udit(1696981275.987:1118): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1331302523/syzkaller.IYnDoq/473/file0" dev="sda1" ino=2053 res=1 errno=0 [ 2628.088546][ T26] audit: type=1800 audit(1696981278.987:1119): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=2012 res=0 errno=0 23:41:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x6, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x2000000000000011, 0x2, r3, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = fanotify_init(0x0, 0x0) fanotify_mark(r6, 0x2000000000000011, 0x2, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000004a40), 0x80) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r7, r8, 0x0, 0x11f08) [ 2628.146852][ T26] audit: type=1804 audit(1696981279.007:1120): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1331302523/syzkaller.IYnDoq/474/file0" dev="sda1" ino=2012 res=1 errno=0 23:41:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x200040, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@showexec}, {@dots}, {@fat=@check_normal}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}]}, 0x1, 0x1a0, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ceb1ff7ae13a"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) 23:41:23 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:41:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100}, {0x3}]}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 23:41:23 executing program 1: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x7fff) 23:41:23 executing program 1: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x7fff) 23:41:23 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 2628.292111][ T26] audit: type=1800 audit(1696981280.497:1121): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=2036 res=0 errno=0 23:41:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x1}}) 23:41:23 executing program 1: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x7fff) 23:41:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x200040, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@showexec}, {@dots}, {@fat=@check_normal}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}]}, 0x1, 0x1a0, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ceb1ff7ae13a"], 0x81) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) [ 2628.753075][ T26] audit: type=1804 audit(1696981280.637:1122): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir372953353/syzkaller.CXs5N7/886/file0" dev="sda1" ino=2036 res=1 errno=0 23:41:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100}, {0x3}]}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) [ 2629.189458][ T26] audit: type=1800 audit(1696981280.647:1123): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=2041 res=0 errno=0 [ 2629.210983][ T26] audit: type=1804 audit(1696981280.677:1124): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2664380486/syzkaller.oGBwxD/626/file0" dev="sda1" ino=2041 res=1 errno=0 23:41:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2629.274983][ T26] audit: type=1800 audit(1696981281.277:1125): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=2028 res=0 errno=0 23:41:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x1}}) 23:41:24 executing program 1: r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000000)=0x7fff) 23:41:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:41:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x0, 0x0, @mcast2}}}, 0x38) [ 2629.308842][ T26] audit: type=1804 audit(1696981281.277:1126): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1331302523/syzkaller.IYnDoq/475/file0" dev="sda1" ino=2028 res=1 errno=0 23:41:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100}, {0x3}]}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 23:41:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x48a41, 0x0) r3 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000040)={0x30}, 0x30) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:41:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x1}}) 23:41:24 executing program 1: syz_mount_image$msdos(&(0x7f000001ff40), &(0x7f000001ff80)='./file0\x00', 0x0, &(0x7f000001ffc0), 0x1, 0x1ff2b, &(0x7f0000020000)="$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") 23:41:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 2629.455024][ T26] audit: type=1800 audit(1696981282.467:1127): pid=5753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=2036 res=0 errno=0 23:41:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 23:41:24 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:41:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x1}}) [ 2629.561344][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2629.593792][ T5803] loop3: detected capacity change from 0 to 256 23:41:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:41:24 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:41:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x100}, {0x3}]}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 23:41:24 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$eJzs3cGqElEYB/Bv7Ha1Nt1dEC0G2rSS6gluxA2igaBwUauCaxsnAt1MbbK36AF7gHDlJiZyTFM0RNIx+/02fvg/h/OdzZnVnHl9+13v8v3g7debX6LVSqJxHucxTuIsGvHLMACAYzIuy/hWVuruBQDYjw2e/9/33BIAsGMvXr56+jDLLp6naStiNCw6Raf6rfLHT7KLe+nE2XzWqCg6V2b5/SpPF/OrcX2aP1iZn8bdO5P888/s0bNsKW/G5e63DwAAAAAAAAAAAAAAAAAAAAAAtWinMyvv92m31+VV9dv9QEv395zErZO9bQMAAAAAAAAAAAAAAAAAAAD+aYMPH3tv8rzbnxfNiFj8Z7uivLF2icMpGnEQbSj+apEeRht5bDf9NCL+POZaROy4+fkZ0aztdAIAAAAAAAAAAAAAAAAAgP/L9F3fpD+ouxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqE/1/f+829+m+BQRGwyeLpXUvFUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACO2I8AAAD//0mHLc8=") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:41:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 23:41:24 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2629.794804][ T5817] loop3: detected capacity change from 0 to 256 [ 2629.803795][ T5816] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:24 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:41:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 1) 23:41:27 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) 23:41:27 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:41:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) 23:41:27 executing program 2: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 23:41:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:41:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:41:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:27 executing program 3: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@dos1xfloppy}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb65}}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3e9}}]}, 0x1, 0x1b2, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 2632.393540][ T5831] FAULT_INJECTION: forcing a failure. [ 2632.393540][ T5831] name failslab, interval 1, probability 0, space 0, times 1 [ 2632.399332][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.421346][ T5832] loop3: detected capacity change from 0 to 256 [ 2632.472153][ T5831] CPU: 0 PID: 5831 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2632.480681][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2632.490741][ T5831] Call Trace: [ 2632.494112][ T5831] [ 2632.497052][ T5831] dump_stack_lvl+0x1e3/0x2cb [ 2632.501825][ T5831] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2632.507478][ T5831] ? panic+0x84d/0x84d [ 2632.511569][ T5831] ? __might_sleep+0xc0/0xc0 [ 2632.516245][ T5831] should_fail+0x38a/0x4c0 23:41:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) [ 2632.520761][ T5831] should_failslab+0x5/0x20 [ 2632.525328][ T5831] slab_pre_alloc_hook+0x53/0xc0 [ 2632.527355][ T5842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2632.530332][ T5831] __kmalloc+0x6e/0x300 [ 2632.530357][ T5831] ? __se_sys_memfd_create+0x15a/0x590 [ 2632.549661][ T5831] ? strnlen_user+0x1ac/0x270 [ 2632.554357][ T5831] __se_sys_memfd_create+0x15a/0x590 [ 2632.559662][ T5831] ? vtime_user_exit+0x2d1/0x400 [ 2632.564620][ T5831] ? __x64_sys_memfd_create+0x60/0x60 [ 2632.570005][ T5831] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2632.576040][ T5831] ? lockdep_hardirqs_on+0x94/0x130 [ 2632.581249][ T5831] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2632.581277][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2632.587237][ T5831] do_syscall_64+0x3d/0xb0 [ 2632.587269][ T5831] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2632.587351][ T5831] RIP: 0033:0x7f1357c76ae9 [ 2632.587372][ T5831] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2632.587392][ T5831] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2632.587419][ T5831] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2632.587436][ T5831] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2632.587453][ T5831] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2632.587470][ T5831] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 23:41:27 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xb) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="06", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0), 0x8) sched_setscheduler(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x401, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r6, 0x0, 0xd8) finit_module(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000010000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) [ 2632.587485][ T5831] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2632.587518][ T5831] [ 2632.602175][ T5838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:41:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 2) 23:41:28 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) 23:41:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") [ 2633.534990][ T5856] loop3: detected capacity change from 0 to 256 [ 2633.554069][ T5855] FAULT_INJECTION: forcing a failure. [ 2633.554069][ T5855] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2633.595619][ T5855] CPU: 1 PID: 5855 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2633.604145][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2633.614287][ T5855] Call Trace: [ 2633.617575][ T5855] [ 2633.620517][ T5855] dump_stack_lvl+0x1e3/0x2cb [ 2633.625220][ T5855] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2633.630865][ T5855] ? panic+0x84d/0x84d [ 2633.634954][ T5855] should_fail+0x38a/0x4c0 [ 2633.639389][ T5855] _copy_from_user+0x2d/0x170 [ 2633.644125][ T5855] __se_sys_memfd_create+0x19f/0x590 [ 2633.649418][ T5855] ? vtime_user_exit+0x2d1/0x400 [ 2633.654364][ T5855] ? __x64_sys_memfd_create+0x60/0x60 [ 2633.659748][ T5855] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2633.665731][ T5855] ? lockdep_hardirqs_on+0x94/0x130 [ 2633.670940][ T5855] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2633.676942][ T5855] do_syscall_64+0x3d/0xb0 [ 2633.681386][ T5855] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2633.687289][ T5855] RIP: 0033:0x7f1357c76ae9 [ 2633.691714][ T5855] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2633.711319][ T5855] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2633.719738][ T5855] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2633.727717][ T5855] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2633.735707][ T5855] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2633.743690][ T5855] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2633.751662][ T5855] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2633.759648][ T5855] 23:41:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 3) 23:41:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$eJzs3c1LbGUcB/Df3PE6duE2LoJLrU7LIIar0X4uYiANFMXQyyrJsRfHBIcGbKG1ah20CWpV61r2B7SIcNeibQZhRZvcCUknZs7ovJpvjRP5+SzGh+d5vp7fc9RzjqDPvFaOtZXbsXpwsB8zM7mYKi+U4zAXs3Er8pF5PwCA/5PDNI0/0sykawEArkf7/v/G3UmXAQBco3P+/v/8yN6NsZUFAIzRGff/6ZGh3bfHXhcAMD4vvvLqsw8qES8kyUzE+ofNarOafczGH6zGW1GPWtyPYhxFZA8K2dNC6/WZpcri/aTll9moru908jvNar43X4i5KMZsJ599ki86f1+4OJdkevK5ZvV23Onkf7wTtZiPYjzSl4/2y1JlcX44v3O8vpP6S1GM71+PjajHSrSy3fq355Jk4blK0l9/oT0PAAAAAAAAAAAAAAAAAAAAAADGoZSc6O7fk3b37ymVRoy398fJ8v37A6WFgf15evYHSgb215mKW5NdOgAAAAAAAAAAAAAAAAAAAPxnNLamY7ler202tt5bO63xzndffvNQ/POcKzTSfMTwUD4ijnumIqLVaFXcO6dwsoqLH/3u4z9/Omror6stZ/3hrKRLxefPmLOXpulp8e1PhlOR657Df/cL9+3+m48+1bj3dN/QE08WX9r7+PPfBicfpZc+Vuu74LgnF1csfjn/w+8vP/bR7iXi754+9NVgz/TYflK6p+XiqXuflZe/3v7p1/Omeq8S+eu/MAEAAAAAAAAAAAAAAAAAwA3U87/iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBjdd//v6fxwVDPeRp/jhoq1DYbk14jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8HQAA//8A5pPQ") [ 2635.528637][ T5870] FAULT_INJECTION: forcing a failure. [ 2635.528637][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.541611][ T5870] CPU: 1 PID: 5870 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2635.550127][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2635.560186][ T5870] Call Trace: [ 2635.563473][ T5870] [ 2635.566410][ T5870] dump_stack_lvl+0x1e3/0x2cb [ 2635.571107][ T5870] ? io_uring_drop_tctx_refs+0x19d/0x19d 23:41:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x2}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 2635.576842][ T5870] ? panic+0x84d/0x84d [ 2635.580936][ T5870] should_fail+0x38a/0x4c0 [ 2635.585354][ T5870] ? shmem_match+0x150/0x150 [ 2635.589993][ T5870] should_failslab+0x5/0x20 [ 2635.594499][ T5870] slab_pre_alloc_hook+0x53/0xc0 [ 2635.599446][ T5870] ? shmem_match+0x150/0x150 [ 2635.604048][ T5870] ? shmem_alloc_inode+0x16/0x30 [ 2635.608990][ T5870] kmem_cache_alloc+0x3f/0x280 [ 2635.613757][ T5870] ? alloc_fd+0x594/0x630 [ 2635.618111][ T5870] ? shmem_match+0x150/0x150 [ 2635.622732][ T5870] shmem_alloc_inode+0x16/0x30 [ 2635.627505][ T5870] new_inode_pseudo+0x60/0x210 [ 2635.632334][ T5870] new_inode+0x25/0x1d0 [ 2635.636500][ T5870] ? do_raw_spin_unlock+0x137/0x8b0 [ 2635.641720][ T5870] shmem_get_inode+0x327/0xad0 [ 2635.646495][ T5870] __shmem_file_setup+0x109/0x290 [ 2635.651515][ T5870] ? shmem_file_setup+0x13/0x30 [ 2635.656355][ T5870] __se_sys_memfd_create+0x2bb/0x590 [ 2635.661636][ T5870] ? vtime_user_exit+0x2d1/0x400 [ 2635.666563][ T5870] ? __x64_sys_memfd_create+0x60/0x60 [ 2635.671926][ T5870] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2635.677898][ T5870] ? lockdep_hardirqs_on+0x94/0x130 [ 2635.683094][ T5870] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2635.689065][ T5870] do_syscall_64+0x3d/0xb0 [ 2635.693469][ T5870] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2635.699355][ T5870] RIP: 0033:0x7f1357c76ae9 [ 2635.703759][ T5870] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 23:41:30 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xb) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="06", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0), 0x8) sched_setscheduler(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x401, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r6, 0x0, 0xd8) finit_module(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000010000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) 23:41:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") [ 2635.723361][ T5870] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2635.731771][ T5870] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2635.739729][ T5870] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2635.747698][ T5870] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2635.755666][ T5870] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2635.763624][ T5870] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2635.771595][ T5870] 23:41:30 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) [ 2635.786622][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2635.806914][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2636.419847][ T5886] loop3: detected capacity change from 0 to 256 [ 2637.410233][ T5886] FAT-fs (loop3): Directory bread(block 64) failed [ 2637.417042][ T5886] FAT-fs (loop3): Directory bread(block 65) failed [ 2637.423959][ T5886] FAT-fs (loop3): Directory bread(block 66) failed [ 2637.430584][ T5886] FAT-fs (loop3): Directory bread(block 67) failed [ 2637.437621][ T5886] FAT-fs (loop3): Directory bread(block 68) failed [ 2637.444366][ T5886] FAT-fs (loop3): Directory bread(block 69) failed [ 2637.451256][ T5886] FAT-fs (loop3): Directory bread(block 70) failed [ 2637.457961][ T5886] FAT-fs (loop3): Directory bread(block 71) failed [ 2637.464833][ T5886] FAT-fs (loop3): Directory bread(block 72) failed [ 2637.471503][ T5886] FAT-fs (loop3): Directory bread(block 73) failed 23:41:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}, 0x7}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:41:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 4) 23:41:32 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xb) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="06", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0), 0x8) sched_setscheduler(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x401, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r6, 0x0, 0xd8) finit_module(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000010000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) 23:41:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$eJzs3c1LbGUcB/Df3PE6duE2LoJLrU7LIIar0X4uYiANFMXQyyrJsRfHBIcGbKG1ah20CWpV61r2B7SIcNeibQZhRZvcCUknZs7ovJpvjRP5+SzGh+d5vp7fc9RzjqDPvFaOtZXbsXpwsB8zM7mYKi+U4zAXs3Er8pF5PwCA/5PDNI0/0sykawEArkf7/v/G3UmXAQBco3P+/v/8yN6NsZUFAIzRGff/6ZGh3bfHXhcAMD4vvvLqsw8qES8kyUzE+ofNarOafczGH6zGW1GPWtyPYhxFZA8K2dNC6/WZpcri/aTll9moru908jvNar43X4i5KMZsJ599ki86f1+4OJdkevK5ZvV23Onkf7wTtZiPYjzSl4/2y1JlcX44v3O8vpP6S1GM71+PjajHSrSy3fq355Jk4blK0l9/oT0PAAAAAAAAAAAAAAAAAAAAAADGoZSc6O7fk3b37ymVRoy398fJ8v37A6WFgf15evYHSgb215mKW5NdOgAAAAAAAAAAAAAAAAAAAPxnNLamY7ler202tt5bO63xzndffvNQ/POcKzTSfMTwUD4ijnumIqLVaFXcO6dwsoqLH/3u4z9/Omror6stZ/3hrKRLxefPmLOXpulp8e1PhlOR657Df/cL9+3+m48+1bj3dN/QE08WX9r7+PPfBicfpZc+Vuu74LgnF1csfjn/w+8vP/bR7iXi754+9NVgz/TYflK6p+XiqXuflZe/3v7p1/Omeq8S+eu/MAEAAAAAAAAAAAAAAAAAwA3U87/iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBjdd//v6fxwVDPeRp/jhoq1DYbk14jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8HQAA//8A5pPQ") [ 2637.855932][ T5891] FAULT_INJECTION: forcing a failure. [ 2637.855932][ T5891] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.871594][ T5891] CPU: 0 PID: 5891 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2637.880112][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2637.890171][ T5891] Call Trace: [ 2637.893452][ T5891] [ 2637.896391][ T5891] dump_stack_lvl+0x1e3/0x2cb [ 2637.899275][ T5893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2637.901085][ T5891] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2637.916418][ T5891] ? panic+0x84d/0x84d [ 2637.920495][ T5891] ? __might_sleep+0xc0/0xc0 [ 2637.925080][ T5891] ? memset+0x1f/0x40 [ 2637.929126][ T5891] ? lockdep_init_map_type+0x9d/0x8d0 [ 2637.934515][ T5891] should_fail+0x38a/0x4c0 [ 2637.938926][ T5891] should_failslab+0x5/0x20 [ 2637.943420][ T5891] slab_pre_alloc_hook+0x53/0xc0 [ 2637.948346][ T5891] ? security_inode_alloc+0x24/0x110 [ 2637.953674][ T5891] kmem_cache_alloc+0x3f/0x280 [ 2637.958432][ T5891] security_inode_alloc+0x24/0x110 [ 2637.963537][ T5891] inode_init_always+0x939/0xc70 [ 2637.968466][ T5891] ? shmem_match+0x150/0x150 [ 2637.973043][ T5891] new_inode_pseudo+0x8f/0x210 [ 2637.977800][ T5891] new_inode+0x25/0x1d0 [ 2637.981951][ T5891] ? do_raw_spin_unlock+0x137/0x8b0 [ 2637.987142][ T5891] shmem_get_inode+0x327/0xad0 [ 2637.991904][ T5891] __shmem_file_setup+0x109/0x290 [ 2637.996913][ T5891] ? shmem_file_setup+0x13/0x30 [ 2638.001756][ T5891] __se_sys_memfd_create+0x2bb/0x590 [ 2638.007033][ T5891] ? vtime_user_exit+0x2d1/0x400 [ 2638.011969][ T5891] ? __x64_sys_memfd_create+0x60/0x60 [ 2638.017336][ T5891] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2638.023334][ T5891] ? lockdep_hardirqs_on+0x94/0x130 [ 2638.028523][ T5891] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2638.034490][ T5891] do_syscall_64+0x3d/0xb0 [ 2638.038895][ T5891] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2638.044777][ T5891] RIP: 0033:0x7f1357c76ae9 [ 2638.049181][ T5891] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2638.068770][ T5891] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2638.077173][ T5891] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2638.085142][ T5891] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2638.093102][ T5891] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2638.101061][ T5891] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2638.109020][ T5891] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2638.117009][ T5891] [ 2638.149428][ T5893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:41:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 5) 23:41:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) [ 2638.244475][ T5896] FAULT_INJECTION: forcing a failure. [ 2638.244475][ T5896] name failslab, interval 1, probability 0, space 0, times 0 [ 2638.302357][ T5896] CPU: 1 PID: 5896 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2638.310885][ T5896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2638.320946][ T5896] Call Trace: [ 2638.324229][ T5896] [ 2638.327171][ T5896] dump_stack_lvl+0x1e3/0x2cb [ 2638.331877][ T5896] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2638.337531][ T5896] ? panic+0x84d/0x84d [ 2638.341629][ T5896] ? __might_sleep+0xc0/0xc0 [ 2638.346230][ T5896] ? __rwlock_init+0x40/0x140 [ 2638.350924][ T5896] should_fail+0x38a/0x4c0 [ 2638.355358][ T5896] should_failslab+0x5/0x20 [ 2638.359872][ T5896] slab_pre_alloc_hook+0x53/0xc0 [ 2638.364823][ T5896] ? __d_alloc+0x2a/0x700 [ 2638.369164][ T5896] kmem_cache_alloc+0x3f/0x280 [ 2638.373945][ T5896] __d_alloc+0x2a/0x700 [ 2638.378112][ T5896] ? lockdep_softirqs_off+0x420/0x420 [ 2638.383529][ T5896] d_alloc_pseudo+0x19/0x70 [ 2638.388052][ T5896] alloc_file_pseudo+0x131/0x2f0 [ 2638.393089][ T5896] ? prandom_u32+0x218/0x260 [ 2638.397737][ T5896] ? alloc_empty_file_noaccount+0x80/0x80 [ 2638.403480][ T5896] ? shmem_get_inode+0x8e3/0xad0 [ 2638.408433][ T5896] __shmem_file_setup+0x1ca/0x290 [ 2638.413466][ T5896] ? shmem_file_setup+0x13/0x30 [ 2638.418326][ T5896] __se_sys_memfd_create+0x2bb/0x590 [ 2638.423624][ T5896] ? vtime_user_exit+0x2d1/0x400 [ 2638.428576][ T5896] ? __x64_sys_memfd_create+0x60/0x60 [ 2638.433961][ T5896] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2638.439954][ T5896] ? lockdep_hardirqs_on+0x94/0x130 [ 2638.445163][ T5896] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2638.451154][ T5896] do_syscall_64+0x3d/0xb0 [ 2638.455585][ T5896] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2638.461494][ T5896] RIP: 0033:0x7f1357c76ae9 [ 2638.465914][ T5896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2638.485521][ T5896] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2638.493945][ T5896] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 23:41:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1e0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'bond0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'wg1\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xcf, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x7fff}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x5010, 0x1, 0x4, 0x0, {0xfffffffffffff82e, 0x40, 0x0, 0xcf, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xffffffff, 0x2}}, @void, @void, @void}, 0x4e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xbf, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x1, 0x7, 0x0, 0x401}}, @void, @void, @void, @void}, 0x3e) [ 2638.501923][ T5896] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2638.509896][ T5896] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2638.517879][ T5896] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2638.525865][ T5896] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2638.533860][ T5896] [ 2638.560098][T28684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2638.576460][T28684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2638.612753][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2638.670238][ T5905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2639.576847][ T5910] loop3: detected capacity change from 0 to 256 [ 2639.677296][ T5910] FAT-fs (loop3): Directory bread(block 64) failed [ 2639.684091][ T5910] FAT-fs (loop3): Directory bread(block 65) failed [ 2639.690985][ T5910] FAT-fs (loop3): Directory bread(block 66) failed [ 2639.697709][ T5910] FAT-fs (loop3): Directory bread(block 67) failed [ 2639.704645][ T5910] FAT-fs (loop3): Directory bread(block 68) failed [ 2639.711270][ T5910] FAT-fs (loop3): Directory bread(block 69) failed [ 2639.718304][ T5910] FAT-fs (loop3): Directory bread(block 70) failed [ 2639.725178][ T5910] FAT-fs (loop3): Directory bread(block 71) failed [ 2639.732126][ T5910] FAT-fs (loop3): Directory bread(block 72) failed [ 2639.738769][ T5910] FAT-fs (loop3): Directory bread(block 73) failed 23:41:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$eJzs3c1LbGUcB/Df3PE6duE2LoJLrU7LIIar0X4uYiANFMXQyyrJsRfHBIcGbKG1ah20CWpV61r2B7SIcNeibQZhRZvcCUknZs7ovJpvjRP5+SzGh+d5vp7fc9RzjqDPvFaOtZXbsXpwsB8zM7mYKi+U4zAXs3Er8pF5PwCA/5PDNI0/0sykawEArkf7/v/G3UmXAQBco3P+/v/8yN6NsZUFAIzRGff/6ZGh3bfHXhcAMD4vvvLqsw8qES8kyUzE+ofNarOafczGH6zGW1GPWtyPYhxFZA8K2dNC6/WZpcri/aTll9moru908jvNar43X4i5KMZsJ599ki86f1+4OJdkevK5ZvV23Onkf7wTtZiPYjzSl4/2y1JlcX44v3O8vpP6S1GM71+PjajHSrSy3fq355Jk4blK0l9/oT0PAAAAAAAAAAAAAAAAAAAAAADGoZSc6O7fk3b37ymVRoy398fJ8v37A6WFgf15evYHSgb215mKW5NdOgAAAAAAAAAAAAAAAAAAAPxnNLamY7ler202tt5bO63xzndffvNQ/POcKzTSfMTwUD4ijnumIqLVaFXcO6dwsoqLH/3u4z9/Omror6stZ/3hrKRLxefPmLOXpulp8e1PhlOR657Df/cL9+3+m48+1bj3dN/QE08WX9r7+PPfBicfpZc+Vuu74LgnF1csfjn/w+8vP/bR7iXi754+9NVgz/TYflK6p+XiqXuflZe/3v7p1/Omeq8S+eu/MAEAAAAAAAAAAAAAAAAAwA3U87/iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBjdd//v6fxwVDPeRp/jhoq1DYbk14jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8HQAA//8A5pPQ") 23:41:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:35 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xb) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="06", 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x21}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) signalfd(r2, &(0x7f00000001c0), 0x8) sched_setscheduler(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000380)=0x401, 0x1) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x3fc}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r6, 0x0, 0xd8) finit_module(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000010000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050002"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan1\x00', &(0x7f00000000c0)=@default_ap_ssid, 0xe, 0x2) 23:41:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 6) 23:41:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="cdec3dede2fae9a8c7f534c8e3683b3a3d7dc3cfe59378ff800e384cbb4a6cc5a4a57e6b790455472946caff9b8d2cf9e9a25b5c67dbb633b7c5a1f1e945155be3430745188234a723bbcca8eaa0e9c763569fec3214aec820fa9462fdb69bc883ee6ec4ed214efcc39987329d9a1c15c9f1bb34b1c0502a2e95e5d5b01b54245e63c297eb925f133b7c2bed0feb1e50d8051104316ed43985ff5df8a3c001df8cb5d3e15dd54580d9b1648a7928080b6770cc010528d45be0bc01177a404afc1f462ff6487754b4e4e8fddd1591c15ef2f38dad9bbaeebf406ee7fabc3e99b7183286eff398ad5ffcad87ce73b37e1ef0afccaafbe037ed68f35b7ef2a88aa0a31aa74332596881a8846beeaf6be281638895561bd2af63af8bb131c5e2ace8d80467bccae4239e29b3a6cc3a5b7d7df47b6c160909778191c4b10d96b75e88f79bb3ecdf14cd4fd500785bd7032b6a55ec13ed7091face08c36bcb856ccc911c40379abc4d1a51dd5c23957e50e7a9f47bd37a0b77a92a90e858e803c2afac3dd69bf23b81312e3bec8698ceed65256b05f389cf4134aad535b1ecadcfada550d1d91f26dfa19c869cee9892d32f33f8096055bb8d0e559922f01ebf7d85749b06aed9f3ad879edd8c7ebc8b0ce2534f893280a036ce5680803e8d18180b5a062d89820e5e360eb7656f265d7db8c32c0387bda9e96daaf53b58c311d9bc8aab8ef8c3eb4d1edc354267"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1e0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'bond0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'wg1\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xcf, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x7fff}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x5010, 0x1, 0x4, 0x0, {0xfffffffffffff82e, 0x40, 0x0, 0xcf, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xffffffff, 0x2}}, @void, @void, @void}, 0x4e) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xbf, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x1, 0x7, 0x0, 0x401}}, @void, @void, @void, @void}, 0x3e) [ 2640.239008][ T5918] FAULT_INJECTION: forcing a failure. [ 2640.239008][ T5918] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.265696][ T5924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2640.284396][ T5918] CPU: 1 PID: 5918 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2640.292914][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2640.302967][ T5918] Call Trace: [ 2640.306249][ T5918] [ 2640.309179][ T5918] dump_stack_lvl+0x1e3/0x2cb [ 2640.313870][ T5918] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2640.319512][ T5918] ? panic+0x84d/0x84d [ 2640.323592][ T5918] should_fail+0x38a/0x4c0 [ 2640.328023][ T5918] should_failslab+0x5/0x20 [ 2640.332540][ T5918] slab_pre_alloc_hook+0x53/0xc0 [ 2640.337489][ T5918] ? __alloc_file+0x26/0x240 [ 2640.342093][ T5918] kmem_cache_alloc+0x3f/0x280 [ 2640.346861][ T5918] ? alloc_file_pseudo+0x248/0x2f0 [ 2640.351982][ T5918] __alloc_file+0x26/0x240 [ 2640.356407][ T5918] alloc_empty_file+0x92/0x180 [ 2640.361175][ T5918] alloc_file+0x5b/0x4f0 [ 2640.365429][ T5918] alloc_file_pseudo+0x259/0x2f0 [ 2640.370373][ T5918] ? prandom_u32+0x218/0x260 [ 2640.374978][ T5918] ? alloc_empty_file_noaccount+0x80/0x80 [ 2640.380708][ T5918] ? shmem_get_inode+0x8e3/0xad0 [ 2640.385657][ T5918] __shmem_file_setup+0x1ca/0x290 [ 2640.390682][ T5918] ? shmem_file_setup+0x13/0x30 [ 2640.395535][ T5918] __se_sys_memfd_create+0x2bb/0x590 [ 2640.400833][ T5918] ? vtime_user_exit+0x2d1/0x400 [ 2640.405782][ T5918] ? __x64_sys_memfd_create+0x60/0x60 [ 2640.411166][ T5918] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2640.417156][ T5918] ? lockdep_hardirqs_on+0x94/0x130 [ 2640.421557][ T5922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2640.422382][ T5918] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2640.422413][ T5918] do_syscall_64+0x3d/0xb0 [ 2640.422437][ T5918] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2640.422460][ T5918] RIP: 0033:0x7f1357c76ae9 [ 2640.422477][ T5918] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2640.422494][ T5918] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2640.422516][ T5918] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2640.488812][ T5918] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2640.496792][ T5918] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2640.504765][ T5918] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2640.512746][ T5918] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2640.520736][ T5918] [ 2640.937929][ T5930] device veth0_vlan left promiscuous mode [ 2640.972073][ T5929] loop3: detected capacity change from 0 to 256 [ 2641.882700][ T5929] FAT-fs (loop3): Directory bread(block 64) failed [ 2641.889324][ T5929] FAT-fs (loop3): Directory bread(block 65) failed [ 2641.895978][ T5929] FAT-fs (loop3): Directory bread(block 66) failed [ 2641.902575][ T5929] FAT-fs (loop3): Directory bread(block 67) failed [ 2641.909146][ T5929] FAT-fs (loop3): Directory bread(block 68) failed [ 2641.915888][ T5929] FAT-fs (loop3): Directory bread(block 69) failed [ 2641.922512][ T5929] FAT-fs (loop3): Directory bread(block 70) failed 23:41:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1e0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'bond0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'wg1\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xcf, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x7fff}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x5010, 0x1, 0x4, 0x0, {0xfffffffffffff82e, 0x40, 0x0, 0xcf, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xffffffff, 0x2}}, @void, @void, @void}, 0x4e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xbf, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x1, 0x7, 0x0, 0x401}}, @void, @void, @void, @void}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1e0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'bond0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'wg1\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xcf, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0x7fff}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x5010, 0x1, 0x4, 0x0, {0xfffffffffffff82e, 0x40, 0x0, 0xcf, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0xffffffff, 0x2}}, @void, @void, @void}, 0x4e) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0xbf, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x1, 0x7, 0x0, 0x401}}, @void, @void, @void, @void}, 0x3e) (async) 23:41:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 7) [ 2641.929039][ T5929] FAT-fs (loop3): Directory bread(block 71) failed [ 2641.937102][ T5929] FAT-fs (loop3): Directory bread(block 72) failed [ 2641.943712][ T5929] FAT-fs (loop3): Directory bread(block 73) failed 23:41:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") [ 2642.114331][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:41:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$eJzs3c1LbGUcB/Df3PE6duE2LoJLrU7LIIar0X4uYiANFMXQyyrJsRfHBIcGbKG1ah20CWpV61r2B7SIcNeibQZhRZvcCUknZs7ovJpvjRP5+SzGh+d5vp7fc9RzjqDPvFaOtZXbsXpwsB8zM7mYKi+U4zAXs3Er8pF5PwCA/5PDNI0/0sykawEArkf7/v/G3UmXAQBco3P+/v/8yN6NsZUFAIzRGff/6ZGh3bfHXhcAMD4vvvLqsw8qES8kyUzE+ofNarOafczGH6zGW1GPWtyPYhxFZA8K2dNC6/WZpcri/aTll9moru908jvNar43X4i5KMZsJ599ki86f1+4OJdkevK5ZvV23Onkf7wTtZiPYjzSl4/2y1JlcX44v3O8vpP6S1GM71+PjajHSrSy3fq355Jk4blK0l9/oT0PAAAAAAAAAAAAAAAAAAAAAADGoZSc6O7fk3b37ymVRoy398fJ8v37A6WFgf15evYHSgb215mKW5NdOgAAAAAAAAAAAAAAAAAAAPxnNLamY7ler202tt5bO63xzndffvNQ/POcKzTSfMTwUD4ijnumIqLVaFXcO6dwsoqLH/3u4z9/Omror6stZ/3hrKRLxefPmLOXpulp8e1PhlOR657Df/cL9+3+m48+1bj3dN/QE08WX9r7+PPfBicfpZc+Vuu74LgnF1csfjn/w+8vP/bR7iXi754+9NVgz/TYflK6p+XiqXuflZe/3v7p1/Omeq8S+eu/MAEAAAAAAAAAAAAAAAAAwA3U87/iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBjdd//v6fxwVDPeRp/jhoq1DYbk14jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8HQAA//8A5pPQ") [ 2642.170702][ T5943] FAULT_INJECTION: forcing a failure. [ 2642.170702][ T5943] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.196917][ T5939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2642.349700][ T5943] CPU: 1 PID: 5943 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2642.358230][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2642.368286][ T5943] Call Trace: [ 2642.371566][ T5943] [ 2642.374495][ T5943] dump_stack_lvl+0x1e3/0x2cb [ 2642.379187][ T5943] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2642.384832][ T5943] ? panic+0x84d/0x84d [ 2642.388908][ T5943] ? __might_sleep+0xc0/0xc0 [ 2642.393512][ T5943] should_fail+0x38a/0x4c0 [ 2642.397945][ T5943] should_failslab+0x5/0x20 [ 2642.402460][ T5943] slab_pre_alloc_hook+0x53/0xc0 [ 2642.407404][ T5943] ? security_file_alloc+0x24/0x120 [ 2642.412614][ T5943] kmem_cache_alloc+0x3f/0x280 [ 2642.417389][ T5943] security_file_alloc+0x24/0x120 [ 