory bread(block 6) failed [ 558.158824][T24243] Call Trace: [ 558.166508][ T2986] Bluetooth: hci1: command 0x0419 tx timeout [ 558.172710][T24243] __se_sys_memfd_secret+0x2ea/0x350 [ 558.180257][T24234] R10: ffffed10173857a8 R11: 0000000000000000 R12: ffff88807920e7a8 [ 558.189456][ T1211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.206352][T24243] do_syscall_64+0x44/0xd0 [ 558.236544][T24234] R13: 1ffff1100f241cf5 R14: dffffc0000000000 R15: ffff88806ef9b7b0 [ 558.249267][T24243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.262698][ T1211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34620 - 0 [ 558.298114][T24243] RIP: 0033:0x7f9a892e2a39 [ 558.302650][T24234] FS: 00005555568a6400(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 558.313173][T24243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.356208][T24234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 558.363087][T24234] CR2: 0000001b30022000 CR3: 000000007303b000 CR4: 00000000003506f0 [ 558.423373][T24243] RSP: 002b:00007f9a86816188 EFLAGS: 00000246 [ 558.426727][T24234] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 558.444488][ T1211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.456277][T24234] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 558.481143][ T1211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34620 - 0 [ 558.503174][T24243] ORIG_RAX: 00000000000001bf [ 558.503361][T24234] Call Trace: [ 558.518156][T24243] RAX: ffffffffffffffda RBX: 00007f9a893e60e0 RCX: 00007f9a892e2a39 [ 558.526162][T24234] ? secretmem_mmap+0x150/0x150 [ 558.526193][T24234] secretmem_release+0x54/0x60 [ 558.526212][T24234] __fput+0x3fe/0x870 [ 558.526238][T24234] task_work_run+0x146/0x1c0 [ 558.555504][T24243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.579091][T24234] exit_to_user_mode_prepare+0x209/0x220 [ 558.581523][T24243] RBP: 00007f9a8933ce8f R08: 0000000000000000 R09: 0000000000000000 [ 558.603211][ T1211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.605972][T24234] ? trace_irq_disable_rcuidle+0x11/0x170 [ 558.629420][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.641043][ T1211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34620 - 0 [ 558.663897][T24243] R13: 00007fff53cd12ff R14: 00007f9a86816300 R15: 0000000000022000 [ 558.665975][T24234] syscall_exit_to_user_mode+0x2e/0x70 [ 558.685160][T24243] Kernel panic - not syncing: panic_on_warn set ... [ 558.691766][T24243] CPU: 0 PID: 24243 Comm: syz-executor.5 Not tainted 5.15.0-rc6-syzkaller #0 [ 558.700525][T24243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.710581][T24243] Call Trace: [ 558.713864][T24243] dump_stack_lvl+0x1dc/0x2d8 [ 558.718441][T24234] do_syscall_64+0x53/0xd0 [ 558.718547][T24243] ? show_regs_print_info+0x12/0x12 [ 558.722949][T24234] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.728117][T24243] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 558.728151][T24243] panic+0x2d6/0x810 [ 558.743636][T24243] ? __warn+0x13e/0x270 [ 558.747841][T24243] ? nmi_panic+0x90/0x90 [ 558.752105][T24243] __warn+0x26a/0x270 [ 558.755966][T24234] RIP: 0033:0x7f9a8929567b [ 558.756087][T24243] ? refcount_warn_saturate+0x13d/0x1a0 [ 558.760484][T24234] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 558.766028][T24243] ? refcount_warn_saturate+0x13d/0x1a0 [ 558.766049][T24243] report_bug+0x1b1/0x2e0 [ 558.766074][T24243] handle_bug+0x3d/0x70 [ 558.799619][T24243] exc_invalid_op+0x16/0x40 [ 558.804133][T24243] asm_exc_invalid_op+0x12/0x20 [ 558.808991][T24243] RIP: 0010:refcount_warn_saturate+0x13d/0x1a0 [ 558.815152][T24243] Code: c7 80 e1 b3 8a 31 c0 e8 31 8e 3b fd 0f 0b eb a3 e8 b8 79 71 fd c6 05 43 86 b6 09 01 48 c7 c7 e0 e1 b3 8a 31 c0 e8 13 8e 3b fd <0f> 0b eb 85 e8 9a 79 71 fd c6 05 26 86 b6 09 01 48 c7 c7 40 e2 b3 [ 558.834763][T24243] RSP: 0018:ffffc9000bea7ed0 EFLAGS: 00010246 [ 558.840838][T24243] RAX: e1fa409fea2d4d00 RBX: 0000000000000002 RCX: 0000000000040000 [ 558.845932][T24234] RSP: 002b:00007fff53cd1360 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 558.848810][T24243] RDX: ffffc90014825000 RSI: 0000000000003b76 RDI: 0000000000003b77 [ 558.848828][T24243] RBP: 0000000000000002 R08: ffffffff81695fe2 R09: ffffed10173857a8 [ 558.873132][T24243] R10: ffffed10173857a8 R11: 0000000000000000 R12: ffff88807920e780 [ 558.881110][T24243] R13: ffff88806ef9b7e0 R14: 000000000000000a R15: dffffc0000000000 [ 558.885930][T24234] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f9a8929567b [ 558.889101][T24243] ? wake_up_klogd+0xb2/0xf0 [ 558.901635][T24243] __se_sys_memfd_secret+0x2ea/0x350 [ 558.906933][T24243] do_syscall_64+0x44/0xd0 [ 558.911357][T24243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.917255][T24243] RIP: 0033:0x7f9a892e2a39 [ 558.921683][T24243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.925921][T24234] RDX: 0000001b3022d570 RSI: ffffffff840f11d0 RDI: 000000000000000a [ 558.941284][T24243] RSP: 002b:00007f9a86816188 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 558.941309][T24243] RAX: ffffffffffffffda RBX: 00007f9a893e60e0 RCX: 00007f9a892e2a39 [ 558.941323][T24243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.941333][T24243] RBP: 00007f9a8933ce8f R08: 0000000000000000 R09: 0000000000000000 [ 558.941344][T24243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.941354][T24243] R13: 00007fff53cd12ff R14: 00007f9a86816300 R15: 0000000000022000 [ 558.949763][T24243] Kernel Offset: disabled [ 559.002185][T24243] Rebooting in 86400 seconds..