2642.422426][ T5943] __alloc_file+0xc3/0x240 [ 2642.426849][ T5943] alloc_empty_file+0x92/0x180 [ 2642.431617][ T5943] alloc_file+0x5b/0x4f0 [ 2642.435871][ T5943] alloc_file_pseudo+0x259/0x2f0 [ 2642.440812][ T5943] ? prandom_u32+0x218/0x260 [ 2642.445432][ T5943] ? alloc_empty_file_noaccount+0x80/0x80 [ 2642.451158][ T5943] ? shmem_get_inode+0x8e3/0xad0 [ 2642.456106][ T5943] __shmem_file_setup+0x1ca/0x290 [ 2642.461129][ T5943] ? shmem_file_setup+0x13/0x30 [ 2642.465982][ T5943] __se_sys_memfd_create+0x2bb/0x590 [ 2642.471276][ T5943] ? vtime_user_exit+0x2d1/0x400 [ 2642.476219][ T5943] ? __x64_sys_memfd_create+0x60/0x60 [ 2642.481609][ T5943] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2642.487596][ T5943] ? lockdep_hardirqs_on+0x94/0x130 [ 2642.492893][ T5943] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2642.498876][ T5943] do_syscall_64+0x3d/0xb0 [ 2642.503298][ T5943] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2642.509194][ T5943] RIP: 0033:0x7f1357c76ae9 [ 2642.513609][ T5943] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 2642.533218][ T5943] RSP: 002b:00007f13561f7e98 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 2642.541640][ T5943] RAX: ffffffffffffffda RBX: 00000000000001cf RCX: 00007f1357c76ae9 [ 2642.549611][ T5943] RDX: 00007f13561f7f3c RSI: 0000000000000000 RDI: 00007f1357cc16ba [ 2642.557592][ T5943] RBP: 00000000200002c0 R08: 00007f13561f7c37 R09: 00007f13561f8120 [ 2642.565573][ T5943] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000240 [ 2642.573547][ T5943] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2642.581536][ T5943] 23:41:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="cdec3dede2fae9a8c7f534c8e3683b3a3d7dc3cfe59378ff800e384cbb4a6cc5a4a57e6b790455472946caff9b8d2cf9e9a25b5c67dbb633b7c5a1f1e945155be3430745188234a723bbcca8eaa0e9c763569fec3214aec820fa9462fdb69bc883ee6ec4ed214efcc39987329d9a1c15c9f1bb34b1c0502a2e95e5d5b01b54245e63c297eb925f133b7c2bed0feb1e50d8051104316ed43985ff5df8a3c001df8cb5d3e15dd54580d9b1648a7928080b6770cc010528d45be0bc01177a404afc1f462ff6487754b4e4e8fddd1591c15ef2f38dad9bbaeebf406ee7fabc3e99b7183286eff398ad5ffcad87ce73b37e1ef0afccaafbe037ed68f35b7ef2a88aa0a31aa74332596881a8846beeaf6be281638895561bd2af63af8bb131c5e2ace8d80467bccae4239e29b3a6cc3a5b7d7df47b6c160909778191c4b10d96b75e88f79bb3ecdf14cd4fd500785bd7032b6a55ec13ed7091face08c36bcb856ccc911c40379abc4d1a51dd5c23957e50e7a9f47bd37a0b77a92a90e858e803c2afac3dd69bf23b81312e3bec8698ceed65256b05f389cf4134aad535b1ecadcfada550d1d91f26dfa19c869cee9892d32f33f8096055bb8d0e559922f01ebf7d85749b06aed9f3ad879edd8c7ebc8b0ce2534f893280a036ce5680803e8d18180b5a062d89820e5e360eb7656f265d7db8c32c0387bda9e96daaf53b58c311d9bc8aab8ef8c3eb4d1edc354267"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") [ 2645.323894][ T5975] loop3: detected capacity change from 0 to 256 [ 2645.944852][ T5975] FAT-fs (loop3): Directory bread(block 64) failed [ 2645.951621][ T5975] FAT-fs (loop3): Directory bread(block 65) failed [ 2645.959059][ T5975] FAT-fs (loop3): Directory bread(block 66) failed [ 2645.965968][ T5975] FAT-fs (loop3): Directory bread(block 67) failed [ 2645.973202][ T5975] FAT-fs (loop3): Directory bread(block 68) failed [ 2645.979863][ T5975] FAT-fs (loop3): Directory bread(block 69) failed [ 2645.987507][ T5975] FAT-fs (loop3): Directory bread(block 70) failed [ 2645.994509][ T5975] FAT-fs (loop3): Directory bread(block 71) failed [ 2646.001729][ T5975] FAT-fs (loop3): Directory bread(block 72) failed [ 2646.008775][ T5975] FAT-fs (loop3): Directory bread(block 73) failed 23:41:41 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) 23:41:41 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:41:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 8) 23:41:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") 23:41:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) [ 2648.284569][ T5994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2648.316660][ T5999] FAULT_INJECTION: forcing a failure. [ 2648.316660][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.516339][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2649.549082][ T6006] loop3: detected capacity change from 0 to 256 [ 2649.955589][ T6006] FAT-fs (loop3): Directory bread(block 64) failed [ 2649.962483][ T6006] FAT-fs (loop3): Directory bread(block 65) failed [ 2649.969382][ T6006] FAT-fs (loop3): Directory bread(block 66) failed [ 2649.976057][ T6006] FAT-fs (loop3): Directory bread(block 67) failed [ 2649.982940][ T6006] FAT-fs (loop3): Directory bread(block 68) failed [ 2649.989593][ T6006] FAT-fs (loop3): Directory bread(block 69) failed [ 2649.996549][ T6006] FAT-fs (loop3): Directory bread(block 70) failed [ 2650.003413][ T6006] FAT-fs (loop3): Directory bread(block 71) failed [ 2650.010279][ T6006] FAT-fs (loop3): Directory bread(block 72) failed [ 2650.016955][ T6006] FAT-fs (loop3): Directory bread(block 73) failed 23:41:45 executing program 2: r0 = eventfd(0x0) r1 = dup2(r0, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000000c0)={r1, 0x0, 0x2, r1}) [ 2650.223050][ T6007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2650.235419][ T5999] CPU: 0 PID: 5999 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2650.245184][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2650.255253][ T5999] Call Trace: [ 2650.258535][ T5999] [ 2650.261470][ T5999] dump_stack_lvl+0x1e3/0x2cb [ 2650.266167][ T5999] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2650.271824][ T5999] ? panic+0x84d/0x84d [ 2650.275915][ T5999] should_fail+0x38a/0x4c0 [ 2650.280348][ T5999] should_failslab+0x5/0x20 [ 2650.284859][ T5999] slab_pre_alloc_hook+0x53/0xc0 [ 2650.289812][ T5999] ? vm_area_alloc+0x20/0xe0 [ 2650.294464][ T5999] kmem_cache_alloc+0x3f/0x280 [ 2650.299241][ T5999] vm_area_alloc+0x20/0xe0 [ 2650.303665][ T5999] mmap_region+0xad4/0x1670 [ 2650.308250][ T5999] ? file_mmap_ok+0x150/0x150 [ 2650.312939][ T5999] ? cap_mmap_addr+0x15e/0x2d0 [ 2650.317728][ T5999] ? bpf_lsm_mmap_addr+0x5/0x10 [ 2650.322655][ T5999] ? get_unmapped_area+0x317/0x380 [ 2650.327792][ T5999] do_mmap+0x78d/0xe00 [ 2650.331886][ T5999] vm_mmap_pgoff+0x1ca/0x2d0 [ 2650.336488][ T5999] ? account_locked_vm+0xe0/0xe0 [ 2650.341437][ T5999] ? __lock_acquire+0x1ff0/0x1ff0 [ 2650.346465][ T5999] ? rcu_is_watching+0x11/0xa0 [ 2650.351255][ T5999] ksys_mmap_pgoff+0x13e/0x780 [ 2650.356009][ T5999] ? print_irqtrace_events+0x210/0x210 [ 2650.361459][ T5999] ? mmap_region+0x1670/0x1670 [ 2650.366213][ T5999] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2650.372181][ T5999] ? lockdep_hardirqs_on+0x94/0x130 [ 2650.377376][ T5999] do_syscall_64+0x3d/0xb0 [ 2650.381789][ T5999] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2650.387679][ T5999] RIP: 0033:0x7f1357c76b23 [ 2650.392094][ T5999] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 b0 ff ff ff 64 c7 [ 2650.411701][ T5999] RSP: 002b:00007f13561f7e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 23:41:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @none}, &(0x7f0000000440)=0xe, 0x80000) syz_mount_image$ext4(&(0x7f00000006c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x140004, 0x0, 0x0, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000200de030000000020000001040080000e0000f1850000000e00000195"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getrlimit(0x2, &(0x7f0000000680)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x80, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff018000000800395032303030"], 0x15) r6 = dup(r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x1, 'vlan0\x00', {}, 0x7fff}) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=[&(0x7f00000003c0)='#\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='GPL\x00', &(0x7f0000000500)='-&]\x00'], &(0x7f0000000600)=[&(0x7f0000000580)='rfdno', &(0x7f00000005c0)='\x00']) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) socket$netlink(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x480002, 0x0) fallocate(r7, 0x8, 0x4bfc, 0x1a6c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="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"]) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000000800)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2200082, &(0x7f0000000880)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d6d616363656e746575726f2c646f733178666c6f7070792c757466383d302c726f6469722c6e6f6e756d7461696c3d302c6e66732c004ea125b685efd9d9c0a843af8cdf2384bdb36531620c67741bd1e5fe0063d2f69b2ffb95a041"], 0x1, 0x2a9, &(0x7f0000000a40)="$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") [ 2650.420111][ T5999] RAX: ffffffffffffffda RBX: 00000000000001cd RCX: 00007f1357c76b23 [ 2650.428075][ T5999] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 2650.436051][ T5999] RBP: 00000000200002c2 R08: 00000000ffffffff R09: 0000000000000000 [ 2650.444122][ T5999] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 2650.452710][ T5999] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 0000000020000280 [ 2650.460711][ T5999] 23:41:45 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) 23:41:45 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) 23:41:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 9) [ 2650.584803][ T6016] FAULT_INJECTION: forcing a failure. [ 2650.584803][ T6016] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2650.613723][ T6004] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 2650.645927][ T6016] CPU: 0 PID: 6016 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2650.654458][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2650.664520][ T6016] Call Trace: [ 2650.667810][ T6016] [ 2650.670751][ T6016] dump_stack_lvl+0x1e3/0x2cb [ 2650.675452][ T6016] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2650.681101][ T6016] ? panic+0x84d/0x84d [ 2650.685195][ T6016] ? perf_event_mmap+0x3e4/0x1c70 [ 2650.690298][ T6016] should_fail+0x38a/0x4c0 23:41:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) [ 2650.694727][ T6016] prepare_alloc_pages+0x1db/0x5b0 [ 2650.699869][ T6016] __alloc_pages+0x14f/0x700 [ 2650.704477][ T6016] ? __rmqueue_pcplist+0x2030/0x2030 [ 2650.709787][ T6016] ? alloc_pages+0x458/0x570 [ 2650.714450][ T6016] pte_alloc_one+0x86/0x360 [ 2650.718989][ T6016] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2650.724211][ T6016] __pte_alloc+0x75/0x210 [ 2650.728546][ T6016] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 2650.734713][ T6016] ? free_pgtables+0x2a0/0x2a0 [ 2650.739501][ T6016] handle_mm_fault+0x4d7f/0x5950 [ 2650.744477][ T6016] ? numa_migrate_prep+0x1a0/0x1a0 [ 2650.749625][ T6016] ? vmacache_find+0x4f9/0x590 [ 2650.754400][ T6016] ? vmacache_update+0x9f/0xf0 [ 2650.759185][ T6016] exc_page_fault+0x271/0x740 [ 2650.763885][ T6016] asm_exc_page_fault+0x22/0x30 [ 2650.764085][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2650.768742][ T6016] RIP: 0033:0x7f1357c22643 [ 2650.782500][ T6016] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2650.802112][ T6016] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2650.808210][ T6016] RAX: 0000000000000000 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2650.816199][ T6016] RDX: 00007f13561f7760 RSI: 0000000000000057 RDI: 00007f13561f7660 [ 2650.824183][ T6016] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000bc [ 2650.832157][ T6016] R10: 00000000000000c6 R11: 00007f13561f75c0 R12: 00007f13561f75c0 23:41:45 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (rerun: 64) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (rerun: 32) [ 2650.840129][ T6016] R13: 00007f1357ce44a0 R14: 00000000000000eb R15: 00007f13561f7660 [ 2650.848126][ T6016] [ 2650.902405][ T6021] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 2651.019346][ T6016] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2651.048283][ T6026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2651.071281][ T6030] loop3: detected capacity change from 0 to 256 [ 2651.142592][ T6030] FAT-fs (loop3): Directory bread(block 64) failed [ 2651.149328][ T6030] FAT-fs (loop3): Directory bread(block 65) failed [ 2651.156349][ T6030] FAT-fs (loop3): Directory bread(block 66) failed [ 2651.163033][ T6030] FAT-fs (loop3): Directory bread(block 67) failed [ 2651.169849][ T6030] FAT-fs (loop3): Directory bread(block 68) failed [ 2651.176578][ T6030] FAT-fs (loop3): Directory bread(block 69) failed [ 2651.183496][ T6030] FAT-fs (loop3): Directory bread(block 70) failed [ 2651.190147][ T6030] FAT-fs (loop3): Directory bread(block 71) failed [ 2651.197077][ T6030] FAT-fs (loop3): Directory bread(block 72) failed [ 2651.203793][ T6030] FAT-fs (loop3): Directory bread(block 73) failed 23:41:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) 23:41:46 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) 23:41:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080), &(0x7f0000000140)=""/17, &(0x7f0000000280), &(0x7f0000000500), 0x4, r0}, 0x38) [ 2651.856215][ T6016] loop5: detected capacity change from 0 to 128 [ 2651.866591][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:46 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) 23:41:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) [ 2651.994792][ T6032] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 23:41:47 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) [ 2652.106697][T27933] bridge0: port 3(syz_tun) entered disabled state [ 2652.132778][T27933] device syz_tun left promiscuous mode [ 2652.138312][T27933] bridge0: port 3(syz_tun) entered disabled state 23:41:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 10) [ 2652.155954][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 23:41:47 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) [ 2652.223359][ T6043] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 23:41:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) 23:41:47 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0xd4030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2652.282881][ T6046] FAULT_INJECTION: forcing a failure. [ 2652.282881][ T6046] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.312210][ T6046] CPU: 0 PID: 6046 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2652.320726][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2652.330786][ T6046] Call Trace: [ 2652.334072][ T6046] [ 2652.337031][ T6046] dump_stack_lvl+0x1e3/0x2cb [ 2652.341735][ T6046] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2652.347386][ T6046] ? panic+0x84d/0x84d [ 2652.351475][ T6046] ? __might_sleep+0xc0/0xc0 [ 2652.356071][ T6046] ? rcu_is_watching+0x11/0xa0 [ 2652.360846][ T6046] should_fail+0x38a/0x4c0 [ 2652.365274][ T6046] should_failslab+0x5/0x20 [ 2652.369785][ T6046] slab_pre_alloc_hook+0x53/0xc0 [ 2652.374734][ T6046] ? ptlock_alloc+0x1c/0x60 [ 2652.379246][ T6046] kmem_cache_alloc+0x3f/0x280 [ 2652.384018][ T6046] ptlock_alloc+0x1c/0x60 [ 2652.388355][ T6046] pte_alloc_one+0xd1/0x360 [ 2652.392868][ T6046] ? pfn_modify_allowed+0x2f0/0x2f0 [ 2652.398110][ T6046] __pte_alloc+0x75/0x210 [ 2652.402471][ T6046] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 2652.408635][ T6046] ? free_pgtables+0x2a0/0x2a0 [ 2652.413418][ T6046] handle_mm_fault+0x4d7f/0x5950 [ 2652.418398][ T6046] ? numa_migrate_prep+0x1a0/0x1a0 [ 2652.423543][ T6046] ? vmacache_find+0x4f9/0x590 [ 2652.428316][ T6046] ? vmacache_update+0x9f/0xf0 [ 2652.433093][ T6046] exc_page_fault+0x271/0x740 [ 2652.437791][ T6046] asm_exc_page_fault+0x22/0x30 [ 2652.442666][ T6046] RIP: 0033:0x7f1357c22643 [ 2652.447088][ T6046] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2652.466708][ T6046] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2652.472787][ T6046] RAX: 0000000000000000 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 23:41:47 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) [ 2652.480759][ T6046] RDX: 00007f13561f7760 RSI: 0000000000000057 RDI: 00007f13561f7660 [ 2652.488732][ T6046] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000bc [ 2652.496716][ T6046] R10: 00000000000000c6 R11: 00007f13561f75c0 R12: 00007f13561f75c0 [ 2652.504701][ T6046] R13: 00007f1357ce44a0 R14: 00000000000000eb R15: 00007f13561f7660 [ 2652.512695][ T6046] [ 2652.521959][ T6046] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2652.541001][ T6046] loop5: detected capacity change from 0 to 128 [ 2652.604875][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2652.653614][ T6058] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 2654.289441][ T6061] chnl_net:caif_netlink_parms(): no params data found [ 2654.340713][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 2654.347938][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 2654.356435][ T6061] device bridge_slave_0 entered promiscuous mode [ 2654.365111][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 2654.372598][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 2654.380538][ T6061] device bridge_slave_1 entered promiscuous mode [ 2654.405288][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2654.416781][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2654.447057][ T6061] team0: Port device team_slave_0 added [ 2654.455280][ T6061] team0: Port device team_slave_1 added [ 2654.476942][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2654.484055][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2654.510451][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2654.522911][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2654.529851][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2654.556202][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2654.593749][ T6061] device hsr_slave_0 entered promiscuous mode [ 2654.601154][ T6061] device hsr_slave_1 entered promiscuous mode [ 2654.608575][ T6061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2654.616408][ T6061] Cannot create hsr debugfs directory [ 2654.685108][ T6061] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2654.755132][ T6061] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2654.796305][ T6061] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2654.845947][ T6061] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2654.928697][ T6061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2654.939479][ T6061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2654.949176][ T6061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2654.958806][ T6061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2654.980649][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 2654.987744][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2654.995116][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.002186][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2655.053733][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2655.067551][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2655.076723][T13493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.085072][T13493] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.093765][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2655.111106][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 2655.123752][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2655.132570][T13493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.139612][T13493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2655.163417][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2655.171778][T13493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.178859][T13493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2655.188272][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2655.197182][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2655.215943][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2655.224182][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2655.232473][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2655.241385][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2655.328921][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2655.336920][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2655.345745][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2655.454284][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2655.463623][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2655.486317][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2655.495110][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2655.505217][ T6061] device veth0_vlan entered promiscuous mode [ 2655.513030][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2655.520812][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2655.533140][ T6061] device veth1_vlan entered promiscuous mode [ 2655.554972][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2655.563780][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2655.571819][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2655.580508][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2655.592181][ T6061] device veth0_macvtap entered promiscuous mode [ 2655.601699][ T6061] device veth1_macvtap entered promiscuous mode [ 2655.620655][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2655.631518][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.643213][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2655.653809][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.663845][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2655.674706][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.684657][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2655.695417][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.706895][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2655.715961][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2655.724735][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2655.733066][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2655.741905][T13490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2655.752672][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2655.764295][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.774448][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2655.784944][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.794964][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2655.805435][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.815402][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2655.826517][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2655.838215][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2655.849023][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2655.858582][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2655.869862][ T6061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.879682][ T6061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.889382][ T6061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.898464][ T6061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.975799][T28684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2655.991259][T28684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2656.013302][ T2782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2656.016412][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2656.023311][ T2782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2656.046658][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2656.160762][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.171896][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.184020][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.195007][T13493] Bluetooth: hci4: command 0x0409 tx timeout [ 2656.202500][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.214483][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.215025][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.235242][ T6080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.243204][ T6081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2659.154304][ T2761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2660.515166][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 2660.567003][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 2660.574229][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 2660.582217][ T6083] device bridge_slave_0 entered promiscuous mode [ 2660.590454][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 2660.598203][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 2660.613194][ T6083] device bridge_slave_1 entered promiscuous mode [ 2660.637378][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2660.648385][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2660.679261][ T6083] team0: Port device team_slave_0 added [ 2660.687470][ T6083] team0: Port device team_slave_1 added [ 2660.708814][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2660.715930][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2660.742123][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2660.754998][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2660.761956][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2660.787990][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2660.821377][ T6083] device hsr_slave_0 entered promiscuous mode [ 2660.828185][ T6083] device hsr_slave_1 entered promiscuous mode [ 2660.835467][ T6083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2660.843220][ T6083] Cannot create hsr debugfs directory [ 2661.628668][ T2761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2661.679513][ T2761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2661.728234][ T2761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2662.432476][T24819] Bluetooth: hci4: command 0x0409 tx timeout [ 2662.615650][ T2761] device hsr_slave_0 left promiscuous mode [ 2662.622293][ T2761] device hsr_slave_1 left promiscuous mode [ 2662.628768][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2662.636542][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2662.646006][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2662.653886][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2662.663068][ T2761] device bridge_slave_1 left promiscuous mode [ 2662.669235][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.680249][ T2761] device bridge_slave_0 left promiscuous mode [ 2662.686760][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.701202][ T2761] device veth1_macvtap left promiscuous mode [ 2662.707348][ T2761] device veth0_macvtap left promiscuous mode [ 2662.713946][ T2761] device veth1_vlan left promiscuous mode [ 2662.719733][ T2761] device veth0_vlan left promiscuous mode [ 2662.910651][ T2761] team0 (unregistering): Port device team_slave_1 removed [ 2662.927599][ T2761] team0 (unregistering): Port device team_slave_0 removed [ 2662.943116][ T2761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2662.959333][ T2761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2663.059085][ T2761] bond0 (unregistering): Released all slaves [ 2663.151872][ T6083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2663.160389][ T6083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2663.169972][ T6083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2663.179400][ T6083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2663.253632][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2663.266681][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2663.275285][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2663.298990][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 2663.309397][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2663.319301][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2663.328095][T13497] bridge0: port 1(bridge_slave_0) entered blocking state [ 2663.335239][T13497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2663.353507][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2663.361761][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2663.370507][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2663.379177][T13497] bridge0: port 2(bridge_slave_1) entered blocking state [ 2663.386261][T13497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2663.394584][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2663.403409][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2663.424526][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2663.433698][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2663.442693][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2663.451377][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2663.460681][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2663.469441][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2663.478095][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2663.486751][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2663.498370][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2663.509152][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2663.664386][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2663.673007][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2663.692310][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2663.927313][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2663.936436][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2663.957749][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2663.966646][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2663.977275][ T6083] device veth0_vlan entered promiscuous mode [ 2663.985104][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2663.993275][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2664.005702][ T6083] device veth1_vlan entered promiscuous mode [ 2664.027770][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2664.036667][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2664.045058][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2664.053809][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2664.064641][ T6083] device veth0_macvtap entered promiscuous mode [ 2664.077469][ T6083] device veth1_macvtap entered promiscuous mode [ 2664.093101][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2664.104563][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.115210][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2664.126441][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.136754][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2664.147477][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.157744][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2664.168486][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.180171][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2664.203311][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2664.211331][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2664.220011][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2664.228983][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2664.239792][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2664.251203][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.261553][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2664.279831][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.289854][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2664.300955][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.310842][ T6083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2664.321621][ T6083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2664.332921][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2664.342483][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2664.351584][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2664.363131][ T6083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.371821][ T6083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.382809][ T6083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.391590][ T6083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.492592][T28613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.501141][T28613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.513610][T13497] Bluetooth: hci4: command 0x041b tx timeout [ 2664.545926][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2664.555505][T22759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.572437][T22759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.583233][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2664.663980][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.692982][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.723468][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.724345][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.753620][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.782834][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.783585][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.813375][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.843213][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.852804][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.883386][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.883860][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.913397][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.943266][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.943600][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.973412][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.003291][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.013666][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.043808][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.092768][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.118571][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.132180][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.143505][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.145765][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.173397][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.203368][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.213185][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.214153][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.247532][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.276233][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.287147][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.298620][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.304977][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.309784][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.319675][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.338941][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.350066][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.361340][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.372735][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.383778][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.384264][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.394852][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.415621][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.428043][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.443578][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.454838][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.467092][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.481538][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.492822][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.503652][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.514822][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.526877][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.538238][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.549290][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.562272][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.573393][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.584524][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.596036][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.607074][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.618451][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.629452][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.642772][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.653764][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.664974][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.676368][ T6131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:00 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (rerun: 32) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:42:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 11) 23:42:00 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_ATTR(r2, &(0x7f0000000100)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xffffffffffffffff}}}, 0x78) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000004c0)) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0xfffffe00, 0x0) 23:42:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) 23:42:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 23:42:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0xd4030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 23:42:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 2665.808919][ T6138] FAULT_INJECTION: forcing a failure. [ 2665.808919][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.872232][ T6138] CPU: 0 PID: 6138 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2665.880862][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2665.890915][ T6138] Call Trace: [ 2665.894203][ T6138] [ 2665.897138][ T6138] dump_stack_lvl+0x1e3/0x2cb [ 2665.901841][ T6138] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2665.907485][ T6138] ? panic+0x84d/0x84d [ 2665.911571][ T6138] ? __might_sleep+0xc0/0xc0 [ 2665.916173][ T6138] should_fail+0x38a/0x4c0 [ 2665.920599][ T6138] should_failslab+0x5/0x20 [ 2665.925105][ T6138] slab_pre_alloc_hook+0x53/0xc0 [ 2665.930051][ T6138] ? __anon_vma_prepare+0x66/0x410 [ 2665.935176][ T6138] kmem_cache_alloc+0x3f/0x280 [ 2665.939976][ T6138] __anon_vma_prepare+0x66/0x410 [ 2665.944933][ T6138] handle_mm_fault+0x4f4b/0x5950 [ 2665.949906][ T6138] ? numa_migrate_prep+0x1a0/0x1a0 [ 2665.955058][ T6138] ? vmacache_find+0x4f9/0x590 [ 2665.959835][ T6138] ? vmacache_update+0x9f/0xf0 [ 2665.964628][ T6138] exc_page_fault+0x271/0x740 [ 2665.969326][ T6138] asm_exc_page_fault+0x22/0x30 [ 2665.974185][ T6138] RIP: 0033:0x7f1357c22643 [ 2665.978607][ T6138] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2665.998219][ T6138] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2666.004296][ T6138] RAX: 0000000000000000 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2666.012298][ T6138] RDX: 00007f13561f7760 RSI: 0000000000000057 RDI: 00007f13561f7660 23:42:00 executing program 2: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ca, &(0x7f00000006c0)="$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") [ 2666.020282][ T6138] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000bc [ 2666.028269][ T6138] R10: 00000000000000c6 R11: 00007f13561f75c0 R12: 00007f13561f75c0 [ 2666.036253][ T6138] R13: 00007f1357ce44a0 R14: 00000000000000eb R15: 00007f13561f7660 [ 2666.044254][ T6138] [ 2666.059031][ T6138] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2666.084546][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2666.094204][ T6138] loop5: detected capacity change from 0 to 128 [ 2666.097665][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 2666.161850][ T6153] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 2666.173451][ T6148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000380)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x3a}}}], 0x18}, 0x0) 23:42:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0xe}, {0x4}}]}, 0x34}}, 0x0) 23:42:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) [ 2666.223348][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.243287][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.255363][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.267959][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.294772][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2666.324733][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.344353][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.377553][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.388957][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.395950][ T6158] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 2666.424972][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.436976][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.448522][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.461917][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.473342][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.484542][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.510688][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.528804][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.540102][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.550935][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.562197][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.573441][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.584268][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.594669][ T3907] Bluetooth: hci4: command 0x040f tx timeout [ 2666.601863][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.613604][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.624608][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.635368][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.646334][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.657500][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.668395][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.680200][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2666.691650][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2669.306389][ T2761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.358601][ T2761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.407143][ T2761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2669.498167][ T2761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2670.317922][ T2761] device hsr_slave_0 left promiscuous mode [ 2670.333262][ T2761] device hsr_slave_1 left promiscuous mode [ 2670.339668][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2670.347530][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2670.356822][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2670.365335][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2670.374461][ T2761] device bridge_slave_1 left promiscuous mode [ 2670.380707][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2670.389252][ T2761] device bridge_slave_0 left promiscuous mode [ 2670.395703][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2670.408562][ T2761] device veth1_macvtap left promiscuous mode [ 2670.414686][ T2761] device veth0_macvtap left promiscuous mode [ 2670.420723][ T2761] device veth1_vlan left promiscuous mode [ 2670.426577][ T2761] device veth0_vlan left promiscuous mode [ 2670.720099][ T2761] team0 (unregistering): Port device team_slave_1 removed [ 2670.735149][ T2761] team0 (unregistering): Port device team_slave_0 removed [ 2670.748272][ T2761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2670.763489][ T2761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2670.844912][ T2761] bond0 (unregistering): Released all slaves [ 2671.053426][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 2671.177460][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.184746][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.196870][ T6208] device bridge_slave_0 entered promiscuous mode [ 2671.214312][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.226015][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.234301][ T6208] device bridge_slave_1 entered promiscuous mode [ 2671.259953][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2671.277849][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2671.320682][ T6208] team0: Port device team_slave_0 added [ 2671.355710][ T6208] team0: Port device team_slave_1 added [ 2671.413730][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2671.420758][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2671.447856][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2671.460794][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2671.468015][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2671.494364][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2671.538770][ T6208] device hsr_slave_0 entered promiscuous mode [ 2671.562594][ T6208] device hsr_slave_1 entered promiscuous mode [ 2671.582107][ T6208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2671.589665][ T6208] Cannot create hsr debugfs directory [ 2672.244433][ T6208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2672.266140][ T6208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2672.284671][ T6208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2672.304139][ T6208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2672.413539][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2672.434777][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2672.442967][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2672.453950][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 2672.493370][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2672.501970][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2672.511086][T24819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.518221][T24819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.552345][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2672.560943][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2672.592606][T24819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.599668][T24819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.622438][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2672.631376][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2672.670858][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2672.682638][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2672.691923][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2672.720096][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2672.742820][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2672.751283][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2672.760105][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2672.768426][ T4640] Bluetooth: hci4: command 0x0409 tx timeout [ 2672.771723][ T6208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2672.789117][ T6208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2672.798724][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2672.808022][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2672.832615][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2672.993894][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2673.001342][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2673.026551][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2673.292775][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2673.301799][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2673.335150][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2673.343822][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2673.362827][ T6208] device veth0_vlan entered promiscuous mode [ 2673.375718][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2673.384088][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2673.393056][ T6208] device veth1_vlan entered promiscuous mode [ 2673.415776][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2673.424333][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2673.432707][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2673.443004][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2673.464021][ T6208] device veth0_macvtap entered promiscuous mode [ 2673.479871][ T6208] device veth1_macvtap entered promiscuous mode [ 2673.503470][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.522334][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.532490][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.543156][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.553430][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.564068][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.582028][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2673.603856][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.623176][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2673.631101][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2673.640174][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2673.648817][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2673.672661][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2673.683128][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.698030][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.709863][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.720726][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.730755][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.743475][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.753532][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2673.772077][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2673.791554][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2673.807205][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2673.816127][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2673.826220][ T6208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.851377][ T6208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.872434][ T6208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2673.881136][ T6208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2674.004140][T28613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2674.019246][T28613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2674.044518][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2674.066659][T22759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2674.081053][T22759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2674.098456][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2674.183453][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.195027][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.220204][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.253439][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.272993][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.303608][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.316116][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.327950][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.339248][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.350265][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.361897][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.373355][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.388446][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.399581][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.410554][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.423400][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.435328][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.448949][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.463620][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.474803][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.485931][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.496946][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.508045][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.522872][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.540838][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.552504][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.572936][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2674.842330][ T4634] Bluetooth: hci4: command 0x041b tx timeout 23:42:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800001ff0102110000010802110000000802110000000000000000003ccc386d6e92cd6259f72663c80001000006020202"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:42:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000380)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x3a}}}], 0x18}, 0x0) 23:42:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 12) 23:42:09 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x94, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:42:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0xd4030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 23:42:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "631d6e083e9c9ea22e6ede1547f690b8dc50896de0d4b87823bdf9d97f4a6f63"}) 23:42:09 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x94, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 2674.929021][ T6346] FAULT_INJECTION: forcing a failure. [ 2674.929021][ T6346] name failslab, interval 1, probability 0, space 0, times 0 [ 2674.983887][ T6346] CPU: 0 PID: 6346 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2674.992415][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2675.002496][ T6346] Call Trace: [ 2675.005783][ T6346] [ 2675.008718][ T6346] dump_stack_lvl+0x1e3/0x2cb [ 2675.013416][ T6346] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2675.019065][ T6346] ? panic+0x84d/0x84d [ 2675.023170][ T6346] ? __might_sleep+0xc0/0xc0 [ 2675.027782][ T6346] should_fail+0x38a/0x4c0 [ 2675.032222][ T6346] should_failslab+0x5/0x20 [ 2675.036743][ T6346] slab_pre_alloc_hook+0x53/0xc0 [ 2675.041696][ T6346] ? __anon_vma_prepare+0xb9/0x410 [ 2675.046818][ T6346] kmem_cache_alloc+0x3f/0x280 [ 2675.051602][ T6346] __anon_vma_prepare+0xb9/0x410 [ 2675.056556][ T6346] handle_mm_fault+0x4f4b/0x5950 [ 2675.061546][ T6346] ? numa_migrate_prep+0x1a0/0x1a0 [ 2675.066690][ T6346] ? vmacache_find+0x4f9/0x590 [ 2675.071465][ T6346] ? vmacache_update+0x9f/0xf0 [ 2675.076268][ T6346] exc_page_fault+0x271/0x740 [ 2675.080960][ T6346] asm_exc_page_fault+0x22/0x30 [ 2675.085903][ T6346] RIP: 0033:0x7f1357c22643 [ 2675.090325][ T6346] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2675.109953][ T6346] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2675.116030][ T6346] RAX: 0000000000000000 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2675.124008][ T6346] RDX: 00007f13561f7760 RSI: 0000000000000057 RDI: 00007f13561f7660 23:42:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000380)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x3a}}}], 0x18}, 0x0) 23:42:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000380)={0xa, 0x4e21, 0x80000, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdrdstopts={{0x18, 0x29, 0xb, {0x3a}}}], 0x18}, 0x0) 23:42:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0000003}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="ac273326188a5b9076b884a30827d20ba9dd068891af621b66e04f8e5144f3c934f3ec3a03e2ac731fc773008fc1532778e776e1d31311c73309b54412e9cbaeceb18ebdf6fabac616e9391b8ecfc5387ceb462b74aea18e8eee766f1400bd948000e1038c0cd7ed54f9e83e921e5824100e4c6333d3c859ac354a38099d403dfea4a65f97334a28b0736219ef5b0388b6bbe78522e2b2ebad5767acf67a68496522b99f08718a92f5bc9f4e21354494e0f9ee952d4d5e6cae6d7ad85ea9e06b9cc84fe22599d890f04cc31452d24780542254925a5c45f2511bd605a082a3811ff39c95d13c2533fc", 0xe9}, {&(0x7f0000000100)="52e02710804d52bea9aec4bd7b08bef686017e6607ef354a5d1fd81e21956549a9edcc4393571fb81c96068dcd34dbf9ea1f31e5b1", 0x35}, {&(0x7f0000000280)="bd2871e559d9e093c1c3095438dc4a8673b9f617ad79546dc5f17d8cee1ca364b207f3d88278e3fbab7240a9dfa80335ff869fec6e7e629adc7a001eab1dad39583683b656c4c2f3bc93e7f07bdbdae9ff42c32d0887e4b7e5b0ed6ecfd569b2b72b045fd56c2d9ed86d7d4c10483083b6d4c151a9d8022def08b7b457986ae7c7ecdd70231e955d4d3c4fd74646b1468b690dd1949cce73b829ea72e70d0bb31a6d464ea9991278e01db8f319322336fc733bf76c0b8a78a7f31ecb02693444a24fd4d6fb75ac64fa4c04695259a69475b74dc4", 0xd4}, {&(0x7f0000000380)="a295b583abeebee09b4a2ac64f6f1936a6190ba1fabf90b1e19aa144cf74b80264242a65b2486b5f6d945fb196162df4af9949f08833a72df66883e8b7c4db97f496e1b7758754c1503f1f2b62d62943e8291d4ea59dcad3c9aea0fe2104f715897c215becd013ce1bbf5b1615a5f3216bc2af86a9fbb1a53ee8ba52e997a5531337af5c1ce46715ddcbacb5e2f57b8774", 0x91}, {&(0x7f0000000440)="655546b73cc6c8f337698ab13f88a31c4cfd9f06277d709bd83be3f490fcb540339f9dc4df95687a6c5f9a8ea95e0bd1d0d8274a3d53625761ca7cda6192114efa8034713e86e3c7f283f3d21b16215bb798c092bb6a469bec6bcf257ad3ab7bd586e9ee5626553a812d6322a3df6396698c0cf8af05004a4281ae1eb3d7da4964a5dd530ee9a89774bceaf19450fa763dc20e72d77b7232351b38cd54376cabb9d49cfdb9c9d95103b1ed3295323cca107ccf3dfe328eb6e500b911e9d4bdf238c2d9136bff03dca76b9520caeaa8845594d31430e986be", 0xd8}, {&(0x7f0000000540)="41bf764865ef44efccebb1c6e9e34a80ec0b8af39537070286626759a0abc2773914d7410394f82eee8996c2c4635c4ae94d65f6c5c782f8aa6a43b9a176b04d865cb2c84dfcf500d505ad1d5d09579e7ed00bfcd3ec504cd71c16191e", 0x5d}, {&(0x7f00000005c0)="5fe8af33c0127f7f1ed0e9e7286a8a429d5fb091aa88936d6b00c84448902b9845c46efd15828b5fd36ef1d0b54303c65ea0c2c170e02e3adcaf3d53831912d1dfde5022d7ddc24d3172b0916d7c2ff6400ece62d2b109ed9070e6456f4ab66a9e41a6b175475537ad2308e1a0089daf4d795e522de136a61d692363b3b67f53c5b5925ba79f5868e1f6a3755d96c553", 0x90}, {&(0x7f0000000680)="3c39d68ba243e646b4aed22e5633d8bace65e9dcfbad5aa35d604a635cff113e2f86557b7cc8df34f9eee5501165865a6ccff68fb78be9ba7f2da8c2259a8ca033126bb49b629156c2590a41dba66ec6d6037e0db51d0fc31c9460c43302fd7809408091a6cf9ef68bbfd66802b5768436c4f99962dfb4c18fdcf635f886db7023acf9eae4d5658726adf15ec2ac2810f0194ea5e06b0b06f0c2b82b03d428b8ff", 0xa1}, {&(0x7f00000007c0)="bfff7032d0661ebd6f26f82e6b1f7bb2ff1204f97aa6e570749c5bb8b2b4e92bbdcd65e3ef175144227933e0ea78f30cc0865102a2afb5e6a3d56e66218521c32bbe97115f07f6431fdcb09b013190779f322a61d269b300c2d473d3453382e8bd0ebe49b25f062d3a1037b2358d344dc96552581d30210463716ba50e05d29496d04a585c27399c670dec43d362c31f8bf8981c332b7c9c35121e9844418de8c77a64fd257e3185699030ac6a1dbaf00a3035a686abe0c9619310af854d4ce3fdf90d", 0xc3}], 0x9}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="f6", 0x1}], 0x1}}], 0x3, 0x38000) 23:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) [ 2675.131985][ T6346] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000bc [ 2675.139958][ T6346] R10: 00000000000000c6 R11: 00007f13561f75c0 R12: 00007f13561f75c0 [ 2675.147937][ T6346] R13: 00007f1357ce44a0 R14: 00000000000000eb R15: 00007f13561f7660 [ 2675.155937][ T6346] 23:42:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0000003}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="ac273326188a5b9076b884a30827d20ba9dd068891af621b66e04f8e5144f3c934f3ec3a03e2ac731fc773008fc1532778e776e1d31311c73309b54412e9cbaeceb18ebdf6fabac616e9391b8ecfc5387ceb462b74aea18e8eee766f1400bd948000e1038c0cd7ed54f9e83e921e5824100e4c6333d3c859ac354a38099d403dfea4a65f97334a28b0736219ef5b0388b6bbe78522e2b2ebad5767acf67a68496522b99f08718a92f5bc9f4e21354494e0f9ee952d4d5e6cae6d7ad85ea9e06b9cc84fe22599d890f04cc31452d24780542254925a5c45f2511bd605a082a3811ff39c95d13c2533fc", 0xe9}, {&(0x7f0000000100)="52e02710804d52bea9aec4bd7b08bef686017e6607ef354a5d1fd81e21956549a9edcc4393571fb81c96068dcd34dbf9ea1f31e5b1", 0x35}, {&(0x7f0000000280)="bd2871e559d9e093c1c3095438dc4a8673b9f617ad79546dc5f17d8cee1ca364b207f3d88278e3fbab7240a9dfa80335ff869fec6e7e629adc7a001eab1dad39583683b656c4c2f3bc93e7f07bdbdae9ff42c32d0887e4b7e5b0ed6ecfd569b2b72b045fd56c2d9ed86d7d4c10483083b6d4c151a9d8022def08b7b457986ae7c7ecdd70231e955d4d3c4fd74646b1468b690dd1949cce73b829ea72e70d0bb31a6d464ea9991278e01db8f319322336fc733bf76c0b8a78a7f31ecb02693444a24fd4d6fb75ac64fa4c04695259a69475b74dc4", 0xd4}, {&(0x7f0000000380)="a295b583abeebee09b4a2ac64f6f1936a6190ba1fabf90b1e19aa144cf74b80264242a65b2486b5f6d945fb196162df4af9949f08833a72df66883e8b7c4db97f496e1b7758754c1503f1f2b62d62943e8291d4ea59dcad3c9aea0fe2104f715897c215becd013ce1bbf5b1615a5f3216bc2af86a9fbb1a53ee8ba52e997a5531337af5c1ce46715ddcbacb5e2f57b8774", 0x91}, {&(0x7f0000000440)="655546b73cc6c8f337698ab13f88a31c4cfd9f06277d709bd83be3f490fcb540339f9dc4df95687a6c5f9a8ea95e0bd1d0d8274a3d53625761ca7cda6192114efa8034713e86e3c7f283f3d21b16215bb798c092bb6a469bec6bcf257ad3ab7bd586e9ee5626553a812d6322a3df6396698c0cf8af05004a4281ae1eb3d7da4964a5dd530ee9a89774bceaf19450fa763dc20e72d77b7232351b38cd54376cabb9d49cfdb9c9d95103b1ed3295323cca107ccf3dfe328eb6e500b911e9d4bdf238c2d9136bff03dca76b9520caeaa8845594d31430e986be", 0xd8}, {&(0x7f0000000540)="41bf764865ef44efccebb1c6e9e34a80ec0b8af39537070286626759a0abc2773914d7410394f82eee8996c2c4635c4ae94d65f6c5c782f8aa6a43b9a176b04d865cb2c84dfcf500d505ad1d5d09579e7ed00bfcd3ec504cd71c16191e", 0x5d}, {&(0x7f00000005c0)="5fe8af33c0127f7f1ed0e9e7286a8a429d5fb091aa88936d6b00c84448902b9845c46efd15828b5fd36ef1d0b54303c65ea0c2c170e02e3adcaf3d53831912d1dfde5022d7ddc24d3172b0916d7c2ff6400ece62d2b109ed9070e6456f4ab66a9e41a6b175475537ad2308e1a0089daf4d795e522de136a61d692363b3b67f53c5b5925ba79f5868e1f6a3755d96c553", 0x90}, {&(0x7f0000000680)="3c39d68ba243e646b4aed22e5633d8bace65e9dcfbad5aa35d604a635cff113e2f86557b7cc8df34f9eee5501165865a6ccff68fb78be9ba7f2da8c2259a8ca033126bb49b629156c2590a41dba66ec6d6037e0db51d0fc31c9460c43302fd7809408091a6cf9ef68bbfd66802b5768436c4f99962dfb4c18fdcf635f886db7023acf9eae4d5658726adf15ec2ac2810f0194ea5e06b0b06f0c2b82b03d428b8ff", 0xa1}, {&(0x7f00000007c0)="bfff7032d0661ebd6f26f82e6b1f7bb2ff1204f97aa6e570749c5bb8b2b4e92bbdcd65e3ef175144227933e0ea78f30cc0865102a2afb5e6a3d56e66218521c32bbe97115f07f6431fdcb09b013190779f322a61d269b300c2d473d3453382e8bd0ebe49b25f062d3a1037b2358d344dc96552581d30210463716ba50e05d29496d04a585c27399c670dec43d362c31f8bf8981c332b7c9c35121e9844418de8c77a64fd257e3185699030ac6a1dbaf00a3035a686abe0c9619310af854d4ce3fdf90d", 0xc3}], 0x9}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="f6", 0x1}], 0x1}}], 0x3, 0x38000) [ 2675.195570][ T6346] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2675.214932][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.225606][ T6346] loop5: detected capacity change from 0 to 128 [ 2675.253208][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.302810][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:42:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800001ff0102110000010802110000000802110000000000000000003ccc386d6e92cd6259f72663c80001000006020202"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:42:10 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x94, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 23:42:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0000003}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="ac273326188a5b9076b884a30827d20ba9dd068891af621b66e04f8e5144f3c934f3ec3a03e2ac731fc773008fc1532778e776e1d31311c73309b54412e9cbaeceb18ebdf6fabac616e9391b8ecfc5387ceb462b74aea18e8eee766f1400bd948000e1038c0cd7ed54f9e83e921e5824100e4c6333d3c859ac354a38099d403dfea4a65f97334a28b0736219ef5b0388b6bbe78522e2b2ebad5767acf67a68496522b99f08718a92f5bc9f4e21354494e0f9ee952d4d5e6cae6d7ad85ea9e06b9cc84fe22599d890f04cc31452d24780542254925a5c45f2511bd605a082a3811ff39c95d13c2533fc", 0xe9}, {&(0x7f0000000100)="52e02710804d52bea9aec4bd7b08bef686017e6607ef354a5d1fd81e21956549a9edcc4393571fb81c96068dcd34dbf9ea1f31e5b1", 0x35}, {&(0x7f0000000280)="bd2871e559d9e093c1c3095438dc4a8673b9f617ad79546dc5f17d8cee1ca364b207f3d88278e3fbab7240a9dfa80335ff869fec6e7e629adc7a001eab1dad39583683b656c4c2f3bc93e7f07bdbdae9ff42c32d0887e4b7e5b0ed6ecfd569b2b72b045fd56c2d9ed86d7d4c10483083b6d4c151a9d8022def08b7b457986ae7c7ecdd70231e955d4d3c4fd74646b1468b690dd1949cce73b829ea72e70d0bb31a6d464ea9991278e01db8f319322336fc733bf76c0b8a78a7f31ecb02693444a24fd4d6fb75ac64fa4c04695259a69475b74dc4", 0xd4}, {&(0x7f0000000380)="a295b583abeebee09b4a2ac64f6f1936a6190ba1fabf90b1e19aa144cf74b80264242a65b2486b5f6d945fb196162df4af9949f08833a72df66883e8b7c4db97f496e1b7758754c1503f1f2b62d62943e8291d4ea59dcad3c9aea0fe2104f715897c215becd013ce1bbf5b1615a5f3216bc2af86a9fbb1a53ee8ba52e997a5531337af5c1ce46715ddcbacb5e2f57b8774", 0x91}, {&(0x7f0000000440)="655546b73cc6c8f337698ab13f88a31c4cfd9f06277d709bd83be3f490fcb540339f9dc4df95687a6c5f9a8ea95e0bd1d0d8274a3d53625761ca7cda6192114efa8034713e86e3c7f283f3d21b16215bb798c092bb6a469bec6bcf257ad3ab7bd586e9ee5626553a812d6322a3df6396698c0cf8af05004a4281ae1eb3d7da4964a5dd530ee9a89774bceaf19450fa763dc20e72d77b7232351b38cd54376cabb9d49cfdb9c9d95103b1ed3295323cca107ccf3dfe328eb6e500b911e9d4bdf238c2d9136bff03dca76b9520caeaa8845594d31430e986be", 0xd8}, {&(0x7f0000000540)="41bf764865ef44efccebb1c6e9e34a80ec0b8af39537070286626759a0abc2773914d7410394f82eee8996c2c4635c4ae94d65f6c5c782f8aa6a43b9a176b04d865cb2c84dfcf500d505ad1d5d09579e7ed00bfcd3ec504cd71c16191e", 0x5d}, {&(0x7f00000005c0)="5fe8af33c0127f7f1ed0e9e7286a8a429d5fb091aa88936d6b00c84448902b9845c46efd15828b5fd36ef1d0b54303c65ea0c2c170e02e3adcaf3d53831912d1dfde5022d7ddc24d3172b0916d7c2ff6400ece62d2b109ed9070e6456f4ab66a9e41a6b175475537ad2308e1a0089daf4d795e522de136a61d692363b3b67f53c5b5925ba79f5868e1f6a3755d96c553", 0x90}, {&(0x7f0000000680)="3c39d68ba243e646b4aed22e5633d8bace65e9dcfbad5aa35d604a635cff113e2f86557b7cc8df34f9eee5501165865a6ccff68fb78be9ba7f2da8c2259a8ca033126bb49b629156c2590a41dba66ec6d6037e0db51d0fc31c9460c43302fd7809408091a6cf9ef68bbfd66802b5768436c4f99962dfb4c18fdcf635f886db7023acf9eae4d5658726adf15ec2ac2810f0194ea5e06b0b06f0c2b82b03d428b8ff", 0xa1}, {&(0x7f00000007c0)="bfff7032d0661ebd6f26f82e6b1f7bb2ff1204f97aa6e570749c5bb8b2b4e92bbdcd65e3ef175144227933e0ea78f30cc0865102a2afb5e6a3d56e66218521c32bbe97115f07f6431fdcb09b013190779f322a61d269b300c2d473d3453382e8bd0ebe49b25f062d3a1037b2358d344dc96552581d30210463716ba50e05d29496d04a585c27399c670dec43d362c31f8bf8981c332b7c9c35121e9844418de8c77a64fd257e3185699030ac6a1dbaf00a3035a686abe0c9619310af854d4ce3fdf90d", 0xc3}], 0x9}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="f6", 0x1}], 0x1}}], 0x3, 0x38000) 23:42:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 13) 23:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) 23:42:10 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0xd4030000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 23:42:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2=0xe0000003}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="ac273326188a5b9076b884a30827d20ba9dd068891af621b66e04f8e5144f3c934f3ec3a03e2ac731fc773008fc1532778e776e1d31311c73309b54412e9cbaeceb18ebdf6fabac616e9391b8ecfc5387ceb462b74aea18e8eee766f1400bd948000e1038c0cd7ed54f9e83e921e5824100e4c6333d3c859ac354a38099d403dfea4a65f97334a28b0736219ef5b0388b6bbe78522e2b2ebad5767acf67a68496522b99f08718a92f5bc9f4e21354494e0f9ee952d4d5e6cae6d7ad85ea9e06b9cc84fe22599d890f04cc31452d24780542254925a5c45f2511bd605a082a3811ff39c95d13c2533fc", 0xe9}, {&(0x7f0000000100)="52e02710804d52bea9aec4bd7b08bef686017e6607ef354a5d1fd81e21956549a9edcc4393571fb81c96068dcd34dbf9ea1f31e5b1", 0x35}, {&(0x7f0000000280)="bd2871e559d9e093c1c3095438dc4a8673b9f617ad79546dc5f17d8cee1ca364b207f3d88278e3fbab7240a9dfa80335ff869fec6e7e629adc7a001eab1dad39583683b656c4c2f3bc93e7f07bdbdae9ff42c32d0887e4b7e5b0ed6ecfd569b2b72b045fd56c2d9ed86d7d4c10483083b6d4c151a9d8022def08b7b457986ae7c7ecdd70231e955d4d3c4fd74646b1468b690dd1949cce73b829ea72e70d0bb31a6d464ea9991278e01db8f319322336fc733bf76c0b8a78a7f31ecb02693444a24fd4d6fb75ac64fa4c04695259a69475b74dc4", 0xd4}, {&(0x7f0000000380)="a295b583abeebee09b4a2ac64f6f1936a6190ba1fabf90b1e19aa144cf74b80264242a65b2486b5f6d945fb196162df4af9949f08833a72df66883e8b7c4db97f496e1b7758754c1503f1f2b62d62943e8291d4ea59dcad3c9aea0fe2104f715897c215becd013ce1bbf5b1615a5f3216bc2af86a9fbb1a53ee8ba52e997a5531337af5c1ce46715ddcbacb5e2f57b8774", 0x91}, {&(0x7f0000000440)="655546b73cc6c8f337698ab13f88a31c4cfd9f06277d709bd83be3f490fcb540339f9dc4df95687a6c5f9a8ea95e0bd1d0d8274a3d53625761ca7cda6192114efa8034713e86e3c7f283f3d21b16215bb798c092bb6a469bec6bcf257ad3ab7bd586e9ee5626553a812d6322a3df6396698c0cf8af05004a4281ae1eb3d7da4964a5dd530ee9a89774bceaf19450fa763dc20e72d77b7232351b38cd54376cabb9d49cfdb9c9d95103b1ed3295323cca107ccf3dfe328eb6e500b911e9d4bdf238c2d9136bff03dca76b9520caeaa8845594d31430e986be", 0xd8}, {&(0x7f0000000540)="41bf764865ef44efccebb1c6e9e34a80ec0b8af39537070286626759a0abc2773914d7410394f82eee8996c2c4635c4ae94d65f6c5c782f8aa6a43b9a176b04d865cb2c84dfcf500d505ad1d5d09579e7ed00bfcd3ec504cd71c16191e", 0x5d}, {&(0x7f00000005c0)="5fe8af33c0127f7f1ed0e9e7286a8a429d5fb091aa88936d6b00c84448902b9845c46efd15828b5fd36ef1d0b54303c65ea0c2c170e02e3adcaf3d53831912d1dfde5022d7ddc24d3172b0916d7c2ff6400ece62d2b109ed9070e6456f4ab66a9e41a6b175475537ad2308e1a0089daf4d795e522de136a61d692363b3b67f53c5b5925ba79f5868e1f6a3755d96c553", 0x90}, {&(0x7f0000000680)="3c39d68ba243e646b4aed22e5633d8bace65e9dcfbad5aa35d604a635cff113e2f86557b7cc8df34f9eee5501165865a6ccff68fb78be9ba7f2da8c2259a8ca033126bb49b629156c2590a41dba66ec6d6037e0db51d0fc31c9460c43302fd7809408091a6cf9ef68bbfd66802b5768436c4f99962dfb4c18fdcf635f886db7023acf9eae4d5658726adf15ec2ac2810f0194ea5e06b0b06f0c2b82b03d428b8ff", 0xa1}, {&(0x7f00000007c0)="bfff7032d0661ebd6f26f82e6b1f7bb2ff1204f97aa6e570749c5bb8b2b4e92bbdcd65e3ef175144227933e0ea78f30cc0865102a2afb5e6a3d56e66218521c32bbe97115f07f6431fdcb09b013190779f322a61d269b300c2d473d3453382e8bd0ebe49b25f062d3a1037b2358d344dc96552581d30210463716ba50e05d29496d04a585c27399c670dec43d362c31f8bf8981c332b7c9c35121e9844418de8c77a64fd257e3185699030ac6a1dbaf00a3035a686abe0c9619310af854d4ce3fdf90d", 0xc3}], 0x9}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000ac0)="f6", 0x1}], 0x1}}], 0x3, 0x38000) 23:42:10 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x94, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 2675.676185][ T6371] FAULT_INJECTION: forcing a failure. [ 2675.676185][ T6371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2675.752562][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.757139][ T6371] CPU: 1 PID: 6371 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2675.762407][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2675.770818][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2675.770835][ T6371] Call Trace: [ 2675.770844][ T6371] [ 2675.770852][ T6371] dump_stack_lvl+0x1e3/0x2cb [ 2675.800932][ T6371] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2675.806582][ T6371] ? panic+0x84d/0x84d [ 2675.810408][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.810673][ T6371] should_fail+0x38a/0x4c0 [ 2675.824774][ T6371] prepare_alloc_pages+0x1db/0x5b0 [ 2675.829902][ T6371] __alloc_pages+0x14f/0x700 [ 2675.834508][ T6371] ? __rmqueue_pcplist+0x2030/0x2030 [ 2675.839804][ T6371] ? up_write+0x133/0x4d0 [ 2675.844156][ T6371] ? __up_read+0x690/0x690 [ 2675.848584][ T6371] ? do_raw_spin_unlock+0x137/0x8b0 [ 2675.853795][ T6371] ? anon_vma_interval_tree_insert+0x429/0x4a0 [ 2675.859969][ T6371] alloc_pages_vma+0x39a/0x800 [ 2675.864752][ T6371] handle_mm_fault+0x2f49/0x5950 [ 2675.869722][ T6371] ? numa_migrate_prep+0x1a0/0x1a0 [ 2675.874870][ T6371] ? vmacache_find+0x4f9/0x590 [ 2675.879645][ T6371] ? vmacache_update+0x9f/0xf0 [ 2675.884422][ T6371] exc_page_fault+0x271/0x740 [ 2675.889124][ T6371] asm_exc_page_fault+0x22/0x30 [ 2675.894075][ T6371] RIP: 0033:0x7f1357c22643 [ 2675.898508][ T6371] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2675.918125][ T6371] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2675.924235][ T6371] RAX: 0000000000000000 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2675.932210][ T6371] RDX: 00007f13561f7760 RSI: 0000000000000057 RDI: 00007f13561f7660 [ 2675.940184][ T6371] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000bc 23:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) 23:42:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) 23:42:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) [ 2675.948198][ T6371] R10: 00000000000000c6 R11: 00007f13561f75c0 R12: 00007f13561f75c0 [ 2675.956166][ T6371] R13: 00007f1357ce44a0 R14: 00000000000000eb R15: 00007f13561f7660 [ 2675.964146][ T6371] [ 2675.988925][ T6371] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 23:42:10 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 14) [ 2676.008386][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2676.019059][ T6371] loop5: detected capacity change from 0 to 128 [ 2676.046687][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2676.088130][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2676.144152][ T6395] FAULT_INJECTION: forcing a failure. [ 2676.144152][ T6395] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2676.210541][ T6395] CPU: 1 PID: 6395 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2676.219062][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2676.229121][ T6395] Call Trace: [ 2676.232405][ T6395] [ 2676.235340][ T6395] dump_stack_lvl+0x1e3/0x2cb [ 2676.240032][ T6395] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2676.245675][ T6395] ? panic+0x84d/0x84d [ 2676.249758][ T6395] should_fail+0x38a/0x4c0 [ 2676.254182][ T6395] prepare_alloc_pages+0x1db/0x5b0 [ 2676.259310][ T6395] __alloc_pages+0x14f/0x700 [ 2676.263903][ T6395] ? __rmqueue_pcplist+0x2030/0x2030 [ 2676.269197][ T6395] ? mark_lock+0x98/0x340 [ 2676.273532][ T6395] ? __lock_acquire+0x1295/0x1ff0 [ 2676.278579][ T6395] alloc_pages_vma+0x39a/0x800 [ 2676.283335][ T6395] wp_page_copy+0x221/0x2070 [ 2676.287915][ T6395] ? __lock_acquire+0x1ff0/0x1ff0 [ 2676.292933][ T6395] ? rcu_lock_release+0x20/0x20 [ 2676.297767][ T6395] ? do_raw_spin_unlock+0x137/0x8b0 [ 2676.302966][ T6395] ? _raw_spin_unlock+0x24/0x40 [ 2676.307828][ T6395] ? do_wp_page+0x6d0/0xaf0 [ 2676.312351][ T6395] handle_mm_fault+0x2a3d/0x5950 [ 2676.317323][ T6395] ? numa_migrate_prep+0x1a0/0x1a0 [ 2676.322473][ T6395] ? vmacache_find+0x23c/0x590 [ 2676.327254][ T6395] exc_page_fault+0x271/0x740 [ 2676.331926][ T6395] asm_exc_page_fault+0x22/0x30 [ 2676.336760][ T6395] RIP: 0033:0x7f1357c22643 [ 2676.341157][ T6395] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c 23:42:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800001ff0102110000010802110000000802110000000000000000003ccc386d6e92cd6259f72663c80001000006020202"], 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="800001ff0102110000010802110000000802110000000000000000003ccc386d6e92cd6259f72663c80001000006020202"], 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 23:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) 23:42:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) 23:42:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) [ 2676.360751][ T6395] RSP: 002b:00007f13561f7520 EFLAGS: 00010206 [ 2676.366824][ T6395] RAX: 0000000000002200 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2676.374794][ T6395] RDX: 00007f13561f7760 RSI: 0000000000000001 RDI: 00007f13561f7660 [ 2676.382752][ T6395] RBP: 00000000000000d5 R08: 0000000000000006 R09: 000000000000001e [ 2676.390704][ T6395] R10: 0000000000000024 R11: 00007f13561f75c0 R12: 0000000000000001 [ 2676.398655][ T6395] R13: 00007f1357ce44a0 R14: 000000000000002e R15: 00007f13561f7660 [ 2676.406772][ T6395] 23:42:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)=' \x00\x00\x00\x00\x00', 0x6) [ 2676.435045][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2676.472664][ T6395] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 23:42:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 23:42:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 15) [ 2676.484440][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2676.491910][ T6395] loop5: detected capacity change from 0 to 128 [ 2676.542138][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2676.570680][ T6413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 23:42:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) [ 2676.589255][ T6403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:11 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) 23:42:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x281}]}, 0x34}}, 0x0) [ 2676.644511][ T6415] FAULT_INJECTION: forcing a failure. [ 2676.644511][ T6415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:42:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) [ 2676.724217][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2676.735236][ T6415] CPU: 1 PID: 6415 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2676.743756][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2676.753823][ T6415] Call Trace: [ 2676.757109][ T6415] [ 2676.760049][ T6415] dump_stack_lvl+0x1e3/0x2cb [ 2676.764748][ T6415] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2676.770395][ T6415] ? panic+0x84d/0x84d [ 2676.771600][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2676.774482][ T6415] ? __lock_acquire+0x1295/0x1ff0 [ 2676.774514][ T6415] should_fail+0x38a/0x4c0 [ 2676.774545][ T6415] prepare_alloc_pages+0x1db/0x5b0 [ 2676.798235][ T6415] __alloc_pages+0x14f/0x700 [ 2676.802845][ T6415] ? __rmqueue_pcplist+0x2030/0x2030 [ 2676.808158][ T6415] ? mark_lock+0x98/0x340 [ 2676.812525][ T6415] ? __lock_acquire+0x1295/0x1ff0 [ 2676.817580][ T6415] alloc_pages_vma+0x39a/0x800 [ 2676.822376][ T6415] wp_page_copy+0x221/0x2070 [ 2676.827020][ T6415] ? __lock_acquire+0x1ff0/0x1ff0 [ 2676.832073][ T6415] ? rcu_lock_release+0x20/0x20 [ 2676.836935][ T6415] ? do_raw_spin_unlock+0x137/0x8b0 [ 2676.842175][ T6415] ? _raw_spin_unlock+0x24/0x40 [ 2676.847043][ T6415] ? do_wp_page+0x6d0/0xaf0 [ 2676.851568][ T6415] handle_mm_fault+0x2a3d/0x5950 [ 2676.856543][ T6415] ? numa_migrate_prep+0x1a0/0x1a0 [ 2676.861685][ T6415] ? vmacache_find+0x23c/0x590 [ 2676.866470][ T6415] exc_page_fault+0x271/0x740 [ 2676.871181][ T6415] asm_exc_page_fault+0x22/0x30 [ 2676.876044][ T6415] RIP: 0033:0x7f1357c22643 [ 2676.880451][ T6415] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 2676.900061][ T6415] RSP: 002b:00007f13561f7520 EFLAGS: 00010202 [ 2676.906126][ T6415] RAX: 0000000000003200 RBX: 00007f13561f75c0 RCX: 00007f134ddd8000 [ 2676.914185][ T6415] RDX: 00007f13561f7760 RSI: 000000000000000d RDI: 00007f13561f7660 23:42:11 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) 23:42:11 executing program 3: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) 23:42:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r5, 0x311, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x400000}, @val={0x8, 0x10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x348, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80c}, @device_b, @broadcast, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x18, {0x3e3, "e5c48a11cf0b", @long="ab12408446c48675eef79d037defd4f5"}}}}, @NL80211_ATTR_FRAME={0x234, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @initial, @device_a, {0x9, 0x8}}, {0x0, 0x1, 0x1, 0x0, 0xff}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2dc3}, @from_mac=@broadcast, @device_a, @initial, {0x8}}, {0xc, 0x1, 0x0, 0x1, 0x40}}}, @a_msdu=[{@device_a, @device_a, 0x5f, "98b8fc1af7a3b47ecbbc26db015867a1c8e5a0dcf5fd1f41996ee7744e4e490125006af0362a22eb84c9640ae8e14e01ae729c51966504a88dc42eb6904e60482f4ea4b7b3ffc167fa8fe72f743698ba876754105dca6d71e53f42aaa967ce"}, {@broadcast, @device_a, 0x5d, "a813863bd389e7dcffad61411f606fab07448fea37ed64575d7ded73c41d81167d7a10a77b2fd7b12308607edce65bc52b8880713eaf423fb377271507e25eec5dbaf03a96b1abd89f267376cacf0e05cb2af3281451acf51273664445"}, {@broadcast, @device_b, 0x7d, "b85f6dfb365750d958b6a2441bb2e9a9b53366767e54b3e694097c3fcec0f40dd8bf53bcce04e798f5cc77bc35b96774f0ac989e05cc796c141d8a9be9cd2f77c525627b488b41968bb5b5dd1f40452e263e631bb095a3b4bf876d2793dc1b99ac4af836f56894128a80413d57313814348dc37a3357ae43e9c3d74e72"}, {@device_a, @broadcast, 0x83, "d2ae93cf67464c7e3eb544ad9060a3c8f666b2abea81cb9954a60e5787587602d8ae95c22f6c96b0325639fedbbb85b156e82a631bf9734b7848c84f8d0d6daf30a9ed1749ddb46cd93b56c99ff5b52a2495ecf41e90abbca5b15d7eabef1292414a53ec4677233a568c292373d2a8e8d8992e9aac952362cf4b827ac3b2c82e9e6df4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x86, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @broadcast, {0x7, 0xd7}, @broadcast}, @a_msdu=[{@device_a, @broadcast, 0x56, "8b182cecad620a5a6013cf3c012a662aa47a9b5f211ffeee2710dff1bb0dde29e544a66ab8a4defe4c5cd7ae92cef18ddf04d3121e60c28db676d4bc618c47cbf98350f23b633ee05a2da6e5363acf3b5045de6f851d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x348}, 0x1, 0x0, 0x0, 0x8ff87bc03c7718f0}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:42:11 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) [ 2676.922147][ T6415] RBP: 000000000000001b R08: 0000000000000006 R09: 0000000000000021 [ 2676.930102][ T6415] R10: 0000000000000024 R11: 00007f13561f75c0 R12: 0000000000000001 [ 2676.938061][ T6415] R13: 00007f1357ce44a0 R14: 0000000000000073 R15: 00007f13561f7660 [ 2676.946039][ T6415] [ 2676.950068][T23689] Bluetooth: hci4: command 0x040f tx timeout 23:42:11 executing program 3: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) [ 2677.015527][ T6438] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2677.023386][ T6415] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2677.056058][ T6438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2677.074418][ T6415] loop5: detected capacity change from 0 to 128 [ 2677.090349][ T6438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:12 executing program 1: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) 23:42:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 23:42:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 16) 23:42:12 executing program 3: timer_create(0x7, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000480)) 23:42:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 23:42:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 23:42:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) [ 2677.264896][ T6453] loop3: detected capacity change from 0 to 512 [ 2677.295247][ T6459] FAULT_INJECTION: forcing a failure. [ 2677.295247][ T6459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2677.317292][ T6459] CPU: 1 PID: 6459 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2677.325819][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2677.335881][ T6459] Call Trace: [ 2677.339168][ T6459] [ 2677.342100][ T6459] dump_stack_lvl+0x1e3/0x2cb [ 2677.346789][ T6459] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2677.352432][ T6459] ? panic+0x84d/0x84d [ 2677.356517][ T6459] ? __lock_acquire+0x1295/0x1ff0 [ 2677.361554][ T6459] should_fail+0x38a/0x4c0 [ 2677.365969][ T6459] prepare_alloc_pages+0x1db/0x5b0 [ 2677.371078][ T6459] __alloc_pages+0x14f/0x700 [ 2677.375666][ T6459] ? __rmqueue_pcplist+0x2030/0x2030 [ 2677.380952][ T6459] ? mark_lock+0x98/0x340 [ 2677.385272][ T6459] ? __lock_acquire+0x1295/0x1ff0 [ 2677.390295][ T6459] alloc_pages_vma+0x39a/0x800 [ 2677.395057][ T6459] wp_page_copy+0x221/0x2070 [ 2677.399642][ T6459] ? __lock_acquire+0x1ff0/0x1ff0 [ 2677.404661][ T6459] ? rcu_lock_release+0x20/0x20 [ 2677.409501][ T6459] ? do_raw_spin_unlock+0x137/0x8b0 [ 2677.414690][ T6459] ? _raw_spin_unlock+0x24/0x40 [ 2677.419529][ T6459] ? do_wp_page+0x6d0/0xaf0 [ 2677.424026][ T6459] handle_mm_fault+0x2a3d/0x5950 [ 2677.428970][ T6459] ? numa_migrate_prep+0x1a0/0x1a0 [ 2677.434089][ T6459] ? vmacache_find+0x23c/0x590 [ 2677.438849][ T6459] exc_page_fault+0x271/0x740 [ 2677.443522][ T6459] asm_exc_page_fault+0x22/0x30 [ 2677.448367][ T6459] RIP: 0033:0x7f1357c226f0 [ 2677.452773][ T6459] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 2677.472367][ T6459] RSP: 002b:00007f13561f7520 EFLAGS: 00010202 [ 2677.478430][ T6459] RAX: 0000000000004200 RBX: 00007f13561f75c0 RCX: 0000000000000009 [ 2677.486390][ T6459] RDX: 0000000000000ff4 RSI: 0000000000000bf5 RDI: 00007f13561f7660 [ 2677.494648][ T6459] RBP: 000000000000000a R08: 00007f134ddd8000 R09: 0000000000000073 [ 2677.502613][ T6459] R10: 00000000200002c2 R11: 00000000000001cd R12: 0000000000000801 [ 2677.510568][ T6459] R13: 00007f1357ce44a0 R14: 0000000000000016 R15: 00007f13561f7660 [ 2677.518538][ T6459] [ 2677.539526][ T6453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2677.550795][ T6453] ext4 filesystem being mounted at /root/syzkaller-testdir1331302523/syzkaller.IYnDoq/507/file0 supports timestamps until 2038 (0x7fffffff) [ 2677.582130][ T6459] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2677.617576][ T6459] loop5: detected capacity change from 0 to 128 23:42:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r5, 0x311, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x400000}, @val={0x8, 0x10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x348, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80c}, @device_b, @broadcast, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x18, {0x3e3, "e5c48a11cf0b", @long="ab12408446c48675eef79d037defd4f5"}}}}, @NL80211_ATTR_FRAME={0x234, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @initial, @device_a, {0x9, 0x8}}, {0x0, 0x1, 0x1, 0x0, 0xff}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2dc3}, @from_mac=@broadcast, @device_a, @initial, {0x8}}, {0xc, 0x1, 0x0, 0x1, 0x40}}}, @a_msdu=[{@device_a, @device_a, 0x5f, "98b8fc1af7a3b47ecbbc26db015867a1c8e5a0dcf5fd1f41996ee7744e4e490125006af0362a22eb84c9640ae8e14e01ae729c51966504a88dc42eb6904e60482f4ea4b7b3ffc167fa8fe72f743698ba876754105dca6d71e53f42aaa967ce"}, {@broadcast, @device_a, 0x5d, "a813863bd389e7dcffad61411f606fab07448fea37ed64575d7ded73c41d81167d7a10a77b2fd7b12308607edce65bc52b8880713eaf423fb377271507e25eec5dbaf03a96b1abd89f267376cacf0e05cb2af3281451acf51273664445"}, {@broadcast, @device_b, 0x7d, "b85f6dfb365750d958b6a2441bb2e9a9b53366767e54b3e694097c3fcec0f40dd8bf53bcce04e798f5cc77bc35b96774f0ac989e05cc796c141d8a9be9cd2f77c525627b488b41968bb5b5dd1f40452e263e631bb095a3b4bf876d2793dc1b99ac4af836f56894128a80413d57313814348dc37a3357ae43e9c3d74e72"}, {@device_a, @broadcast, 0x83, "d2ae93cf67464c7e3eb544ad9060a3c8f666b2abea81cb9954a60e5787587602d8ae95c22f6c96b0325639fedbbb85b156e82a631bf9734b7848c84f8d0d6daf30a9ed1749ddb46cd93b56c99ff5b52a2495ecf41e90abbca5b15d7eabef1292414a53ec4677233a568c292373d2a8e8d8992e9aac952362cf4b827ac3b2c82e9e6df4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x86, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @broadcast, {0x7, 0xd7}, @broadcast}, @a_msdu=[{@device_a, @broadcast, 0x56, "8b182cecad620a5a6013cf3c012a662aa47a9b5f211ffeee2710dff1bb0dde29e544a66ab8a4defe4c5cd7ae92cef18ddf04d3121e60c28db676d4bc618c47cbf98350f23b633ee05a2da6e5363acf3b5045de6f851d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x348}, 0x1, 0x0, 0x0, 0x8ff87bc03c7718f0}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r5, 0x311, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x400000}, @val={0x8, 0x10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x68}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x348, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80c}, @device_b, @broadcast, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x18, {0x3e3, "e5c48a11cf0b", @long="ab12408446c48675eef79d037defd4f5"}}}}, @NL80211_ATTR_FRAME={0x234, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @initial, @device_a, {0x9, 0x8}}, {0x0, 0x1, 0x1, 0x0, 0xff}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2dc3}, @from_mac=@broadcast, @device_a, @initial, {0x8}}, {0xc, 0x1, 0x0, 0x1, 0x40}}}, @a_msdu=[{@device_a, @device_a, 0x5f, "98b8fc1af7a3b47ecbbc26db015867a1c8e5a0dcf5fd1f41996ee7744e4e490125006af0362a22eb84c9640ae8e14e01ae729c51966504a88dc42eb6904e60482f4ea4b7b3ffc167fa8fe72f743698ba876754105dca6d71e53f42aaa967ce"}, {@broadcast, @device_a, 0x5d, "a813863bd389e7dcffad61411f606fab07448fea37ed64575d7ded73c41d81167d7a10a77b2fd7b12308607edce65bc52b8880713eaf423fb377271507e25eec5dbaf03a96b1abd89f267376cacf0e05cb2af3281451acf51273664445"}, {@broadcast, @device_b, 0x7d, "b85f6dfb365750d958b6a2441bb2e9a9b53366767e54b3e694097c3fcec0f40dd8bf53bcce04e798f5cc77bc35b96774f0ac989e05cc796c141d8a9be9cd2f77c525627b488b41968bb5b5dd1f40452e263e631bb095a3b4bf876d2793dc1b99ac4af836f56894128a80413d57313814348dc37a3357ae43e9c3d74e72"}, {@device_a, @broadcast, 0x83, "d2ae93cf67464c7e3eb544ad9060a3c8f666b2abea81cb9954a60e5787587602d8ae95c22f6c96b0325639fedbbb85b156e82a631bf9734b7848c84f8d0d6daf30a9ed1749ddb46cd93b56c99ff5b52a2495ecf41e90abbca5b15d7eabef1292414a53ec4677233a568c292373d2a8e8d8992e9aac952362cf4b827ac3b2c82e9e6df4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x86, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @broadcast, {0x7, 0xd7}, @broadcast}, @a_msdu=[{@device_a, @broadcast, 0x56, "8b182cecad620a5a6013cf3c012a662aa47a9b5f211ffeee2710dff1bb0dde29e544a66ab8a4defe4c5cd7ae92cef18ddf04d3121e60c28db676d4bc618c47cbf98350f23b633ee05a2da6e5363acf3b5045de6f851d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x348}, 0x1, 0x0, 0x0, 0x8ff87bc03c7718f0}, 0x10) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) 23:42:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000a40)={@empty, @broadcast}, 0xc) 23:42:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 23:42:12 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) 23:42:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 17) 23:42:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x400, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "38826695ff453b3cb7aaaa22f518d04a5449b953c76ddc8a414e5a8a08b8f4c3"}) 23:42:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") [ 2678.263912][ T6476] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2678.282657][ T6478] FAULT_INJECTION: forcing a failure. [ 2678.282657][ T6478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 23:42:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2678.348601][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2678.378245][ T6478] CPU: 0 PID: 6478 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2678.386764][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2678.396823][ T6478] Call Trace: [ 2678.400105][ T6478] [ 2678.403044][ T6478] dump_stack_lvl+0x1e3/0x2cb [ 2678.407745][ T6478] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2678.413405][ T6478] ? panic+0x84d/0x84d [ 2678.417497][ T6478] ? __lock_acquire+0x1295/0x1ff0 [ 2678.422533][ T6478] should_fail+0x38a/0x4c0 [ 2678.426948][ T6478] prepare_alloc_pages+0x1db/0x5b0 [ 2678.432079][ T6478] __alloc_pages+0x14f/0x700 [ 2678.436675][ T6478] ? __rmqueue_pcplist+0x2030/0x2030 [ 2678.441956][ T6478] ? mark_lock+0x98/0x340 [ 2678.446282][ T6478] ? __lock_acquire+0x1295/0x1ff0 [ 2678.451301][ T6478] alloc_pages_vma+0x39a/0x800 [ 2678.456058][ T6478] wp_page_copy+0x221/0x2070 [ 2678.460643][ T6478] ? __lock_acquire+0x1ff0/0x1ff0 [ 2678.465660][ T6478] ? rcu_lock_release+0x20/0x20 [ 2678.470497][ T6478] ? do_raw_spin_unlock+0x137/0x8b0 [ 2678.475690][ T6478] ? _raw_spin_unlock+0x24/0x40 [ 2678.480533][ T6478] ? do_wp_page+0x6d0/0xaf0 [ 2678.485033][ T6478] handle_mm_fault+0x2a3d/0x5950 [ 2678.489980][ T6478] ? numa_migrate_prep+0x1a0/0x1a0 [ 2678.495102][ T6478] ? vmacache_find+0x23c/0x590 [ 2678.499871][ T6478] exc_page_fault+0x271/0x740 [ 2678.504548][ T6478] asm_exc_page_fault+0x22/0x30 [ 2678.509386][ T6478] RIP: 0033:0x7f1357c226f0 [ 2678.513893][ T6478] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 2678.533506][ T6478] RSP: 002b:00007f13561f7520 EFLAGS: 00010202 [ 2678.539566][ T6478] RAX: 0000000000008200 RBX: 00007f13561f75c0 RCX: 0000000000000063 23:42:13 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) [ 2678.547529][ T6478] RDX: 0000000000006c4e RSI: 0000000000004c4f RDI: 00007f13561f7660 [ 2678.555842][ T6478] RBP: 0000000000000064 R08: 00007f134ddd8000 R09: 0000000000000073 [ 2678.563800][ T6478] R10: 00000000200002c2 R11: 00000000000001cd R12: 0000000000004001 [ 2678.571756][ T6478] R13: 00007f1357ce44a0 R14: 000000000000001c R15: 00007f13561f7660 [ 2678.579725][ T6478] [ 2678.587198][ T6478] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2678.602831][ T6476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2678.653689][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2678.663802][ T6478] loop5: detected capacity change from 0 to 128 23:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 23:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 23:42:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r5, 0x311, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x400000}, @val={0x8, 0x10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x348, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80c}, @device_b, @broadcast, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x18, {0x3e3, "e5c48a11cf0b", @long="ab12408446c48675eef79d037defd4f5"}}}}, @NL80211_ATTR_FRAME={0x234, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @initial, @device_a, {0x9, 0x8}}, {0x0, 0x1, 0x1, 0x0, 0xff}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2dc3}, @from_mac=@broadcast, @device_a, @initial, {0x8}}, {0xc, 0x1, 0x0, 0x1, 0x40}}}, @a_msdu=[{@device_a, @device_a, 0x5f, "98b8fc1af7a3b47ecbbc26db015867a1c8e5a0dcf5fd1f41996ee7744e4e490125006af0362a22eb84c9640ae8e14e01ae729c51966504a88dc42eb6904e60482f4ea4b7b3ffc167fa8fe72f743698ba876754105dca6d71e53f42aaa967ce"}, {@broadcast, @device_a, 0x5d, "a813863bd389e7dcffad61411f606fab07448fea37ed64575d7ded73c41d81167d7a10a77b2fd7b12308607edce65bc52b8880713eaf423fb377271507e25eec5dbaf03a96b1abd89f267376cacf0e05cb2af3281451acf51273664445"}, {@broadcast, @device_b, 0x7d, "b85f6dfb365750d958b6a2441bb2e9a9b53366767e54b3e694097c3fcec0f40dd8bf53bcce04e798f5cc77bc35b96774f0ac989e05cc796c141d8a9be9cd2f77c525627b488b41968bb5b5dd1f40452e263e631bb095a3b4bf876d2793dc1b99ac4af836f56894128a80413d57313814348dc37a3357ae43e9c3d74e72"}, {@device_a, @broadcast, 0x83, "d2ae93cf67464c7e3eb544ad9060a3c8f666b2abea81cb9954a60e5787587602d8ae95c22f6c96b0325639fedbbb85b156e82a631bf9734b7848c84f8d0d6daf30a9ed1749ddb46cd93b56c99ff5b52a2495ecf41e90abbca5b15d7eabef1292414a53ec4677233a568c292373d2a8e8d8992e9aac952362cf4b827ac3b2c82e9e6df4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x86, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @broadcast, {0x7, 0xd7}, @broadcast}, @a_msdu=[{@device_a, @broadcast, 0x56, "8b182cecad620a5a6013cf3c012a662aa47a9b5f211ffeee2710dff1bb0dde29e544a66ab8a4defe4c5cd7ae92cef18ddf04d3121e60c28db676d4bc618c47cbf98350f23b633ee05a2da6e5363acf3b5045de6f851d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x348}, 0x1, 0x0, 0x0, 0x8ff87bc03c7718f0}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r5, 0x311, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x1, 0x400000}, @val={0x8, 0x10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x200}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x68}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040800) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x348, r1, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3c, 0x33, @mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x80c}, @device_b, @broadcast, @initial, {0x7, 0x2}}, @ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @val={0x8c, 0x18, {0x3e3, "e5c48a11cf0b", @long="ab12408446c48675eef79d037defd4f5"}}}}, @NL80211_ATTR_FRAME={0x234, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @device_b, @initial, @device_a, {0x9, 0x8}}, {0x0, 0x1, 0x1, 0x0, 0xff}}, {@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x2dc3}, @from_mac=@broadcast, @device_a, @initial, {0x8}}, {0xc, 0x1, 0x0, 0x1, 0x40}}}, @a_msdu=[{@device_a, @device_a, 0x5f, "98b8fc1af7a3b47ecbbc26db015867a1c8e5a0dcf5fd1f41996ee7744e4e490125006af0362a22eb84c9640ae8e14e01ae729c51966504a88dc42eb6904e60482f4ea4b7b3ffc167fa8fe72f743698ba876754105dca6d71e53f42aaa967ce"}, {@broadcast, @device_a, 0x5d, "a813863bd389e7dcffad61411f606fab07448fea37ed64575d7ded73c41d81167d7a10a77b2fd7b12308607edce65bc52b8880713eaf423fb377271507e25eec5dbaf03a96b1abd89f267376cacf0e05cb2af3281451acf51273664445"}, {@broadcast, @device_b, 0x7d, "b85f6dfb365750d958b6a2441bb2e9a9b53366767e54b3e694097c3fcec0f40dd8bf53bcce04e798f5cc77bc35b96774f0ac989e05cc796c141d8a9be9cd2f77c525627b488b41968bb5b5dd1f40452e263e631bb095a3b4bf876d2793dc1b99ac4af836f56894128a80413d57313814348dc37a3357ae43e9c3d74e72"}, {@device_a, @broadcast, 0x83, "d2ae93cf67464c7e3eb544ad9060a3c8f666b2abea81cb9954a60e5787587602d8ae95c22f6c96b0325639fedbbb85b156e82a631bf9734b7848c84f8d0d6daf30a9ed1749ddb46cd93b56c99ff5b52a2495ecf41e90abbca5b15d7eabef1292414a53ec4677233a568c292373d2a8e8d8992e9aac952362cf4b827ac3b2c82e9e6df4"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x86, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @broadcast, {0x7, 0xd7}, @broadcast}, @a_msdu=[{@device_a, @broadcast, 0x56, "8b182cecad620a5a6013cf3c012a662aa47a9b5f211ffeee2710dff1bb0dde29e544a66ab8a4defe4c5cd7ae92cef18ddf04d3121e60c28db676d4bc618c47cbf98350f23b633ee05a2da6e5363acf3b5045de6f851d"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x348}, 0x1, 0x0, 0x0, 0x8ff87bc03c7718f0}, 0x10) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) [ 2678.818804][ T6500] loop3: detected capacity change from 0 to 512 [ 2678.855686][ T6500] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:42:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) [ 2678.867110][ T6500] ext4 filesystem being mounted at /root/syzkaller-testdir1331302523/syzkaller.IYnDoq/508/file0 supports timestamps until 2038 (0x7fffffff) [ 2678.943141][ T6507] netlink: 'syz-executor.4': attribute type 16 has an invalid length. 23:42:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) 23:42:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 18) [ 2678.991481][ T6484] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. [ 2679.007657][T23689] Bluetooth: hci4: command 0x0419 tx timeout [ 2679.016144][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.084546][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:15 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) 23:42:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") 23:42:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) [ 2680.218979][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2680.314964][ T6536] loop3: detected capacity change from 0 to 512 [ 2680.372456][ T6536] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2680.383689][ T6536] ext4 filesystem being mounted at /root/syzkaller-testdir1331302523/syzkaller.IYnDoq/509/file0 supports timestamps until 2038 (0x7fffffff) [ 2680.443250][ T6540] FAULT_INJECTION: forcing a failure. [ 2680.443250][ T6540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:42:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x400, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000001140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c64656275673d3078303030303030303030303030303039382c6d6d61702c64666c746769643d2b1fab87b2cf3181a623bef41b58601a3162830024eba070df00e4772605852e19b213cfba0c0af71e81a9b8d8183ea4c542a7316f1d5409db555845ca5d3ec178d7a87a667111da01a721dc63b8439fcba76cf10fc92545f83818269a8b0a7c0886", @ANYRESHEX=r8, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623bbf9bf7a60620e741cca51b62fc4c6", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB, @ANYRESDEC]) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000220001"], 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000b80)="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", 0xaa}, {&(0x7f0000000580)="8583c62ebb8685f682dde88b5bde78668a3eee35148c7123f7472c2bf9261ec29dcd40a46423110d2ffc85695e7f594a32cb66ea651efc5fb4c0e709f9ebaa254146ec84da08b23d2844ac1dc891ae0e677c6bc60f0ded3d14cfa1af7a2a60a5042f7ec15258b5ba151ed821e650b4d8e45af6d0dc347a199bec6b939c0d0184dc4d48a3bc0a6890a19272", 0x8b}, {&(0x7f00000012c0)}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x20, 0x4040010}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="c10bd5ce4a2e9284d0bdd332e60664e4667cd7467af5dee1639b813812381e1621a3a880936955398ae565c7ccb591e27a774df4bb95794acb1350f3c4f776d0f0cf13ea26d28c176a83cf8e00d4008dfb56858fe3ca2cdb7e01ddb8d799ea4ea58d770bd4f0aef3574bd8856662411906956a8d011128daaec5d277855e6128a6d273142a2c63b204a9dcac4c4a891b992a98a0671c85146bac4184aeb8de", 0x9f}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @rights={{0x0, 0x1, 0x1, [r9]}}], 0x108, 0x20008881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xfeee, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}], 0x120, 0x40}}], 0x3, 0xc000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r11, 0x311, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x864}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5d1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8a}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x890) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000840)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="073376a69e531bb1b635a105fe8fbf899ff34e749fbacf957663a72f97f37d82248da504ac76c0fde8c6aa35116449ada9bc7c16b71298b4b2486767b1809079b31b762dab47cbedda830e705e47", 0x4e}, {&(0x7f00000006c0)="7bdee342698bd01038e76c06c1d87db072e3522f5b6c7babd3b530b5721fdd269d0cb147c25805fe6f14023588adffac22c1989fe5c85b3d3fc3c5b0a0e8", 0x3e}], 0x2, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, r10]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r12, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x20000800}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000000e00)="1cc1ea5906d25c2d60984903a7cab365a36b18798f71246bc2952bb59c4315cc65610f9d4617a5fe578d55f7a33c183e0090fae8debb348f8ed9b593bdfc5e669faebf8f6f731a095a2172035258b5aa9ca1c4a1b8a6efb3102b9ef69ea0d27df565952f2e94dc008564362e21ca204f12cfc55fd1bbef8525762901ed27838a5daa24bb91740b46ca86a02c7605ed8791cc32a22d3449d71183232f8218b3f1991f8da5bae55c58ee31667326bacff54ce0e087", 0xb4}, {&(0x7f0000000ec0)="8e0aafe6d5030e167fbf7e563976425b3d8bfcbc46452c45fca1e249c422e594caac3773799ee17441e7cdcd710c76dd8d811a7088a3f9a450d9a9ad9b2ee4fd10a683717ddc22335b6a3ffe7866a1940254fc82ed569a92", 0x58}, {&(0x7f0000001280)="1a9f1e445b264dcf6ba0fa351db1fa5618873de5abf2db09088a01c6070a36eb0e40447e75433fb59e783bbc058c6f405779e43e33580c2fda1458bae9fdce68138abf59c54f75c8dcbfc1c51cadf01e730dbe0781c28400e092628710c109472836ebf95ee81307dcabdf235f3e7fba8fcbd3d22eaed30db5ea2e455a94b932b3e925b70a5c96667de465e284013ec468c63a09d008a6cf1727eb77089ea0ac28e3bb6aedea7680a673a94a0f73166c5f2d56b74b030a62c3da37a5ffd2414e10f8a45572d16edecf1020a563e8c29ae2a766518913026a8899ea2a28cabcd3fe0b654e84de5cb064b9302d8e2bc5bc37fc8b65e9bd662b3bc5a69dc4b6fe1304240df36887263db37792005b5179df95af8f23d4fb9a0caafd025ea6a6ab1addbf8bc4bf8b6563c913edc05abeb92c5b7d4d54fdb73faee06cebdcd654f9a5604a1c84eaf862819e3a94786e05bfb8c1195c1c8626e8becb838a742bc0190898027fe3724357afb57cd67853762219e56e4d91f7b57569ff7fe8f86260ce7aa36d870862bc8788a173e78dacfa4278c2225d3fc0657e0869d03c1a8c20a20365206d2abce03345c5b5c7bef4fe0336dc5778976b724facaec73eca992242dbcc31e9463c71793464b102ba2f5d7c660aa16daf9c3d570f0a46150e2cf4b5f43c0fdbaf289a9625990ab29e1cc1ea4a79b8f0c2a6720fc3248b730022da0ca5439a86e3f3f46d4d013fd4bc1c8435544c7b666831f384e384f8a3d7fdfc33c2a3b89524ee80330d8548df779f8e74788bea35695241a5d6ec6d0d9211346767c889624b65a33bb02cbc8f1e374094f71ec7ecb1873ff5e46ef4d426e0b8d7d957e05eb742d4f5535fc5b9a7262516328fd5e82ad54e4c5f3ab643dd828a6131592aedc2d4366b14e23a3ced85d1a026f487acbb606feb629cfa2dd18a7a625603827c238e362d5ac82b9659c87c3f15102427eeec41e114d7283dd87ffe462b6cc750d67f7f7a2b588eea9e0819dcd1a7a00418f40f7e2f1f92f75d4fe9902f502f58780c32a4d5f37028990f6bb91ebb7719acb8cf6aae4d8581bb3cbd6e122e3423deac1cf3b637ced5827338476bd39a52d2e7fe56312838e5d48f5ed3454df1d1d939a0d153f3a49e07c0bf96156a09091e37f0eabba7707307425c617283f139b948aef20a8f1d9a9bbdd6f09f6353ee4c08cccf7775d25a54d43654991b2bba5439ae7ca85b00f52f785a976d89e70433b2dde19f5161245f4dd140f4f11b9aa7b53bb1167327779d9b3cb7bdafa77feb7a13e54c80cd1712427e760171100c97b3c2f18a9c30729bd7493324705f9e024977f4f9de539fc119e285d8188f079a3244f19690ada0904ea2172c9ab958488cf4e879ab40874cfed7947f3f2fa867d47c9720a20620a35792625352ae6e19dd8a3b0da6308ab4bab26e1e3e28a1d68cec143064154476ba40f34a69a6cb8e50fbc9a27d75986fa4b614149dbce18e436032bae22af315310cc5dde6baa06e1791afdc9909b2cbfb75b4d32546b932b9ce1684c5590f90c92ca7db2a74b3df2c57721796021dbd76ca7c343aea37e2407519d0b7498f76d80a8aa1158294ec47bd9101a1ffd8f22bab1d3a261e0bf2b4e5eb66e830d9c4eec149ccdf2684ece95b119e8380b989d203a37f4612f2e48eb6c311080feb4f52d67695c85dc294d6a9a75f7f71575354ae228a04ce17e1d73ecb53bf97fac5e7301414ad00b9dce87fa32b4dd48b221ab0d37057887c2c7ef809cab3e72e0c1d9efd8807ebea09d7c0de331acfd8aa1ebae865d5ced1fd500be504383c895331f9c87f4266178d176e00ec58a1eec375016c6011ba7d4b0dca2722306813a1898187bcb4a1d4d59ec28f514dd98742ffc23c150c3f32aca1bb67a34cc2a3c236b494704a3ff27101247c630a47154c4d373ed50f4d525ffc1f0ea9e56c8590f6be354fce8cbc1fe197a641089d1d1ed5ab4fd892e65cce8c181185a53f0698b2c2c18844303d43e39ea192d75c381b215033cdbd18e0cc9bdb66a1bb1e1b7760c2a207d2355efab15e2d39e36263c085a67092c083b1fb425351026074a1cfadeb1cac720802c9beb8de1cb5e3f747962824062f47a86f179a951652c571265fd16d8318d773f74063448998caf9708b94a06e9914839eccc84b7b648c6baff451de58c474d11a744404c357d8fda335b6d1e00e490149d108049199f9313d668c2d071a6a020940f643d262b8b412781d01c7ec5d08a95236e231586d7dded461158ec37b591037dcc90dd3d7765d75a5d3d399ec157f5d1654e0794ebecf8d4181a87cdbdca35bc6c18b1f7edc2a460bd2d30caf1a007f1451886cfcb24f2a9a8835923254745f3bf5ab8e580b020e6796e7cefd62f711fa2367ece6ec0147c82b5e4170f80d240df2fda3d8db9241dcf6dcf10a189f70ca2ee58272d93cca10478514556ff9b8d454f3013867cd7bcb2642ca7dfbb6afa91fc74d8ea8e609dff4042db43491cb293819960c4f432a0250b4950abc02ad03754d9983194c47012968cb5ba859477327caecbbdfbf5e17dbe327db55a9594098c35b519ee5d44acb7fe1c826eac875335265241b4ced3afd858f9696800249c1f7ba90c5d2b076a509b3d667df6a306afd0131179b99bcc6eb5d9478a91b1ce102495d2aa8573d241639b07a2ced5e02ad81671233d0faa19362fa26ea6d82e8f2f4321f65abcec78774e185b9c20f669e62f43eb21166af9475c5dff52fc6df416d311b41b7a2d7e026c16f641b8e5e2eae01333a39869e3aac94d0f42d32b6d8692969d150772cc569ae29fa36160c37829f91aee719e8d96b7123fb11ca59fa3308d01a8f3d536b7308c1df54503cf72485aac9363cacb21c0d80cf6d32caf337b283af06cd0923eaf3056d60db3d58affd449ff3b793eaeb7d57ebad9976873e8e8a8dab7ac34dec29a51461385c4ea75399340df950fac78a383e845e8c8617d74b7a1e5bbd155c028ed7e446d259c1b301506750e43f1d367534a7b5abce896ce00cec77158b5f2eafedee20df39db4701605e291e33603bfa4b35f2ef9ca6b3a478c0fe01bbfd650466e0b1554aaaa8449883ad95b4e57d8bd7efa540bf0cdfd3131326f4730fcfd516d2f9d3b319e48f90e78a7571cc3c40cc7b706ed77c6dd1c07cba2e1b1588372cbbeebed5564553b0dc234a397583afa90e879f793335efbb486f4f7b0cc0e582370775e8533e0ade8125242169d600d3d978b728dd1087f192619aee23141ba4dc5f2f6ecc1344c58cfdaafb2e029275388ec0bfcb89390eaf3b3ca83f5b7610bf018c78bfa65b0558d2bd8ecbe7df55be8100a9dd5039a21402fd7daefb1b0368bd772292671b757d6f10532018043bdb59946cdddb00485191b9b09ac690bda8cf809889692c3e23c75a3c67b4d7092d87e33b8b792dd5aa2aa900fb8725c3c1684454c0c20092b3bd84905293e606afa2a80fdb6f7bf50e29b6488b4d5df60859a242f0247a6ccfda1151088878f032b4fc1d10448ce6ce0ca1af2246682e2a7e1df03e8ea1a2ba1d4e91153b72a5afa3e1b20876abff7fa4abbf1bfa3d71b87426016d71e70021f804c540ebb615491649e21a6e7fc18159064be2d83a1b6138a6662a114bc078309c4683f30948d69238989736e5953db9c213aa58fcc88b45c5425f5c3720289815a819625688da19fcbf8090c0eb42ab3e31978cc734a6fa78242f87196fdfc1b4198b2fca893532b1afd5161621428693fa462586641618b24369217af300e57ba52ef1b13d561f57be2614f6d7b9e71547650dc9394289d68b8e24ad3acefb25708a33c5aa224def5c2b0c3d1eed71d3e093e06aca4d82fc6ac3dcc0e346f368d47f008205acb4272baed03066e3e5657180b775671012edd76512a5eb10ec3f01ea1c929d201a1ac4a4e20761a0bcd94bf619a2535604ee8c5b4d0f2eac1458903ca6d22c16f93332e14084fa27166b14941502890f1dca62c6a9ff674bf6cbd38723a5b68cd00f23d4fcd1c77ba74bb2cfba1fc43794688edeeae6c1b887f2379659020a502abef9784e18809078132169ffe58e8f4f014ffd8a6f411067cda7079760a1ac5e235635b679abd17ab0d72da6d4a6e864a17ec21adca21fec82c1fdd99bbef3d7d77ecda2302a2e3d8dbb00a401713ee2971664821a4faa7775e12f446287ba4233b3dbc7c7c23ccb79d46ba6372d68997082c34781ba8dfec4f3f9981c4624e1eed945c325127400a4039a0fbd2ad42c4db195db0f542e3e21cc2657c1a3eef44d785092e74f15b9ed3a8810e05406656fdb86a475bb1e244d2cdfdd1f51f6fe14c9fcd6431d57635de3de9a9cda85b93b23565bac54d43968739d0d05343d0b3bdaa75390cd73eda6ed1af051d034aac04eb2759e8ce5c93860ee425fce671847700589e9656663470d32d4cbba7f772c2b6b5f4f3a78953d530d20152ea5d8321bbe7d4bf09b17b3b08042b3c1d953c54d678076f2dc6dc133cb37efaa3921fd38b4a7af195be1ff2d1af9a22703b91937db04c358c243e6a71d572ddc8a3ba217a7246d5dfbe8a80c6ef67809813366623bf536a783f1e50503362f6c6019494699da68c44120f80b197ffd325ed72557fbbfb725f7efa5d2f54b4c13492bea73c68cb2c83b448587d9ef91032cc57fdb9dfdcdb64b3a29776d4ebb02a1f5c19be7c3c2622cf105e00c4aa76cd4f268d8a6bcba8911c037dde4609f488eade5eaf487c2903a3aaae92b137416462be2a0ed4c3ea0bab2ee9109ad8e72eb4e6e6431bad63e48bf142f7a9096b6d355a5a2bd14b8967abef483b40400e2b4b3a90d6bef5a7651e3aad2690fa9254b6f3bf9c5bde597e766ea3bd426f83f91e976994a3948f199271f91eeeafb263fa1afdb239b6967a04e1996861c04f352c2b29186f48554d0d5654fa703e5bc2b8b8aa0a216667ec5c98fafa3ce972567a4899b18b5a1072233c813abd7dd18d101970c60757c87b0c3e2f5e4b53ef0093656f2fa2be9e56385aba577f7bc8bf6e1424ff6e0db5d3fb025b5cb3c764c4660785ba265c00982c40e951ea47c239c127885e2697e5061f1e5fe792890cc4ec2cbad9cccce2e8ab6c3d1eca18b7474db5f7ac503dbf0ce5b07d041ecb6630a94a43233d59c535aa8ec77a2e90194d75a2af509a675f56395ebf30c99e28cb4e81fa17801320ff9d8a2d31d51de869befd6006918442fafba5747df6e44e730864ae24c558b58848d53052b26f72ce95237280fe8c62ebad1880dd34eb9633e8712b5650d01d0cbe85c4b6a52d7846a7eed1df1d52efde90e297270bd318b955ea7491eee060295787910f1568f71782df2f11c8fa77d74e367934a9b821639ce3a4cb40f8ed869b0f1fcef87dc42aa236d31f7bd83ac29492cc9fca4d347c799f9e974633dd745e8bd94ab4445f87facc3b450d80c44fb67c911cc4d11dc3ce558115f4b2dbf7159fcff7e765beea4731ac66d53f2c61e2f88b81d39b5d59f5f4f250678cb163554e2e1bfd2f0e3288a6f4130008be78d841f5ac55deba38a99f512b9cb09a2e76876f83db406b67e1dc0c65e338b43d030b58634bd996d3480d9cb872ba87e6959a3825b54858b131327372e8af6460a731f5db2ba98e27b58b768e2e5260eedce01029e69048cb8e429d0c91da37b8fc06b104f6b348b37138c590d4b4b80e194e092821ae27dfad1576c060386ed6980b34e36e996215aefc73c2b658040a49474557e45c1c2b7e9a95de71d772f26824677", 0x1000}, {&(0x7f0000000f40)="2e045cb5f3257c1154818e99d3cce261ffd251399bffdbe102a0d5976162436aad9c0948dc69f1e02e78c37a75e9a965e2ded4f1b986dcd3de83534fe1b4bd666524fa6514f25739554bc9d400afdac5acb6e2af4506e2d50bc75b09ae1e351e3643a1e511a6f10a0eac9c1a3eff418087b5031ed77b371c6a93", 0x7a}, {&(0x7f0000002280)="21cd8154784acb5c922d6115f99302a228bf310e4893fa9fce631c77da7129e46e11b78f1fb7465a0ccbde50eef7ebc147b44e703ca54ec00e58da89a4d9c20e9c80f5b974d885a2d1fb2d9d54319389612ef1cf7a0e14f571527bfa3a38dcc001c702120444b4a3c1925c0b7bbd85df742d1680739218d624f1943b122da248a337a80049ca9e0f6ae8ed431782cdb1caf078e4adf27aa7c85479fb63ab010991fe6df75d799a588a06dd777b1ae589b8f2b4e3db8ffb656b116e5512df57c4106bc09fb11820a5c814b43c8e74503f6891ff1189912c5cd17504629e7892d1a482218c45afcc23a944ba1af385ef", 0xef}, {&(0x7f0000000fc0)="2d9ee3065536eab335057576aee68b111ebc6d0e147e22a8f78dc48fcce5657cbc25c8931039b084f37f44824b1fdcdd94d16e98b90117997a51ccbd52e9b65ff4e0198ff9765b98b26cd40e52b01e3357d90931b7088c18fac1f21ad1ffc3a33674d635", 0x64}, {&(0x7f0000002380)}], 0x7, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002780)="b55423263fbcfecb99e7ac9558a89e164a20e1a2408d8ac1f501f6caaa52ec330214fbc93bf1d069e0253fe8f58acbef76c99a51dbaf1797978451a6ee3ca1d1377b41300a35c7776852bcb6201a7709244ff6c08393573f30fc64b51293c12e043fa3f571ca3e7e74c213fa3026a669f8c91417522288f2d1ea020a0a8679371220b01afe3bb2b9911185723a68cbfd761248bc7713b8ede66d889046e6471f22cb67a2f03c1fb4dbd23ae8f666c806e876acc398b17a61452f4f", 0xbb}, {&(0x7f0000002840)="57505fc77e65cc7d0976397c41e05abd4e829377e71709c976d3c04dc471daedbd3d6427da87f4412c2f41c8160d4d3d001f59cd5ce066fa9af21fb71ceda4bf1d48c060fb55052d22dcc3", 0x4b}, {&(0x7f00000028c0)="45139e8e28d3a49b3fea99e0b110c5e13b0a5d42ec7257cae923a07afaae0e2f4b7d0adecdf07082cfb7eb1198fa6f1ed2b8ca00cedd58582fbce501ce663ccafa4a6c3faff4c4eb21ad4e937b25f7579ff21378083d619ee06d955179d2cff75b819b3fcb0c6649d28885c16a72ce6f97b658fcb1641765e7d8d6b592d0b6f36014b93e4003b67e513c420129ce3ab5b2e6b525bf6efe1d3e857f438a041c393a94a27588dc4c6d899a46e42d566f210ce416dce3f19f5c4f9fe8af5dc5be7958d21841131ab341c90d4613c020f4e24b85f6f7c9f660f85c93efca608e501a606fe1e2d045e9", 0xe7}], 0x3, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x20, 0x4000}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002a40)="08a18a36d324c657d955381be240cd25705574069875edf1873fa36be25ce4f987893a88058d5fad56dca2e0d1b5e513f4b1ecc79089062293d21b03a82079e87b27bb4f003e095e98e9dfa22b6a2f8a52709c794947b49e54c7d6a13b", 0x5d}, {&(0x7f0000002ac0)="e6a95bc3fa62a6cfc54bb5f214ff6f6d39e376a52f01e5f0b98234c1b418b3ab54e5855bcf29efd975b62f82b195c5b03feeba2fcdfcc2a7b52cd1be38c719baa641509f48b24d0fa6f808f27fd891b99960cfc900d20a2a61c335b17c7cc7d82446932f4b", 0x65}, {&(0x7f0000002b40)="0912b2d80b1481d637e81e9601a78f03ad38e8da985b9adf484e54f6171a70bedc51691eb7d86221131e1c1377f2b922b985dcba1f17032edf374ac179f51ec8f221c4ce658d1374aacc13642490622a7fb4dd2d5d0e6f0fed8762c243989546bfe31f0a657c4e04b1a477df", 0x6c}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="b52323afc61f4476a44a86f7fb0eb7e6556b88afdbd67017bba0fbeedbb77e2213d5c5817c0a4c9c507d18437dee13d3c53c80baaeb09e7f3d880a8c028644621cd8fecbec9148328737dce1842e9f265439a82eab6869353c0df11824", 0x5d}, {&(0x7f0000003c40)="405190ddcf734b4b30797f03b393d5c58f6b0f1b7b6690f8e9761e377262b5c32c1d1280a0c212a1", 0x28}, {&(0x7f0000003c80)="8bf35c02874ad3973e5ef5fbf2697a58da7ad20919aa8960e3abb5040bf91bcd56cccc93e54b", 0x26}, {&(0x7f0000003cc0)="0a85d14e48c9c833209b2e8c9a31856e9d86a7ac4840496f1292a37118c3dcb108d94d934e098ea79cb895d890132d095ce49c79cdb909d830dbe72efab5fa4320c1396d491ec156b58beff205e1efa66b74249b11ece443685a", 0x5a}, {&(0x7f0000003d40)="53c29a83560e58efd87210af2dbb06b67e62ab916daa80748f7aa5d032fc4c22f28723f9e12d0c21d533264f6c1eaab1a9feb4048dd188306e86b62cf052977ead9b5b4ad91d7066be53a1266f8cb866f18e447e0d1837a3a81161cbce801b1a654805f2c04e3b0d737af503ff92f5ca8777c4d9409d4d712df72b7a08d4a4bfa757e79628aa4f94483fcd4fb607fca53d6e69f04b553e81db0f8234c93cd7dfec8940b5dd5fc0bc127cdcff10cee9b0fb26c4498e6cbd2d0103953d93688478e58d081ff4558fdd96fac958b720e1f332cb1af281cbcfe1271cb6fd1c354e3abc1400a1313c", 0xe6}], 0x9, &(0x7f0000004040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c00000000000000010000e102000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\v\x00'], 0x38, 0x41}}, {{&(0x7f0000004080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004100)="e88a98d02c896c4e07baa15c617a8e50c1ba", 0x12}, {&(0x7f0000004140)="b0dd55e223eea1691aee24d3d79e97ec1949f194f1dfe6c40f3f5d9fb825b7f8e417d258314a42257478c0dad67cbaf9b2bf6af17dbe724479df5b3286702ac4fbefdc5b364e6b1ad15980924c72f3", 0x4f}, {&(0x7f00000041c0)="f27d2970ca59b40129903a3b152f70d4d65d54c016a22ad98755334c3975f8f25695a18a652ecb319628570321ee255a3e6ab48b702a10ee7434493a0196880636e0d79b9fbfb5a53d3548c9f93ad2fdc9497e6e7c521a5b5a6a69bd20ecacbfc7ae15a067a19d95918b3d9dbd8e8e1c7870cc13c99662a595c1de5fae", 0x7d}, {&(0x7f0000004240)="73646188eefad048d666e314b85673df5c6def", 0x13}, {&(0x7f0000004280)="0393251d7f9b094f17a0ff94d7c04a9119bb9524d46fdc38874dea345a7d3bdfb789e63f992dfd647d6ce40c61869933d6c46f99625243671f159514877803e0a63d4b7e75ec4b076502c2830230fe46b34600f0495d32e6e90456e99e181abc1d964fc2f0da12503388a8424dc493e928ea90233b5dd4bf03d0990ce27175bc19033c3603b531192f03caa1e5cc85f0e2c727f8832b77b47ecc97163df971fc5776812b7196d171a42c57e4a723f46175662df51058bd3560c5de15cc61dc549d1566f948c4a6f84ba1e77a44a533c5e18718876c6d535d8015433f94a3a98796f3246e2137661645affd6ba2982ebc172e7476e8fb15ac00", 0xf9}, {&(0x7f0000004380)="2075898f2c0c75d209511a223a71dbe98f3883790526331b0a4bab9b8b2b841a8ddbd837765cb8ea724f6b553fde56214de80693e12a5fb746df637bff50b940f1fe7245906fee797988ea3b95924f89bf5fba5c987a9e25310f78fc13f3f8932728d69440c62e8b881989bc53370b118afb7a954b6d5709afa629c22e896acc31ee2dadd84cbd68c2d24aed08f4648aecc83684fc76a2f55cbaad1530015bfbeb27f2fa68a2a2fd743e242a73e9", 0xae}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="4ba3a7227379b453cac716a5972fea38b2af9a05da19499cef1a801f8e08387ed1303164b17ae5085f7e7f4bd535aa22ea3170ea5bd1f3e9a572e813e9419d8cde14d73d5c246c9c9394015da2146a1c57d7d1321463bed8dce50f9629a1f9a52bb80e977c683f7032f9f5", 0x6b}, {&(0x7f00000054c0)="10a26d241174368819e3a25d1684be3005df1f98f70e153dd18782b7084202f51efe948edeee169aab0464d45e05a0eb58172ae7c61154a20be5f4cd2c4ea8f44e4d3ef5eb286d7f0c07f4b197f379639431462703304f22dee773f4d721e864892aa2c05822da1f9636c0fc10f32124c020aa812213e5d1406cee91193ecf050779eb99f77177653b63575128fa7efb2eef16535ded391fc963ee27372d5506ccd3baee404559bd0639bf425f6332a8b0f83a9627a1865deb0112fe81b29319e1a58a9074ec", 0xc6}], 0x9, &(0x7f0000005880)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60, 0xc010}}], 0x5, 0x4084) sendto$packet(r14, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r15, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x164, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_WOL_SOPASS={0xec, 0x3, "d2c315a9e047c6dbcac71a6a9465c569461d7621ca5c09ee0ddbaaa27a2a8cc0bb1e18936328c1197824084223b87e18d1edd15e709bc821b73ede23268e7d87ac3064ab4338d17171cdeb3c96407636880d29a2ff81ddfba9dc3ceb9f72bbe7064233dd2ab52e0f0fbf3ad6174212f2625fddf48d47f47730e959a8789f343717da39aca4642151d1e6d3dcfcc6c619f65c8ab640e83b27ae224310c8f47fb44e34d5e0292f2834cda5f45246a7f161d21b4baf8384417bf0fd67df7d30c6eae14dc1f20d43292609cd8ab80e0f318bc17d23f779426d0e1605fc00a7c116038b4e05e1b460dbbf"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="d400c900080211000201"], 0xa) [ 2680.524238][ T6540] CPU: 0 PID: 6540 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2680.532762][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2680.542822][ T6540] Call Trace: [ 2680.546107][ T6540] [ 2680.549039][ T6540] dump_stack_lvl+0x1e3/0x2cb [ 2680.553731][ T6540] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2680.559375][ T6540] ? panic+0x84d/0x84d [ 2680.563454][ T6540] ? is_bpf_text_address+0x24f/0x260 [ 2680.568797][ T6540] should_fail+0x38a/0x4c0 [ 2680.573220][ T6540] prepare_alloc_pages+0x1db/0x5b0 [ 2680.578347][ T6540] __alloc_pages+0x14f/0x700 [ 2680.582952][ T6540] ? __rmqueue_pcplist+0x2030/0x2030 [ 2680.588273][ T6540] alloc_pages_vma+0x39a/0x800 [ 2680.593051][ T6540] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2680.598868][ T6540] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2680.604524][ T6540] ? shmem_swapin_page+0x22f0/0x22f0 [ 2680.609834][ T6540] ? xas_start+0x3ff/0x7b0 [ 2680.614275][ T6540] ? xas_load+0x11a/0x140 [ 2680.618618][ T6540] ? pagecache_get_page+0xd23/0x1010 [ 2680.623947][ T6540] ? page_cache_prev_miss+0x500/0x500 [ 2680.629347][ T6540] ? reacquire_held_locks+0x3a2/0x660 [ 2680.634730][ T6540] ? __mark_inode_dirty+0x4ca/0xd60 [ 2680.639984][ T6540] shmem_getpage_gfp+0x17b1/0x3190 [ 2680.643505][ T6542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2680.645156][ T6540] ? shmem_getpage+0xa0/0xa0 [ 2680.659402][ T6540] ? fault_in_safe_writeable+0x250/0x250 [ 2680.665055][ T6540] ? generic_update_time+0x1cb/0x1e0 [ 2680.670355][ T6540] shmem_write_begin+0xce/0x1a0 [ 2680.675228][ T6540] generic_perform_write+0x2bf/0x5b0 [ 2680.680534][ T6540] ? grab_cache_page_write_begin+0x90/0x90 [ 2680.682588][ T6542] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2680.686341][ T6540] ? file_remove_privs+0x610/0x610 [ 2680.686370][ T6540] ? down_write+0x10e/0x170 [ 2680.704091][ T6540] __generic_file_write_iter+0x243/0x4f0 [ 2680.709744][ T6540] generic_file_write_iter+0xa7/0x1b0 [ 2680.712227][ T6542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2680.715138][ T6540] vfs_write+0xacf/0xe50 [ 2680.715172][ T6540] ? file_end_write+0x250/0x250 [ 2680.733920][ T6540] ? __fget_files+0x413/0x480 [ 2680.738614][ T6540] ? __fdget_pos+0x1e9/0x380 [ 2680.743196][ T6540] ? ksys_write+0x77/0x2c0 [ 2680.747628][ T6540] ksys_write+0x1a2/0x2c0 [ 2680.751959][ T6540] ? print_irqtrace_events+0x210/0x210 [ 2680.757424][ T6540] ? __ia32_sys_read+0x80/0x80 [ 2680.762195][ T6540] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2680.768174][ T6540] ? lockdep_hardirqs_on+0x94/0x130 [ 2680.773373][ T6540] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2680.779343][ T6540] do_syscall_64+0x3d/0xb0 [ 2680.783750][ T6540] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2680.789648][ T6540] RIP: 0033:0x7f1357c7582f [ 2680.794053][ T6540] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2680.813644][ T6540] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2680.822054][ T6540] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2680.830021][ T6540] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2680.837985][ T6540] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2680.845956][ T6540] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2680.853921][ T6540] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2680.861908][ T6540] 23:42:15 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 19) [ 2680.889773][ T6548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) 23:42:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x4c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x16040, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic='#']}, 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x34, 0x10, 0x403, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20040001) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r9 = dup(r8) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000100)={0x0, 0x1000000}) [ 2682.191316][ T6553] FAULT_INJECTION: forcing a failure. [ 2682.191316][ T6553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2682.204619][ T6553] CPU: 1 PID: 6553 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2682.213131][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2682.213290][ T6544] A link change request failed with some changes committed already. Interface ipip1 may have been left with an inconsistent configuration, please check. [ 2682.223184][ T6553] Call Trace: [ 2682.223195][ T6553] [ 2682.223204][ T6553] dump_stack_lvl+0x1e3/0x2cb [ 2682.223236][ T6553] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2682.255299][ T6553] ? panic+0x84d/0x84d [ 2682.259370][ T6553] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2682.264656][ T6553] should_fail+0x38a/0x4c0 [ 2682.269068][ T6553] copy_page_from_iter_atomic+0x451/0x1230 [ 2682.274876][ T6553] ? pipe_zero+0x4f0/0x4f0 [ 2682.279280][ T6553] ? generic_update_time+0x1cb/0x1e0 [ 2682.284564][ T6553] generic_perform_write+0x33a/0x5b0 [ 2682.289851][ T6553] ? grab_cache_page_write_begin+0x90/0x90 [ 2682.295645][ T6553] ? file_remove_privs+0x610/0x610 [ 2682.300748][ T6553] ? down_write+0x10e/0x170 [ 2682.305245][ T6553] __generic_file_write_iter+0x243/0x4f0 [ 2682.310871][ T6553] generic_file_write_iter+0xa7/0x1b0 [ 2682.316236][ T6553] vfs_write+0xacf/0xe50 [ 2682.320475][ T6553] ? file_end_write+0x250/0x250 [ 2682.325316][ T6553] ? __fget_files+0x413/0x480 [ 2682.330014][ T6553] ? __fdget_pos+0x1e9/0x380 [ 2682.334594][ T6553] ? ksys_write+0x77/0x2c0 [ 2682.339003][ T6553] ksys_write+0x1a2/0x2c0 [ 2682.343318][ T6553] ? print_irqtrace_events+0x210/0x210 [ 2682.348771][ T6553] ? __ia32_sys_read+0x80/0x80 [ 2682.353523][ T6553] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2682.359765][ T6553] ? lockdep_hardirqs_on+0x94/0x130 [ 2682.364956][ T6553] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2682.370934][ T6553] do_syscall_64+0x3d/0xb0 [ 2682.375342][ T6553] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2682.381223][ T6553] RIP: 0033:0x7f1357c7582f [ 2682.385630][ T6553] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2682.405225][ T6553] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2682.413630][ T6553] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2682.421593][ T6553] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2682.429552][ T6553] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 23:42:17 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") [ 2682.437512][ T6553] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2682.445477][ T6553] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2682.453444][ T6553] [ 2682.478026][ T6553] loop5: detected capacity change from 0 to 128 23:42:17 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x400, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000001140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c64656275673d3078303030303030303030303030303039382c6d6d61702c64666c746769643d2b1fab87b2cf3181a623bef41b58601a3162830024eba070df00e4772605852e19b213cfba0c0af71e81a9b8d8183ea4c542a7316f1d5409db555845ca5d3ec178d7a87a667111da01a721dc63b8439fcba76cf10fc92545f83818269a8b0a7c0886", @ANYRESHEX=r8, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623bbf9bf7a60620e741cca51b62fc4c6", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB, @ANYRESDEC]) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000220001"], 0x34}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000b80)="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", 0xaa}, {&(0x7f0000000580)="8583c62ebb8685f682dde88b5bde78668a3eee35148c7123f7472c2bf9261ec29dcd40a46423110d2ffc85695e7f594a32cb66ea651efc5fb4c0e709f9ebaa254146ec84da08b23d2844ac1dc891ae0e677c6bc60f0ded3d14cfa1af7a2a60a5042f7ec15258b5ba151ed821e650b4d8e45af6d0dc347a199bec6b939c0d0184dc4d48a3bc0a6890a19272", 0x8b}, {&(0x7f00000012c0)}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x20, 0x4040010}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="c10bd5ce4a2e9284d0bdd332e60664e4667cd7467af5dee1639b813812381e1621a3a880936955398ae565c7ccb591e27a774df4bb95794acb1350f3c4f776d0f0cf13ea26d28c176a83cf8e00d4008dfb56858fe3ca2cdb7e01ddb8d799ea4ea58d770bd4f0aef3574bd8856662411906956a8d011128daaec5d277855e6128a6d273142a2c63b204a9dcac4c4a891b992a98a0671c85146bac4184aeb8de", 0x9f}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @rights={{0x0, 0x1, 0x1, [r9]}}], 0x108, 0x20008881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xfeee, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}], 0x120, 0x40}}], 0x3, 0xc000) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000b80)="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", 0xaa}, {&(0x7f0000000580)="8583c62ebb8685f682dde88b5bde78668a3eee35148c7123f7472c2bf9261ec29dcd40a46423110d2ffc85695e7f594a32cb66ea651efc5fb4c0e709f9ebaa254146ec84da08b23d2844ac1dc891ae0e677c6bc60f0ded3d14cfa1af7a2a60a5042f7ec15258b5ba151ed821e650b4d8e45af6d0dc347a199bec6b939c0d0184dc4d48a3bc0a6890a19272", 0x8b}, {&(0x7f00000012c0)}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x20, 0x4040010}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="c10bd5ce4a2e9284d0bdd332e60664e4667cd7467af5dee1639b813812381e1621a3a880936955398ae565c7ccb591e27a774df4bb95794acb1350f3c4f776d0f0cf13ea26d28c176a83cf8e00d4008dfb56858fe3ca2cdb7e01ddb8d799ea4ea58d770bd4f0aef3574bd8856662411906956a8d011128daaec5d277855e6128a6d273142a2c63b204a9dcac4c4a891b992a98a0671c85146bac4184aeb8de", 0x9f}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @rights={{0x0, 0x1, 0x1, [r9]}}], 0x108, 0x20008881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xfeee, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}], 0x120, 0x40}}], 0x3, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r11, 0x311, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r11, 0x311, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x864}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5d1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8a}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x890) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x2, 0x300) (async) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000840)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="073376a69e531bb1b635a105fe8fbf899ff34e749fbacf957663a72f97f37d82248da504ac76c0fde8c6aa35116449ada9bc7c16b71298b4b2486767b1809079b31b762dab47cbedda830e705e47", 0x4e}, {&(0x7f00000006c0)="7bdee342698bd01038e76c06c1d87db072e3522f5b6c7babd3b530b5721fdd269d0cb147c25805fe6f14023588adffac22c1989fe5c85b3d3fc3c5b0a0e8", 0x3e}], 0x2, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, r10]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r12, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x20000800}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000000e00)="1cc1ea5906d25c2d60984903a7cab365a36b18798f71246bc2952bb59c4315cc65610f9d4617a5fe578d55f7a33c183e0090fae8debb348f8ed9b593bdfc5e669faebf8f6f731a095a2172035258b5aa9ca1c4a1b8a6efb3102b9ef69ea0d27df565952f2e94dc008564362e21ca204f12cfc55fd1bbef8525762901ed27838a5daa24bb91740b46ca86a02c7605ed8791cc32a22d3449d71183232f8218b3f1991f8da5bae55c58ee31667326bacff54ce0e087", 0xb4}, {&(0x7f0000000ec0)="8e0aafe6d5030e167fbf7e563976425b3d8bfcbc46452c45fca1e249c422e594caac3773799ee17441e7cdcd710c76dd8d811a7088a3f9a450d9a9ad9b2ee4fd10a683717ddc22335b6a3ffe7866a1940254fc82ed569a92", 0x58}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000f40)="2e045cb5f3257c1154818e99d3cce261ffd251399bffdbe102a0d5976162436aad9c0948dc69f1e02e78c37a75e9a965e2ded4f1b986dcd3de83534fe1b4bd666524fa6514f25739554bc9d400afdac5acb6e2af4506e2d50bc75b09ae1e351e3643a1e511a6f10a0eac9c1a3eff418087b5031ed77b371c6a93", 0x7a}, {&(0x7f0000002280)="21cd8154784acb5c922d6115f99302a228bf310e4893fa9fce631c77da7129e46e11b78f1fb7465a0ccbde50eef7ebc147b44e703ca54ec00e58da89a4d9c20e9c80f5b974d885a2d1fb2d9d54319389612ef1cf7a0e14f571527bfa3a38dcc001c702120444b4a3c1925c0b7bbd85df742d1680739218d624f1943b122da248a337a80049ca9e0f6ae8ed431782cdb1caf078e4adf27aa7c85479fb63ab010991fe6df75d799a588a06dd777b1ae589b8f2b4e3db8ffb656b116e5512df57c4106bc09fb11820a5c814b43c8e74503f6891ff1189912c5cd17504629e7892d1a482218c45afcc23a944ba1af385ef", 0xef}, {&(0x7f0000000fc0)="2d9ee3065536eab335057576aee68b111ebc6d0e147e22a8f78dc48fcce5657cbc25c8931039b084f37f44824b1fdcdd94d16e98b90117997a51ccbd52e9b65ff4e0198ff9765b98b26cd40e52b01e3357d90931b7088c18fac1f21ad1ffc3a33674d635", 0x64}, {&(0x7f0000002380)}], 0x7, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002780)="b55423263fbcfecb99e7ac9558a89e164a20e1a2408d8ac1f501f6caaa52ec330214fbc93bf1d069e0253fe8f58acbef76c99a51dbaf1797978451a6ee3ca1d1377b41300a35c7776852bcb6201a7709244ff6c08393573f30fc64b51293c12e043fa3f571ca3e7e74c213fa3026a669f8c91417522288f2d1ea020a0a8679371220b01afe3bb2b9911185723a68cbfd761248bc7713b8ede66d889046e6471f22cb67a2f03c1fb4dbd23ae8f666c806e876acc398b17a61452f4f", 0xbb}, {&(0x7f0000002840)="57505fc77e65cc7d0976397c41e05abd4e829377e71709c976d3c04dc471daedbd3d6427da87f4412c2f41c8160d4d3d001f59cd5ce066fa9af21fb71ceda4bf1d48c060fb55052d22dcc3", 0x4b}, {&(0x7f00000028c0)="45139e8e28d3a49b3fea99e0b110c5e13b0a5d42ec7257cae923a07afaae0e2f4b7d0adecdf07082cfb7eb1198fa6f1ed2b8ca00cedd58582fbce501ce663ccafa4a6c3faff4c4eb21ad4e937b25f7579ff21378083d619ee06d955179d2cff75b819b3fcb0c6649d28885c16a72ce6f97b658fcb1641765e7d8d6b592d0b6f36014b93e4003b67e513c420129ce3ab5b2e6b525bf6efe1d3e857f438a041c393a94a27588dc4c6d899a46e42d566f210ce416dce3f19f5c4f9fe8af5dc5be7958d21841131ab341c90d4613c020f4e24b85f6f7c9f660f85c93efca608e501a606fe1e2d045e9", 0xe7}], 0x3, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x20, 0x4000}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002a40)="08a18a36d324c657d955381be240cd25705574069875edf1873fa36be25ce4f987893a88058d5fad56dca2e0d1b5e513f4b1ecc79089062293d21b03a82079e87b27bb4f003e095e98e9dfa22b6a2f8a52709c794947b49e54c7d6a13b", 0x5d}, {&(0x7f0000002ac0)="e6a95bc3fa62a6cfc54bb5f214ff6f6d39e376a52f01e5f0b98234c1b418b3ab54e5855bcf29efd975b62f82b195c5b03feeba2fcdfcc2a7b52cd1be38c719baa641509f48b24d0fa6f808f27fd891b99960cfc900d20a2a61c335b17c7cc7d82446932f4b", 0x65}, {&(0x7f0000002b40)="0912b2d80b1481d637e81e9601a78f03ad38e8da985b9adf484e54f6171a70bedc51691eb7d86221131e1c1377f2b922b985dcba1f17032edf374ac179f51ec8f221c4ce658d1374aacc13642490622a7fb4dd2d5d0e6f0fed8762c243989546bfe31f0a657c4e04b1a477df", 0x6c}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="b52323afc61f4476a44a86f7fb0eb7e6556b88afdbd67017bba0fbeedbb77e2213d5c5817c0a4c9c507d18437dee13d3c53c80baaeb09e7f3d880a8c028644621cd8fecbec9148328737dce1842e9f265439a82eab6869353c0df11824", 0x5d}, {&(0x7f0000003c40)="405190ddcf734b4b30797f03b393d5c58f6b0f1b7b6690f8e9761e377262b5c32c1d1280a0c212a1", 0x28}, {&(0x7f0000003c80)="8bf35c02874ad3973e5ef5fbf2697a58da7ad20919aa8960e3abb5040bf91bcd56cccc93e54b", 0x26}, {&(0x7f0000003cc0)="0a85d14e48c9c833209b2e8c9a31856e9d86a7ac4840496f1292a37118c3dcb108d94d934e098ea79cb895d890132d095ce49c79cdb909d830dbe72efab5fa4320c1396d491ec156b58beff205e1efa66b74249b11ece443685a", 0x5a}, {&(0x7f0000003d40)="53c29a83560e58efd87210af2dbb06b67e62ab916daa80748f7aa5d032fc4c22f28723f9e12d0c21d533264f6c1eaab1a9feb4048dd188306e86b62cf052977ead9b5b4ad91d7066be53a1266f8cb866f18e447e0d1837a3a81161cbce801b1a654805f2c04e3b0d737af503ff92f5ca8777c4d9409d4d712df72b7a08d4a4bfa757e79628aa4f94483fcd4fb607fca53d6e69f04b553e81db0f8234c93cd7dfec8940b5dd5fc0bc127cdcff10cee9b0fb26c4498e6cbd2d0103953d93688478e58d081ff4558fdd96fac958b720e1f332cb1af281cbcfe1271cb6fd1c354e3abc1400a1313c", 0xe6}], 0x9, &(0x7f0000004040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c00000000000000010000e102000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\v\x00'], 0x38, 0x41}}, {{&(0x7f0000004080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004100)="e88a98d02c896c4e07baa15c617a8e50c1ba", 0x12}, {&(0x7f0000004140)="b0dd55e223eea1691aee24d3d79e97ec1949f194f1dfe6c40f3f5d9fb825b7f8e417d258314a42257478c0dad67cbaf9b2bf6af17dbe724479df5b3286702ac4fbefdc5b364e6b1ad15980924c72f3", 0x4f}, {&(0x7f00000041c0)="f27d2970ca59b40129903a3b152f70d4d65d54c016a22ad98755334c3975f8f25695a18a652ecb319628570321ee255a3e6ab48b702a10ee7434493a0196880636e0d79b9fbfb5a53d3548c9f93ad2fdc9497e6e7c521a5b5a6a69bd20ecacbfc7ae15a067a19d95918b3d9dbd8e8e1c7870cc13c99662a595c1de5fae", 0x7d}, {&(0x7f0000004240)="73646188eefad048d666e314b85673df5c6def", 0x13}, {&(0x7f0000004280)="0393251d7f9b094f17a0ff94d7c04a9119bb9524d46fdc38874dea345a7d3bdfb789e63f992dfd647d6ce40c61869933d6c46f99625243671f159514877803e0a63d4b7e75ec4b076502c2830230fe46b34600f0495d32e6e90456e99e181abc1d964fc2f0da12503388a8424dc493e928ea90233b5dd4bf03d0990ce27175bc19033c3603b531192f03caa1e5cc85f0e2c727f8832b77b47ecc97163df971fc5776812b7196d171a42c57e4a723f46175662df51058bd3560c5de15cc61dc549d1566f948c4a6f84ba1e77a44a533c5e18718876c6d535d8015433f94a3a98796f3246e2137661645affd6ba2982ebc172e7476e8fb15ac00", 0xf9}, {&(0x7f0000004380)="2075898f2c0c75d209511a223a71dbe98f3883790526331b0a4bab9b8b2b841a8ddbd837765cb8ea724f6b553fde56214de80693e12a5fb746df637bff50b940f1fe7245906fee797988ea3b95924f89bf5fba5c987a9e25310f78fc13f3f8932728d69440c62e8b881989bc53370b118afb7a954b6d5709afa629c22e896acc31ee2dadd84cbd68c2d24aed08f4648aecc83684fc76a2f55cbaad1530015bfbeb27f2fa68a2a2fd743e242a73e9", 0xae}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="4ba3a7227379b453cac716a5972fea38b2af9a05da19499cef1a801f8e08387ed1303164b17ae5085f7e7f4bd535aa22ea3170ea5bd1f3e9a572e813e9419d8cde14d73d5c246c9c9394015da2146a1c57d7d1321463bed8dce50f9629a1f9a52bb80e977c683f7032f9f5", 0x6b}, {&(0x7f00000054c0)="10a26d241174368819e3a25d1684be3005df1f98f70e153dd18782b7084202f51efe948edeee169aab0464d45e05a0eb58172ae7c61154a20be5f4cd2c4ea8f44e4d3ef5eb286d7f0c07f4b197f379639431462703304f22dee773f4d721e864892aa2c05822da1f9636c0fc10f32124c020aa812213e5d1406cee91193ecf050779eb99f77177653b63575128fa7efb2eef16535ded391fc963ee27372d5506ccd3baee404559bd0639bf425f6332a8b0f83a9627a1865deb0112fe81b29319e1a58a9074ec", 0xc6}], 0x9, &(0x7f0000005880)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60, 0xc010}}], 0x5, 0x4084) sendto$packet(r14, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r15, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x164, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_WOL_SOPASS={0xec, 0x3, "d2c315a9e047c6dbcac71a6a9465c569461d7621ca5c09ee0ddbaaa27a2a8cc0bb1e18936328c1197824084223b87e18d1edd15e709bc821b73ede23268e7d87ac3064ab4338d17171cdeb3c96407636880d29a2ff81ddfba9dc3ceb9f72bbe7064233dd2ab52e0f0fbf3ad6174212f2625fddf48d47f47730e959a8789f343717da39aca4642151d1e6d3dcfcc6c619f65c8ab640e83b27ae224310c8f47fb44e34d5e0292f2834cda5f45246a7f161d21b4baf8384417bf0fd67df7d30c6eae14dc1f20d43292609cd8ab80e0f318bc17d23f779426d0e1605fc00a7c116038b4e05e1b460dbbf"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="d400c900080211000201"], 0xa) 23:42:17 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 20) [ 2682.627758][ T6562] loop3: detected capacity change from 0 to 512 [ 2682.673617][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2682.674735][ T6562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 2682.694954][ T6562] ext4 filesystem being mounted at /root/syzkaller-testdir1331302523/syzkaller.IYnDoq/510/file0 supports timestamps until 2038 (0x7fffffff) [ 2682.760368][ T6565] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2682.840514][ T6571] FAULT_INJECTION: forcing a failure. [ 2682.840514][ T6571] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2682.859613][ T6569] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2682.868133][ T6571] CPU: 1 PID: 6571 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2682.876683][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2682.886740][ T6571] Call Trace: [ 2682.890025][ T6571] [ 2682.892963][ T6571] dump_stack_lvl+0x1e3/0x2cb [ 2682.896565][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2682.897658][ T6571] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2682.897694][ T6571] ? panic+0x84d/0x84d [ 2682.897732][ T6571] should_fail+0x38a/0x4c0 [ 2682.921512][ T6571] prepare_alloc_pages+0x1db/0x5b0 [ 2682.926651][ T6571] __alloc_pages+0x14f/0x700 [ 2682.931253][ T6571] ? __rmqueue_pcplist+0x2030/0x2030 [ 2682.936557][ T6571] ? __lock_acquire+0x1295/0x1ff0 [ 2682.941601][ T6571] ? look_up_lock_class+0x77/0x120 [ 2682.946733][ T6571] alloc_pages_vma+0x39a/0x800 [ 2682.951515][ T6571] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2682.957346][ T6571] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2682.963009][ T6571] ? shmem_swapin_page+0x22f0/0x22f0 [ 2682.968324][ T6571] ? xas_start+0x3cc/0x7b0 [ 2682.969013][ T6568] A link change request failed with some changes committed already. Interface ipip2 may have been left with an inconsistent configuration, please check. [ 2682.972758][ T6571] ? xas_load+0x11a/0x140 [ 2682.972786][ T6571] ? pagecache_get_page+0xd23/0x1010 [ 2682.972815][ T6571] ? page_cache_prev_miss+0x500/0x500 [ 2682.972841][ T6571] ? do_raw_spin_unlock+0x137/0x8b0 [ 2682.972863][ T6571] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2682.972883][ T6571] ? lockdep_hardirqs_on+0x94/0x130 [ 2682.972906][ T6571] shmem_getpage_gfp+0x17b1/0x3190 [ 2683.023869][ T6571] ? shmem_getpage+0xa0/0xa0 [ 2683.028468][ T6571] ? fault_in_safe_writeable+0x250/0x250 [ 2683.034124][ T6571] shmem_write_begin+0xce/0x1a0 [ 2683.039000][ T6571] generic_perform_write+0x2bf/0x5b0 [ 2683.044308][ T6571] ? grab_cache_page_write_begin+0x90/0x90 [ 2683.050126][ T6571] ? file_remove_privs+0x610/0x610 [ 2683.055508][ T6571] ? down_write+0x10e/0x170 [ 2683.060031][ T6571] __generic_file_write_iter+0x243/0x4f0 [ 2683.065678][ T6571] generic_file_write_iter+0xa7/0x1b0 [ 2683.071090][ T6571] vfs_write+0xacf/0xe50 [ 2683.075353][ T6571] ? file_end_write+0x250/0x250 [ 2683.080221][ T6571] ? __fget_files+0x413/0x480 [ 2683.084917][ T6571] ? __fdget_pos+0x1e9/0x380 [ 2683.089512][ T6571] ? ksys_write+0x77/0x2c0 [ 2683.093945][ T6571] ksys_write+0x1a2/0x2c0 [ 2683.098284][ T6571] ? print_irqtrace_events+0x210/0x210 [ 2683.103759][ T6571] ? __ia32_sys_read+0x80/0x80 [ 2683.108532][ T6571] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2683.114528][ T6571] ? lockdep_hardirqs_on+0x94/0x130 [ 2683.119739][ T6571] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2683.125730][ T6571] do_syscall_64+0x3d/0xb0 [ 2683.130157][ T6571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2683.136058][ T6571] RIP: 0033:0x7f1357c7582f [ 2683.140478][ T6571] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2683.160092][ T6571] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2683.168510][ T6571] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2683.176492][ T6571] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2683.184475][ T6571] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2683.192447][ T6571] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2683.200423][ T6571] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2683.208414][ T6571] 23:42:18 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 21) 23:42:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") 23:42:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") [ 2683.338877][ T6578] FAULT_INJECTION: forcing a failure. [ 2683.338877][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.353076][ T6578] CPU: 0 PID: 6578 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2683.361592][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2683.371653][ T6578] Call Trace: [ 2683.374938][ T6578] [ 2683.377878][ T6578] dump_stack_lvl+0x1e3/0x2cb [ 2683.382669][ T6578] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2683.388300][ T6578] ? panic+0x84d/0x84d [ 2683.392363][ T6578] ? __lock_acquire+0x1295/0x1ff0 [ 2683.397390][ T6578] should_fail+0x38a/0x4c0 [ 2683.401805][ T6578] should_failslab+0x5/0x20 [ 2683.406296][ T6578] slab_pre_alloc_hook+0x53/0xc0 [ 2683.411220][ T6578] ? xas_create+0x654/0x1620 [ 2683.415799][ T6578] kmem_cache_alloc+0x3f/0x280 [ 2683.420553][ T6578] xas_create+0x654/0x1620 [ 2683.424971][ T6578] xas_create_range+0x1ee/0x7e0 [ 2683.429829][ T6578] shmem_add_to_page_cache+0xdb5/0x17c0 [ 2683.435374][ T6578] ? put_page+0x1e0/0x1e0 [ 2683.439692][ T6578] ? do_raw_spin_unlock+0x137/0x8b0 [ 2683.444881][ T6578] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2683.450074][ T6578] ? lockdep_hardirqs_on+0x94/0x130 [ 2683.455263][ T6578] shmem_getpage_gfp+0x1aa1/0x3190 [ 2683.460385][ T6578] ? shmem_getpage+0xa0/0xa0 [ 2683.464966][ T6578] ? fault_in_safe_writeable+0x250/0x250 [ 2683.470596][ T6578] shmem_write_begin+0xce/0x1a0 [ 2683.475436][ T6578] generic_perform_write+0x2bf/0x5b0 [ 2683.480720][ T6578] ? grab_cache_page_write_begin+0x90/0x90 [ 2683.486517][ T6578] ? file_remove_privs+0x610/0x610 [ 2683.491792][ T6578] ? down_write+0x10e/0x170 [ 2683.496285][ T6578] __generic_file_write_iter+0x243/0x4f0 [ 2683.501910][ T6578] generic_file_write_iter+0xa7/0x1b0 [ 2683.507275][ T6578] vfs_write+0xacf/0xe50 [ 2683.511530][ T6578] ? file_end_write+0x250/0x250 [ 2683.516391][ T6578] ? __fget_files+0x413/0x480 [ 2683.521070][ T6578] ? __fdget_pos+0x1e9/0x380 [ 2683.525652][ T6578] ? ksys_write+0x77/0x2c0 [ 2683.530160][ T6578] ksys_write+0x1a2/0x2c0 [ 2683.534488][ T6578] ? print_irqtrace_events+0x210/0x210 [ 2683.539963][ T6578] ? __ia32_sys_read+0x80/0x80 [ 2683.544718][ T6578] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2683.550686][ T6578] ? lockdep_hardirqs_on+0x94/0x130 [ 2683.556168][ T6578] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2683.562148][ T6578] do_syscall_64+0x3d/0xb0 [ 2683.566556][ T6578] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2683.572453][ T6578] RIP: 0033:0x7f1357c7582f [ 2683.576854][ T6578] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2683.596444][ T6578] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2683.604846][ T6578] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2683.612808][ T6578] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2683.620788][ T6578] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2683.628746][ T6578] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 23:42:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2683.636708][ T6578] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2683.644682][ T6578] [ 2683.773857][ T6583] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. 23:42:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x800, 0x400, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000001140)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532312c64656275673d3078303030303030303030303030303039382c6d6d61702c64666c746769643d2b1fab87b2cf3181a623bef41b58601a3162830024eba070df00e4772605852e19b213cfba0c0af71e81a9b8d8183ea4c542a7316f1d5409db555845ca5d3ec178d7a87a667111da01a721dc63b8439fcba76cf10fc92545f83818269a8b0a7c0886", @ANYRESHEX=r8, @ANYBLOB="1405aee400000096641e20da8723eb7e720d0c8c643dc8e6c0faf748655ae3013688e5236a2c411bef20e98623bbf9bf7a60620e741cca51b62fc4c6", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB, @ANYRESDEC]) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000220001"], 0x34}}, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000b80)="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", 0xaa}, {&(0x7f0000000580)="8583c62ebb8685f682dde88b5bde78668a3eee35148c7123f7472c2bf9261ec29dcd40a46423110d2ffc85695e7f594a32cb66ea651efc5fb4c0e709f9ebaa254146ec84da08b23d2844ac1dc891ae0e677c6bc60f0ded3d14cfa1af7a2a60a5042f7ec15258b5ba151ed821e650b4d8e45af6d0dc347a199bec6b939c0d0184dc4d48a3bc0a6890a19272", 0x8b}, {&(0x7f00000012c0)}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x20, 0x4040010}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)="c10bd5ce4a2e9284d0bdd332e60664e4667cd7467af5dee1639b813812381e1621a3a880936955398ae565c7ccb591e27a774df4bb95794acb1350f3c4f776d0f0cf13ea26d28c176a83cf8e00d4008dfb56858fe3ca2cdb7e01ddb8d799ea4ea58d770bd4f0aef3574bd8856662411906956a8d011128daaec5d277855e6128a6d273142a2c63b204a9dcac4c4a891b992a98a0671c85146bac4184aeb8de", 0x9f}], 0x1, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @rights={{0x0, 0x1, 0x1, [r9]}}], 0x108, 0x20008881}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xfeee, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}], 0x120, 0x40}}], 0x3, 0xc000) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r11, 0x311, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x864}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5d1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb8a}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x890) (async, rerun: 64) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r13, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) r14 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) (rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000840)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="073376a69e531bb1b635a105fe8fbf899ff34e749fbacf957663a72f97f37d82248da504ac76c0fde8c6aa35116449ada9bc7c16b71298b4b2486767b1809079b31b762dab47cbedda830e705e47", 0x4e}, {&(0x7f00000006c0)="7bdee342698bd01038e76c06c1d87db072e3522f5b6c7babd3b530b5721fdd269d0cb147c25805fe6f14023588adffac22c1989fe5c85b3d3fc3c5b0a0e8", 0x3e}], 0x2, &(0x7f0000000d00)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, r10]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, r12, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x20000800}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000023c0)=[{&(0x7f0000000e00)="1cc1ea5906d25c2d60984903a7cab365a36b18798f71246bc2952bb59c4315cc65610f9d4617a5fe578d55f7a33c183e0090fae8debb348f8ed9b593bdfc5e669faebf8f6f731a095a2172035258b5aa9ca1c4a1b8a6efb3102b9ef69ea0d27df565952f2e94dc008564362e21ca204f12cfc55fd1bbef8525762901ed27838a5daa24bb91740b46ca86a02c7605ed8791cc32a22d3449d71183232f8218b3f1991f8da5bae55c58ee31667326bacff54ce0e087", 0xb4}, {&(0x7f0000000ec0)="8e0aafe6d5030e167fbf7e563976425b3d8bfcbc46452c45fca1e249c422e594caac3773799ee17441e7cdcd710c76dd8d811a7088a3f9a450d9a9ad9b2ee4fd10a683717ddc22335b6a3ffe7866a1940254fc82ed569a92", 0x58}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000f40)="2e045cb5f3257c1154818e99d3cce261ffd251399bffdbe102a0d5976162436aad9c0948dc69f1e02e78c37a75e9a965e2ded4f1b986dcd3de83534fe1b4bd666524fa6514f25739554bc9d400afdac5acb6e2af4506e2d50bc75b09ae1e351e3643a1e511a6f10a0eac9c1a3eff418087b5031ed77b371c6a93", 0x7a}, {&(0x7f0000002280)="21cd8154784acb5c922d6115f99302a228bf310e4893fa9fce631c77da7129e46e11b78f1fb7465a0ccbde50eef7ebc147b44e703ca54ec00e58da89a4d9c20e9c80f5b974d885a2d1fb2d9d54319389612ef1cf7a0e14f571527bfa3a38dcc001c702120444b4a3c1925c0b7bbd85df742d1680739218d624f1943b122da248a337a80049ca9e0f6ae8ed431782cdb1caf078e4adf27aa7c85479fb63ab010991fe6df75d799a588a06dd777b1ae589b8f2b4e3db8ffb656b116e5512df57c4106bc09fb11820a5c814b43c8e74503f6891ff1189912c5cd17504629e7892d1a482218c45afcc23a944ba1af385ef", 0xef}, {&(0x7f0000000fc0)="2d9ee3065536eab335057576aee68b111ebc6d0e147e22a8f78dc48fcce5657cbc25c8931039b084f37f44824b1fdcdd94d16e98b90117997a51ccbd52e9b65ff4e0198ff9765b98b26cd40e52b01e3357d90931b7088c18fac1f21ad1ffc3a33674d635", 0x64}, {&(0x7f0000002380)}], 0x7, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002780)="b55423263fbcfecb99e7ac9558a89e164a20e1a2408d8ac1f501f6caaa52ec330214fbc93bf1d069e0253fe8f58acbef76c99a51dbaf1797978451a6ee3ca1d1377b41300a35c7776852bcb6201a7709244ff6c08393573f30fc64b51293c12e043fa3f571ca3e7e74c213fa3026a669f8c91417522288f2d1ea020a0a8679371220b01afe3bb2b9911185723a68cbfd761248bc7713b8ede66d889046e6471f22cb67a2f03c1fb4dbd23ae8f666c806e876acc398b17a61452f4f", 0xbb}, {&(0x7f0000002840)="57505fc77e65cc7d0976397c41e05abd4e829377e71709c976d3c04dc471daedbd3d6427da87f4412c2f41c8160d4d3d001f59cd5ce066fa9af21fb71ceda4bf1d48c060fb55052d22dcc3", 0x4b}, {&(0x7f00000028c0)="45139e8e28d3a49b3fea99e0b110c5e13b0a5d42ec7257cae923a07afaae0e2f4b7d0adecdf07082cfb7eb1198fa6f1ed2b8ca00cedd58582fbce501ce663ccafa4a6c3faff4c4eb21ad4e937b25f7579ff21378083d619ee06d955179d2cff75b819b3fcb0c6649d28885c16a72ce6f97b658fcb1641765e7d8d6b592d0b6f36014b93e4003b67e513c420129ce3ab5b2e6b525bf6efe1d3e857f438a041c393a94a27588dc4c6d899a46e42d566f210ce416dce3f19f5c4f9fe8af5dc5be7958d21841131ab341c90d4613c020f4e24b85f6f7c9f660f85c93efca608e501a606fe1e2d045e9", 0xe7}], 0x3, &(0x7f0000002a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x20, 0x4000}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002a40)="08a18a36d324c657d955381be240cd25705574069875edf1873fa36be25ce4f987893a88058d5fad56dca2e0d1b5e513f4b1ecc79089062293d21b03a82079e87b27bb4f003e095e98e9dfa22b6a2f8a52709c794947b49e54c7d6a13b", 0x5d}, {&(0x7f0000002ac0)="e6a95bc3fa62a6cfc54bb5f214ff6f6d39e376a52f01e5f0b98234c1b418b3ab54e5855bcf29efd975b62f82b195c5b03feeba2fcdfcc2a7b52cd1be38c719baa641509f48b24d0fa6f808f27fd891b99960cfc900d20a2a61c335b17c7cc7d82446932f4b", 0x65}, {&(0x7f0000002b40)="0912b2d80b1481d637e81e9601a78f03ad38e8da985b9adf484e54f6171a70bedc51691eb7d86221131e1c1377f2b922b985dcba1f17032edf374ac179f51ec8f221c4ce658d1374aacc13642490622a7fb4dd2d5d0e6f0fed8762c243989546bfe31f0a657c4e04b1a477df", 0x6c}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="b52323afc61f4476a44a86f7fb0eb7e6556b88afdbd67017bba0fbeedbb77e2213d5c5817c0a4c9c507d18437dee13d3c53c80baaeb09e7f3d880a8c028644621cd8fecbec9148328737dce1842e9f265439a82eab6869353c0df11824", 0x5d}, {&(0x7f0000003c40)="405190ddcf734b4b30797f03b393d5c58f6b0f1b7b6690f8e9761e377262b5c32c1d1280a0c212a1", 0x28}, {&(0x7f0000003c80)="8bf35c02874ad3973e5ef5fbf2697a58da7ad20919aa8960e3abb5040bf91bcd56cccc93e54b", 0x26}, {&(0x7f0000003cc0)="0a85d14e48c9c833209b2e8c9a31856e9d86a7ac4840496f1292a37118c3dcb108d94d934e098ea79cb895d890132d095ce49c79cdb909d830dbe72efab5fa4320c1396d491ec156b58beff205e1efa66b74249b11ece443685a", 0x5a}, {&(0x7f0000003d40)="53c29a83560e58efd87210af2dbb06b67e62ab916daa80748f7aa5d032fc4c22f28723f9e12d0c21d533264f6c1eaab1a9feb4048dd188306e86b62cf052977ead9b5b4ad91d7066be53a1266f8cb866f18e447e0d1837a3a81161cbce801b1a654805f2c04e3b0d737af503ff92f5ca8777c4d9409d4d712df72b7a08d4a4bfa757e79628aa4f94483fcd4fb607fca53d6e69f04b553e81db0f8234c93cd7dfec8940b5dd5fc0bc127cdcff10cee9b0fb26c4498e6cbd2d0103953d93688478e58d081ff4558fdd96fac958b720e1f332cb1af281cbcfe1271cb6fd1c354e3abc1400a1313c", 0xe6}], 0x9, &(0x7f0000004040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="1c00000000000000010000e102000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\v\x00'], 0x38, 0x41}}, {{&(0x7f0000004080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000004100)="e88a98d02c896c4e07baa15c617a8e50c1ba", 0x12}, {&(0x7f0000004140)="b0dd55e223eea1691aee24d3d79e97ec1949f194f1dfe6c40f3f5d9fb825b7f8e417d258314a42257478c0dad67cbaf9b2bf6af17dbe724479df5b3286702ac4fbefdc5b364e6b1ad15980924c72f3", 0x4f}, {&(0x7f00000041c0)="f27d2970ca59b40129903a3b152f70d4d65d54c016a22ad98755334c3975f8f25695a18a652ecb319628570321ee255a3e6ab48b702a10ee7434493a0196880636e0d79b9fbfb5a53d3548c9f93ad2fdc9497e6e7c521a5b5a6a69bd20ecacbfc7ae15a067a19d95918b3d9dbd8e8e1c7870cc13c99662a595c1de5fae", 0x7d}, {&(0x7f0000004240)="73646188eefad048d666e314b85673df5c6def", 0x13}, {&(0x7f0000004280)="0393251d7f9b094f17a0ff94d7c04a9119bb9524d46fdc38874dea345a7d3bdfb789e63f992dfd647d6ce40c61869933d6c46f99625243671f159514877803e0a63d4b7e75ec4b076502c2830230fe46b34600f0495d32e6e90456e99e181abc1d964fc2f0da12503388a8424dc493e928ea90233b5dd4bf03d0990ce27175bc19033c3603b531192f03caa1e5cc85f0e2c727f8832b77b47ecc97163df971fc5776812b7196d171a42c57e4a723f46175662df51058bd3560c5de15cc61dc549d1566f948c4a6f84ba1e77a44a533c5e18718876c6d535d8015433f94a3a98796f3246e2137661645affd6ba2982ebc172e7476e8fb15ac00", 0xf9}, {&(0x7f0000004380)="2075898f2c0c75d209511a223a71dbe98f3883790526331b0a4bab9b8b2b841a8ddbd837765cb8ea724f6b553fde56214de80693e12a5fb746df637bff50b940f1fe7245906fee797988ea3b95924f89bf5fba5c987a9e25310f78fc13f3f8932728d69440c62e8b881989bc53370b118afb7a954b6d5709afa629c22e896acc31ee2dadd84cbd68c2d24aed08f4648aecc83684fc76a2f55cbaad1530015bfbeb27f2fa68a2a2fd743e242a73e9", 0xae}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="4ba3a7227379b453cac716a5972fea38b2af9a05da19499cef1a801f8e08387ed1303164b17ae5085f7e7f4bd535aa22ea3170ea5bd1f3e9a572e813e9419d8cde14d73d5c246c9c9394015da2146a1c57d7d1321463bed8dce50f9629a1f9a52bb80e977c683f7032f9f5", 0x6b}, {&(0x7f00000054c0)="10a26d241174368819e3a25d1684be3005df1f98f70e153dd18782b7084202f51efe948edeee169aab0464d45e05a0eb58172ae7c61154a20be5f4cd2c4ea8f44e4d3ef5eb286d7f0c07f4b197f379639431462703304f22dee773f4d721e864892aa2c05822da1f9636c0fc10f32124c020aa812213e5d1406cee91193ecf050779eb99f77177653b63575128fa7efb2eef16535ded391fc963ee27372d5506ccd3baee404559bd0639bf425f6332a8b0f83a9627a1865deb0112fe81b29319e1a58a9074ec", 0xc6}], 0x9, &(0x7f0000005880)=[@rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r4, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60, 0xc010}}], 0x5, 0x4084) (async) sendto$packet(r14, &(0x7f0000000000)="b5", 0x1, 0x0, &(0x7f0000000080)={0x11, 0xd, r15, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x164, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_WOL_SOPASS={0xec, 0x3, "d2c315a9e047c6dbcac71a6a9465c569461d7621ca5c09ee0ddbaaa27a2a8cc0bb1e18936328c1197824084223b87e18d1edd15e709bc821b73ede23268e7d87ac3064ab4338d17171cdeb3c96407636880d29a2ff81ddfba9dc3ceb9f72bbe7064233dd2ab52e0f0fbf3ad6174212f2625fddf48d47f47730e959a8789f343717da39aca4642151d1e6d3dcfcc6c619f65c8ab640e83b27ae224310c8f47fb44e34d5e0292f2834cda5f45246a7f161d21b4baf8384417bf0fd67df7d30c6eae14dc1f20d43292609cd8ab80e0f318bc17d23f779426d0e1605fc00a7c116038b4e05e1b460dbbf"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000100)=ANY=[@ANYBLOB="d400c900080211000201"], 0xa) 23:42:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$eJzs3TFLG2EYB/AnaZqETtkKpdCDLp1C20+QUlIoPSi0ZNBJIbokIpjldMrH8AP6ASRTtoie5jREB9GcJr/fcg/8eeF5b3hvuufd+Xgw6B+O9s/en0azWYlqJzoxrUQrqnFjHADAOpnOZnE+y5XdCwCwGr7/ALB5/m9t//mRpt1/SdKMmIyzXtbLn3n+63fa/ZpcaRWrJlnWezPPv+V5cjd/G++u8+9L83p8+Zznl9nPv+lC3oj+Q41/erJXAAAAAAAAAAAAAAAAAAAAAAAAK9dO5pbO92m378vz6tZ8oIX5PbX4UFvZNgAAAAAAAAAAAAAAAAAAAOBVGx2fDHaHw70jhWJtiuRltDGMxy2vR0TpzRdnRKPMAwoAAAAAAAAAAAAAAAAAADZI8dNv2Z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHmK+/+fryh7jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKy/iwAAAP//+Ws1WA==") [ 2683.851696][ T6578] loop5: detected capacity change from 0 to 128 23:42:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 22) 23:42:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2684.784250][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "e26481ed1e7c639b5947fa03672a9556f2d9c88f35f8f8b62d6b01c1aef3d08f4ee43881217f959db47d280e8448925694f755ec0256840e58a31c14f0d78d223c58da8e0bd812fb893403e655823624c9e0581484207a6d914ad9befaa148971274f98aa0b753b38761ffcd20135aa09bee95ffc38cfb410de6eb0b1c0eaf69af8375bb982d21281acaa2966378f31ed037b8789d3bf55cda6f1fdefac7c7d4eec101525b850f72c5d3515de41ea6c4cc0a1d4c9d0e83fe98d8baa6325482d6270833cf890aba6768abf6a6ac45c0268bac824f692a521bf8500ce437d7bd4ecafbf918c063d8af3d110e24ddc569f535794d4c8c4ab3897b27310c8d39efca731b7a22caf0ec5f2df04ce6b496582e72b5cbb10480d59c191cd3eca3d3a973fe653216cd08c8de4098133f85da499af2f6a6c7513755f40d13810388f5476a67bb722dc832e4af4c76fda32aa9699c8191a644df90df4b2b2e7993e90bee48e3b65cbc84de44a15926c157018e46c849d57933b96f67dcec40eb733515b880aabbfd1324433ef61e0a112430d3829717820a9eb79c8767614facf386e07a7df2ceb2e9f9d33d65d33fecc7697f5bf74769a67ac297756ec495eaf87674ad5fae2fd772301896e85c617328f32f69bb718bf1ade1d8fd637a6bb4c7044929bf43757821b2bde4ce2ec164ef3841458207326249547ccd2c3ca3467e8c5474cb820ee8647c90d2da6af054fa1f25afb1b0792dcf21b2736c67fc8119a6bdbe19689bb639113f5b9165a50b6f2df8dd8c549220488da3bb10e45dcc7a6207635a550e5ee913aa8ec6ea5f92ba59eb003424e6ea472df633220c8e9644d5bf2f4b01027fc5c0422c39932531e1be7e62e021ac4592b57d95720d5ae86f4bd11d95ad82569ab24e0d1b5a144e6fbcc76c4d7800a70069a852979a3a1f02fcbef6bfeff2101576c998109c65350175bd05435d4be236097340cfafadfde768b1176e6c40f34731164afcd0c3620a0cd015494e432e9aff2c59a4cf476d9037a398183fe74789da0300172e1c02173ff867faf6fbed165ca819be3e4ea05fb6ff1633430984bece64ef93ff8d012b9c321941d59f5b8572008f6bb22597864ea1fbd6b9e349b6d9dc1adc185ea32d5e67e44ac5ebea2063635a53e1718a4246ea47a8874daae0ac6653f821f381a940cbfc98d4a25aea33c63309ee1c6c20f349b673509f09b5381956611359754bdb2eeda100ccb4834596de45556611d5b568f2604653c2129a7d5bd50a209a6d4a956c108b5349a8d208431a2edb17d7650332d308ea2e6f324e589f0e98de49ab655a77509637f0a65614c33f16f91e0d6305e8f9ba0766154e1599f67005ff75af7a6143e574acb799f2363dbb37971fc451c0054b5753de3e2278afe06b9e64b93ab09b4985fe26626a6266da1088f7b9755ac8a9e4e6e99a0dedfe2b1509de12f75d9dea83475543d2b328e986779f4992c870ad128b9d09e8ebcc264e8bb5b85d6d62ab902b8ed7409448cc26a777882627bf3e0c9cdd473289154560c2838c6d4fdaea97ff5d7992909c67710dfeb4977ea7bc06d77b06a19efa42178c46a3fa66ed7d6e2b67ab86be5d94721b099947563db706c5c3a12744ea61d63fce93f546f2669c50b6568e3f32d79bfc75adefc21ee93c5c5360cf2e7ac19571c3663857baf3325b666570642da4dcb309dab05b7ad05bf832d28fa8e871f7b89d6f4327953f4dbde3aac022f4dfe050d0924427e39a8027fbc4b54c4a8c2bf35f8c11c9c0ac4bc1fc31d6bdb2cee2675c5a782aa3ab5ffcc7be7207c89cdb8546fcfdd3a5aadfee5a296abd9afc127ebbf580649e9132b55d9f40a3778af49248b593e00c9f4812b8f7adb7323ab7852e4ed09c55aa356b2e8fee6eb14be3659fdf821d23ac556845f70670d8b6a417c29ac0b1585ea865634c0c921e9d930d4018f66d1e024179d80a7154c491c8662d427ab44a3633480782889f1d00c1d182ede30d4127d769291ef408b574a41c29153b7d949d4648b60a4faf32b380dbc87146c36479d47023876abd4ae7e289ba79d988f6c3a86a75bdc784bea2f0b7e2f77cb1282f54a18e1117e50ffa46ac208fcf8a7b5751e83b3e80cb428e4c2ae63ca3cf7b2c4353303edfe328626391f7925f1ab4ef1c7d0f54d0e45590188ecdb6d2c9c0db9b0552dc81b21dc1bbe9e94be5f78dad11f53d6fc3602e9ffb872d3557c44a133ee94e50d57d5eae2214569975982c63f22750db6f5c979ed81b3f68fe6be6daa85bcd98f25548c1d4db1f15394bc708933e0352e4059bedbf832abaf75e9bdca6fea93600357ca4153357d2e0661a308edf82c0f53e7a121c7e1e8bafdc5fdb61c21f4716d06b43a8395aa915a34c4dc4b5b15ba70a4e163728a9966515682b9ca3c2499aeb17a3c17f905fefed806b504f77c52564006273282db5e0c70565ee1016fc7c241830bef951294db9682ef41742b6550246e539143f15d6c2f017a8083ec97eb3a2de8bc2d8d5fec2b9b88996b3ff6c5aa5bed326f72fe9190de74a83e380b9fe89324421697d124d9a1bd3ced8e1856923147958582d737a36da6af4a0fd92b83f0ef0cb1a725d3a5ecb3a39ad039d200989a281a0686336457824ef582698222b7a063475b793a21745d6701940a0baf124461ad71de8dff6a6f7ed676d107e01ae6b7b79aa1f96efce91039dead977bf70365de8ebb3ec06634246d62f78287831984accef27048794468f520db5c71b4fa94818ddc7394fa1b609adb8cc80c0f32efac26a47bd74119100f0cfdcb889aab1019786cc0eefc1e4295ae919e9f6c8c8a16aa76a2bfe39adf5929e9b9925da0241e734378fe140981e3536bf0b77eb0263297a936a5f37605f128d79b16723b953331f99633b8d29ad1d1dbdb74188488ea0d1b7e0ddb652c040aa0477a079e92618e52f3b7ceebd62e0f0c6946469c19ae828b7eed288c3a53320c9d5468c39d608bd42d967a21e6b788de7c6826d1b99130083182562f63443290aeeb24308d3eb4881547db34b284d9af2bd7cac0d2f66bd14758c079c345d2bce3e1efc3599b0d06e69a92db7e05473673726e1848df75e83df50f98a9321468c10c6514dd7b3cb5b0ddf2fef13284463fe88ef2bc95d51288e41e3e0ba5c91bd686d7f7658b5bac8e3991a0f3b36f004585d9edd09d478ede73e7da067ea502894fc1247e62c1a84c9065ffccc3da96f07ddce135ceafdd784dda6f64a7add400d21ae13abf98e90fb96fcda23a8ad79905428a349b2230c19cf8cdca1724382bd19b4b075438098bd46cbc668bcbdcf1da85f733a50669f976a7106ff1936f20d799e7d01b0beeba7057a90016fb2d36bb3d14e11ac077ffb91f139d16ae5e78d84559312c9fd1a91ff70e5d9b4fd279420f7647151fe951b705082230ad20415d2f605665cd9374a50f7fc3c32efe30e4c0fc84f0c0e0bcd35e46665e4f29371c1c96324f65a94c85874e8e3baba68b88acc85c38f466d7353b5a00953c8ff5522cf0903e646301e3539d047286d10be16d9fbef02d450b7b12b1ead250f68c4c893fbc6f48765f34a81c477966278a1c6945d14d6531f0b5e4cef4edaf3708a5787162c39b236272694b0a302465d01004fa9d516414c040c27fccbf38466023b06293bd07f31fcdbb3b5378a8b2c7886e1551b1caeab96f7f3c159075756f5f8aaa05b6f87f581d802903c36d84169f87c01a77c43284adf66daa38fe8633a8f6d258231466aba89bb9e56ef289d2815cde433e381ddf74852302684b974c80d0a1d7d578039120a2db36213d167687e9390ed8f14c709d3149d2f5cfbc42a9b85e6d10c4ee77270534fdff2ccb816dedc6377257a73ba2a4ea82c0cc4a81bfb939f710b109beb279edeeda345867c0130ff6fc0fbbbbd25d16d2e73f6ab2fbb4c72abc0713ef9e4690b72208c468fa64c21f2247867b5edd514e5be23733ef2136b10e03161fe3b4e6018933df1f97a8250747e6140780a064e0c35bfafcb8177a75e8fde25e61e1c6332bbf7ddc3a11910feb3bd66707a7c1a9f87b320298acec88135a177b2f6f3c0ff02765f34c30b078b58470cd227ce4c0a1a77e662180b28fb360c3fbf47ba8982510979b86332b6d8a53d5f3947665c119a71e5b6ddc64228b47c3e23c30ebbede354d71d2780456de3f717a384112ccc9805dfe107fc9440ab7abccd8463150ce1306778fbea9793d88c4a7864a925bac5da593d6b72ee2c743f0b732a10285d293359c8126004f06fa12c0b3ca9c1e9c0a75b587207965c49f7450cb4210da01e5604f83f849b7eb9cb3f73de4bcff064b4fe08580971184db940bf29d6b8cea027dbfe0b78d6fa574da4b5b4db57b4e1939213c9848537baaf8076b1db4e767a467ec6a47c67aa33df96d7113cc9884124bca5579ce0058618b1b1f13ff3b102ff54e6bde7e29fd555acd6ffe6429af27301b6bbda38403d8f6f3266d7724f517778e7b2c1e13e3d83104ce743857c07b70cb5be8d6d8757d63a3bedfc9de79cc7e96c9833e15fd65f1336178568c2453a49cfc8c8dcb4f5d978f0a6144d62a5da6fd75d08a41084d4c59b345e07a5f4446af6e5216cc8d94347d333030015e262036f0a4fa6d2ae523654c55b37ac179efb66d230de5c70a9b33738ef0cd4ba2710d9ec03f426701101182051516a9be380a07e2555a8cda03eafc72d2bc2bc1dcadde4bb819692c1736b0ed203c4934842d791aae9e10bf239cc5393c9faf967109444c8f44532766ca5481f0ac16d25753a121727271c71d97b401dafe91588b362f2798f047deece9f860624b2d5753e46f929f8c2d03753e7245ffed6d8e36c7b380c4fb6a27e087a38b5e4a80f0043f95e5a20701c62692e684a764074e47badcecf8b2145be47b5b7089c249abcf0743a61b517004d120929d7846a39a46e0ddbcf5334fc01aca0bff31e67da8b3c88e38504db1dc3940c55bee158ae6dfcce289cf91106397d8e3990149a86c819e0354d785a4eed76fa6380491b01efbc23e7189ec253884d384865bca5da9a0917d68144a0a02cde867c365d339a025b7c8a16b82e341719a259ede8f09c165a354fd3e8f5d59e349e7c36302cf8ed115537969b598337fe7575157c89a254c0829cdb243d3d788321c756bf2817721db4bead96e1f25be5b8c7100d149d13900b6c6491ddbdbeaef7753ed5c5d9b07449bfd023501075ec08c37c13df696bf73500bd440a6522f5b955862c5eee8dc6e875c5055350b3397a6b31d2b764308ad24aafd4113af76f38f4aaba9e24efa3ad5b1c008a6cad2411ef6c7276dd3a5a2ae8130f91c36c34137731426fdf5272ef4ac5c4415e2d0f7b50da3ae910ba22bb5b962351e841746b"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$eJzs3TFLG2EYB/AnaZqETtkKpdCDLp1C20+QUlIoPSi0ZNBJIbokIpjldMrH8AP6ASRTtoie5jREB9GcJr/fcg/8eeF5b3hvuufd+Xgw6B+O9s/en0azWYlqJzoxrUQrqnFjHADAOpnOZnE+y5XdCwCwGr7/ALB5/m9t//mRpt1/SdKMmIyzXtbLn3n+63fa/ZpcaRWrJlnWezPPv+V5cjd/G++u8+9L83p8+Zznl9nPv+lC3oj+Q41/erJXAAAAAAAAAAAAAAAAAAAAAAAAK9dO5pbO92m378vz6tZ8oIX5PbX4UFvZNgAAAAAAAAAAAAAAAAAAAOBVGx2fDHaHw70jhWJtiuRltDGMxy2vR0TpzRdnRKPMAwoAAAAAAAAAAAAAAAAAADZI8dNv2Z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHmK+/+fryh7jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKy/iwAAAP//+Ws1WA==") [ 2684.863298][ T6599] device veth0_vlan left promiscuous mode [ 2685.829402][ T6610] loop3: detected capacity change from 0 to 256 [ 2685.836967][ T6611] FAULT_INJECTION: forcing a failure. [ 2685.836967][ T6611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2685.850395][ T6611] CPU: 1 PID: 6611 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2685.858932][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2685.868990][ T6611] Call Trace: [ 2685.872263][ T6611] [ 2685.875182][ T6611] dump_stack_lvl+0x1e3/0x2cb [ 2685.879858][ T6611] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2685.885481][ T6611] ? panic+0x84d/0x84d [ 2685.889540][ T6611] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2685.894846][ T6611] should_fail+0x38a/0x4c0 [ 2685.899256][ T6611] copy_page_from_iter_atomic+0x451/0x1230 [ 2685.905060][ T6611] ? pipe_zero+0x4f0/0x4f0 [ 2685.909490][ T6611] generic_perform_write+0x33a/0x5b0 [ 2685.914796][ T6611] ? grab_cache_page_write_begin+0x90/0x90 [ 2685.920608][ T6611] ? file_remove_privs+0x610/0x610 [ 2685.925713][ T6611] ? down_write+0x10e/0x170 [ 2685.930212][ T6611] __generic_file_write_iter+0x243/0x4f0 [ 2685.935843][ T6611] generic_file_write_iter+0xa7/0x1b0 [ 2685.941212][ T6611] vfs_write+0xacf/0xe50 [ 2685.945459][ T6611] ? file_end_write+0x250/0x250 [ 2685.950309][ T6611] ? __fget_files+0x413/0x480 [ 2685.954982][ T6611] ? __fdget_pos+0x1e9/0x380 [ 2685.959652][ T6611] ? ksys_write+0x77/0x2c0 [ 2685.964063][ T6611] ksys_write+0x1a2/0x2c0 [ 2685.968384][ T6611] ? print_irqtrace_events+0x210/0x210 [ 2685.973843][ T6611] ? __ia32_sys_read+0x80/0x80 [ 2685.978607][ T6611] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2685.984576][ T6611] ? lockdep_hardirqs_on+0x94/0x130 [ 2685.989761][ T6611] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2685.995742][ T6611] do_syscall_64+0x3d/0xb0 [ 2686.000151][ T6611] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2686.006050][ T6611] RIP: 0033:0x7f1357c7582f [ 2686.010463][ T6611] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2686.030076][ T6611] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2686.038484][ T6611] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2686.046444][ T6611] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2686.054406][ T6611] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2686.062371][ T6611] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2686.070329][ T6611] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2686.078303][ T6611] [ 2686.098797][ T6611] loop5: detected capacity change from 0 to 128 [ 2686.221557][ T6602] A link change request failed with some changes committed already. Interface ipip0 may have been left with an inconsistent configuration, please check. 23:42:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 23) 23:42:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2686.447586][ T2761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2686.460058][ T6620] FAULT_INJECTION: forcing a failure. [ 2686.460058][ T6620] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2686.493317][ T6620] CPU: 0 PID: 6620 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2686.501845][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2686.511900][ T6620] Call Trace: [ 2686.515184][ T6620] [ 2686.518146][ T6620] dump_stack_lvl+0x1e3/0x2cb [ 2686.522857][ T6620] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2686.528509][ T6620] ? panic+0x84d/0x84d [ 2686.532599][ T6620] should_fail+0x38a/0x4c0 [ 2686.537050][ T6620] prepare_alloc_pages+0x1db/0x5b0 [ 2686.542192][ T6620] __alloc_pages+0x14f/0x700 [ 2686.546795][ T6620] ? __rmqueue_pcplist+0x2030/0x2030 [ 2686.552089][ T6620] ? __lock_acquire+0x1295/0x1ff0 [ 2686.557138][ T6620] alloc_pages_vma+0x39a/0x800 [ 2686.561924][ T6620] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2686.567745][ T6620] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2686.573410][ T6620] ? shmem_swapin_page+0x22f0/0x22f0 [ 2686.578718][ T6620] ? xas_descend+0x219/0x3a0 [ 2686.583319][ T6620] ? xas_load+0x128/0x140 [ 2686.587665][ T6620] ? pagecache_get_page+0xd23/0x1010 [ 2686.592970][ T6620] ? page_cache_prev_miss+0x500/0x500 [ 2686.598358][ T6620] ? do_raw_spin_unlock+0x137/0x8b0 [ 2686.603659][ T6620] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2686.608875][ T6620] ? lockdep_hardirqs_on+0x94/0x130 [ 2686.614087][ T6620] shmem_getpage_gfp+0x17b1/0x3190 [ 2686.619353][ T6620] ? shmem_getpage+0xa0/0xa0 [ 2686.623962][ T6620] ? fault_in_safe_writeable+0x250/0x250 [ 2686.629624][ T6620] shmem_write_begin+0xce/0x1a0 [ 2686.634499][ T6620] generic_perform_write+0x2bf/0x5b0 [ 2686.639822][ T6620] ? grab_cache_page_write_begin+0x90/0x90 [ 2686.645647][ T6620] ? file_remove_privs+0x610/0x610 [ 2686.650784][ T6620] ? down_write+0x10e/0x170 [ 2686.655299][ T6620] __generic_file_write_iter+0x243/0x4f0 [ 2686.660976][ T6620] generic_file_write_iter+0xa7/0x1b0 [ 2686.666372][ T6620] vfs_write+0xacf/0xe50 [ 2686.670638][ T6620] ? file_end_write+0x250/0x250 [ 2686.675515][ T6620] ? __fget_files+0x413/0x480 [ 2686.680213][ T6620] ? __fdget_pos+0x1e9/0x380 [ 2686.684811][ T6620] ? ksys_write+0x77/0x2c0 [ 2686.689240][ T6620] ksys_write+0x1a2/0x2c0 [ 2686.693590][ T6620] ? print_irqtrace_events+0x210/0x210 [ 2686.699076][ T6620] ? __ia32_sys_read+0x80/0x80 [ 2686.703849][ T6620] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2686.709843][ T6620] ? lockdep_hardirqs_on+0x94/0x130 [ 2686.715061][ T6620] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2686.721057][ T6620] do_syscall_64+0x3d/0xb0 [ 2686.725494][ T6620] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2686.731404][ T6620] RIP: 0033:0x7f1357c7582f [ 2686.735831][ T6620] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2686.755446][ T6620] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2686.763868][ T6620] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2686.771858][ T6620] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2686.779837][ T6620] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2686.787815][ T6620] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 23:42:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 24) [ 2686.795799][ T6620] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2686.803791][ T6620] [ 2687.633167][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 2687.639478][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 23:42:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$eJzs3TFLG2EYB/AnaZqETtkKpdCDLp1C20+QUlIoPSi0ZNBJIbokIpjldMrH8AP6ASRTtoie5jREB9GcJr/fcg/8eeF5b3hvuufd+Xgw6B+O9s/en0azWYlqJzoxrUQrqnFjHADAOpnOZnE+y5XdCwCwGr7/ALB5/m9t//mRpt1/SdKMmIyzXtbLn3n+63fa/ZpcaRWrJlnWezPPv+V5cjd/G++u8+9L83p8+Zznl9nPv+lC3oj+Q41/erJXAAAAAAAAAAAAAAAAAAAAAAAAK9dO5pbO92m378vz6tZ8oIX5PbX4UFvZNgAAAAAAAAAAAAAAAAAAAOBVGx2fDHaHw70jhWJtiuRltDGMxy2vR0TpzRdnRKPMAwoAAAAAAAAAAAAAAAAAADZI8dNv2Z0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHmK+/+fryh7jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKy/iwAAAP//+Ws1WA==") [ 2687.674103][ T6627] FAULT_INJECTION: forcing a failure. [ 2687.674103][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2687.687516][ T6627] CPU: 1 PID: 6627 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2687.696036][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2687.706096][ T6627] Call Trace: [ 2687.709388][ T6627] [ 2687.712324][ T6627] dump_stack_lvl+0x1e3/0x2cb [ 2687.717051][ T6627] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2687.722704][ T6627] ? panic+0x84d/0x84d [ 2687.726791][ T6627] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2687.732105][ T6627] should_fail+0x38a/0x4c0 [ 2687.736541][ T6627] copy_page_from_iter_atomic+0x451/0x1230 [ 2687.742375][ T6627] ? pipe_zero+0x4f0/0x4f0 [ 2687.746817][ T6627] generic_perform_write+0x33a/0x5b0 [ 2687.752125][ T6627] ? grab_cache_page_write_begin+0x90/0x90 [ 2687.758086][ T6627] ? file_remove_privs+0x610/0x610 [ 2687.763232][ T6627] ? down_write+0x10e/0x170 [ 2687.767754][ T6627] __generic_file_write_iter+0x243/0x4f0 [ 2687.773422][ T6627] generic_file_write_iter+0xa7/0x1b0 [ 2687.778829][ T6627] vfs_write+0xacf/0xe50 [ 2687.783094][ T6627] ? file_end_write+0x250/0x250 [ 2687.787967][ T6627] ? __fget_files+0x413/0x480 [ 2687.792673][ T6627] ? __fdget_pos+0x1e9/0x380 [ 2687.797275][ T6627] ? ksys_write+0x77/0x2c0 [ 2687.801715][ T6627] ksys_write+0x1a2/0x2c0 [ 2687.806055][ T6627] ? print_irqtrace_events+0x210/0x210 [ 2687.811532][ T6627] ? __ia32_sys_read+0x80/0x80 [ 2687.816309][ T6627] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2687.822301][ T6627] ? lockdep_hardirqs_on+0x94/0x130 [ 2687.827516][ T6627] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2687.833523][ T6627] do_syscall_64+0x3d/0xb0 [ 2687.837970][ T6627] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2687.843880][ T6627] RIP: 0033:0x7f1357c7582f [ 2687.848299][ T6627] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 23:42:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") [ 2687.867910][ T6627] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2687.876343][ T6627] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2687.884323][ T6627] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2687.892306][ T6627] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2687.900282][ T6627] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2687.908270][ T6627] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2687.916261][ T6627] 23:42:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2687.922928][ T2761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2687.934660][ T6627] loop5: detected capacity change from 0 to 128 [ 2688.167347][ T2761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 23:42:23 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2688.937739][ T6639] loop3: detected capacity change from 0 to 256 [ 2689.003459][ T6636] A link change request failed with some changes committed already. Interface ipip1 may have been left with an inconsistent configuration, please check. [ 2689.932870][ T2761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2690.540659][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 2690.641735][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 2690.649151][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.658262][ T6650] device bridge_slave_0 entered promiscuous mode [ 2690.666801][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 2690.674204][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 2690.682185][ T6650] device bridge_slave_1 entered promiscuous mode [ 2690.712563][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2690.734354][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2690.800758][ T6650] team0: Port device team_slave_0 added [ 2690.832637][ T6650] team0: Port device team_slave_1 added [ 2690.878184][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2690.892026][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2690.939293][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2690.984014][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2690.991044][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2691.017662][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2691.050271][ T6650] device hsr_slave_0 entered promiscuous mode [ 2691.057240][ T6650] device hsr_slave_1 entered promiscuous mode [ 2691.064239][ T6650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2691.071791][ T6650] Cannot create hsr debugfs directory [ 2691.335496][ T2761] device hsr_slave_0 left promiscuous mode [ 2691.352586][ T2761] device hsr_slave_1 left promiscuous mode [ 2691.359024][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2691.382140][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2691.392341][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2691.400286][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2691.409426][ T2761] device bridge_slave_1 left promiscuous mode [ 2691.415874][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2691.424315][ T2761] device bridge_slave_0 left promiscuous mode [ 2691.430484][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2691.442549][ T2761] device veth1_macvtap left promiscuous mode [ 2691.448576][ T2761] device veth0_macvtap left promiscuous mode [ 2691.454783][ T2761] device veth1_vlan left promiscuous mode [ 2691.460565][ T2761] device veth0_vlan left promiscuous mode [ 2691.640682][ T2761] team0 (unregistering): Port device team_slave_1 removed [ 2691.654472][ T2761] team0 (unregistering): Port device team_slave_0 removed [ 2691.668248][ T2761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2691.681557][ T2761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2691.771287][ T2761] bond0 (unregistering): Released all slaves [ 2692.100885][ T6650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2692.121007][ T6650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2692.142497][ T6650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2692.164330][ T6650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2692.295843][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2692.309063][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2692.318388][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2692.345614][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 2692.352363][T23689] Bluetooth: hci4: command 0x0409 tx timeout [ 2692.373243][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2692.382440][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2692.402238][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 2692.409295][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2692.443769][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2692.452563][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2692.472530][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2692.492493][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 2692.499553][ T4638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2692.522615][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2692.542640][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2692.572792][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2692.583581][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2692.602809][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2692.623329][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2692.642784][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2692.651157][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2692.672782][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2692.693019][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2692.703448][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2692.743399][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2692.903838][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2692.911437][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2692.940276][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2693.173966][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2693.183216][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2693.214247][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2693.232886][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2693.254626][ T6650] device veth0_vlan entered promiscuous mode [ 2693.262921][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2693.270602][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2693.296292][ T6650] device veth1_vlan entered promiscuous mode [ 2693.339112][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2693.347840][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2693.372646][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2693.382355][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2693.404401][ T6650] device veth0_macvtap entered promiscuous mode [ 2693.415223][ T6650] device veth1_macvtap entered promiscuous mode [ 2693.445300][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2693.458021][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.468564][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2693.492258][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.505308][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2693.518964][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.538682][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2693.562021][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.579446][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2693.593443][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2693.601475][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2693.624133][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2693.633440][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2693.654479][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.672142][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.681949][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.698345][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.708439][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.719111][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.729370][ T6650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2693.740082][ T6650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2693.751512][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2693.760999][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2693.772436][T24819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2693.795131][ T6650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.822057][ T6650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.830854][ T6650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2693.871534][ T6650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2694.016706][T28684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2694.042279][T28684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2694.057754][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2694.127849][T28684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2694.142137][T28684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2694.175080][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2694.249207][ T6790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2694.432217][T23689] Bluetooth: hci4: command 0x041b tx timeout 23:42:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = dup2(r3, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "acc1fe1c6e92339d456865045cb61f06"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "66d5f38e53f4bad56eaed5a061d49a2e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "94341f5bf77a49406d64a47399b7955a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ada6f66e179a9138c886a5adc0644a05"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="000828bd7000fddbdf252e0000000c009900020000006300000008009f000400000008002201d9020000080022011d0200000800a10000080000080022015100000008002201ea000000080022013000000008009f00000000000500190107000000080027000285bdc3ef765803251a72421963639700000004009300040001010a0006000802110000b0f8c3e583ce010000040001011e002d29382c9234c9676ba431b41d3362dd940020061406000000000000000900e8a63394bbdc7e6c6e471294743ea7eebc0f270663c56faebd6787ce7e958eb7a1551b9b03ef2b4ac147870cf8d0d38deb68e5b80b3c08c6aa6e50"], 0xa8}, 0x1, 0x0, 0x0, 0x40804}, 0x2b40664a6e813fb4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 23:42:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 25) 23:42:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) readahead(r0, 0x100000000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r3, "02b66c11beed7c64705a2327ec95767e4393a580b2c3043a2fcfb08839b8897467f4a525091f0f7d2480b2fbdcfd2a3924b674e8aed38628fb035a463934e151ef7c0289d4fd7b308135026f77657ca78a849330727be579703bef5f51cf16a7198f8eb8e962cc55e47a88645dc99b6e4dfd15399b64e979124ef3a9120208d05d9de3ff1ce9cc9e6353b97b13c914e3530a6ec5b967674f3cbc69538c66356f6777af618dd96e1730048727e164fcc8139776c1e5061154ffe7838008ce90ccbf0827c03a28016d5f3bdabbc98bee9c405509e3e094ba1677d6b347061c346722828810ba1b68424c585770f6527f3856630aedb97f2ee0742e013d5d412046", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001200)={r3, 0x100000000}) signalfd(r1, &(0x7f0000000080)={[0x62e]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) close(r9) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f00000005c0), 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="bd3eb6be0209a12c2c9b1809f238277403876a6489feb57a126154d1be0fa823301224189c5b4357b7ab48a3535a6887f42583b8e6ac1823e25cc62815d326ed013f75"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x1e4, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_VFINFO_LIST={0x124, 0x16, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0xff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x20}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7d}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x20000010}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf9f, 0x8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7fffffff, 0x3f}}, @IFLA_VF_MAC={0x28, 0x1, {0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x4}}]}, {0x70, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7fffffff, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x79f7, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x6, 0xfffffff9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffcdb}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x6, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'macvtap0\x00'}, {0x14, 0x35, 'ip_vti0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0x1e4}}, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200040, &(0x7f0000001500)={[{@fat=@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@nodots}, {@dots}, {@dots}, {@fat=@usefree}, {@nodots}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@dots}, {@nodots}, {@nodots}]}, 0x2, 0x18a, &(0x7f0000001340)="$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") [ 2694.536199][ T6806] FAULT_INJECTION: forcing a failure. [ 2694.536199][ T6806] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2694.563387][ T6806] CPU: 1 PID: 6806 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2694.571907][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2694.581965][ T6806] Call Trace: [ 2694.585251][ T6806] [ 2694.588186][ T6806] dump_stack_lvl+0x1e3/0x2cb [ 2694.592911][ T6806] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2694.598566][ T6806] ? panic+0x84d/0x84d [ 2694.602657][ T6806] should_fail+0x38a/0x4c0 [ 2694.607094][ T6806] prepare_alloc_pages+0x1db/0x5b0 [ 2694.612239][ T6806] __alloc_pages+0x14f/0x700 [ 2694.616843][ T6806] ? __rmqueue_pcplist+0x2030/0x2030 [ 2694.622133][ T6806] ? __lock_acquire+0x1295/0x1ff0 [ 2694.627188][ T6806] alloc_pages_vma+0x39a/0x800 [ 2694.631980][ T6806] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2694.637803][ T6806] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2694.643464][ T6806] ? shmem_swapin_page+0x22f0/0x22f0 [ 2694.648776][ T6806] ? xas_descend+0x219/0x3a0 [ 2694.653381][ T6806] ? xas_load+0x128/0x140 [ 2694.657731][ T6806] ? pagecache_get_page+0xd23/0x1010 [ 2694.663027][ T6806] ? page_cache_prev_miss+0x500/0x500 [ 2694.668388][ T6806] ? do_raw_spin_unlock+0x137/0x8b0 [ 2694.673584][ T6806] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2694.678813][ T6806] ? lockdep_hardirqs_on+0x94/0x130 [ 2694.684022][ T6806] shmem_getpage_gfp+0x17b1/0x3190 [ 2694.689176][ T6806] ? shmem_getpage+0xa0/0xa0 [ 2694.693779][ T6806] ? fault_in_safe_writeable+0x250/0x250 [ 2694.699437][ T6806] shmem_write_begin+0xce/0x1a0 [ 2694.704293][ T6806] generic_perform_write+0x2bf/0x5b0 [ 2694.709577][ T6806] ? grab_cache_page_write_begin+0x90/0x90 [ 2694.715378][ T6806] ? file_remove_privs+0x610/0x610 [ 2694.720489][ T6806] ? down_write+0x10e/0x170 [ 2694.725010][ T6806] __generic_file_write_iter+0x243/0x4f0 [ 2694.730659][ T6806] generic_file_write_iter+0xa7/0x1b0 [ 2694.736043][ T6806] vfs_write+0xacf/0xe50 [ 2694.740301][ T6806] ? file_end_write+0x250/0x250 [ 2694.745167][ T6806] ? __fget_files+0x413/0x480 [ 2694.749856][ T6806] ? __fdget_pos+0x1e9/0x380 [ 2694.754435][ T6806] ? ksys_write+0x77/0x2c0 [ 2694.758842][ T6806] ksys_write+0x1a2/0x2c0 [ 2694.763162][ T6806] ? print_irqtrace_events+0x210/0x210 [ 2694.768616][ T6806] ? __ia32_sys_read+0x80/0x80 [ 2694.773380][ T6806] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2694.779387][ T6806] ? lockdep_hardirqs_on+0x94/0x130 [ 2694.784599][ T6806] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2694.790596][ T6806] do_syscall_64+0x3d/0xb0 [ 2694.795023][ T6806] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2694.800928][ T6806] RIP: 0033:0x7f1357c7582f [ 2694.805352][ T6806] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2694.824961][ T6806] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2694.833386][ T6806] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2694.841371][ T6806] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2694.849341][ T6806] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2694.857303][ T6806] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2694.865285][ T6806] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2694.873270][ T6806] 23:42:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 26) [ 2695.000347][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2695.108148][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2695.866194][ T6822] FAULT_INJECTION: forcing a failure. [ 2695.866194][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2695.879497][ T6822] CPU: 0 PID: 6822 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2695.888024][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2695.898097][ T6822] Call Trace: [ 2695.901387][ T6822] [ 2695.904323][ T6822] dump_stack_lvl+0x1e3/0x2cb [ 2695.909022][ T6822] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2695.914673][ T6822] ? panic+0x84d/0x84d [ 2695.918757][ T6822] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2695.924066][ T6822] should_fail+0x38a/0x4c0 [ 2695.928518][ T6822] copy_page_from_iter_atomic+0x451/0x1230 [ 2695.934349][ T6822] ? pipe_zero+0x4f0/0x4f0 [ 2695.938790][ T6822] generic_perform_write+0x33a/0x5b0 [ 2695.944101][ T6822] ? grab_cache_page_write_begin+0x90/0x90 [ 2695.949932][ T6822] ? file_remove_privs+0x610/0x610 [ 2695.951704][ T6817] A link change request failed with some changes committed already. Interface ipip2 may have been left with an inconsistent configuration, please check. [ 2695.955053][ T6822] ? down_write+0x10e/0x170 [ 2695.955083][ T6822] __generic_file_write_iter+0x243/0x4f0 [ 2695.955121][ T6822] generic_file_write_iter+0xa7/0x1b0 [ 2695.955147][ T6822] vfs_write+0xacf/0xe50 [ 2695.955176][ T6822] ? file_end_write+0x250/0x250 [ 2695.955204][ T6822] ? __fget_files+0x413/0x480 [ 2695.955232][ T6822] ? __fdget_pos+0x1e9/0x380 [ 2695.955251][ T6822] ? ksys_write+0x77/0x2c0 [ 2695.955272][ T6822] ksys_write+0x1a2/0x2c0 [ 2695.955292][ T6822] ? print_irqtrace_events+0x210/0x210 [ 2695.955317][ T6822] ? __ia32_sys_read+0x80/0x80 [ 2695.955337][ T6822] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2696.029301][ T6822] ? lockdep_hardirqs_on+0x94/0x130 [ 2696.034514][ T6822] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2696.040514][ T6822] do_syscall_64+0x3d/0xb0 [ 2696.044946][ T6822] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2696.050845][ T6822] RIP: 0033:0x7f1357c7582f [ 2696.055267][ T6822] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2696.074877][ T6822] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2696.083296][ T6822] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2696.091275][ T6822] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2696.099250][ T6822] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2696.107232][ T6822] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2696.115216][ T6822] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2696.123216][ T6822] [ 2696.137767][ T6825] loop3: detected capacity change from 0 to 256 23:42:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async, rerun: 64) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) r4 = dup2(r3, r3) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "acc1fe1c6e92339d456865045cb61f06"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "66d5f38e53f4bad56eaed5a061d49a2e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "94341f5bf77a49406d64a47399b7955a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ada6f66e179a9138c886a5adc0644a05"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="000828bd7000fddbdf252e0000000c009900020000006300000008009f000400000008002201d9020000080022011d0200000800a10000080000080022015100000008002201ea000000080022013000000008009f00000000000500190107000000080027000285bdc3ef765803251a72421963639700000004009300040001010a0006000802110000b0f8c3e583ce010000040001011e002d29382c9234c9676ba431b41d3362dd940020061406000000000000000900e8a63394bbdc7e6c6e471294743ea7eebc0f270663c56faebd6787ce7e958eb7a1551b9b03ef2b4ac147870cf8d0d38deb68e5b80b3c08c6aa6e50"], 0xa8}, 0x1, 0x0, 0x0, 0x40804}, 0x2b40664a6e813fb4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 23:42:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 27) [ 2696.396190][ T6822] loop5: detected capacity change from 0 to 128 [ 2697.168327][ T4634] Bluetooth: hci4: command 0x040f tx timeout 23:42:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) [ 2697.303418][ T6837] FAULT_INJECTION: forcing a failure. [ 2697.303418][ T6837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2697.329285][ T6830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:32 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x2, 0x6, &(0x7f0000000100)=@raw=[@ldst={0x4, 0x1, 0x6, 0x3, 0x6, 0x20, 0x1}, @generic={0xb5, 0x3, 0x1, 0x8d, 0x1000}, @ldst={0x1, 0x3, 0x0, 0x3, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x9, 0x0, 0xb, 0x80}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}], &(0x7f0000000000)='GPL\x00'}, 0x90) fcntl$setlease(r5, 0x400, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001980)={"21dd6ffabefd8c5396ce8b300d73886f", 0x0, 0x0, {0x7, 0x3ff}, {0x6, 0xfffffffd}, 0xd7, [0x9, 0x8, 0x3, 0x7fffffffffffffff, 0x4, 0x40, 0x0, 0x1, 0x1, 0xfffffffffffffc7c, 0x1000, 0x80000000, 0x2, 0x7ff, 0xa7cd, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001a80)={{}, r6, 0x18, @unused=[0x4, 0xff, 0x7ff, 0x9], @subvolid=0x7}) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{}, {r2, 0x5029}], 0x2, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20004004, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@empty, 0x68, r7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) close(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x208e24b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 2697.486978][ T6837] CPU: 1 PID: 6837 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2697.495559][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2697.505621][ T6837] Call Trace: [ 2697.508981][ T6837] [ 2697.512123][ T6837] dump_stack_lvl+0x1e3/0x2cb [ 2697.516839][ T6837] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2697.522691][ T6837] ? panic+0x84d/0x84d [ 2697.526807][ T6837] should_fail+0x38a/0x4c0 [ 2697.531253][ T6837] prepare_alloc_pages+0x1db/0x5b0 [ 2697.536389][ T6837] __alloc_pages+0x14f/0x700 [ 2697.541012][ T6837] ? __rmqueue_pcplist+0x2030/0x2030 [ 2697.546317][ T6837] ? __lock_acquire+0x1295/0x1ff0 [ 2697.551375][ T6837] alloc_pages_vma+0x39a/0x800 [ 2697.556154][ T6837] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2697.561975][ T6837] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2697.567631][ T6837] ? shmem_swapin_page+0x22f0/0x22f0 [ 2697.572959][ T6837] ? xas_descend+0x219/0x3a0 [ 2697.577570][ T6837] ? xas_load+0x128/0x140 [ 2697.581926][ T6837] ? pagecache_get_page+0xd23/0x1010 [ 2697.587231][ T6837] ? page_cache_prev_miss+0x500/0x500 [ 2697.592648][ T6837] ? do_raw_spin_unlock+0x137/0x8b0 [ 2697.597879][ T6837] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2697.603102][ T6837] ? lockdep_hardirqs_on+0x94/0x130 [ 2697.608312][ T6837] shmem_getpage_gfp+0x17b1/0x3190 [ 2697.613473][ T6837] ? shmem_getpage+0xa0/0xa0 [ 2697.618082][ T6837] ? fault_in_safe_writeable+0x250/0x250 [ 2697.623745][ T6837] shmem_write_begin+0xce/0x1a0 [ 2697.628606][ T6837] generic_perform_write+0x2bf/0x5b0 [ 2697.633912][ T6837] ? grab_cache_page_write_begin+0x90/0x90 [ 2697.639735][ T6837] ? file_remove_privs+0x610/0x610 [ 2697.644864][ T6837] ? down_write+0x10e/0x170 [ 2697.649385][ T6837] __generic_file_write_iter+0x243/0x4f0 [ 2697.655033][ T6837] generic_file_write_iter+0xa7/0x1b0 [ 2697.660418][ T6837] vfs_write+0xacf/0xe50 [ 2697.664682][ T6837] ? file_end_write+0x250/0x250 [ 2697.669552][ T6837] ? __fget_files+0x413/0x480 [ 2697.674251][ T6837] ? __fdget_pos+0x1e9/0x380 [ 2697.678848][ T6837] ? ksys_write+0x77/0x2c0 [ 2697.683274][ T6837] ksys_write+0x1a2/0x2c0 [ 2697.687617][ T6837] ? print_irqtrace_events+0x210/0x210 [ 2697.693099][ T6837] ? __ia32_sys_read+0x80/0x80 [ 2697.697889][ T6837] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2697.703895][ T6837] ? lockdep_hardirqs_on+0x94/0x130 [ 2697.709099][ T6837] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2697.715091][ T6837] do_syscall_64+0x3d/0xb0 [ 2697.719520][ T6837] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2697.725431][ T6837] RIP: 0033:0x7f1357c7582f [ 2697.729850][ T6837] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2697.749485][ T6837] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2697.757935][ T6837] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2697.765925][ T6837] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2697.773916][ T6837] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2697.781984][ T6837] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2697.789953][ T6837] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2697.797939][ T6837] 23:42:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) timer_create(0x7, &(0x7f0000000700)={0x0, 0xf}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x13) chdir(&(0x7f0000000100)='./bus/file0\x00') r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000900)={0x2c, 0x0, r5}, 0x10) 23:42:33 executing program 1: r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x8}}) 23:42:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 28) [ 2699.301565][ T6863] FAULT_INJECTION: forcing a failure. [ 2699.301565][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2699.314872][ T6863] CPU: 1 PID: 6863 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2699.323384][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2699.333534][ T6863] Call Trace: [ 2699.336829][ T6863] [ 2699.339771][ T6863] dump_stack_lvl+0x1e3/0x2cb [ 2699.344472][ T6863] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2699.350119][ T6863] ? panic+0x84d/0x84d [ 2699.354204][ T6863] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2699.359512][ T6863] should_fail+0x38a/0x4c0 [ 2699.363939][ T6863] copy_page_from_iter_atomic+0x451/0x1230 [ 2699.369765][ T6863] ? pipe_zero+0x4f0/0x4f0 [ 2699.374202][ T6863] generic_perform_write+0x33a/0x5b0 [ 2699.379516][ T6863] ? grab_cache_page_write_begin+0x90/0x90 [ 2699.385335][ T6863] ? file_remove_privs+0x610/0x610 [ 2699.390460][ T6863] ? down_write+0x10e/0x170 [ 2699.394977][ T6863] __generic_file_write_iter+0x243/0x4f0 [ 2699.400625][ T6863] generic_file_write_iter+0xa7/0x1b0 [ 2699.406031][ T6863] vfs_write+0xacf/0xe50 [ 2699.410295][ T6863] ? file_end_write+0x250/0x250 [ 2699.415163][ T6863] ? __fget_files+0x413/0x480 [ 2699.419862][ T6863] ? __fdget_pos+0x1e9/0x380 [ 2699.424458][ T6863] ? ksys_write+0x77/0x2c0 [ 2699.428887][ T6863] ksys_write+0x1a2/0x2c0 [ 2699.433236][ T6863] ? print_irqtrace_events+0x210/0x210 [ 2699.438719][ T6863] ? __ia32_sys_read+0x80/0x80 [ 2699.443496][ T6863] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2699.449485][ T6863] ? lockdep_hardirqs_on+0x94/0x130 [ 2699.454700][ T6863] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2699.460696][ T6863] do_syscall_64+0x3d/0xb0 [ 2699.465124][ T6863] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2699.471027][ T6863] RIP: 0033:0x7f1357c7582f [ 2699.475454][ T6863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2699.495077][ T6863] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2699.503507][ T6863] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2699.511485][ T6863] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2699.519465][ T6863] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2699.527445][ T6863] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2699.535431][ T6863] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2699.543434][ T6863] [ 2699.555680][ T6863] loop5: detected capacity change from 0 to 128 23:42:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:42:34 executing program 1: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:42:34 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000340)={0x0, @raw_data="57147c770d295621c27d214ce10bc812c7c38985de744b25eef0b51a2a997ddda1b59f0a5bfb42f72e68c869a0a1bb75b0d5be48810a30623d70091f134456d98a6ee4af8e7a170459fe747453948dba5caa81b084116d3c854d7b16a509778798be21737b94272d829104cb5f4301230f13a0c4daadf3a48b2fae4864e542c552a961f218faa66bf59fa169988646450408f18e75b1a391ae06624d359821358b4d3815c99b920ff95509c24854e6c55c23e39353f33ade01d963d420cea6830f660e9ca80e6918"}) 23:42:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) [ 2700.539673][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 2700.539689][ T26] audit: type=1804 audit(1696981355.467:1133): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1718/file0" dev="sda1" ino=1988 res=1 errno=0 [ 2702.188118][ T2761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2702.292597][ T2761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2702.366225][ T2761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2702.436390][ T2761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2703.655146][ T2761] device hsr_slave_0 left promiscuous mode [ 2703.672454][ T2761] device hsr_slave_1 left promiscuous mode [ 2703.680644][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2703.689464][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2703.714771][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2703.725844][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2703.735204][ T2761] device bridge_slave_1 left promiscuous mode [ 2703.741390][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2703.771362][ T2761] device bridge_slave_0 left promiscuous mode [ 2703.777675][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.790901][ T2761] device veth1_macvtap left promiscuous mode [ 2703.804551][ T2761] device veth0_macvtap left promiscuous mode [ 2703.810603][ T2761] device veth1_vlan left promiscuous mode [ 2703.817052][ T2761] device veth0_vlan left promiscuous mode [ 2704.005175][ T2761] team0 (unregistering): Port device team_slave_1 removed [ 2704.018679][ T2761] team0 (unregistering): Port device team_slave_0 removed [ 2704.031618][ T2761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2704.047809][ T2761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2704.119337][ T2761] bond0 (unregistering): Released all slaves [ 2704.358176][ T6916] chnl_net:caif_netlink_parms(): no params data found [ 2704.448800][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2704.469190][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 2704.493125][ T6916] device bridge_slave_0 entered promiscuous mode [ 2704.501524][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2704.522071][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2704.530110][ T6916] device bridge_slave_1 entered promiscuous mode [ 2704.589642][ T6916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2704.622639][ T6916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2704.660441][ T6916] team0: Port device team_slave_0 added [ 2704.683325][ T6916] team0: Port device team_slave_1 added [ 2704.749812][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2704.759005][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2704.785591][ T6916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2704.802054][ T6916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2704.809053][ T6916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2704.842969][ T6916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2704.905684][ T6916] device hsr_slave_0 entered promiscuous mode [ 2704.931622][ T6916] device hsr_slave_1 entered promiscuous mode [ 2704.950307][ T6916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2704.962067][ T6916] Cannot create hsr debugfs directory [ 2705.626429][ T6916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2705.643682][ T6916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2705.668163][ T6916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2705.685122][ T6916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2705.712127][T15040] Bluetooth: hci4: command 0x0409 tx timeout [ 2705.816753][ T6916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2705.842762][ T6916] 8021q: adding VLAN 0 to HW filter on device team0 [ 2705.849853][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2705.862543][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2705.890382][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2705.900762][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2705.909911][T13493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.917042][T13493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2705.925887][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2705.934617][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2705.943437][T13493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.950479][T13493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2705.958517][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2705.967383][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2705.989577][ T6916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2706.022008][ T6916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2706.039329][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2706.048567][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2706.057910][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2706.066964][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2706.076141][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2706.085129][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2706.094195][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2706.103125][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2706.111447][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2706.124372][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2706.142521][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2706.282935][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2706.290395][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2706.304800][ T6916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2706.554597][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2706.563919][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2706.605177][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2706.613842][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2706.625722][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2706.633608][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2706.643415][ T6916] device veth0_vlan entered promiscuous mode [ 2706.655800][ T6916] device veth1_vlan entered promiscuous mode [ 2706.672839][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2706.681229][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2706.707186][ T6916] device veth0_macvtap entered promiscuous mode [ 2706.733810][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2706.743160][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2706.764599][ T6916] device veth1_macvtap entered promiscuous mode [ 2706.782651][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2706.791183][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2706.819896][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.842272][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.862048][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.882236][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.902086][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.922090][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.931908][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2706.962136][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2706.992476][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2707.001240][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2707.012718][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2707.034085][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.048769][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.059259][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.070702][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.081408][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.092123][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.101929][ T6916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.112793][ T6916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.133167][ T6916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2707.143128][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2707.152722][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2707.174852][ T6916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.188317][ T6916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.197465][ T6916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.221506][ T6916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.327052][T28613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.341645][T28613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.350066][ T2782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.357646][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2707.366277][ T2782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.390348][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2707.485938][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2707.510284][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2707.792288][T13497] Bluetooth: hci4: command 0x041b tx timeout 23:42:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r4 = dup2(r3, r3) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "acc1fe1c6e92339d456865045cb61f06"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "66d5f38e53f4bad56eaed5a061d49a2e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "94341f5bf77a49406d64a47399b7955a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ada6f66e179a9138c886a5adc0644a05"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="000828bd7000fddbdf252e0000000c009900020000006300000008009f000400000008002201d9020000080022011d0200000800a10000080000080022015100000008002201ea000000080022013000000008009f00000000000500190107000000080027000285bdc3ef765803251a72421963639700000004009300040001010a0006000802110000b0f8c3e583ce010000040001011e002d29382c9234c9676ba431b41d3362dd940020061406000000000000000900e8a63394bbdc7e6c6e471294743ea7eebc0f270663c56faebd6787ce7e958eb7a1551b9b03ef2b4ac147870cf8d0d38deb68e5b80b3c08c6aa6e50"], 0xa8}, 0x1, 0x0, 0x0, 0x40804}, 0x2b40664a6e813fb4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 23:42:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 29) 23:42:42 executing program 1: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:42:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:42:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="0e00f3ff01000000ffff040008000d00000001e007000100716671000600100009020000bc0008801c00010001c0ff030100000000000000f8ffffff008000000600000010000200870b01000400e70000008fc51c000100c905ffff030000010000000090c55078040000fffe090007000101c1ffae001c000100010600087f0000000100000000000000050000000900000016000200680c08000008000000010500ca00ffffff0100001c000100ff08a475fbffffff050000000e0002000400030020000800030000000900010063616b65000000001400020008000600ac00000008000a00fdffffff0000000000000000000000009af39d8569e87ab697e06dc2b0d1527f8a61914ec2b762a546310aa666be7988555f6be2265f1192bfd2b8fd313350cedbaff96157a2b428f83ce1f5b905df7f6b364aa8d0c2afd177489fe3b8b8cec759f027d6b6721daf89f862d05c8dabcab14a9952c8fe18ac43a024680752dc714c0a6bc9c59209a51dd3902060409cc95933f492c8849619127a1d2b18f5cfb25966b2a0fe5f871197ea521c0d0981bf8157739c0e8aeaadbeccd42084e6c4ae52a38789177ebfbb1b4b278e25957ace4d598a079521ecb89a6b2229c7175115b975ac47c58b6f2c75ecca91317bbf4d444f6da5c8677b2b6f874a"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:42 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x2, 0x6, &(0x7f0000000100)=@raw=[@ldst={0x4, 0x1, 0x6, 0x3, 0x6, 0x20, 0x1}, @generic={0xb5, 0x3, 0x1, 0x8d, 0x1000}, @ldst={0x1, 0x3, 0x0, 0x3, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x9, 0x0, 0xb, 0x80}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}], &(0x7f0000000000)='GPL\x00'}, 0x90) fcntl$setlease(r5, 0x400, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001980)={"21dd6ffabefd8c5396ce8b300d73886f", 0x0, 0x0, {0x7, 0x3ff}, {0x6, 0xfffffffd}, 0xd7, [0x9, 0x8, 0x3, 0x7fffffffffffffff, 0x4, 0x40, 0x0, 0x1, 0x1, 0xfffffffffffffc7c, 0x1000, 0x80000000, 0x2, 0x7ff, 0xa7cd, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001a80)={{}, r6, 0x18, @unused=[0x4, 0xff, 0x7ff, 0x9], @subvolid=0x7}) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{}, {r2, 0x5029}], 0x2, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20004004, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@empty, 0x68, r7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) close(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x208e24b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 23:42:42 executing program 1: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 2707.878270][ T7078] FAULT_INJECTION: forcing a failure. [ 2707.878270][ T7078] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2707.940209][ T7078] CPU: 1 PID: 7078 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2707.948832][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2707.958895][ T7078] Call Trace: [ 2707.962178][ T7078] [ 2707.965112][ T7078] dump_stack_lvl+0x1e3/0x2cb [ 2707.969807][ T7078] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2707.975449][ T7078] ? panic+0x84d/0x84d [ 2707.979543][ T7078] should_fail+0x38a/0x4c0 [ 2707.983978][ T7078] prepare_alloc_pages+0x1db/0x5b0 [ 2707.989112][ T7078] __alloc_pages+0x14f/0x700 [ 2707.993720][ T7078] ? __rmqueue_pcplist+0x2030/0x2030 [ 2707.999023][ T7078] ? __lock_acquire+0x1295/0x1ff0 [ 2708.004082][ T7078] alloc_pages_vma+0x39a/0x800 [ 2708.008871][ T7078] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2708.014695][ T7078] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2708.020345][ T7078] ? shmem_swapin_page+0x22f0/0x22f0 [ 2708.025660][ T7078] ? xas_descend+0x219/0x3a0 [ 2708.030267][ T7078] ? xas_load+0x128/0x140 [ 2708.034610][ T7078] ? pagecache_get_page+0xd23/0x1010 [ 2708.039937][ T7078] ? page_cache_prev_miss+0x500/0x500 [ 2708.045342][ T7078] ? do_raw_spin_unlock+0x137/0x8b0 [ 2708.050551][ T7078] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2708.055760][ T7078] ? lockdep_hardirqs_on+0x94/0x130 [ 2708.060973][ T7078] shmem_getpage_gfp+0x17b1/0x3190 [ 2708.066127][ T7078] ? shmem_getpage+0xa0/0xa0 [ 2708.070731][ T7078] ? fault_in_safe_writeable+0x250/0x250 [ 2708.076384][ T7078] shmem_write_begin+0xce/0x1a0 [ 2708.081247][ T7078] generic_perform_write+0x2bf/0x5b0 [ 2708.086554][ T7078] ? grab_cache_page_write_begin+0x90/0x90 [ 2708.092374][ T7078] ? file_remove_privs+0x610/0x610 [ 2708.097504][ T7078] ? down_write+0x10e/0x170 [ 2708.102034][ T7078] __generic_file_write_iter+0x243/0x4f0 [ 2708.107690][ T7078] generic_file_write_iter+0xa7/0x1b0 [ 2708.113083][ T7078] vfs_write+0xacf/0xe50 [ 2708.117349][ T7078] ? file_end_write+0x250/0x250 [ 2708.122225][ T7078] ? __fget_files+0x413/0x480 [ 2708.126922][ T7078] ? __fdget_pos+0x1e9/0x380 [ 2708.131526][ T7078] ? ksys_write+0x77/0x2c0 [ 2708.135955][ T7078] ksys_write+0x1a2/0x2c0 [ 2708.140298][ T7078] ? print_irqtrace_events+0x210/0x210 [ 2708.145774][ T7078] ? __ia32_sys_read+0x80/0x80 [ 2708.150548][ T7078] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2708.156535][ T7078] ? lockdep_hardirqs_on+0x94/0x130 [ 2708.161742][ T7078] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2708.167734][ T7078] do_syscall_64+0x3d/0xb0 [ 2708.172172][ T7078] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2708.178077][ T7078] RIP: 0033:0x7f1357c7582f [ 2708.182527][ T7078] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2708.202137][ T7078] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2708.210557][ T7078] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2708.218538][ T7078] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2708.226520][ T7078] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2708.234494][ T7078] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2708.242475][ T7078] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2708.250473][ T7078] 23:42:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:43 executing program 1: r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x4800105a, r2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 2708.983389][ T26] audit: type=1804 audit(1696981363.907:1134): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1719/file0" dev="sda1" ino=2026 res=1 errno=0 23:42:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:42:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$eJzs3D1rU18cB/DTh/+/tdLSSdDFgy66XGxnB4u0IAYUbQQVhFt6qyExKbkZEnHIKE6+DnF0E8Q30HfhVoTSqZNX9EqfqCKoCZjPZ8kXvgTO4QeXw7lwt6++elrfyJONtBPGp8fC5LXQD3tjYT6Mh4lQ6ofLL/q7L+/ef3BzqVJZvhPjytLqwmKMce78+4fP31z40Dl97+3cu6mwNf9oe2fx49aZrbPbn1ef1PJYy2Oz1YlpXGu1OulaI4vrtbyexHi7kaV5FmvNPGsf6Tcarc3NXkyb67Mzm+0sz2Pa7MV61oudVuy0ezF9nNaaMUmSODsT+B3V13tFEXaKoiim+qEoimEviAEz/9Fm/qPN/EfboUPddAif+t1qt1r+lv3KjcrylfjN/MG/drvd6sR+v1D28Wj/X5j53i+e2P8fLl0s+6/d9VuVY/2psP73tw8AAAAAAP+kJO478X4/SX7Ul+nQ+4Fj9/eT4dzkwLYBAAAA/ETee1ZPG42sLQiCsB+G/WQCAAD+tIND/7BXAgAAAAAAAAAAAAAAAAAAAKNrEJ8TG/YeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7FlwAAAP//jT+Hmg==") (fail_nth: 30) [ 2709.055588][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) [ 2709.880948][ T26] audit: type=1804 audit(1696981364.777:1135): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1720/file0" dev="sda1" ino=1988 res=1 errno=0 [ 2709.907684][T13497] Bluetooth: hci4: command 0x040f tx timeout [ 2709.916943][ T7116] FAULT_INJECTION: forcing a failure. [ 2709.916943][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2709.930211][ T7116] CPU: 0 PID: 7116 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2709.938717][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2709.948776][ T7116] Call Trace: [ 2709.952057][ T7116] [ 2709.954988][ T7116] dump_stack_lvl+0x1e3/0x2cb [ 2709.959678][ T7116] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2709.965320][ T7116] ? panic+0x84d/0x84d [ 2709.969402][ T7116] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2709.974711][ T7116] should_fail+0x38a/0x4c0 [ 2709.979141][ T7116] copy_page_from_iter_atomic+0x451/0x1230 [ 2709.984969][ T7116] ? pipe_zero+0x4f0/0x4f0 [ 2709.989413][ T7116] generic_perform_write+0x33a/0x5b0 [ 2709.994726][ T7116] ? grab_cache_page_write_begin+0x90/0x90 [ 2710.000549][ T7116] ? file_remove_privs+0x610/0x610 [ 2710.005679][ T7116] ? down_write+0x10e/0x170 [ 2710.010209][ T7116] __generic_file_write_iter+0x243/0x4f0 [ 2710.015856][ T7116] generic_file_write_iter+0xa7/0x1b0 [ 2710.021241][ T7116] vfs_write+0xacf/0xe50 [ 2710.025501][ T7116] ? file_end_write+0x250/0x250 [ 2710.030374][ T7116] ? __fget_files+0x413/0x480 [ 2710.035071][ T7116] ? __fdget_pos+0x1e9/0x380 [ 2710.039665][ T7116] ? ksys_write+0x77/0x2c0 [ 2710.044086][ T7116] ksys_write+0x1a2/0x2c0 [ 2710.048425][ T7116] ? print_irqtrace_events+0x210/0x210 [ 2710.053904][ T7116] ? __ia32_sys_read+0x80/0x80 [ 2710.058679][ T7116] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2710.064665][ T7116] ? lockdep_hardirqs_on+0x94/0x130 [ 2710.069882][ T7116] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2710.075874][ T7116] do_syscall_64+0x3d/0xb0 [ 2710.080292][ T7116] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2710.086177][ T7116] RIP: 0033:0x7f1357c7582f [ 2710.090583][ T7116] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2710.110175][ T7116] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2710.118580][ T7116] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2710.126538][ T7116] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2710.134494][ T7116] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2710.142453][ T7116] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2710.150413][ T7116] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2710.158384][ T7116] [ 2710.223108][ T7116] loop5: detected capacity change from 0 to 128 [ 2710.856952][ T26] audit: type=1804 audit(1696981365.777:1136): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1721/file0" dev="sda1" ino=2027 res=1 errno=0 [ 2715.108410][ T2761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.198406][ T2761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.276275][ T2761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2715.366581][ T2761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2716.209855][ T2761] device hsr_slave_0 left promiscuous mode [ 2716.223226][ T2761] device hsr_slave_1 left promiscuous mode [ 2716.241694][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2716.249466][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2716.274676][ T2761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2716.292220][ T2761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2716.318114][ T2761] device bridge_slave_1 left promiscuous mode [ 2716.332183][ T2761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2716.340697][ T2761] device bridge_slave_0 left promiscuous mode [ 2716.352385][ T2761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2716.372944][ T2761] device veth1_macvtap left promiscuous mode [ 2716.378976][ T2761] device veth0_macvtap left promiscuous mode [ 2716.402249][ T2761] device veth1_vlan left promiscuous mode [ 2716.408032][ T2761] device veth0_vlan left promiscuous mode [ 2716.658350][ T2761] team0 (unregistering): Port device team_slave_1 removed [ 2716.675413][ T2761] team0 (unregistering): Port device team_slave_0 removed [ 2716.688533][ T2761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2716.704788][ T2761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2716.783702][ T2761] bond0 (unregistering): Released all slaves [ 2717.165277][ T7212] chnl_net:caif_netlink_parms(): no params data found [ 2717.269201][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.276774][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.289017][ T7212] device bridge_slave_0 entered promiscuous mode [ 2717.297457][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.304751][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.313069][ T7212] device bridge_slave_1 entered promiscuous mode [ 2717.383939][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2717.395450][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2717.436146][ T7212] team0: Port device team_slave_0 added [ 2717.454794][ T7212] team0: Port device team_slave_1 added [ 2717.507247][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2717.522142][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2717.572027][ T7212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2717.593765][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2717.600713][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2717.626997][ T7212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2717.660596][ T7212] device hsr_slave_0 entered promiscuous mode [ 2717.667658][ T7212] device hsr_slave_1 entered promiscuous mode [ 2717.675141][ T7212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2717.692027][ T7212] Cannot create hsr debugfs directory [ 2718.221075][ T7212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2718.264151][ T7212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2718.294512][ T7212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2718.314179][ T7212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2718.441958][ T7212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2718.469657][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2718.478341][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2718.490652][ T7212] 8021q: adding VLAN 0 to HW filter on device team0 [ 2718.502130][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2718.510714][T13497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2718.520217][T13497] bridge0: port 1(bridge_slave_0) entered blocking state [ 2718.527316][T13497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2718.542350][T13497] Bluetooth: hci4: command 0x0409 tx timeout [ 2718.558593][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2718.566947][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2718.576017][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2718.585085][T24805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.592190][T24805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.600277][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2718.609467][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2718.619200][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2718.628480][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2718.637279][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2718.646300][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2718.661716][ T7212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2718.675455][ T7212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2718.687928][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2718.696415][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2718.705034][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2718.722770][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2718.732829][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2718.746205][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2718.905164][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2718.913258][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2718.925323][ T7212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2719.183224][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2719.202466][T13493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2719.231443][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2719.240245][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2719.263125][ T7212] device veth0_vlan entered promiscuous mode [ 2719.272418][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2719.292494][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2719.305675][ T7212] device veth1_vlan entered promiscuous mode [ 2719.322820][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2719.355807][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2719.365167][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2719.384419][ T7212] device veth0_macvtap entered promiscuous mode [ 2719.403893][ T7212] device veth1_macvtap entered promiscuous mode [ 2719.431529][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2719.453226][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.482156][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2719.502048][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.511871][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2719.523463][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.533576][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2719.544188][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.556080][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2719.567814][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2719.576577][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2719.584903][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2719.593832][T23689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2719.603757][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.620177][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.643625][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.662006][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.671840][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.702098][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.711933][ T7212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2719.752803][ T7212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2719.773210][ T7212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2719.781229][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2719.802951][T24805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2719.816947][ T7212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.832093][ T7212] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.840919][ T7212] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.850765][ T7212] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2719.955698][ T2782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2719.972334][ T2782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2719.987875][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2720.020300][T28684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2720.029717][T28684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2720.043629][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2720.100423][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2720.111417][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 23:42:55 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 31) 23:42:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:55 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bd"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:42:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x0, 0x1e0, 0x100, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'bond0\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'wg1\x00', 'pimreg0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'veth0_to_bridge\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0', [{}, {0x20, '-'}], 0xa, "883de7801eca9ac2041674f17da7bdb13d4801e628bf02fe9c0b4e5c6527315ad3b9b6d300553567421c07"}, 0x39) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x191280, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r6, 0x311, 0x0, 0x0, {{}, {@void, @val={0x8, 0x10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r6, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x24}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 23:42:55 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x2, 0x6, &(0x7f0000000100)=@raw=[@ldst={0x4, 0x1, 0x6, 0x3, 0x6, 0x20, 0x1}, @generic={0xb5, 0x3, 0x1, 0x8d, 0x1000}, @ldst={0x1, 0x3, 0x0, 0x3, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x9, 0x0, 0xb, 0x80}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}], &(0x7f0000000000)='GPL\x00'}, 0x90) fcntl$setlease(r5, 0x400, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001980)={"21dd6ffabefd8c5396ce8b300d73886f", 0x0, 0x0, {0x7, 0x3ff}, {0x6, 0xfffffffd}, 0xd7, [0x9, 0x8, 0x3, 0x7fffffffffffffff, 0x4, 0x40, 0x0, 0x1, 0x1, 0xfffffffffffffc7c, 0x1000, 0x80000000, 0x2, 0x7ff, 0xa7cd, 0x7]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000001a80)={{}, r6, 0x18, @unused=[0x4, 0xff, 0x7ff, 0x9], @subvolid=0x7}) listen(0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{}, {r2, 0x5029}], 0x2, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20004004, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000240)={@empty, 0x68, r7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) close(r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x208e24b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 2720.473685][ T7356] FAULT_INJECTION: forcing a failure. [ 2720.473685][ T7356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2722.172384][T24805] Bluetooth: hci4: command 0x041b tx timeout [ 2722.181669][ T7356] CPU: 1 PID: 7356 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2722.190187][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2722.200253][ T7356] Call Trace: [ 2722.203538][ T7356] [ 2722.206477][ T7356] dump_stack_lvl+0x1e3/0x2cb [ 2722.211172][ T7356] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2722.216821][ T7356] ? panic+0x84d/0x84d [ 2722.220915][ T7356] should_fail+0x38a/0x4c0 [ 2722.225354][ T7356] prepare_alloc_pages+0x1db/0x5b0 [ 2722.230490][ T7356] __alloc_pages+0x14f/0x700 [ 2722.235090][ T7356] ? __rmqueue_pcplist+0x2030/0x2030 [ 2722.240394][ T7356] ? __lock_acquire+0x1295/0x1ff0 [ 2722.245446][ T7356] alloc_pages_vma+0x39a/0x800 [ 2722.250225][ T7356] ? mpol_shared_policy_lookup+0x144/0x1e0 [ 2722.256050][ T7356] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 2722.261699][ T7356] ? shmem_swapin_page+0x22f0/0x22f0 [ 2722.267011][ T7356] ? xas_descend+0x219/0x3a0 [ 2722.271641][ T7356] ? xas_load+0x128/0x140 [ 2722.276002][ T7356] ? pagecache_get_page+0xd23/0x1010 [ 2722.281302][ T7356] ? page_cache_prev_miss+0x500/0x500 [ 2722.286690][ T7356] ? do_raw_spin_unlock+0x137/0x8b0 [ 2722.291903][ T7356] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2722.297118][ T7356] ? lockdep_hardirqs_on+0x94/0x130 [ 2722.302338][ T7356] shmem_getpage_gfp+0x17b1/0x3190 [ 2722.307507][ T7356] ? shmem_getpage+0xa0/0xa0 [ 2722.312117][ T7356] ? fault_in_safe_writeable+0x250/0x250 [ 2722.313918][ T7379] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 2722.317770][ T7356] shmem_write_begin+0xce/0x1a0 [ 2722.317806][ T7356] generic_perform_write+0x2bf/0x5b0 [ 2722.336068][ T7356] ? grab_cache_page_write_begin+0x90/0x90 [ 2722.341889][ T7356] ? file_remove_privs+0x610/0x610 [ 2722.347031][ T7356] ? down_write+0x10e/0x170 [ 2722.351558][ T7356] __generic_file_write_iter+0x243/0x4f0 [ 2722.357220][ T7356] generic_file_write_iter+0xa7/0x1b0 [ 2722.362616][ T7356] vfs_write+0xacf/0xe50 [ 2722.366875][ T7356] ? file_end_write+0x250/0x250 [ 2722.371742][ T7356] ? __fget_files+0x413/0x480 [ 2722.376439][ T7356] ? __fdget_pos+0x1e9/0x380 [ 2722.381035][ T7356] ? ksys_write+0x77/0x2c0 [ 2722.382333][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2722.385454][ T7356] ksys_write+0x1a2/0x2c0 [ 2722.385479][ T7356] ? print_irqtrace_events+0x210/0x210 [ 2722.385506][ T7356] ? __ia32_sys_read+0x80/0x80 [ 2722.409697][ T7356] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2722.415688][ T7356] ? lockdep_hardirqs_on+0x94/0x130 [ 2722.420896][ T7356] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2722.426891][ T7356] do_syscall_64+0x3d/0xb0 [ 2722.431320][ T7356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2722.437234][ T7356] RIP: 0033:0x7f1357c7582f [ 2722.441664][ T7356] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2722.461275][ T7356] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2722.469698][ T7356] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2722.477771][ T7356] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2722.485846][ T7356] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2722.493824][ T7356] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2722.501802][ T7356] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2722.506728][ T7380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2722.509789][ T7356] 23:42:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) [ 2722.559667][ T26] audit: type=1804 audit(1696981377.467:1137): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir372953353/syzkaller.CXs5N7/936/file0" dev="sda1" ino=1986 res=1 errno=0 23:42:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) [ 2722.667117][ T26] audit: type=1804 audit(1696981377.467:1138): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1722/file0" dev="sda1" ino=1977 res=1 errno=0 23:42:59 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) 23:42:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="73797ad4d987ea000000000000000000", @ANYRES32=0x0, @ANYBLOB="800000000000000300000004450000940000000007049078ac1414bb0a01010144349d23ac14143e00000009ffffffff0000037c0a01010100000003ac1414bb00000800ac1414aa000000027f0000010000003f892749ac14140aac1414bbffffffffffffffffac1e0101ac1414aa0a0100fee0000001ac1414aa008624ffffffff060ab0c3b73d872631d1f10f30225706c062ff8c5f3a80a5c80002020328"]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="180100002400040026bd7000fbdbdf2500000000", @ANYBLOB="0e00f3ff01000000ffff040008000d00000001e007000100716671000600100009020000bc0008801c00010001c0ff030100000000000000f8ffffff008000000600000010000200870b01000400e70000008fc51c000100c905ffff030000010000000090c55078040000fffe090007000101c1ffae001c000100010600087f0000000100000000000000050000000900000016000200680c08000008000000010500ca00ffffff0100001c000100ff08a475fbffffff050000000e0002000400030020000800030000000900010063616b65000000001400020008000600ac00000008000a00fdffffff0000000000000000000000009af39d8569e87ab697e06dc2b0d1527f8a61914ec2b762a546310aa666be7988555f6be2265f1192bfd2b8fd313350cedbaff96157a2b428f83ce1f5b905df7f6b364aa8d0c2afd177489fe3b8b8cec759f027d6b6721daf89f862d05c8dabcab14a9952c8fe18ac43a024680752dc714c0a6bc9c59209a51dd3902060409cc95933f492c8849619127a1d2b18f5cfb25966b2a0fe5f871197ea521c0d0981bf8157739c0e8aeaadbeccd42084e6c4ae52a38789177ebfbb1b4b278e25957ace4d598a079521ecb89a6b2229c7175115b975ac47c58b6f2c75ecca91317bbf4d444f6da5c8677b2b6f874a"], 0x118}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000000380)={0xa, 0x2, 0x0, @loopback, 0xa002c000}, 0x1c) shutdown(r4, 0x1) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x406f413, 0x2) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setpipe(r2, 0x407, 0x8001) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x8, 0x0}, 0x8) write(0xffffffffffffffff, &(0x7f0000001400), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x19, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x21, &(0x7f0000000680)=""/33, 0x41000, 0x12, '\x00', r5, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x3, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000d40)=[r6, 0xffffffffffffffff]}, 0x80) r8 = creat(&(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x1d2, 0x401}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}, 0x80) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x40001, 0x0) r10 = open(&(0x7f0000000780)='./file0\x00', 0x80000, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="184900000600000000000000000000009500000007762b9a000000001864000002000000000000000100000085200000020000001812000000ecbbf2b1583dbcf17779dcc0eb6e49fbda57f185a018b6bccc0f48e61efe75c675b7817b0bc95244b43fc061f76348949e876e266cd952e7ae2fb3d82b697e943b7936f7e066da4b0164c3952298610a79f855c2d989e97e9f015dd8b8dbd46c1a97865a91babf0e8a71e669ccefed885f467fb3e43a946229", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000180)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000480)=""/223, 0x41000, 0x5, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x800, 0x9}, 0x10, 0x0, r6, 0x0, &(0x7f00000007c0)=[r9, r10]}, 0x80) [ 2724.366337][T13493] Bluetooth: hci4: command 0x040f tx timeout 23:42:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1cf, &(0x7f00000002c0)="$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") (fail_nth: 32) [ 2724.422812][T13493] ------------[ cut here ]------------ [ 2724.428285][T13493] WARNING: CPU: 1 PID: 13493 at kernel/workqueue.c:1453 __queue_work+0xbaf/0xd00 [ 2724.437485][T13493] Modules linked in: [ 2724.441392][T13493] CPU: 1 PID: 13493 Comm: kworker/1:44 Not tainted 5.15.135-syzkaller #0 [ 2724.449806][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2724.459863][T13493] Workqueue: events hci_cmd_timeout [ 2724.465142][T13493] RIP: 0010:__queue_work+0xbaf/0xd00 [ 2724.470446][T13493] Code: 7c 24 10 e8 23 47 77 00 e9 1c fd ff ff e8 d9 94 2d 00 89 ee 48 c7 c7 00 0d 7d 8c e8 ab 24 d6 02 e9 64 fc ff ff e8 c1 94 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ab 94 2d 00 [ 2724.490070][T13493] RSP: 0018:ffffc90003a6faf8 EFLAGS: 00010093 [ 2724.496141][T13493] RAX: ffffffff81528d1f RBX: 00000000000b0012 RCX: ffff88801a605940 [ 2724.504121][T13493] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 2724.512093][T13493] RBP: 0000000000010000 R08: ffffffff8154c2d5 R09: ffffed100fcdb967 [ 2724.520066][T13493] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2724.528045][T13493] R13: ffff88807da48000 R14: 0000000000000008 R15: 1ffff9200074df74 [ 2724.536031][T13493] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 2724.544968][T13493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2724.551556][T13493] CR2: 000000002057eff8 CR3: 0000000077c74000 CR4: 00000000003506e0 [ 2724.559533][T13493] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2724.567514][T13493] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2724.575494][T13493] Call Trace: [ 2724.578780][T13493] [ 2724.581735][T13493] ? __warn+0x15b/0x300 [ 2724.585924][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.590605][T13493] ? report_bug+0x1b7/0x2e0 [ 2724.595124][T13493] ? handle_bug+0x3d/0x70 [ 2724.599456][T13493] ? exc_invalid_op+0x16/0x40 [ 2724.604134][T13493] ? asm_exc_invalid_op+0x16/0x20 [ 2724.609168][T13493] ? kthread_data+0x45/0xc0 [ 2724.613698][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.618377][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.623053][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.627731][T13493] ? bt_err+0x123/0x170 [ 2724.631966][T13493] ? queue_work_on+0xf6/0x250 [ 2724.636644][T13493] ? lockdep_hardirqs_off+0x70/0x100 [ 2724.641941][T13493] queue_work_on+0x14b/0x250 [ 2724.646534][T13493] ? wq_worker_last_func+0x40/0x40 [ 2724.651651][T13493] ? do_raw_spin_unlock+0x137/0x8b0 [ 2724.656865][T13493] ? hci_cmd_timeout+0x12b/0x1e0 [ 2724.661817][T13493] process_one_work+0x8a1/0x10c0 [ 2724.666780][T13493] ? worker_detach_from_pool+0x260/0x260 [ 2724.672423][T13493] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2724.677977][T13493] ? kthread_data+0x4e/0xc0 [ 2724.682495][T13493] ? wq_worker_running+0x97/0x170 [ 2724.687529][T13493] worker_thread+0xaca/0x1280 [ 2724.692246][T13493] kthread+0x3f6/0x4f0 [ 2724.696324][T13493] ? rcu_lock_release+0x20/0x20 [ 2724.701181][T13493] ? kthread_blkcg+0xd0/0xd0 [ 2724.705780][T13493] ret_from_fork+0x1f/0x30 [ 2724.710235][T13493] [ 2724.713255][T13493] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2724.720531][T13493] CPU: 1 PID: 13493 Comm: kworker/1:44 Not tainted 5.15.135-syzkaller #0 [ 2724.728945][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2724.739000][T13493] Workqueue: events hci_cmd_timeout [ 2724.744213][T13493] Call Trace: [ 2724.747501][T13493] [ 2724.750444][T13493] dump_stack_lvl+0x1e3/0x2cb [ 2724.753818][ T26] audit: type=1804 audit(1696981379.297:1139): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1402007834/syzkaller.WC1Qaw/1723/file0" dev="sda1" ino=2003 res=1 errno=0 [ 2724.755131][T13493] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2724.755159][T13493] ? panic+0x84d/0x84d [ 2724.790161][T13493] ? __queue_work+0xb90/0xd00 [ 2724.794850][T13493] ? __queue_work+0xb90/0xd00 [ 2724.799533][T13493] panic+0x318/0x84d [ 2724.803437][T13493] ? __warn+0x16a/0x300 [ 2724.807604][T13493] ? fb_is_primary_device+0xcc/0xcc [ 2724.812824][T13493] ? ret_from_fork+0x1f/0x30 [ 2724.817425][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.822118][T13493] __warn+0x2b2/0x300 [ 2724.826114][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.830795][T13493] report_bug+0x1b7/0x2e0 [ 2724.835137][T13493] handle_bug+0x3d/0x70 [ 2724.839300][T13493] exc_invalid_op+0x16/0x40 [ 2724.843669][ T7409] FAULT_INJECTION: forcing a failure. [ 2724.843669][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2724.843806][T13493] asm_exc_invalid_op+0x16/0x20 [ 2724.861639][T13493] RIP: 0010:__queue_work+0xbaf/0xd00 [ 2724.866921][T13493] Code: 7c 24 10 e8 23 47 77 00 e9 1c fd ff ff e8 d9 94 2d 00 89 ee 48 c7 c7 00 0d 7d 8c e8 ab 24 d6 02 e9 64 fc ff ff e8 c1 94 2d 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ab 94 2d 00 [ 2724.886523][T13493] RSP: 0018:ffffc90003a6faf8 EFLAGS: 00010093 [ 2724.892587][T13493] RAX: ffffffff81528d1f RBX: 00000000000b0012 RCX: ffff88801a605940 [ 2724.900556][T13493] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 2724.908514][T13493] RBP: 0000000000010000 R08: ffffffff8154c2d5 R09: ffffed100fcdb967 [ 2724.916475][T13493] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 2724.924436][T13493] R13: ffff88807da48000 R14: 0000000000000008 R15: 1ffff9200074df74 [ 2724.932403][T13493] ? kthread_data+0x45/0xc0 [ 2724.936896][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.941564][T13493] ? __queue_work+0xbaf/0xd00 [ 2724.946227][T13493] ? bt_err+0x123/0x170 [ 2724.950372][T13493] ? queue_work_on+0xf6/0x250 [ 2724.955059][T13493] ? lockdep_hardirqs_off+0x70/0x100 [ 2724.960338][T13493] queue_work_on+0x14b/0x250 [ 2724.964919][T13493] ? wq_worker_last_func+0x40/0x40 [ 2724.970018][T13493] ? do_raw_spin_unlock+0x137/0x8b0 [ 2724.975211][T13493] ? hci_cmd_timeout+0x12b/0x1e0 [ 2724.980140][T13493] process_one_work+0x8a1/0x10c0 [ 2724.985083][T13493] ? worker_detach_from_pool+0x260/0x260 [ 2724.990709][T13493] ? _raw_spin_lock_irqsave+0x120/0x120 [ 2724.996247][T13493] ? kthread_data+0x4e/0xc0 [ 2725.000742][T13493] ? wq_worker_running+0x97/0x170 [ 2725.005755][T13493] worker_thread+0xaca/0x1280 [ 2725.010548][T13493] kthread+0x3f6/0x4f0 [ 2725.014623][T13493] ? rcu_lock_release+0x20/0x20 [ 2725.019511][T13493] ? kthread_blkcg+0xd0/0xd0 [ 2725.024095][T13493] ret_from_fork+0x1f/0x30 [ 2725.028521][T13493] [ 2725.031527][ T7409] CPU: 0 PID: 7409 Comm: syz-executor.5 Not tainted 5.15.135-syzkaller #0 [ 2725.040112][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 2725.050156][ T7409] Call Trace: [ 2725.053424][ T7409] [ 2725.056344][ T7409] dump_stack_lvl+0x1e3/0x2cb [ 2725.061019][ T7409] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 2725.066654][ T7409] ? panic+0x84d/0x84d [ 2725.070718][ T7409] ? shmem_getpage_gfp+0x2b48/0x3190 [ 2725.076001][ T7409] should_fail+0x38a/0x4c0 [ 2725.080416][ T7409] copy_page_from_iter_atomic+0x451/0x1230 [ 2725.086225][ T7409] ? pipe_zero+0x4f0/0x4f0 [ 2725.090653][ T7409] generic_perform_write+0x33a/0x5b0 [ 2725.095948][ T7409] ? grab_cache_page_write_begin+0x90/0x90 [ 2725.101744][ T7409] ? file_remove_privs+0x610/0x610 [ 2725.106847][ T7409] ? down_write+0x10e/0x170 [ 2725.111342][ T7409] __generic_file_write_iter+0x243/0x4f0 [ 2725.116972][ T7409] generic_file_write_iter+0xa7/0x1b0 [ 2725.122367][ T7409] vfs_write+0xacf/0xe50 [ 2725.126611][ T7409] ? file_end_write+0x250/0x250 [ 2725.131469][ T7409] ? __fget_files+0x413/0x480 [ 2725.136152][ T7409] ? __fdget_pos+0x1e9/0x380 [ 2725.140737][ T7409] ? ksys_write+0x77/0x2c0 [ 2725.145150][ T7409] ksys_write+0x1a2/0x2c0 [ 2725.149475][ T7409] ? print_irqtrace_events+0x210/0x210 [ 2725.154933][ T7409] ? __ia32_sys_read+0x80/0x80 [ 2725.159689][ T7409] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2725.165660][ T7409] ? lockdep_hardirqs_on+0x94/0x130 [ 2725.170851][ T7409] ? syscall_enter_from_user_mode+0x2e/0x230 [ 2725.176827][ T7409] do_syscall_64+0x3d/0xb0 [ 2725.181242][ T7409] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2725.187135][ T7409] RIP: 0033:0x7f1357c7582f [ 2725.191555][ T7409] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 2725.211149][ T7409] RSP: 002b:00007f13561f7e70 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2725.219555][ T7409] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007f1357c7582f [ 2725.227519][ T7409] RDX: 0000000000010000 RSI: 00007f134ddd8000 RDI: 0000000000000004 [ 2725.235488][ T7409] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001c9 [ 2725.243450][ T7409] R10: 00000000200002c2 R11: 0000000000000293 R12: 0000000000000004 [ 2725.251415][ T7409] R13: 00007f13561f7f3c R14: 00007f13561f7f40 R15: 00007f134ddd8000 [ 2725.259392][ T7409] [ 2725.262672][T13493] Kernel Offset: disabled [ 2725.267921][T13493] Rebooting in 86400 seconds..